12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2025:02911-1 4 CVEs
Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_88 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 19, 2025 -
High max 8.8SUSE-SU-2025:02908-1 4 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…
first Aug 19, 2025 -
High max 8.8SUSE-SU-2025:02832-1 5 CVEs
Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_207 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 17, 2025 -
High max 7.5SUSE-SU-2025:02801-1 4 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530) - CVE-2025-53015: Fixed specific XMP file conversion may cause an infinite loop (bsc#1246531) - CVE-2025…
first Aug 14, 2025 -
High max 7.2SUSE-SU-2025:02672-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to version 3.50.2 - CVE-2025-6965: Fixed an integer truncation to avoid assertion faults. (bsc#1246597)
first Aug 4, 2025 -
High max 7.8SUSE-SU-2025:02608-1 3 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the li…
first Aug 2, 2025 -
High max 7.8SUSE-SU-2025:02606-1 3 CVEs
Security update for the Linux Kernel (Live Patch 66 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_250 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limit v…
first Aug 2, 2025 -
High max 7.8SUSE-SU-2025:02442-1 2 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac:…
first Jul 21, 2025 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/…
first Jul 15, 2025 -
High max 7.8SUSE-SU-2025:02128-1 1 CVE
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes one issue. The following security issue was fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
first Jun 26, 2025 -
High max 8.8SUSE-SU-2025:02105-1 1 CVE
Security update for perl-File-Find-Rule
This update for perl-File-Find-Rule fixes the following issues: - CVE-2011-10007: Fixed arbitrary code execution when `grep()` encounters a crafted filename (bsc#1244148).
first Jun 25, 2025 -
High max 8.0SUSE-SU-2025:02077-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds a…
first Jun 24, 2025 -
High max 8.6SUSE-SU-2025:02034-1 1 CVE
Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2024-47606: Fixed integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (bsc#1234449)
first Jun 20, 2025 -
High max 7.5SUSE-SU-2025:01962-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled (bsc#1242015).
first Jun 16, 2025 -
High max 7.8SUSE-SU-2025:01950-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow…
first Jun 13, 2025 -
High max 7.5SUSE-SU-2025:01942-1 3 CVEs
Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804) - CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913) - CVE-2025-21605: Output buffer denial of service (…
first Jun 13, 2025 -
High max 7.8SUSE-SU-2025:01944-1 3 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…
first Jun 13, 2025 -
High max 7.4SUSE-SU-2025:01770-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 45. Security issues fixed: - Oracle April 15 2025 CPU (bsc#1242208) * CVE-2025-21587: unauthorized access, deletion and modification of critical data via …
first May 30, 2025 -
High max 8.1SUSE-SU-2025:01769-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Mozilla Firefox ESR 128.11 (MFSA 2025-44, bsc#1243353): - MFSA-TMP-2025-0001: Double-free in libvpx encoder (bmo#1962421) - CVE-2025-5263: Error handling for script execution was incorrectly…
first May 30, 2025 -
High max 7.2SUSE-SU-2025:01738-1 2 CVEs
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: Upgrade to version 9.4.57.v20241219 - CVE-2024-6763: the HttpURI class does insufficient validation on the authority segment of a URI (bsc#1231652) - CVE-2024-13009: Gzip Request Body Buffer (bsc#12432…
first May 29, 2025 -
High max 8.4SUSE-SU-2025:01656-1 2 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-50115: KVM: nSVM: Ignore …
first May 22, 2025 -
High max 7.5SUSE-SU-2025:01649-2 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-47287: excessive logging when parsing malformed `multipart/form-data` can lead to a denial-of-service (bsc#1243268).
first May 23, 2025 -
High max 7.8SUSE-RU-2025:20479-1 1 CVE
Recommended update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - Removes pam_env from auth stack for security reason [bsc#1243226]
first Jul 15, 2025 -
High max 7.8SUSE-SU-2025:20737-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20734-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20707-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…
first Sep 11, 2025 -
High max 7.8SUSE-SU-2025:20706-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…
first Sep 11, 2025 -
High max 7.8SUSE-SU-2025:20700-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched:…
first Sep 11, 2025 -
High max 7.7SUSE-SU-2025:20655-1 1 CVE
Security update for jq
This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (bsc#1244116).
first Sep 5, 2025 -
High max 8.8SUSE-SU-2025:20648-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…
first Sep 1, 2025 -
High max 8.8SUSE-SU-2025:20647-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_9
This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350) - CVE-2025-38495: HID: co…
first Sep 1, 2025 -
High max 7.5SUSE-SU-2025:20631-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-8194: Fixed infinite loop and deadlock caused by tar archives with negative offsets (bsc#1247249)
first Aug 27, 2025 -
High max 7.8SUSE-SU-2025:20622-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20616-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20613-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…
first Aug 25, 2025 -
High max 7.5SUSE-SU-2025:20598-1 4 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling (bsc#1243314) - CVE-2025-4948: Fixed Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service (bsc#124333…
first Aug 21, 2025 -
High max 7.8SUSE-SU-2025:20594-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5918: reading past EOF may be triggered for piped file streams (bsc#1244279) - CVE-2025-5917: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336) - CVE-…
first Aug 14, 2025 -
High max 8.7SUSE-SU-2025:20590-1 1 CVE
Security update for xz
This update for xz fixes the following issues: - CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset (bsc#1240414)
first Aug 8, 2025 -
High max 7.8SUSE-SU-2025:20583-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20581-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…
first Aug 25, 2025