12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2025:02897-1 5 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_150 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…
first Aug 19, 2025 -
High max 8.3SUSE-SU-2025:02808-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
first Aug 15, 2025 -
High max 8.3SUSE-SU-2025:02806-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)
first Aug 15, 2025 -
High max 7.8SUSE-SU-2025:02676-1 3 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_103 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the l…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2025:02673-1 4 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulner…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2025:02602-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_26 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limi…
first Aug 2, 2025 -
High max 7.8SUSE-SU-2025:02444-1 3 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_150 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2025-21772: partitions: mac: fix handling…
first Jul 21, 2025 -
High max 7.8SUSE-SU-2025:02439-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues. The following security issue was fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579).
first Jul 21, 2025 -
High max 7.8SUSE-SU-2025:02438-1 1 CVE
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_97 fixes one issue. The following security issue was fixed: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912).
first Jul 21, 2025 -
High max 7.5SUSE-SU-2025:02280-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-46701: Fixed refactor CGI servlet to access resources via WebResources (bsc#1243815). - CVE-2025-48988: Fixed limits the total number of parts in a multi-part request and limits the size of the hea…
first Jul 10, 2025 -
High max 8.0SUSE-SU-2025:02171-1 8 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds…
first Jun 30, 2025 -
High max 7.8SUSE-SU-2025:02155-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_147 fixes one issue. The following security issue was fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
first Jun 27, 2025 -
High max 8.0SUSE-SU-2025:02154-1 6 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bound…
first Jun 27, 2025 -
High max 7.8SUSE-SU-2025:02082-1 1 CVE
Security update for pam-config
This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:02081-1 1 CVE
Security update for pam-config
This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:02080-1 1 CVE
Security update for pam-config
This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack (bsc#1243226).
first Jun 24, 2025 -
High max 8.6SUSE-SU-2025:02058-1 3 CVEs
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2025-47183: Fixed out-of-bounds read in MOV/MP4 demuxer (bsc#1244406). - CVE-2025-47219: Fixed out-of-bounds read in MOV/MP4 demuxer (bsc#1244405). - CVE-2024-47540: Fixed uninitialized …
first Jun 21, 2025 -
High max 7.0SUSE-SU-2025:02044-1 1 CVE
Security update for libblockdev
This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize (bsc#1243285).
first Jun 20, 2025 -
High max 7.5SUSE-SU-2025:02041-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).
first Jun 20, 2025 -
High max 7.8SUSE-SU-2025:02004-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 18, 2025 -
High max 7.8SUSE-SU-2025:02001-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). - pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors…
first Jun 18, 2025 -
High max 7.5SUSE-SU-2025:01812-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332…
first Jun 4, 2025 -
High max 7.5SUSE-SU-2025:01726-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2025-47287: excessive logging when parsing malformed `multipart/form-data` can lead to a denial-of-service (bsc#1243268).
first May 28, 2025 -
High max 8.8SUSE-SU-2025:01725-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing (bsc#1242809).
first May 28, 2025 -
High max 7.7SUSE-SU-2025:01693-1 1 CVE
Security update for python36-setuptools
This update for python36-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 23, 2025 -
High max 8.4SUSE-SU-2025:01692-1 3 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-43882: Fixed ToCToU betwe…
first May 23, 2025 -
High max 7.8SUSE-SU-2025:01611-1 1 CVE
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes one issue. The following security issue was fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).
first May 21, 2025 -
High max 7.4SUSE-SU-2025:01490-1 3 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.15+6 (April 2025 CPU) CVEs: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274) + CVE-2025-30691: Fixed Oracle Ja…
first Jun 4, 2025 -
High max 8.1SUSE-RU-2019:1161-1 2 CVEs
Recommended update for ardana-ansible, ardana-cobbler, ardana-db, ardana-heat, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, galera-python-clustercheck, openstack-dashboard, openstack-ec2-api, openstack-heat, openstack-heat-templates, openstack-horizon-plugin-ironic-ui, openstack-horizon-plugin-magnum-ui, openstack-hori
This update for ardana-ansible, ardana-cobbler, ardana-db, ardana-heat, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar, crowbar-core, crowbar-ha, crowbar-openstack…
first May 6, 2019 -
High max 8.8SUSE-RU-2026:20174-1 2 CVEs
Recommended update for cloud-init
This update for cloud-init fixes the following issues: Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed long ago * https://github.com/canonical/cloud-init/pull/1720 - Update to version …
first Jan 29, 2026 -
High max 7.5SUSE-SU-2025:02769-1 1 CVE
Security update for amber-cli
This update for amber-cli fixes the following issues: - Update to version 1.13.1+git20250329.c2e3bb8: * CVE-2025-30204: Fixed jwt-go excessive memory allocation during header parsing (bsc#1240511) * jwt version upgrade (#174) * Update policy size limit to 20k…
first Aug 12, 2025 -
High max 7.0SUSE-SU-2026:20246-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 16, 2026 -
High max 7.5SUSE-SU-2026:0457-1 7 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 (bsc#1256848) - CVE-2025-59465: Add TLSSocket default error handler (bsc#1256573) - CVE-2025-55132: Disable futimes when permission model is e…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2025:20824-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-10148: Predictable WebSocket mask (bsc#1249348) - Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197] - tool_operate: fix r…
first Sep 25, 2025 -
High max 7.8SUSE-SU-2025:20769-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20765-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030)
first Sep 11, 2025 -
High max 7.5SUSE-SU-2025:20749-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-8194: Fixed tar archives with negative offsets leading to infinite loop and deadlock (bsc#1247249)
first Sep 16, 2025 -
High max 7.8SUSE-SU-2025:20733-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…
first Sep 23, 2025 -
High max 7.8SUSE-SU-2025:20724-1 6 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…
first Sep 23, 2025 -
High max 8.1SUSE-SU-2025:20704-1 8 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…
first Sep 11, 2025