12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:20528-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912) - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups(…
first Aug 1, 2025 -
High max 7.8SUSE-SU-2025:20524-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579)
first Aug 1, 2025 -
High max 8.8SUSE-SU-2025:20511-1 24 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971) - Filter out the non-subvolume btrfs mount points when creating the relative path (bsc#1239674) - CVE-2024-45781: Fixed ufs strcpy overflo…
first Jul 29, 2025 -
High max 7.7SUSE-SU-2025:20462-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2025-47273: Fixed path traversal vulnerability in `PackageIndex` (bsc#1243313)
first Jul 2, 2025 -
High max 8.0SUSE-SU-2025:20448-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizi…
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:20438-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235062) - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_rea…
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:20399-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_s…
first Jun 10, 2025 -
High max 8.6SUSE-SU-2025:20394-1 1 CVE
Security update for less
This update for less fixes the following issues: - Updated to version 668 * Fixed crash when using --header on command line * Fixed possible crash when scrolling left/right or toggling -S * Fixed bug when using #stop in a lesskey file * Fixed bug when using -…
first Jun 8, 2025 -
High max 7.5SUSE-SU-2025:20377-1 2 CVEs
Security update for docker
This update for docker fixes the following issues: Always clear SUSEConnect suse_* secrets when starting containers regardless of whether the daemon was built with SUSEConnect support. Not doing this causes containers from SUSEConnect-enabled daemons to fail …
first Jun 5, 2025 -
High max 7.5SUSE-SU-2025:20373-1 2 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issues: - Updated to v2.2.3: * Adapted .golangci.yml format to a new version * Simplified podman calls in CI steup * Switched GHA runners to Ubuntu 24.04 * Updated year in headers * Vendored go.mod librari…
first Jun 3, 2025 -
High max 8.4SUSE-SU-2025:20349-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_…
first May 28, 2025 -
High max 7.1SUSE-SU-2025:20319-1 5 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: Update CUDA variant to 570.133.20 Update non-CUDA variant to 570.144 (bsc#1241231) Update non-CUDA variant to 570.133.07 (bsc#1239653) - removed obsolete kernel-firmware-nvidia-gspx-G06…
first May 15, 2025 -
High max 8.8SUSE-SU-2025:20213-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) - CVE-20…
first Apr 29, 2025 -
High max 8.6SUSE-SU-2025:20143-1 5 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed gopkg.in/square/go-jose.v2,gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237641): - C…
first Mar 12, 2025 -
High max 7.3SUSE-SU-2025:20132-1 1 CVE
Security update for pam_u2f
This update for pam_u2f fixes the following issues: - update to 1.3.2: * Relax authfile permission check to a warning instead of an error to prevent a breaking change locking existing users out of their systems. - update to 1.3.1: * CVE-2025-23013: Fixed prob…
first Mar 4, 2025 -
High max 7.5SUSE-SU-2025:20090-1 5 CVEs
Security update for cups
This update for cups fixes the following issues: - Version upgrade to 2.4.11: See https://github.com/openprinting/cups/releases CUPS 2.4.11 brings several bug fixes regarding IPP response validation, processing PPD values, Web UI support (checkbox support, mo…
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20081-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-41996: Fixed a denial of service in the Diffie-Hellman Key Agreement Protocol (bsc#1230698). - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
first Feb 3, 2025 -
High max 8.8SUSE-SU-2025:20053-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module in pypa/setuptools (bsc#1228105)
first Feb 3, 2025 -
High max 8.6SUSE-SU-2025:20029-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2024-7264: ASN.1 date parser overread (bsc#1228535) - CVE-2024-6197: Freeing stack buffer in utf8asn1str (bsc#1227888) - CVE-2024-2379: QUIC certificate check bypass with wolfSSL (b…
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20024-1 4 CVEs
Security update for unbound
This update for unbound fixes the following issues: - Update to 1.20.0: Features: * The config for discard-timeout, wait-limit, wait-limit-cookie, wait-limit-netblock and wait-limit-cookie-netblock was added, for the fix to the DNSBomb issue. * Merge GH#1027:…
first Feb 3, 2025 -
High max 8.1SUSE-SU-2025:20009-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318) - CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642).
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:1494-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-24855: Fixed use-after-free of XPath context node (bsc#1239625) - CVE-2024-55549: Fixed use-after-free related to excluded namespaces (bsc#1239637)
first May 6, 2025 -
High max 7.4SUSE-SU-2025:1490-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.15+6 (April 2025 CPU) CVEs: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274) + CVE-2025-30691: Fixed Oracle Ja…
first May 6, 2025 -
High max 8.2SUSE-SU-2025:1465-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-31492: Fixed a bug where OIDCProviderAuthRequestMethod POSTs can leak protected data. (bsc#1240893)
first May 5, 2025 -
High max 7.1SUSE-SU-2025:1463-1 2 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233294). - CVE-2024-56650: netfilter: x_tabl…
first May 5, 2025 -
High max 7.5SUSE-SU-2025:1433-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2025-21605: Fixed an output buffer denial of service. (bsc#1241708)
first May 2, 2025 -
High max 7.8SUSE-SU-2025:03663-1 5 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2024-49974: NFSD: For…
first Oct 19, 2025 -
High max 8.8SUSE-SU-2025:03662-1 3 CVEs
Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_266 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_AD…
first Oct 19, 2025 -
High max 9.8SUSE-SU-2025:03632-1 2 CVEs
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - Add livepatch for CVE-2025-9230 (bsc#1250410). - Use strong externalization for ssl3_setup_read_buffer and ssl3_release_read_buffer - Use strong externalization for ossl_statem_fatal. - Add…
first Oct 17, 2025 -
High max 7.8SUSE-SU-2025:03529-1 3 CVEs
Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_198 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …
first Oct 10, 2025 -
High max 9.8SUSE-SU-2025:03441-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 7.8SUSE-SU-2025:03408-1 6 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown fl…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03395-1 6 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_97 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{s…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03393-1 7 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempot…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03391-1 7 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_164 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 27, 2025 -
High max 8.8SUSE-SU-2025:03233-1 1 CVE
Security update for pcp
This update for pcp fixes the following issues: - CVE-2024-3019: exposure of the redis server backend allows remote command execution via pmproxy (bsc#1222121).
first Sep 15, 2025 -
High max 8.1SUSE-SU-2025:03217-1 8 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 15, 2025 -
High max 7.8SUSE-SU-2025:03214-1 1 CVE
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 13, 2025 -
High max 7.8SUSE-SU-2025:03212-1 6 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_47 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 13, 2025 -
High max 8.8SUSE-SU-2025:03151-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels (bsc#1248076). - CVE-2025-55005: Fixed heap buffer overflow when transforming from …
first Sep 10, 2025