12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:03213-1 4 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_53 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqu…
first Sep 13, 2025 -
High max 8.1SUSE-SU-2025:03210-1 8 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 13, 2025 -
High max 7.8SUSE-SU-2025:03208-1 7 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_94 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 13, 2025 -
High max 7.5SUSE-SU-2025:03198-1 7 CVEs
Security update for curl
This update for curl fixes the following issues: Update to version 8.14.1 (jsc#PED-13055, jsc#PED-13056). Security issues fixed: - CVE-2025-0665: eventfd double close can cause libcurl to act unreliably (bsc#1236589). - CVE-2025-4947: QUIC certificate check i…
first Sep 12, 2025 -
High max 8.0SUSE-SU-2025:03178-1 2 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2025-58060: no password check when `AuthType` is set to anything but `Basic` and a request is made with an `Authorization: Basic` header (bsc#1249049). - CVE-2025-58364: unsafe deserialization and validat…
first Sep 11, 2025 -
High max 7.8SUSE-SU-2025:03154-1 4 CVEs
Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_207 fixes several issues. The following security issues were fixed: - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2025-38000: sch_hfsc: Fix qlen…
first Sep 10, 2025 -
High max 8.8SUSE-SU-2025:03152-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels (bsc#1248076). - CVE-2025-55005: Fixed heap buffer overflow when transforming from …
first Sep 10, 2025 -
High max 8.8SUSE-SU-2025:03150-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077). - CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneM…
first Sep 10, 2025 -
High max 7.8SUSE-SU-2025:03149-1 1 CVE
Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_211 fixes one issue. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 10, 2025 -
High max 7.8SUSE-SU-2025:03138-1 3 CVEs
Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_234 fixes several issues. The following security issues were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in …
first Sep 10, 2025 -
High max 7.8SUSE-SU-2025:03135-1 5 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in …
first Sep 10, 2025 -
High max 7.5SUSE-SU-2026:0436-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2025-11234: Fixed use-after-free in websocket handshake code can lead to denial of service (bsc#1250984).
first Feb 11, 2026 -
High max 8.8SUSE-SU-2026:0306-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747)
first Jan 27, 2026 -
High max 7.8SUSE-SU-2026:0214-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-68973: Fix possible memory corruption in the armor parser (gpg.fail/memcpy)(bsc#1255715). - Avoid potential downgrade to SHA1 in 3rd party key signatures (gpg.fail/sha1) (bsc#1256246). - Error out on…
first Jan 22, 2026 -
High max 8.8SUSE-SU-2026:0029-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow i…
first Jan 5, 2026 -
High max 7.0SUSE-SU-2025:4502-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to Path Traversal and Remote Code Execution (bsc#1254313) Other fixes: - Update to 10.11.15 - Add %license tags to license files (bsc#1252162) …
first Dec 22, 2025 -
High max 7.8SUSE-SU-2025:4450-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4447-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.7SUSE-SU-2025:4441-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087…
first Dec 17, 2025 -
High max 8.8SUSE-SU-2025:4233-1 2 CVEs
Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.167 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…
first Nov 25, 2025 -
High max 8.8SUSE-SU-2025:4111-1 173 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null…
first Nov 15, 2025 -
High max 7.8SUSE-SU-2025:3932-1 3 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_53 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…
first Nov 4, 2025 -
High max 7.5SUSE-SU-2025:4038-1 2 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u472 (icedtea-3.37.0): - CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-202…
first Nov 10, 2025 -
High max 7.3SUSE-SU-2025:3874-1 3 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed Use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed Value overflow in Xkb e…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3866-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 7.5SUSE-SU-2025:3859-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 (October 2025 CPU): - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252…
first Oct 29, 2025 -
High max 8.7SUSE-SU-2025:3810-1 1 CVE
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2025-59728: allocated space for the appended '/' (bsc#1251137)
first Oct 27, 2025 -
High max 7.8SUSE-SU-2025:3731-1 5 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_91 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure th…
first Oct 22, 2025 -
High max 7.8SUSE-SU-2025:3679-1 5 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 20, 2025 -
High max 7.5SUSE-SU-2025:21233-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the …
first Dec 18, 2025 -
High max 8.2SUSE-SU-2025:21194-1 2 CVEs
Security update for keylime
This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs (bsc#1254199). - CVE-2025-1057…
first Dec 12, 2025 -
High max 7.8SUSE-SU-2025:21120-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS …
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21118-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21099-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_10
This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21091-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS …
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21089-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 8.4SUSE-SU-2025:21072-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3: * CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252232)
first Nov 20, 2025 -
High max 8.4SUSE-SU-2025:21054-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 - Update to runc v1.3.2…
first Nov 10, 2025 -
High max 8.8SUSE-SU-2025:21037-1 9 CVEs
Security update for tiff
This update for tiff fixes the following issues: tiff was updated to 4.7.1: Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove u…
first Nov 10, 2025 -
High max 7.8SUSE-SU-2025:20985-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …
first Nov 5, 2025