6,765 results · Clear filters · Feed
-
Medium max 6.1SUSE-SU-2025:3910-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-43718: fixed uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files (bsc#1250908) - CVE-2025-52885: improved pointer handling that could have led to …
first Nov 2, 2025 -
Medium max 5.5SUSE-SU-2025:3875-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979) - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
first Oct 30, 2025 -
Medium max 5.9SUSE-SU-2025:3844-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
first Oct 28, 2025 -
Medium max 6.7SUSE-SU-2025:3809-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2025-50200: prevented logging of Basic Auth header from HTTP requests (bsc#1245105) - fixed a bad logrotate configuration that allowed escalation from rabbitmq to root, /var/log/rabbitmq owners…
first Oct 27, 2025 -
Medium max 5.9SUSE-SU-2025:3729-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5 as very old protocol supported quite a number of ciphers tha…
first Oct 22, 2025 -
Medium max 5.3SUSE-SU-2025:2990-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2025-7700: Fixed NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c) (bsc#1246790).
first Nov 5, 2025 -
Medium max 4.0SUSE-SU-2025:21222-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init (bsc#1254132).
first Dec 16, 2025 -
Medium max 5.3SUSE-SU-2025:21221-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.19.1 (bsc#1251649, CVE-2025-58190, bsc#1251442, CVE-2025-47911): * chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 * jsonschema: warn and ignore unresolved URN $ref …
first Dec 16, 2025 -
Medium max 4.3SUSE-SU-2025:21207-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' module (bsc#1251305). - CVE-2025-6075: Fixed the value passed to os.path.expa…
first Dec 9, 2025 -
Medium max 4.6SUSE-SU-2025:21206-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757).
first Dec 9, 2025 -
Medium max 4.0SUSE-SU-2025:21202-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init (bsc#1254132).
first Dec 9, 2025 -
Medium max 5.6SUSE-SU-2025:21197-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 (a problem related to LTO vs fortran COMMON blocks). - Do not enable '-z gcs=implicit' on aarch64 for old codestr…
first Dec 12, 2025 -
Medium max 4.4SUSE-SU-2025:21158-1 2 CVEs
Security update for himmelblau
This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: * CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation (bsc#1250687) * deps(rust): bump the all-cargo-updates group * CVE-2025-58…
first Nov 27, 2025 -
Medium max 5.5SUSE-SU-2025:21150-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots (bsc#1253703) - CVE-2025-12748: Fixed Denial of service in XML parsing (bsc#1253278) Other fixes: - spec: Adjust dbus dependency…
first Nov 27, 2025 -
Medium max 5.3SUSE-SU-2025:21137-1 2 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960). - CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).
first Nov 20, 2025 -
Medium max 5.5SUSE-SU-2025:21082-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots (bsc#1253703) - CVE-2025-12748: Fixed Denial of service in XML parsing (bsc#1253278) Other fixes: - spec: Adjust dbus dependency…
first Nov 27, 2025 -
Medium max 5.7SUSE-SU-2025:21065-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2025-11411: Fixed promiscuous records leading to domain hijacking (bsc#1252525)
first Nov 26, 2025 -
Medium max 5.7SUSE-SU-2025:21050-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2025-11411: Fixed promiscuous records leading to domain hijacking (bsc#1252525)
first Nov 20, 2025 -
Medium max 5.3SUSE-SU-2025:21043-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.19.1 (bsc#1251649, CVE-2025-58190, bsc#1251442, CVE-2025-47911): * chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 * jsonschema: warn and ignore unresolved URN $ref …
first Nov 14, 2025 -
Medium max 5.5SUSE-SU-2025:21008-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: Changes in libxslt: - CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979) - CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc…
first Nov 19, 2025 -
Medium max 4.7SUSE-SU-2025:20894-1 2 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange (KEX) process (bsc#1246974) - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange (bsc#1249…
first Oct 20, 2025 -
Medium max 5.3SUSE-SU-2025:20856-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed (bsc#1244925)
first Oct 14, 2025 -
Medium max 6.2SUSE-SU-2025:20754-1 2 CVEs
Security update for aide
This update for aide fixes the following issues: - CVE-2025-54389: Fixed improper output neutralization (bsc#1247884) - CVE-2025-54409: Fixed null pointer dereference after reading incorrectly encoded xattr attributes from database (bsc#1247885)
first Sep 22, 2025 -
Medium max 4.7SUSE-SU-2025:20750-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-10041: Fixed hashed password leak (bsc#1232234)
first Sep 17, 2025 -
Medium max 5.1SUSE-SU-2025:20717-1 3 CVEs
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update vendored crate slab to version 0.4.11 * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function leading to undefined behavior or potential crash due to out-of-bounds access (b…
first Sep 16, 2025 -
Medium max 5.1SUSE-SU-2025:20716-1 2 CVEs
Security update for sevctl
This update for sevctl fixes the following issues: - CVE-2025-3416: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch (bsc#1242618) - CVE-2024-12224: idna: Fixed Punycode labels not producing any non-ASCII when decode (bsc#1243860)
first Sep 12, 2025 -
Medium max 4.3SUSE-SU-2025:20663-1 1 CVE
Security update for jbigkit
This update for jbigkit fixes the following issues: - CVE-2022-1210: Malicious file leads to a denial of service in TIFF File Handler (bsc#1198146).
first Aug 29, 2025 -
Medium max 6.7SUSE-SU-2025:20662-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: - CVE-2025-7519: Fixed that a XML policy file with a large number of nested elements may lead to out-of-bounds write (bsc#1246472).
first Aug 29, 2025 -
Medium max 4.4SUSE-SU-2025:20660-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issues: - CVE-2025-5278: Sort with key character offsets of SIZE_MAX, could induce a read of 1 byte before an allocated heap buffer (bsc#1243767).
first Aug 28, 2025 -
Medium max 6.2SUSE-SU-2025:20657-1 2 CVEs
Security update for aide
This update for aide fixes the following issues: - CVE-2025-54389: Escape control characters in report and log output (bsc#1247884). - CVE-2025-54409: Fix null pointer dereference after reading incorrectly encoded xattr attributes from database (bsc#1247885).
first Sep 5, 2025 -
Medium max 5.3SUSE-SU-2025:20654-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grub_crypto_memcmp (bsc#1234959).
first Sep 5, 2025 -
Medium max 4.7SUSE-SU-2025:20597-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations (bsc#1247074) The script was introduced more tha…
first Aug 16, 2025 -
Medium max 4.7SUSE-SU-2025:20554-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations (bsc#1247074) The script was introduced more tha…
first Aug 12, 2025 -
Medium max 4.4SUSE-SU-2025:20523-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issues: - CVE-2025-5278: Fixed heap buffer under-read ledaing to a crash or leak sensitive data (bsc#1243767)
first Jul 31, 2025 -
Medium max 4.6SUSE-SU-2025:20464-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
first Jul 3, 2025 -
Medium max 5.9SUSE-SU-2025:20456-1 1 CVE
Security update for perl
This update for perl fixes the following issues: - CVE-2025-40909: Fixed a working directory race condition causing file operations to target unintended paths (bsc#1244079)
first Jul 1, 2025 -
Medium max 5.3SUSE-SU-2025:20417-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 (bsc#1240366)
first Jun 13, 2025 -
Medium max 6.5SUSE-SU-2025:20380-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-47268: Fixed integer overflow in RTT calculation leading to undefined behavior (bsc#1242300)
first Jun 8, 2025 -
Medium max 6.3SUSE-SU-2025:20346-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - Updated to 3.11.12: - gh-131809: Updated bundled libexpat to 2.7.1 - gh-131261: Upgraded to libexpat 2.7.0 - CVE-2025-0938: Fixed functions `urllib.parse.urlsplit` and `urlparse` accepting domain names i…
first May 23, 2025 -
Medium max 6.5SUSE-SU-2025:20325-1 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-10524: Drop support for shorthand URLs (bsc#1233773).
first May 15, 2025