12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2025:01726-2 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2025-47287: excessive logging when parsing malformed `multipart/form-data` can lead to a denial-of-service (bsc#1243268).
first Jun 6, 2025 -
High max 8.8SUSE-SU-2025:01724-1 8 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.48.2. Security issues fixed: - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website (bsc#1243282). - CVE-2025-31204: improper memory h…
first May 28, 2025 -
High max 7.7SUSE-SU-2025:01723-1 1 CVE
Security update for python39-setuptools
This update for python39-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 28, 2025 -
High max 8.8SUSE-SU-2025:01720-1 8 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.48.2. Security issues fixed: - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website (bsc#1243282). - CVE-2025-31204: improper memory h…
first May 27, 2025 -
High max 8.8SUSE-SU-2025:01718-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing (bsc#1242809).
first May 27, 2025 -
High max 8.8SUSE-SU-2025:01717-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing (bsc#1242809).
first May 27, 2025 -
High max 7.7SUSE-SU-2025:01715-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 27, 2025 -
High max 7.7SUSE-SU-2025:01704-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 26, 2025 -
High max 8.4SUSE-SU-2025:01655-1 3 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-43882: Fixed ToCToU betwe…
first May 22, 2025 -
High max 8.6SUSE-SU-2025:01627-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865). - CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds write…
first May 21, 2025 -
High max 7.5SUSE-RU-2021:2194-1 1 CVE
Recommended update for the Azure and AWS SDKs
This update for the SLE Public Cloud module provides the following fixes: Azure SDK update: This update for the Azure SDK and CLI adds support for the AHB (Azure Hybrid Benefit). (bsc#1176784, jsc#ECO-3105) AWS SDK update: This update for the AWS SDK updates …
first Jun 28, 2021 -
High max 7.5SUSE-SU-2025:01508-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-2704: Fixed remote DoS due to possible ASSERT() on OpenVPN servers using --tls-crypt-v2 (bsc#1240392)
first Jun 6, 2025 -
High max 8.0SUSE-SU-2025:01326-1 3 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is set (bsc#1239308) - CVE-2023-1907: Fixed an issue which could result in users being authenticat…
first Aug 14, 2025 -
High max 8.1SUSE-SU-2025:00614-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Sep 4, 2025 -
High max 8.6SUSE-SU-2025:00063-1 19 CVEs
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421) - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414) - CVE-2024-47543…
first Jun 24, 2025 -
High max 7.1SUSE-RU-2025:21046-1 1 CVE
Recommended update for afterburn
This update for afterburn fixes the following issues: - Update to version 5.9.0.git21.a73f509: * docs/release-notes: update for release 5.10.0 * cargo: update dependencies * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat * docs/releas…
first Nov 18, 2025 -
High max 7.1SUSE-RU-2025:20961-1 1 CVE
Recommended update for afterburn
This update for afterburn fixes the following issues: - Update to version 5.9.0.git21.a73f509: * docs/release-notes: update for release 5.10.0 * cargo: update dependencies * microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat * docs/releas…
first Oct 27, 2025 -
High max 8.1SUSE-SU-2025:20899-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-9566: Fixed kube play command overwriting host files (bsc#1249154)
first Oct 24, 2025 -
High max 7.5SUSE-SU-2025:20895-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).
first Oct 22, 2025 -
High max 7.5SUSE-SU-2025:20868-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).
first Oct 22, 2025 -
High max 7.8SUSE-SU-2025:4479-1 6 CVEs
Security update 4.3.16.2 for Multi-Linux Manager Server LTS
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16.2 * SUSE Linux Enterprise Server 15 SP6 LTSS channels enabled * CVEs Fixed: CVE-2025-11065, CVE-2025-64751, CCVE-2025-47911, CVE-2025-58190 CVE-2025-62349, CVE-…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4466-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:03343-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown fl…
first Sep 24, 2025 -
High max 7.5SUSE-SU-2026:0015-1 2 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-12765: insufficient checks in the LDAP authentication flow allow a for bypass of TLS certificate validation that can lead to the stealing of bind credentials and the altering of directory respons…
first Jan 5, 2026 -
High max 7.3SUSE-SU-2025:4072-1 2 CVEs
Security update for containerd
This update for containerd fixes the following issues: - Update to containerd v1.7.29 - CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126) - CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the …
first Nov 12, 2025 -
High max 7.8SUSE-SU-2025:21098-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 8.8SUSE-SU-2025:21032-1 7 CVEs
Security update for tiff
This update for tiff fixes the following issues: tiff was updated to 4.7.1: * Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove…
first Nov 19, 2025 -
High max 7.8SUSE-SU-2025:03222-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-38001: net_sched: hfsc: Address reentrant enque…
first Sep 15, 2025 -
High max 7.5openSUSE-SU-2026:10397-1 1 CVE
python311-PyJWT-2.12.1-1.1 on GA media
These are all security issues fixed in the python311-PyJWT-2.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 20, 2026 -
High max 7.5SUSE-SU-2026:0938-1 2 CVEs
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference (bsc#1259455). - CVE-2026-30883: missing bounds check when encoding a PNG image can lead to a heap …
first Mar 20, 2026 -
High max 7.5openSUSE-SU-2026:10393-1 1 CVE
python311-pyasn1-0.6.3-1.1 on GA media
These are all security issues fixed in the python311-pyasn1-0.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2026 -
High max 7.2openSUSE-SU-2026:10392-1 2 CVEs
python311-pyOpenSSL-26.0.0-1.1 on GA media
These are all security issues fixed in the python311-pyOpenSSL-26.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2026 -
High max 7.7SUSE-SU-2026:0933-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).
first Mar 19, 2026 -
High max 7.6SUSE-SU-2026:0932-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). - …
first Mar 19, 2026 -
High max 8.7openSUSE-SU-2026:10389-1 2 CVEs
python311-salt-3006.0-56.1 on GA media
These are all security issues fixed in the python311-salt-3006.0-56.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2026 -
High max 7.2SUSE-SU-2026:0913-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727).
first Mar 18, 2026 -
High max 7.5openSUSE-SU-2026:10390-1 1 CVE
tempo-cli-2.10.3-1.1 on GA media
These are all security issues fixed in the tempo-cli-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2026 -
High max 8.1openSUSE-SU-2026:10386-1 18 CVEs
ImageMagick-7.1.2.17-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2026 -
High max 7.2SUSE-SU-2026:0915-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: Update to LTS branch 2.7 (jsc#PED-14342): - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727). Bug fixes: - Resolve python build…
first Mar 18, 2026 -
High max 7.2SUSE-SU-2026:0914-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` callback (bsc#1258727).
first Mar 18, 2026