12,602 results · Clear filters · Feed
-
High max 8.1SUSE-SU-2025:01660-2 4 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.1. Security fixes: - MFSA 2025-34 (bsc#1243216) * CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird. * CVE-2025-3877: Unsolicited File Do…
first May 29, 2025 -
High max 8.4SUSE-SU-2025:01652-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). - CVE-2024-53156: wifi: ath9k: add …
first May 22, 2025 -
High max 8.8SUSE-SU-2025:01633-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49111: Bluetooth: Fix use after free in hci_send_acl (bsc#1237984). - CVE-2025-21726: padata: avoid UAF for reorder_wo…
first May 21, 2025 -
High max 7.5SUSE-SU-2025:01586-2 2 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser (bsc#1242894). - CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated use…
first Jun 3, 2025 -
High max 7.8
Recommended update for open-vm-tools
This update for open-vm-tools fixes the following issues: - update to 13.0.10 based on build 25056151 (boo#1257357): * There are no new features in the open-vm-tools 13.0.10 release. * This is primarily a maintenance release that addresses a fix. * A minor en…
first Mar 4, 2026 -
High max 8.8SUSE-RU-2026:20192-1 2 CVEs
Recommended update for cloud-init
This update for cloud-init fixes the following issues: Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed long ago * https://github.com/canonical/cloud-init/pull/1720 - Update to version …
first Jan 29, 2026 -
High max 7.5SUSE-SU-2025:4481-1 1 CVE
Security update for golang-github-prometheus-alertmanager
This update for golang-github-prometheus-alertmanager fixes the following issues: - Update to version 0.28.1 (jsc#PED-13285): * Improved performance of inhibition rules when using Equal labels. * Improve the documentation on escaping in UTF-8 matchers. * Upda…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4449-1 2 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4440-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-13499: Fixed Kafka dissector crash due to malformed packet (bsc#1254108). - CVE-2025-13946: Fixed MEGACO dissector infinite loop that allows denial of service (bsc#1254472).
first Dec 17, 2025 -
High max 7.1SUSE-SU-2025:4436-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160) - CVE-2025-66293: Fixed LIBPNG out-of-bounds read in `png_image_read_composite` (bsc#125…
first Dec 17, 2025 -
High max 7.8SUSE-SU-2025:20955-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20951-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20945-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-20…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:20939-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:4261-1 4 CVEs
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778). - CVE-2025-23145: mptcp: f…
first Nov 26, 2025 -
High max 8.8SUSE-SU-2025:4231-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include…
first Nov 25, 2025 -
High max 7.8SUSE-SU-2025:4196-1 6 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930) - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#125293…
first Nov 24, 2025 -
High max 7.8SUSE-SU-2025:4164-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-2025-…
first Nov 22, 2025 -
High max 7.3SUSE-SU-2025:4075-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096) Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as…
first Nov 12, 2025 -
High max 7.8SUSE-SU-2025:4063-1 2 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_65 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38618: vsock: Do not allow binding t…
first Nov 12, 2025 -
High max 7.8SUSE-SU-2025:4031-1 5 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched…
first Nov 10, 2025 -
High max 7.8SUSE-SU-2025:3987-1 2 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_11 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38618: vsock: Do not allow binding t…
first Nov 7, 2025 -
High max 7.8SUSE-SU-2025:3947-1 4 CVEs
Security update for jasper
This update for jasper fixes the following issues: - Update to 4.2.8: - CVE-2025-8837: Fixed a bug in the JPC decoder that could cause bad memory accesses if the debug level is set sufficiently high (bsc#1247901). - CVE-2025-8836: Added some missing range che…
first Nov 5, 2025 -
High max 7.8SUSE-SU-2025:3935-1 4 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…
first Nov 4, 2025 -
High max 7.3SUSE-SU-2025:3909-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) * Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) * Fixed value overflow i…
first Nov 2, 2025 -
High max 7.3SUSE-SU-2025:3863-1 3 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow in Xkb e…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3858-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 29, 2025 -
High max 8.1SUSE-SU-2025:3855-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 29, 2025 -
High max 8.8SUSE-SU-2025:3839-1 1 CVE
Security update 5.1.1 for Multi-Linux Manager Server
This update fixes the following issues: Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue (bsc#1243486) server-attestation-image was updated from version 5.1.7 to 5.1.10: - CVE-2025-53192: Do …
first Oct 28, 2025 -
High max 7.1SUSE-SU-2025:3807-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - CVE-2025-48041: fixed erlang exhaustion of file handles in SSH (bsc#1249473)
first Oct 27, 2025 -
High max 9.8SUSE-SU-2025:3758-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250410).
first Oct 23, 2025 -
High max 7.8SUSE-SU-2025:3675-1 6 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 20, 2025 -
High max 7.5SUSE-SU-2025:21230-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Update to version 10.0.7. Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the …
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:21223-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-aft…
first Dec 15, 2025 -
High max 7.5SUSE-SU-2025:21193-1 12 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.11. Security issues fixed: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU s…
first Dec 12, 2025 -
High max 7.8SUSE-SU-2025:21189-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: Changes in openexr: - CVE-2025-12495: Fixed a file parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [bsc#1253714] - CVE-2025-12839: Fixed a file parsing Heap-based Buffer Overflow Remot…
first Dec 9, 2025 -
High max 7.5SUSE-SU-2025:21162-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-61748: Fixed enhance string handling (bsc#1252418). - CVE-2025-53057:…
first Nov 28, 2025 -
High max 7.3SUSE-SU-2025:21149-1 3 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958). - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959). - CVE-2025-62231: Fixed value…
first Nov 27, 2025 -
High max 7.5SUSE-SU-2025:21144-1 1 CVE
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability (bsc#1241693) - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not c…
first Nov 26, 2025 -
High max 7.8SUSE-SU-2025:21123-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_11
This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS…
first Nov 28, 2025