12,602 results · Clear filters · Feed
-
High max 7.3SUSE-SU-2025:20144-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588) Other issues fixed: - Make sure the TLS handshake after a…
first Mar 12, 2025 -
High max 8.8SUSE-SU-2025:20133-1 4 CVEs
Security update for pcp
This update for pcp fixes the following issues: - CVE-2024-45770: Fixed `pmpost` symlink attack allowing escalating `pcp` to `root` user (bsc#1230552). - CVE-2024-45769: Fixed `pmcd` heap corruption through metric pmstore operations (bsc#1230551). - CVE-2024-…
first Mar 5, 2025 -
High max 7.1SUSE-SU-2025:20131-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2023-3758: Fixed race condition during authorization leading to GPO policies functioning inconsistently (bsc#1223100).
first Feb 28, 2025 -
High max 8.7SUSE-SU-2025:20074-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2024-7254: Fixed a stack overflow vulnerability in protocol buffers (bsc#1230778)
first Feb 3, 2025 -
High max 8.7SUSE-SU-2025:20065-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2024-8088: Fixed a denial of service in zipfile (bsc#1229704) - CVE-2024-6232: Fixed a ReDos via excessive backtracking while parsing header values (bsc#1230227) - CVE-2024-7592: Fixed a denial of se…
first Feb 3, 2025 -
High max 7.4SUSE-SU-2025:1525-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u452 (icedtea-3.35.0) Security issues fixed: - CVE-2025-21587: unauthorized creation, deletion or modification of critical data through the JSSE component. (bsc#1241274) - CV…
first May 9, 2025 -
High max 7.1SUSE-SU-2025:1467-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
first May 6, 2025 -
High max 8.8SUSE-SU-2025:1454-1 3 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-50205: ALSA: firewire-lib: Avoid divi…
first May 6, 2025 -
High max 7.4SUSE-SU-2025:1429-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.7+6 (April 2025 CPU) CVEs fixed: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274) + CVE-2025-30691: Fixed Orac…
first May 2, 2025 -
High max 7.8SUSE-SU-2025:03664-1 4 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues. The following security issues were fixed: - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-21971: net_sched…
first Oct 19, 2025 -
High max 8.8SUSE-SU-2025:03656-1 4 CVEs
Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_234 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_AD…
first Oct 19, 2025 -
High max 8.8SUSE-SU-2025:03652-1 4 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_AD…
first Oct 18, 2025 -
High max 7.8SUSE-SU-2025:03568-1 1 CVE
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 12, 2025 -
High max 7.8SUSE-SU-2025:03562-1 1 CVE
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_116 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 11, 2025 -
High max 7.8SUSE-SU-2025:03554-1 4 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_91 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …
first Oct 11, 2025 -
High max 7.8SUSE-SU-2025:03551-1 2 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_164 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race…
first Oct 11, 2025 -
High max 7.5SUSE-SU-2025:03547-1 10 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: go1.25.2 (released 2025-10-07) includes security fixes to the archive/tar, crypto/tls, crypto/x509, encoding/asn1, encoding/pem, net/http, net/mail, net/textproto, and net/url packages, as well as bug fixes t…
first Oct 11, 2025 -
High max 7.8SUSE-SU-2025:03543-1 4 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race…
first Oct 10, 2025 -
High max 7.8SUSE-SU-2025:03515-1 2 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …
first Oct 9, 2025 -
High max 7.8SUSE-SU-2025:03496-1 3 CVEs
Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_247 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race condi…
first Oct 8, 2025 -
High max 7.8SUSE-SU-2025:03473-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_44 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 7, 2025 -
High max 9.8SUSE-SU-2025:03443-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 9.8SUSE-SU-2025:03442-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 9.8SUSE-SU-2025:03440-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 9.8SUSE-SU-2025:03439-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 9.8SUSE-SU-2025:03438-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 7.8
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).
first Sep 30, 2025 -
High max 7.8
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).
first Sep 30, 2025 -
High max 7.8SUSE-SU-2025:03406-1 7 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempoten…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03400-1 6 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_94 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{s…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03397-1 6 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_103 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 27, 2025 -
High max 8.6
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954). - CVE-2022-50116: kernel: t…
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:03379-1 1 CVE
Security update for the Linux Kernel (Live Patch 71 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_269 fixes one issue. The following security issue was fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:03374-1 8 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempo…
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:03342-1 3 CVEs
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,de…
first Sep 24, 2025 -
High max 7.8SUSE-SU-2025:03341-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent…
first Sep 24, 2025 -
High max 8.8SUSE-SU-2025:03309-1 7 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.3 (bsc#1249391). Security issues fixed: - MFSA 2025-78 * CVE-2025-10527: sandbox escape due to use-after-free in the Graphics: Canvas2D component. * CVE-2025-1052…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:03294-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.2.13. Security issues fixed: - CVE-2025-9817: SSH dissector crash due to NULL pointer dereference when processing malformed packet traces (bsc#1249090). Non-security issues fixed: - Bug…
first Sep 22, 2025 -
High max 8.8SUSE-SU-2025:03291-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 140.3.0 ESR (bsc#1249391). MFSA 2025-75: * CVE-2025-10527 (bmo#1984825) Sandbox escape due to use-after-free in the Graphics: Canvas2D component * CVE-2025-10528 (bmo#…
first Sep 22, 2025 -
High max 8.6SUSE-SU-2025:03236-1 5 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 50. Security issues fixed: - Oracle July 15 2025 CPU (bsc#1247754). - CVE-2025-30749: heap corruption allows unauthenticated attacker with network access …
first Sep 16, 2025