12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:02718-2 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272) - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at a…
first Aug 20, 2025 -
High max 7.5SUSE-SU-2025:02681-1 3 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. (bsc#1243804) - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execu…
first Aug 4, 2025 -
High max 7.5SUSE-SU-2025:02680-1 2 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execution. (bsc#1246059) - CVE-2025-48367: Fixed unauthenticated connection causing repeated IP protoc…
first Aug 4, 2025 -
High max 7.5SUSE-SU-2025:02679-1 3 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-27151: Fixed absence of filename size check may cause a stack overflow. (bsc#1243804) - CVE-2025-32023: Fixed out-of-bounds write when working with HyperLogLog commands can lead to remote code execu…
first Aug 4, 2025 -
High max 8.6SUSE-SU-2025:02667-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.16+8 (July 2025 CPU): - CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to weakening TLS p…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2025:02671-1 1 CVE
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_113 fixes one issue. The following security issue was fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
first Aug 4, 2025 -
High max 8.6SUSE-SU-2025:02666-1 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU): Security fixes: - CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2025:02610-1 5 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vul…
first Aug 3, 2025 -
High max 7.8SUSE-SU-2025:02607-1 4 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vuln…
first Aug 2, 2025 -
High max 7.8SUSE-SU-2025:02604-1 4 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerabi…
first Aug 2, 2025 -
High max 7.8SUSE-SU-2025:02601-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerabil…
first Aug 2, 2025 -
High max 7.5SUSE-SU-2025:02594-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. (bsc#1246059) - CVE-2025-48367: Fixed unauthenticated connection causing repeated …
first Aug 1, 2025 -
High max 7.5SUSE-SU-2025:02593-1 2 CVEs
Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-32023: Fixed an out-of-bounds write when working with HyperLogLog commands that can lead to remote code execution. (bsc#1246059) - CVE-2025-48367: Fixed unauthenticated connection causing repeated …
first Aug 1, 2025 -
High max 7.4SUSE-SU-2025:02592-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues: Update to version 2.5.3 (jsc#SLE-23879): - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725) Changelog: Update to 2.5.3: - Add signing-config create command (#4280) - Allow m…
first Aug 1, 2025 -
High max 7.5SUSE-SU-2025:02429-1 2 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893) - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack sessio…
first Jul 21, 2025 -
High max 7.8SUSE-SU-2025:02418-1 3 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_195 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2025-21772: partitions: mac: fix handling …
first Jul 21, 2025 -
High max 7.8SUSE-SU-2025:02394-1 2 CVEs
Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_247 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2025-21772: partitions: mac: fix handling of bo…
first Jul 20, 2025 -
High max 7.8SUSE-SU-2025:02393-1 1 CVE
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_94 fixes one issue. The following security issue was fixed: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912).
first Jul 19, 2025 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47212: net/mlx5: Update error handler for UCTX and UMEM (bsc#1222709). - CVE-2021-47455: ptp: Fix possible memory leak…
first Jul 16, 2025 -
High max 7.8SUSE-SU-2025:02156-1 1 CVE
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_91 fixes one issue. The following security issue was fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).
first Jun 27, 2025 -
High max 7.8SUSE-SU-2025:02132-1 4 CVEs
Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_237 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-56605: Bluetooth: L2CAP: do not leave d…
first Jun 26, 2025 -
High max 7.5SUSE-SU-2025:02120-1 3 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Update to version 1.24.4 (bsc#1236217): - CVE-2025-22874 crypto/x509: ExtKeyUsageAny bypasses policy validation (bsc#1244158). - CVE-2025-0913 os: inconsistent handling of O_CREATE|O_EXCL on Unix and …
first Jun 26, 2025 -
High max 7.8SUSE-SU-2025:02090-1 2 CVEs
Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_247 fixes several issues. The following security issues were fixed: - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730). - CVE-2022-49179: block, bfq: do not move oom_bf…
first Jun 24, 2025 -
High max 7.5SUSE-SU-2025:02089-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: Security issues fixed: - CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780) - CVE-2024-0397: Fixed memory race condition in ssl.SSLContext certificate store methods (bsc#122…
first Jun 24, 2025 -
High max 7.8SUSE-SU-2025:02087-1 3 CVEs
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2022-49545: ALSA: usb-audio: Cancel pending …
first Jun 24, 2025 -
High max 7.0SUSE-SU-2025:02079-1 2 CVEs
Security update for icu
This update for icu fixes the following issues: - CVE-2025-5222: Stack buffer overflow in the SRBRoot:addTag function (bsc#1243721).
first Jun 24, 2025 -
High max 8.0SUSE-SU-2025:02076-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds ac…
first Jun 24, 2025 -
High max 7.0SUSE-SU-2025:02043-1 1 CVE
Security update for libblockdev
This update for libblockdev fixes the following issues: - CVE-2025-6019: Suppress privilege escalation during xfs fs resize (bsc#1243285).
first Jun 20, 2025 -
High max 7.5SUSE-SU-2025:02040-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).
first Jun 20, 2025 -
High max 7.5SUSE-SU-2025:02039-1 3 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.19.2: - CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218). - CVE-2025-23167: improper HTTP header block termination in llhttp (bsc#1243220)…
first Jun 20, 2025 -
High max 8.6SUSE-SU-2025:02020-1 10 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed stack-buffer overflow in vorbis_handle_identification_packet (bnc#1234415) - CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool (bnc#123445…
first Jun 19, 2025 -
High max 7.8SUSE-SU-2025:02005-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 18, 2025 -
High max 7.8SUSE-SU-2025:02002-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: - CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 18, 2025 -
High max 8.8SUSE-SU-2025:01961-1 24 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2023-4692: nfs: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (bsc#1215935). - CVE-2023-4693: nfs: out-of-bounds read at fs/ntfs.c (bsc#1215936). - CVE-2024-45774: heap overflows i…
first Jun 16, 2025 -
High max 7.8SUSE-SU-2025:01948-1 3 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…
first Jun 13, 2025 -
High max 8.1SUSE-SU-2025:01946-1 8 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.11 (MFSA 2025-46, bsc#1243353): - CVE-2025-5262: Double-free in libvpx encoder (bmo#1962421) - CVE-2025-5263: Error handling for script execution was incorrectly …
first Jun 13, 2025 -
High max 7.8SUSE-SU-2025:01922-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow…
first Jun 12, 2025 -
High max 7.8SUSE-SU-2025:01893-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_94 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-aft…
first Jun 11, 2025 -
High max 7.8SUSE-SU-2025:01892-1 2 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_185 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow …
first Jun 11, 2025 -
High max 7.4SUSE-SU-2025:01788-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 45. Security issues fixed: - Oracle April 15 2025 CPU (bsc#1242208) * CVE-2025-21587: unauthorized access, deletion and modification of critical data via …
first May 31, 2025