12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:20299-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2025-26597: Fixed Buffer overflow in XkbChangeTypesOfKey() (bsc#1237431).
first May 6, 2025 -
High max 7.8SUSE-SU-2025:20277-1 3 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: * CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625) * CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637) * CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)
first Apr 22, 2025 -
High max 7.0SUSE-SU-2025:20272-1 1 CVE
Security update for orc
This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow inside the orc compiler when formatting error messages for certain input files (bsc#1228184).
first Apr 22, 2025 -
High max 8.6SUSE-SU-2025:20241-1 7 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed a stack-buffer overflow in vorbis_handle_identification_packet (bsc#1234415). - CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bsc#1234450). - C…
first Mar 20, 2025 -
High max 8.8SUSE-SU-2025:20215-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-56650: Fixed netfilter: x_tables: fix LED ID check in led_tg_check() (bsc…
first Apr 29, 2025 -
High max 8.8SUSE-SU-2025:20211-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) - CVE…
first Apr 29, 2025 -
High max 7.5SUSE-SU-2025:20210-1 2 CVEs
Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issues: - Updated to version 2.1.3: * Simplify podman calls in CI steup * Switched GHA runners to Ubuntu 24.04 * Updated year in headers * Updated to go1.23, required by the new x/crypto module * CVE-2025-…
first Apr 29, 2025 -
High max 7.8SUSE-SU-2025:20201-1 3 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: * CVE-2025-24855: Fix use-after-free of XPath context node (bsc#1239625) * CVE-2024-55549: Fix UAF related to excluded namespaces (bsc#1239637) * CVE-2023-40403: Make generate-id() deterministic (bsc#1238591)
first Apr 23, 2025 -
High max 7.4SUSE-SU-2025:20104-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation in pam_access that could lead to access control bypass (bsc#1233078).
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20096-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Avoid quadratic performance of cookie parsing (bsc#1233668).
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:20087-1 4 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2024-48958: Fixed out-of-bounds access in execute_filter_delta (bsc#1231624). - CVE-2024-20697: Fixed out-of-bounds remote code execution vulnerability (bsc#1225972). - CVE-2024-48957: Fixed out-of-…
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20076-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Bugfixes and CVEs: * hw/usb/hcd-ohci: Fix #1510, #303: pid not IN or OUT (bsc#1230834, CVE-2024-8354) * softmmu: Support concurrent bounce buffers (bsc#1230915, CVE-2024-8612) * system/physmem: Per-AddressSpa…
first Feb 3, 2025 -
High max 7.0SUSE-SU-2025:20052-1 1 CVE
Security update for gtk3
This update for gtk3 fixes the following issues: - CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
first Feb 3, 2025 -
High max 7.9SUSE-SU-2025:20020-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) - CVE-2023-45733: Security updates for INTEL-SA-01051 - CVE-2023-46103: Security updates for INTEL-SA-01052 - CVE-2023-45745,CVE-20…
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:1546-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-2761: unvalidated user input in FLI file parsing may lead to an out-of-bounds write (bsc#1241691).
first May 13, 2025 -
High max 7.4SUSE-SU-2025:1524-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u452 (icedtea-3.35.0) Security issues fixed: - CVE-2025-21587: unauthorized creation, deletion or modification of critical data through the JSSE component. (bsc#1241274) - CV…
first May 9, 2025 -
High max 7.8SUSE-SU-2025:03648-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_16 fixes one issue. The following security issue was fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
first Oct 18, 2025 -
High max 9.8SUSE-SU-2025:03546-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232).
first Oct 11, 2025 -
High max 9.8SUSE-SU-2025:03437-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Sep 30, 2025 -
High max 7.8
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).
first Sep 30, 2025 -
High max 7.8SUSE-SU-2025:03414-1 3 CVEs
Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_198 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{s…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03412-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03410-1 5 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown fl…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03387-1 7 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:03381-1 7 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 26, 2025 -
High max 8.2SUSE-SU-2025:03354-1 1 CVE
Security update for python-pycares
This update for python-pycares fixes the following issues: Update to version 4.10.0 (jsc#PED-13442): - CVE-2025-48945: Fixed use-after-free vulnerability may have led to a crash (bsc#1244691).
first Sep 25, 2025 -
High max 7.8SUSE-SU-2025:03350-1 3 CVEs
Security update for the Linux Kernel (Live Patch 67 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_255 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,de…
first Sep 24, 2025 -
High max 8.6SUSE-SU-2025:03225-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2024-47175: no validation of IPP attributes in `ppdCreatePPDFromIPP2` when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD (bsc#1230932).
first Sep 15, 2025 -
High max 8.1SUSE-SU-2025:03223-1 11 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 15, 2025 -
High max 8.1SUSE-SU-2025:03209-1 11 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 13, 2025 -
High max 7.5SUSE-SU-2025:03073-1 2 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059) - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protoc…
first Sep 4, 2025 -
High max 7.5SUSE-SU-2025:02998-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input (bsc#1248548)
first Aug 27, 2025 -
High max 7.7SUSE-SU-2025:02993-1 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: Upgraded to version 9.4.58.v20250814: - CVE-2025-5115: Fixed MadeYouReset DoS attack via HTTP/2 protocol (including DNS over HTTPS) (bsc#1244252)
first Sep 1, 2025 -
High max 8.8SUSE-SU-2025:02987-1 3 CVEs
Security update for postgresql17
This update for postgresql17 fixes the following issues: Updated to 17.6: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump allow…
first Aug 26, 2025 -
High max 8.8SUSE-SU-2025:02980-1 3 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgraded to 16.10: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump all…
first Aug 25, 2025 -
High max 7.5SUSE-SU-2025:02978-1 3 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.43i: - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations of multipart upload (bsc#1246388) - CVE-2025-53506: Fixed uncontrolled resource HTTP/2 c…
first Aug 25, 2025 -
High max 7.5SUSE-SU-2025:02954-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory contents leak (bsc#1245227) - CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (b…
first Aug 21, 2025 -
High max 8.8SUSE-SU-2025:02938-1 3 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_53 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…
first Aug 21, 2025 -
High max 8.8SUSE-SU-2025:02936-1 3 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_170 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…
first Aug 21, 2025 -
High max 7.7SUSE-SU-2025:02915-1 1 CVE
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jq_fuzz_execute (bsc#1244116)
first Aug 19, 2025