12,602 results · Clear filters · Feed
-
High max 8.1SUSE-SU-2025:03120-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u462 (icedtea-3.36.0). Security issues fixed: - CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java applicatio…
first Sep 9, 2025 -
High max 7.1SUSE-SU-2025:03074-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-57833: Fixed potential SQL injection in FilteredRelation column aliases (bsc#1248810)
first Sep 4, 2025 -
High max 8.8SUSE-SU-2025:03030-1 3 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.14: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 29, 2025 -
High max 7.7SUSE-SU-2025:02993-2 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: Upgraded to version 9.4.58.v20250814: - CVE-2025-5115: Fixed MadeYouReset DoS attack via HTTP/2 protocol (including DNS over HTTPS) (bsc#1244252)
first Sep 1, 2025 -
High max 7.5SUSE-SU-2025:03024-1 5 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Updated to 9.0.108: - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 client cons…
first Aug 29, 2025 -
High max 7.5SUSE-SU-2025:03000-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input (bsc#1248548)
first Aug 27, 2025 -
High max 8.8SUSE-SU-2025:02995-1 3 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: Updated to 17.6: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump allow…
first Aug 27, 2025 -
High max 8.8SUSE-SU-2025:02994-1 3 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.22: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 27, 2025 -
High max 8.8SUSE-SU-2025:02986-1 3 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: Updated to 17.6: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump allow…
first Aug 26, 2025 -
High max 7.5SUSE-SU-2025:02984-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).
first Aug 25, 2025 -
High max 7.5SUSE-SU-2025:02979-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Updated to Tomcat 11.0.9 - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 clie…
first Aug 25, 2025 -
High max 7.5SUSE-SU-2025:02963-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory contents leak (bsc#1245227) - CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (b…
first Aug 22, 2025 -
High max 8.8SUSE-SU-2025:02917-1 5 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 19, 2025 -
High max 8.8SUSE-SU-2025:02894-1 5 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 19, 2025 -
High max 8.8SUSE-SU-2025:02830-1 4 CVEs
Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_247 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can c…
first Aug 16, 2025 -
High max 8.8SUSE-SU-2025:02827-1 4 CVEs
Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can c…
first Aug 16, 2025 -
High max 7.5SUSE-SU-2025:02809-1 6 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update to version 0.2.7+141: * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193) - Update to version 0.2.7+117: * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing …
first Aug 15, 2025 -
High max 7.5SUSE-SU-2025:02802-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) - CVE-2025-8194: Fixed denial of service caused by tar archives with nega…
first Aug 14, 2025 -
High max 7.8SUSE-SU-2025:02611-1 4 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_158 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the l…
first Aug 3, 2025 -
High max 7.1SUSE-SU-2025:02600-1 5 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: - Update to 550.144.03 (bsc#1235461, bsc#1235871) * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869
first Aug 1, 2025 -
High max 7.5SUSE-SU-2025:02530-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007)
first Jul 25, 2025 -
High max 7.5SUSE-SU-2025:02349-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - Upgrade to release 9.20.11 - CVE-2025-40777: Fixed a possible assertion failure when stale-answer-client-timeout is set to 0. (bsc#1246548)
first Jul 17, 2025 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147). - CVE-2022-50087: firmware: arm_scpi: E…
first Jul 15, 2025 -
High max 7.3SUSE-SU-2025:02187-1 1 CVE
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
first Jul 1, 2025 -
High max 7.5SUSE-SU-2025:02184-1 1 CVE
Security update for jakarta-commons-fileupload
This update for jakarta-commons-fileupload fixes the following issues: Upgrade to upstream version 1.6.0 - CVE-2025-48976: Fixed allocation of resources for multipart headers with insufficient limits can lead to a DoS (bsc#1244657). Full changelog: https://co…
first Jul 1, 2025 -
High max 8.0SUSE-SU-2025:02127-1 11 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds a…
first Jun 26, 2025 -
High max 8.0SUSE-SU-2025:02101-1 7 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acce…
first Jun 25, 2025 -
High max 8.0SUSE-SU-2025:02075-1 7 CVEs
Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acce…
first Jun 24, 2025 -
High max 7.5SUSE-SU-2025:02045-1 3 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.19.2: - CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218). - CVE-2025-23167: improper HTTP header block termination in llhttp (bsc#1243220)…
first Jun 20, 2025 -
High max 7.5SUSE-SU-2025:02035-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).
first Jun 20, 2025 -
High max 8.8SUSE-SU-2025:02033-1 8 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.48.2: - CVE-2025-24223: Processing maliciously crafted web content may lead to memory corruption (bsc#1243424). - CVE-2025-31204: Processing maliciously crafted web content may lead t…
first Jun 20, 2025 -
High max 7.8SUSE-SU-2025:02003-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 18, 2025 -
High max 7.8SUSE-SU-2025:01949-1 1 CVE
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_42 fixes one issue. The following security issue was fixed: - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).
first Jun 13, 2025 -
High max 7.8SUSE-SU-2025:01894-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_97 fixes several issues. The following security issues were fixed: - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (bsc#1239096). - CVE-2024-57996: net_sched: s…
first Jun 11, 2025 -
High max 7.5SUSE-SU-2025:01860-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) - CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) - CVE-2025-1713: F…
first Jun 10, 2025 -
High max 7.8SUSE-SU-2025:01835-2 7 CVEs
Security update for transfig
This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a - CVE-2025-31162: Fixed a floating point exception in fig2dev in get_slope function (bsc#1240380). - CVE-2025-31163: Fixed a segmentation fault in fig2dev in put_patternarc …
first Jul 16, 2025 -
High max 7.7SUSE-SU-2025:01810-1 1 CVE
Security update for python3-setuptools
This update for python3-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first Jun 4, 2025 -
High max 8.8SUSE-SU-2025:01737-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing (bsc#1242809).
first May 29, 2025 -
High max 7.8SUSE-SU-2025:01702-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-4802: possible execution of attacker controlled code when statically linked setuid binaries using dlopen search for libraries to load in LD_LIBRARY_PATH (bsc#1243317).
first May 24, 2025 -
High max 7.7SUSE-SU-2025:01695-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 23, 2025