12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2025:20637-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…
first Aug 29, 2025 -
High max 8.8SUSE-SU-2025:20633-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…
first Aug 29, 2025 -
High max 7.8SUSE-SU-2025:20621-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20620-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20614-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…
first Aug 25, 2025 -
High max 8.1SUSE-SU-2025:20596-1 6 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314) - CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317) - CVE-2025-4877: Write beyond …
first Aug 14, 2025 -
High max 8.5SUSE-SU-2025:20595-1 1 CVE
Security update for helm
This update for helm fixes the following issues: Update to version 3.18.4 (bsc#1246152, CVE-2025-53547): * Disabling linter due to unknown issue f20a4ad (Matt Farina) * build(deps): bump the k8s-io group with 7 updates 563b094 (dependabot[bot]) * Updating lin…
first Aug 14, 2025 -
High max 7.5SUSE-SU-2025:20593-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
first Aug 14, 2025 -
High max 7.8SUSE-SU-2025:20579-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2…
first Aug 25, 2025 -
High max 8.1SUSE-SU-2025:20493-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913). - CVE-2024-58053: rxrpc: Fix handli…
first Jul 11, 2025 -
High max 8.1SUSE-SU-2025:20475-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913). - CVE-2024-58053: rxrpc: Fix handli…
first Jul 11, 2025 -
High max 7.8SUSE-SU-2025:20451-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#12…
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:20449-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062) - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_rea…
first Jun 24, 2025 -
High max 7.0SUSE-SU-2025:20440-1 1 CVE
Security update for libblockdev
This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize ( (bsc#1243226)
first Jun 18, 2025 -
High max 8.0SUSE-SU-2025:20437-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizi…
first Jun 24, 2025 -
High max 8.0SUSE-SU-2025:20436-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizi…
first Jun 24, 2025 -
High max 8.0SUSE-SU-2025:20435-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-50124: Bluetooth: ISO: Fix UAF on iso_sock_timeout (bsc#1232927) - CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232908) - CVE-2024-50125: …
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:20427-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2025-6020: pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a …
first Jun 19, 2025 -
High max 7.8SUSE-SU-2025:20401-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monito…
first Jun 10, 2025 -
High max 7.8SUSE-SU-2025:20389-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_s…
first Jun 10, 2025 -
High max 7.5SUSE-SU-2025:20393-1 2 CVEs
Security update for docker
This update for docker fixes the following issues: Always clear SUSEConnect suse_* secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail …
first Jun 5, 2025 -
High max 7.8SUSE-SU-2025:20387-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_s…
first Jun 10, 2025 -
High max 7.8SUSE-SU-2025:20382-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monito…
first Jun 10, 2025 -
High max 8.4SUSE-SU-2025:20367-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_…
first May 28, 2025 -
High max 7.5SUSE-SU-2025:20363-1 3 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - CVE-2024-6104: url might write sensitive information to log file (bsc#1227056). - CVE-2023-45288: close connections when receiving too many headers (bsc#1236483). - CVE-2025-27144: Go JOSE's Parsing Vulnera…
first May 28, 2025 -
High max 7.8SUSE-SU-2025:20361-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-4802: elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static (bsc#1243317) - pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ #25847) - Mark functions in libc_nonshared.a as hidden (bs…
first May 27, 2025 -
High max 7.5SUSE-SU-2025:20360-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: Update to docker-buildx v0.22.0: - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239765). -…
first May 27, 2025 -
High max 8.4SUSE-SU-2025:20340-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in h…
first May 22, 2025 -
High max 8.4SUSE-SU-2025:20334-1 1 CVE
Security update for perl
This update for perl fixes the following issues: - CVE-2024-56406: Fixed heap buffer overflow with tr// [bsc#1241083]
first May 21, 2025 -
High max 7.5SUSE-SU-2025:20252-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: strictly don't allow NUL bytes in headers (bsc#1233285 glgo#GNOME/libsoup#377). - CVE-2024-52532: websocket: Process the frame as soon as we read data (bsc#1233287 glgo#GNOME/libsoup#391). …
first Mar 28, 2025 -
High max 8.8SUSE-SU-2025:20235-1 4 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551). - CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552).
first Mar 7, 2025 -
High max 7.3SUSE-SU-2025:20231-1 1 CVE
Security update for pam_u2f
This update for pam_u2f fixes the following issues: - CVE-2025-23013: Fixed problematic PAM_IGNORE return values in `pam_sm_authenticate()`(bsc#1233517).
first Mar 5, 2025 -
High max 7.4SUSE-SU-2025:20229-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation inpam_access that could lead to access control bypass (bsc#1233078)
first Mar 5, 2025 -
High max 7.8SUSE-SU-2025:20217-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks (CVE-2022-48622 bsc#1…
first May 6, 2025 -
High max 8.8SUSE-SU-2025:20212-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) - CVE…
first Apr 29, 2025 -
High max 7.5SUSE-SU-2025:20205-1 4 CVEs
Security update for docker
This update for docker fixes the following issues: - Updated to docker-buildx v0.22.0. - Updated to Docker 27.5.1-ce. - CVE-2025-0495: buildx: Fixed credential leakage to telemetry endpoints (bsc#1239765) - CVE-2025-22868: Fixed golang.org/x/oauth2/jws: Unexp…
first Apr 24, 2025 -
High max 7.5SUSE-SU-2025:20198-1 3 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).
first Apr 22, 2025 -
High max 7.5SUSE-SU-2025:20179-1 4 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238685) - CVE-2025-27144: gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jo…
first Apr 7, 2025 -
High max 7.8SUSE-SU-2025:20161-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2025-26597: Fixed buffer overflow in XkbChangeTypesOfKey() (bsc#1237431).
first Mar 25, 2025 -
High max 7.0SUSE-SU-2025:20152-1 1 CVE
Security update for orc
This update for orc fixes the following issues: - CVE-2024-40897: Fixed a stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files (bsc#1228184)
first Mar 19, 2025