12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:20580-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20570-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_8
This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20568-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025…
first Aug 25, 2025 -
High max 7.8SUSE-SU-2025:20548-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579)
first Aug 1, 2025 -
High max 7.8SUSE-SU-2025:20547-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579)
first Jul 30, 2025 -
High max 7.8SUSE-SU-2025:20521-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579)
first Jul 30, 2025 -
High max 7.8SUSE-SU-2025:20520-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912) - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_grou…
first Jul 30, 2025 -
High max 8.1SUSE-SU-2025:20498-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913). - CVE-2024-58053: rxrpc: Fix han…
first Jul 18, 2025 -
High max 8.1SUSE-SU-2025:20483-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913). - CVE-2024-58053: rxrpc: Fix han…
first Jul 18, 2025 -
High max 7.5SUSE-SU-2025:20453-1 4 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4476: Fixed null pointer dereference that may lead to denial of service (bsc#1243422) - CVE-2025-4948: Fixed Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in …
first Jun 28, 2025 -
High max 8.0SUSE-SU-2025:20450-1 11 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when res…
first Jun 23, 2025 -
High max 7.5SUSE-SU-2025:20445-1 2 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Fixed excessive CPU consumption by the algorithm used for parsing HTTP cookies (bsc#1233668) - CVE-2025-47287: Fixed denial-of-service via generation of an extremely high volume of …
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:20398-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_s…
first Jun 10, 2025 -
High max 8.4SUSE-SU-2025:20368-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in h…
first May 22, 2025 -
High max 7.5SUSE-SU-2025:20328-1 2 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issues: - Updated to v1.7.2: * Updated header year * CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238700) * CVE-2025-22869: golang.org/x/crypto/ssh: Fixed Denial of…
first May 15, 2025 -
High max 7.1SUSE-SU-2025:20327-1 5 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: Update CUDA variant to 570.133.20 Update non-CUDA variant to 570.144 (bsc#1241231) Update non-CUDA variant to 570.133.07 (bsc#1239653) - removed obsolete kernel-firmware-nvidia-gspx-G06…
first May 15, 2025 -
High max 7.1SUSE-SU-2025:20303-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-24528: Prevent overflow when calculating ulog block size. An authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process cra…
first May 8, 2025 -
High max 7.8SUSE-SU-2025:20274-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c [bsc#1237363] - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements …
first Apr 22, 2025 -
High max 7.0SUSE-SU-2025:20239-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: Update to 8.12.1: * Bugfixes: - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR' - asyn-thread: fix HTTPS RR crash - asyn-thread: fix the returned bitmask from Curl_resolver_getsock - asyn-thread: survive …
first Mar 13, 2025 -
High max 8.6SUSE-SU-2025:20240-1 1 CVE
Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2024-47606: avoid integer overflow when allocating sysmem (bsc#1234449).
first Mar 19, 2025 -
High max 7.5SUSE-SU-2025:20227-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Update to version 20241128 (git commit ea71da6f0690): * i915: Update Xe2LPD DMC to v2.24 * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops * iwlwifi: add Bz-gf FW for core…
first Feb 26, 2025 -
High max 8.8SUSE-SU-2025:20214-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) - CVE-20…
first Apr 29, 2025 -
High max 7.5SUSE-SU-2025:20184-1 2 CVEs
Security update for elemental-operator
This update for elemental-operator fixes the following issues: - Updated to version 1.6.8: * Deactivated e2e workflow * Updated header year * CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238700) * CVE-2025-22869: golang…
first Apr 11, 2025 -
High max 7.8SUSE-SU-2025:20177-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363). - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements…
first Apr 4, 2025 -
High max 7.6SUSE-SU-2025:20155-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2024-2410: Fixed use after free when parsing JSON from a stream (bsc#1223947).
first Mar 20, 2025 -
High max 7.1SUSE-SU-2025:20153-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-24528: Prevent overflow when calculating ulog block size. An authenticated attacker can cause kadmind to write beyond the end of the mapped region for the iprop log file, likely causing a process cra…
first Mar 19, 2025 -
High max 8.6SUSE-SU-2025:20134-1 7 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bsc#1234415). - CVE-2024-47835: Fixed NULL-pointer dereference in LRC subtitle parser (bsc#1234450). - CVE…
first Mar 5, 2025 -
High max 7.5SUSE-SU-2025:20118-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - Update to 2.90: * CVE-2023-50387, CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses (bsc#1219823, bsc#1219826). * Fix reversion in --rev-server introduce…
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:20108-1 3 CVEs
Security update for nvidia-open-driver-G06-signed
This update for nvidia-open-driver-G06-signed fixes the following issues: - Make sure the correct FW package is installed on non-CUDA. - only obsolete 555 CUDA driver/firmware packages - For CUDA: update version to 565.57.01 - Add 'dummy' firmware package on …
first Feb 3, 2025 -
High max 8.8SUSE-SU-2025:20092-1 5 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release (bsc#1233313) - CVE-2024-21853: Faulty finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel Xeon Processors ma…
first Feb 3, 2025 -
High max 8.1SUSE-SU-2025:20088-1 1 CVE
Security update for libndp
This update for libndp fixes the following issues: - CVE-2024-5564: Fixed buffer overflow in route information length field (bsc#1225771).
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:20080-1 5 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2024-9676: Fixed a denial of service via a symlink traversal in the containers/storage library (bsc#1231698) - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Li…
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20068-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: * CVE-2024-7006: Fix pointer deref in tif_dirinfo.c [bsc#1228924]
first Feb 3, 2025 -
High max 7.0SUSE-SU-2025:20060-1 1 CVE
Security update for orc
This update for orc fixes the following issues: - CVE-2024-40897: Fixed a stack-based buffer overflow when formatting error messages (bsc#1228184)
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20057-1 2 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update vendored crates (CVE-2024-43806, bsc#1229952, bsc#1230029) * rustix 0.37.25 * rustix 0.38.34 * shlex 1.3.0 - Update to version 0.2.6+13: * Enable test functional/iak-idevid-persisted-and-protec…
first Feb 3, 2025 -
High max 8.3SUSE-SU-2025:20055-1 1 CVE
Security update for containerized-data-importer
This update for containerized-data-importer fixes the following issues: - Update to version 1.60.1 Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.1 - Add registry path for SLE15 SP7 - Bump to the latest tag 1.60.1-150…
first Feb 3, 2025 -
High max 7.3SUSE-SU-2025:20050-1 2 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2024-20696: Fixed out-of-bounds access in in copy_from_lzss_window_to_unp() (bsc#1225971) - CVE-2024-20697: Fixed heap based buffer overflow in rar e8 filter (bsc#1225972)
first Feb 3, 2025 -
High max 8.1SUSE-SU-2025:20038-1 5 CVEs
Security update for glibc
This update for glibc fixes the following issues: Fixed security issues: - CVE-2024-33602: Use time_t for return type of addgetnetgrentX (bsc#1223425) - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423) - CVE-2024-33600: nscd: …
first Feb 3, 2025 -
High max 8.3SUSE-SU-2025:20019-1 2 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - Update to version 1.14.4: * CVE-2024-3727: digest type does not guarantee valid type (bsc#1224123) * Packit: update packit targets * Bump gopkg.in/go-jose to v2.6.3 * Bump ocicrypt and go-jose CVE-2024-2818…
first Feb 3, 2025 -
High max 8.6SUSE-SU-2025:20013-1 4 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file (bsc#1227052). - Update to version 4.9.5: * Bump to v4.9.5 * Update release notes for v4.9.5 * …
first Feb 3, 2025