12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:20701-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc…
first Sep 11, 2025 -
High max 7.5SUSE-SU-2025:20675-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-5399: libcurl can possibly get trapped in an endless busy-loop when processing specially crafted packets (bsc#1243933). - CVE-2025-5025: No QUIC certificate pinning with wolfSSL (bsc#1243706). - CVE-…
first Sep 9, 2025 -
High max 8.8SUSE-SU-2025:20646-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HI…
first Sep 1, 2025 -
High max 8.8SUSE-SU-2025:20642-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HI…
first Aug 29, 2025 -
High max 8.8SUSE-SU-2025:20639-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…
first Aug 29, 2025 -
High max 8.8SUSE-SU-2025:20636-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_6
This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…
first Aug 29, 2025 -
High max 8.2SUSE-SU-2025:20562-1 1 CVE
Security update for dpkg
This update for dpkg fixes the following issues: - CVE-2025-6297: Fixed improper sanitization of directory permissions leading to DoS via disk quota exhaustion due to files left behind on cleanup (bsc#1245573)
first Aug 20, 2025 -
High max 7.2SUSE-SU-2025:20561-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to 3.50.2: * Fix the concat_ws() SQL function so that it includes empty strings in the concatenation. * Avoid writing frames with no checksums into the wal file if a savepoint is rolled back after d…
first Aug 20, 2025 -
High max 7.8SUSE-SU-2025:20560-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272) - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at a…
first Aug 20, 2025 -
High max 8.1SUSE-SU-2025:20557-1 6 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314) - CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317) - CVE-2025-4877: Write beyond …
first Aug 14, 2025 -
High max 7.8SUSE-SU-2025:20543-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579)
first Aug 1, 2025 -
High max 7.5SUSE-SU-2025:20515-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22870: golang.org/x/net/http/httpproxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238681) - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (b…
first Jul 30, 2025 -
High max 8.2SUSE-SU-2025:20514-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2025-4565: Fixed a crash due to RecursionError (bsc#1244663)
first Jul 30, 2025 -
High max 7.8SUSE-SU-2025:20496-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - Removes pam_env from auth stack for security reason [bsc#1243226]
first Jul 16, 2025 -
High max 7.8SUSE-SU-2025:20441-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2025-6020: pam_namespace: convert functions that may operate on a user-controlled path to operate on file descriptors instead of absolute path. And keep the bind-mount protection from protect_mount() as a …
first Jun 19, 2025 -
High max 7.8SUSE-SU-2025:20434-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_4
This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-56582: btrfs: fix use-after-free in btrfs_encoded_read_endio() (bsc#12…
first Jun 24, 2025 -
High max 7.0SUSE-SU-2025:20426-1 1 CVE
Security update for libblockdev
This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize ( (bsc#1243226)
first Jun 18, 2025 -
High max 7.8SUSE-SU-2025:20402-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monito…
first Jun 10, 2025 -
High max 7.5SUSE-SU-2025:20385-1 1 CVE
Security update for docker-compose
This update for docker-compose fixes the following issues: Update to version 2.33.1: * Improvements - Add support for gw_priority, enable_ipv4 (requires docker v28.0) by @thaJeztah in #12570 * Fixes - Run watch standalone if menu fails to start by @ndeloof in…
first Jun 10, 2025 -
High max 7.8SUSE-SU-2025:20383-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monito…
first Jun 10, 2025 -
High max 8.8SUSE-SU-2025:20315-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-56650: Fixed netfilter: x_tables: fix LED ID check in led_tg_check() (bsc…
first Apr 29, 2025 -
High max 8.8SUSE-SU-2025:20314-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53237: Fixed bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008) - CVE-2024-53082: Fixed virtio_net: Add hash_key_length check (bsc#1233677) - CVE-20…
first Apr 29, 2025 -
High max 8.8SUSE-SU-2025:20286-1 9 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (bsc#1237096) - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html * CVE-20…
first Mar 28, 2025 -
High max 8.6SUSE-SU-2025:20279-1 7 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2023-45288: Fixed closing connection when receiving too many headers (bsc#1236507). - CVE-2024-11218: Fixed container breakout by using --jobs=2 and a race condition when building a malicious Containerf…
first Apr 22, 2025 -
High max 7.8SUSE-SU-2025:20257-1 7 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606) - CVE-2025-25724: Fixed Buffer Overflow vulnerability in libarchive (bsc#1238610) - CVE-2024-48958: Fixed out-of-bounds access i…
first Mar 31, 2025 -
High max 7.1SUSE-SU-2025:20219-1 2 CVEs
Security update for u-boot
This update for u-boot fixes the following issues: - CVE-2024-57256: Fixed integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284) - CVE-2024-57258: Fixed multiple integer overflows in U-Boot's memory allocator (bsc#1237287)
first Apr 29, 2025 -
High max 8.3SUSE-SU-2025:20136-1 6 CVEs
Security update for pcr-oracle, shim
This update for pcr-oracle, shim fixes the following issues: pcr-oracle: - predict SbatLevelRT for the next boot (bsc#1230316) shim was updated to version 15.8: - Update shim-install to use the 'removable' way for encrypted SL-Micro images (bsc#1230316) * Alw…
first Mar 7, 2025 -
High max 7.5SUSE-SU-2025:20129-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Update to version 20241128 (git commit ea71da6f0690): * i915: Update Xe2LPD DMC to v2.24 * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops * iwlwifi: add Bz-gf FW for core…
first Feb 25, 2025 -
High max 9.8SUSE-SU-2025:20910-1 1 CVE
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - Add livepatch for CVE-2025-9230 (bsc#1250410).
first Oct 23, 2025 -
High max 7.0SUSE-SU-2025:20119-1 1 CVE
Security update for python-dnspython
This update for python-dnspython fixes the following issues: - CVE-2023-29483: Fixed potential DoS via the Tudoor mechanism (bsc#1222693).
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20105-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285). - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_li…
first Feb 3, 2025 -
High max 7.5SUSE-SU-2025:20043-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-34459: Fixed buffer over-read in (bsc#1224282)
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:20036-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Fix bsc#1221812: * block: Reschedule query-block during qcow2 invalidation (bsc#1221812) - Fix bsc#1229007, CVE-2024-7409: * nbd/server: CVE-2024-7409: Close stray clients at server-stop (bsc#1229007) * nbd/s…
first Feb 3, 2025 -
High max 8.2SUSE-SU-2025:20011-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Update to version 8.2.5: * target/loongarch: fix a wrong print in cpu dump * ui/sdl2: Allow host to power down screen * target/i386: fix SSE and SSE2 feature check * target/i386: fix xsave.flat from kvm-unit-…
first Feb 3, 2025 -
High max 8.6SUSE-SU-2025:20007-1 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2024-32487: Fix a bug where mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
first Feb 3, 2025 -
High max 8.8SUSE-SU-2025:1468-1 4 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2024-53237: Bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008). - CVE-2024-53082: virtio_net: Add hash_key_length che…
first May 6, 2025 -
High max 7.1SUSE-SU-2025:1444-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_147 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
first May 4, 2025 -
High max 7.5SUSE-SU-2025:1432-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2025-21605: Fixed an output buffer denial of service. (bsc#1241708)
first May 2, 2025 -
High max 7.8SUSE-SU-2025:03559-1 3 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_97 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …
first Oct 12, 2025 -
High max 7.8SUSE-SU-2025:20584-1 5 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2…
first Aug 25, 2025