12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2025:03653-1 4 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_AD…
first Oct 18, 2025 -
High max 9.8SUSE-SU-2025:03635-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: fixed out of bounds read and write in RFC 3211 KEK unwrap (bsc#1250232)
first Oct 17, 2025 -
High max 8.4SUSE-SU-2025:03599-1 2 CVEs
Security update for qt6-base
This update for qt6-base fixes the following issues: - CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash (bsc#1243958). - CVE-2025-30348: complex algorithm used in `encodeText` in QDom when processing XM…
first Oct 15, 2025 -
High max 7.8SUSE-SU-2025:03561-1 2 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_103 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race…
first Oct 12, 2025 -
High max 7.8SUSE-SU-2025:03552-1 1 CVE
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_170 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 11, 2025 -
High max 7.8SUSE-SU-2025:03528-1 4 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_195 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …
first Oct 10, 2025 -
High max 7.8SUSE-SU-2025:03475-1 3 CVEs
Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_237 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race condi…
first Oct 7, 2025 -
High max 7.3SUSE-SU-2025:03467-1 3 CVEs
Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: Update to version 5.6.9. - CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks (bsc#1230848, fixed in an earlier update). -…
first Oct 7, 2025 -
High max 7.3SUSE-SU-2025:03466-1 3 CVEs
Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: Update to version 5.6.9. - CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks (bsc#1230848, fixed in an earlier update). -…
first Oct 7, 2025 -
High max 7.8SUSE-SU-2025:03416-1 1 CVE
Security update for the Linux Kernel (Live Patch 60 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_215 fixes one issue. The following security issue was fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499).
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03413-1 2 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_6 fixes several issues. The following security issues were fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499). - CVE-2025-38555: usb: gadget : fix use-after-…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03411-1 2 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499). - CVE-2025-38555: usb: gadget : fix use-after…
first Sep 28, 2025 -
High max 7.8SUSE-SU-2025:03403-1 3 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_116 fixes several issues. The following security issues were fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499). - CVE-2025-38555: usb: gadget : fix use-af…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03396-1 3 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_113 fixes several issues. The following security issues were fixed: - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to op…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03392-1 2 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_173 fixes several issues. The following security issues were fixed: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499). - CVE-2025-38555: usb: gadget : fix use-af…
first Sep 27, 2025 -
High max 7.8SUSE-SU-2025:03389-1 3 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_170 fixes several issues. The following security issues were fixed: - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to op…
first Sep 26, 2025 -
High max 7.8SUSE-SU-2025:03375-1 7 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_150 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 26, 2025 -
High max 7.5SUSE-SU-2025:03373-1 2 CVEs
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk‑pixbuf within the `gdk_pixbuf__jpeg_image_load_increment` function (bsc#1246114). - CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory con…
first Sep 26, 2025 -
High max 8.8SUSE-SU-2025:03285-1 1 CVE
Security update for mybatis, ognl
This update for mybatis, ognl fixes the following issues: Version update to 3.5.7: * Bug fixes: + Improved performance under JDK 8. #2223 Version update to 3.5.8: * List of changes: + Avoid NullPointerException when mapping an empty string to java.lang.Charac…
first Sep 21, 2025 -
High max 8.6
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954). - CVE-2022-50116: tty: n_gsm: …
first Sep 23, 2025 -
High max 8.1SUSE-SU-2025:03235-1 8 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 15, 2025 -
High max 8.1SUSE-SU-2025:03226-1 11 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 15, 2025 -
High max 8.1SUSE-SU-2025:03224-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u462 (icedtea-3.36.0). Security issues fixed: - CVE-2025-30749: heap corruption allows unauthenticated attacker with network access to compromise and takeover Java applicatio…
first Sep 15, 2025 -
High max 7.8SUSE-SU-2025:03221-1 1 CVE
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_6 fixes several issues. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 15, 2025 -
High max 7.8SUSE-SU-2025:03207-1 6 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_100 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class…
first Sep 12, 2025 -
High max 7.8SUSE-SU-2025:03175-1 9 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930)…
first Sep 11, 2025 -
High max 7.5SUSE-SU-2025:03173-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: bug in path comparison logic when processing cookies can lead to out-of-bounds read in heap buffer (bsc#1249191). - CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning …
first Sep 11, 2025 -
High max 7.8SUSE-SU-2025:03165-1 6 CVEs
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_153 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930)…
first Sep 11, 2025 -
High max 7.8SUSE-SU-2025:03146-1 1 CVE
Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_266 fixes one issue. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 10, 2025 -
High max 7.8SUSE-SU-2025:03143-1 2 CVEs
Security update for the Linux Kernel (Live Patch 68 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_258 fixes several issues. The following security issues were fixed: - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775). - CVE-2025-38212: ipc: fix to protect IPCS lo…
first Sep 10, 2025 -
High max 7.8SUSE-SU-2025:03133-1 6 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 10, 2025 -
High max 8.1SUSE-SU-2025:03123-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 9, 2025 -
High max 7.8SUSE-SU-2025:03075-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-2760: lack of proper validation of user-supplied data in DDS parser can lead to integer overflow and remote code execution (bsc#1241690).
first Sep 4, 2025 -
High max 7.5SUSE-SU-2025:03032-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).
first Aug 29, 2025 -
High max 8.8SUSE-SU-2025:03031-1 3 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.19: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 29, 2025 -
High max 8.8SUSE-SU-2025:03004-1 3 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.14: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 27, 2025 -
High max 7.5SUSE-SU-2025:02999-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input (bsc#1248548)
first Aug 27, 2025 -
High max 8.8SUSE-SU-2025:02944-1 2 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_6 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can…
first Aug 21, 2025 -
High max 8.8SUSE-SU-2025:02943-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can…
first Aug 21, 2025 -
High max 8.8SUSE-SU-2025:02842-1 3 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.22: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 18, 2025