898 results · Clear filters · Feed
-
Low max 3.7SUSE-SU-2025:20407-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242631)
first Jun 13, 2025 -
Low max 3.7SUSE-SU-2025:20352-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issues: - CVE-2025-3416: s390-tools: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242622) - Amended the .spec file - Updated the '_service' file - Removed the obsolete …
first May 23, 2025 -
Low max 3.6SUSE-SU-2025:20335-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.2.6. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.2.6 - CVE-2024-45310: Fixed runc can be tricked into creating empty files/directories on host…
first May 21, 2025 -
Low max 3.3SUSE-SU-2025:20304-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - Updated to version 2.40.4: * agetty: Prevent cursor escape (bsc#1194818) * chcpu(8): Document CPU deconfiguring behavior * fdisk: SGI fixes * hardlink: fix memory corruption * hardlink.1 directory|file …
first May 8, 2025 -
Low max 3.7SUSE-SU-2025:03091-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling in libsoup (bsc#1243314).
first Sep 5, 2025 -
Low max 2.3SUSE-SU-2025:03082-1 1 CVE
Security update for python-maturin
This update for python-maturin fixes the following issues: - CVE-2025-58160: terminal escape injection via ANSI sequences from untrusted input (bsc#1249011).
first Sep 5, 2025 -
Low max 1.7SUSE-SU-2025:03057-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2025-53643: Fixed request smuggling due to incorrect parsing of chunked trailer section (bsc#1246517)
first Sep 3, 2025 -
Low max 3.3SUSE-SU-2025:02976-1 1 CVE
Security update for cmake3
This update for cmake3 fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation (bsc#1248461)
first Aug 25, 2025 -
Low max 3.7SUSE-SU-2025:01631-1 1 CVE
Security update for s390-tools
This update for s390-tools rebuilds the existing package with the new 4k RSA secure boot key. Security issues fixed: - CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622) Other issues: - Added the new IBM z1…
first May 21, 2025 -
Low max 2.1SUSE-SU-2025:3945-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-3154: Fixed out-of-bounds array write due to invalid VerticesPerRow (bsc#1240687).
first Nov 5, 2025 -
Low max 2.7SUSE-SU-2025:20465-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - gpg: Allow the use of an ADSK subkey as ADSK subkey. (bsc#1239119 CVE-2025-30258) - Don't install expired sks certificate [bsc#1243069]
first Jul 4, 2025 -
Low max 2.7SUSE-SU-2025:20444-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: Fixed a verification DoS due to a malicious subkey in the keyring. (bsc#1239119)
first Jun 23, 2025 -
Low max 3.7SUSE-SU-2025:20318-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897).
first May 12, 2025 -
Low max 2.7SUSE-SU-2025:20209-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: Fixed DoS due to a malicious subkey in the keyring (bsc#1239119)
first Apr 29, 2025 -
Low max 2.9SUSE-SU-2025:1488-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659) - CVE-2025-46393: mishandling of packet_size leads to rendering of channels in arbitrar…
first May 6, 2025 -
Low max 3.3SUSE-SU-2025:03346-1 3 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330). - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582). - CVE-2025-8961: segmentation fault via main …
first Sep 24, 2025 -
Low max 1.7SUSE-SU-2025:03201-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2025-53643: request smuggling vulnerability due to incorrect parsing trailer sections of an HTTP request (bsc#1246517).
first Sep 12, 2025 -
Low max 3.7SUSE-SU-2025:02276-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing (bsc#1243314).
first Jul 10, 2025 -
Low max 3.6SUSE-SU-2025:02198-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - CVE-2024-45310: Fixed unintentional creation of empty files/directories on host (bsc#1230092) Other fixes: - Update to runc v1.2.6.
first Jul 2, 2025 -
Low max 3.7SUSE-SU-2025:01807-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: Security fixes: - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666) Other fixes: - Enable memory accounting as SUSE disables it by default (bsc#1241016). -…
first Jun 3, 2025 -
Low max 3.7SUSE-SU-2025:01806-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: Security fixes: - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242666) Other fixes: - Enable memory accounting as SUSE disables it by default (bsc#1241016). -…
first Jun 3, 2025 -
Low max 3.8SUSE-SU-2025:01551-1 1 CVE
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.3 (bsc#1236217): Security fixes: - CVE-2025-22873: Fixed os.Root permits access to parent directory (bsc#1242715) Changelog: * go#73556 go#73555 security: fix CVE-2025-22873 os: Root permits …
first May 29, 2025 -
Low max 2.1SUSE-RU-2025:20362-1 2 CVEs
Recommended update for git
This update for git fixes the following issues: - CVE-2024-50349: passwords for trusted sites could be sent to untrusted sites (bsc#1235600) - CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601)
first May 28, 2025 -
Low max 2.7SUSE-RU-2025:20460-1 1 CVE
Recommended update for gpg2
This update for gpg2 fixes the following issues: This reverts the CVE-2025-30258 fix, as it changed behaviour when using expired keys.
first Jul 1, 2025 -
Low max 3.7SUSE-SU-2025:20474-1 1 CVE
Security update for afterburn
This update for afterburn fixes the following issues: - Update to version 5.8.2: * cargo: Afterburn release 5.8.2 * docs/release-notes: update for release 5.8.2 * cargo: update dependencies * packit: add initial support - Update to version 5.7.0: * build(deps…
first Jul 10, 2025 -
Low max 2.7SUSE-SU-2025:20472-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119, bsc#1236931]] * gpg: Fix regression for the recent malicious subkey DoS fix. * gpg: Fix another regression due to…
first Jul 8, 2025 -
Low max 3.7SUSE-SU-2025:20463-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242631)
first Jul 2, 2025 -
Low max 2.7SUSE-SU-2025:20454-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: * Fix regression for the recent malicious subkey DoS fix in CVE-2025-30258. [bsc#1236931, bsc#1239119, CVE-2025-30258]
first Jun 30, 2025 -
Low max 3.3SUSE-SU-2025:20345-1 1 CVE
Security update for augeas
This update for augeas fixes the following issues: - CVE-2025-2588: Fixed check for NULL pointers when calling re_case_expand in function fa_expand_nocase (bsc#1239909)
first May 23, 2025 -
Low max 2.5SUSE-SU-2025:20180-1 1 CVE
Security update for procps
This update for procps fixes the following issues: - Fixed regression introduced with the CVE-2023-4016 fix. The ps command segfaults when pid argument has a leading space (bsc#1236842).
first Apr 8, 2025 -
Low max 3.3SUSE-SU-2025:20003-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: Security issue fixed: - CVE-2024-28085: Properly neutralize escape sequences in wall to avoid potential account takeover. (bsc#1221831) Non-security issues fixed: - Fix hang of lscpu -e (bsc#1225598) - ls…
first Feb 3, 2025 -
Low max 3.3SUSE-SU-2025:03348-1 4 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330). - CVE-2024-13978: null pointer dereference in component fax2ps (bsc#1247581) - CVE-2025-8534: null pointer dereference in func…
first Sep 24, 2025 -
Low max 3.3SUSE-SU-2025:03345-1 3 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330). - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582). - CVE-2025-8961: segmentation fault via main …
first Sep 24, 2025 -
Low max 3.2SUSE-SU-2025:03077-1 1 CVE
Security update for rav1e
This update for rav1e fixes the following issues: - CVE-2024-58266: shlex: Fixed certain bytes allowed to appear unquoted and unescaped in command arguments (bsc#1247207)
first Sep 4, 2025 -
Low max 2.9SUSE-SU-2025:02843-1 1 CVE
Security update for cairo
This update for cairo fixes the following issues: - CVE-2025-50422: NULL pointer access in `active_edges_to_traps()` can lead to crash in Poppler (bsc#1247589).
first Aug 18, 2025 -
Low max 3.7SUSE-SU-2025:02277-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing (bsc#1243314).
first Jul 10, 2025 -
Low max 2.7SUSE-SU-2025:02259-1 1 CVE
Recommended update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: Fixed DoS due to a malicious subkey in the keyring (bsc#1239119). Other bugfixes: - Do not install expired sks certificate (bsc#1243069). - gpg hangs when importing a key (bsc#1236931).
first Jul 9, 2025 -
Low max 3.7SUSE-SU-2025:01619-1 1 CVE
Security update for s390-tools
This update for s390-tools rebuilds the existing package with the new 4k RSA secure boot key. Security issues fixed: - CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622) Other issues: - Added the new IBM z1…
first May 21, 2025 -
Low max 3.7SUSE-SU-2025:20365-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issues: * Revendored vendor.tar.zst (CVE-2025-3416: Fixed use-after-free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242622) * Added the new IBM z17 (9175) processor type The package is built with …
first May 23, 2025 -
Low max 2.1SUSE-SU-2025:20197-1 2 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-50349: Passwords for trusted sites could be sent to untrusted sites (bsc#1235600). - CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601).
first Apr 22, 2025