6,765 results · Clear filters · Feed
-
Medium max 5.4SUSE-SU-2025:20254-1 3 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed Jinja sandbox breakout through attr filter selecting format method (bsc#1238879) - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template (b…
first Mar 28, 2025 -
Medium max 5.3SUSE-SU-2025:20230-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: * VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) * BUG/MINOR:…
first Mar 5, 2025 -
Medium max 6.2SUSE-SU-2025:20236-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282).
first Mar 7, 2025 -
Medium max 4.6SUSE-SU-2025:20233-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation(bsc#1236136).
first Mar 7, 2025 -
Medium max 6.5SUSE-SU-2025:20158-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (bsc#1237096) - Security updates for INTEL-SA-01166 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01166.html * CVE-20…
first Mar 24, 2025 -
Medium max 6.7SUSE-SU-2025:20130-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-24531: Fixed regression in version 0.6.12 returning PAM_IGNORE in many situations with possible authentication bypass (bsc#1236314).
first Feb 26, 2025 -
Medium max 5.3SUSE-SU-2025:20101-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: Update to version 2.8.11+git0.01c1056a4: - VUL-0: CVE-2024-53008: haproxy: HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) - BUG/MINOR:…
first Feb 3, 2025 -
Medium max 5.5SUSE-SU-2025:20041-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - Import commit 0512d0d1fc0b54a84964281708036a46ab39c153 0512d0d1fc cgroup: Rename effective limits internal table (jsc#PED-5659) 765846b70b cgroup: Restrict effective limits with global resource provision (…
first Feb 3, 2025 -
Medium max 6.2SUSE-SU-2025:20032-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: Security issues fixed: - CVE-2023-38471: Extract host name using avahi_unescape_label (bsc#1216594). - CVE-2023-38469: Reject overly long TXT resource records (bsc#1216598). Non-security issue fixed: - no long…
first Feb 3, 2025 -
Medium max 5.3SUSE-SU-2025:20017-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-28835: certtool crash when verifying a certificate chain (bsc#1221747) - CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746) - jitterentropy: Release the memory of the entro…
first Feb 3, 2025 -
Medium max 6.2SUSE-SU-2025:20012-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2024-4418: rpc: ensure temporary GSource is removed from client event loop (bsc#1223849) Non-security issue fixed: - libxl: Fix domxml-to-native conversion (bsc#1222584) - qemu: F…
first Feb 3, 2025 -
Medium max 6.6SUSE-SU-2025:1540-1 3 CVEs
Security update for transfig
This update for transfig fixes the following issues: - CVE-2025-31164: Fixed heap-buffer overflow in fig2dev create_line_with_spline() function (bsc#1240379) - CVE-2025-31162: Fixed floating point exception in fig2dev get_slope() function (bsc#1240380) - CVE-…
first May 13, 2025 -
Medium max 4.0SUSE-SU-2025:1501-1 1 CVE
Security update for opensaml
This update for opensaml fixes the following issues: - CVE-2025-31335: Fixed parameter manipulation allowing forging signed SAML messages (bsc#1239889)
first May 7, 2025 -
Medium max 4.0SUSE-SU-2025:1500-1 1 CVE
Security update for opensaml
This update for opensaml fixes the following issues: - CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. (bsc#1239889)
first May 7, 2025 -
Medium max 6.1SUSE-SU-2025:1466-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2025-30219: Fixed XSS in an error message in Management UI (bsc#1240071) Other fixes: - Disable parallel make, this causes build failures
first May 6, 2025 -
Medium max 5.5SUSE-SU-2025:03491-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-10911: fixed use-after-free with key data stored cross-RVT (bsc#1250553)
first Oct 8, 2025 -
Medium max 6.7SUSE-SU-2025:03234-1 1 CVE
Security update for rabbitmq-server313
This update for rabbitmq-server313 fixes the following issues: - CVE-2025-50200: Fixed logging of Basic Auth header from an HTTP request (bsc#1245105) - Fixed bad logrotate configuration allowing potential escalation from rabbitmq to root (bsc#1246091)
first Sep 15, 2025 -
Medium max 5.3SUSE-SU-2025:03219-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: - CVE-2025-8835: missing range check in the JPEG-2000 (JPC) Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid `cblkwidth` parameter (bsc#1247904). - CVE-2…
first Sep 15, 2025 -
Medium max 5.3SUSE-SU-2025:4536-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed SSH Agent that could cause a panic due to an out-of-bounds read with non-validated message sizes (bsc#1253993)
first Dec 31, 2025 -
Medium max 6.0SUSE-SU-2025:4523-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-1544: pvrdma: Fixed out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554)
first Dec 26, 2025 -
Medium max 5.3SUSE-SU-2026:0052-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc#1255732). - CVE-2025-15079: libssh key passphrase bypass without agent set (…
first Jan 7, 2026 -
Medium max 6.1SUSE-SU-2026:0366-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666).
first Feb 3, 2026 -
Medium max 4.3SUSE-SU-2026:0330-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2023-39327: Fixed malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227412).
first Jan 28, 2026 -
Medium max 4.6SUSE-SU-2026:0256-1 1 CVE
Security update for openldap2_5
This update for openldap2_5 fixes the following issues: Security fixes: - CVE-2026-22185: Fixed possible crash in malicious DB (bsc#1256297) Other fixes: - Update to version 2.5.20+11: * ITS#10421 mdb_load: check for malicious input
first Jan 22, 2026 -
Medium max 5.5SUSE-SU-2026:0193-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed umask for 'qemu-img' when creating external inactive snapshots (bsc#1253703) - CVE-2025-12748: Fixed check ACLs before parsing the whole domain XML (bsc#1253278)
first Jan 21, 2026 -
Medium max 6.3SUSE-SU-2025:4522-1 3 CVEs
Security update for python39
This update for python39 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docum…
first Dec 26, 2025 -
Medium max 5.3SUSE-SU-2025:4121-1 2 CVEs
Security update for alloy
This update for alloy fixes the following issues: - update to 1.11.3: - CVE-2025-58058: Fixed memory leaks in xz. (bsc#1248960) - CVE-2025-11065: Fixed sensitive Information leak in logs. (bsc#1250621)
first Nov 17, 2025 -
Medium max 6.2SUSE-SU-2025:4104-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-9714: Fixed infinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076) - CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed …
first Nov 14, 2025 -
Medium max 5.9SUSE-SU-2025:3845-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: fixed a denial of service condition (bsc#1251194)
first Oct 28, 2025 -
Medium max 5.5SUSE-SU-2025:3811-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-11626: fixed MONGO dissector infinite loop (bsc#1251933).
first Oct 27, 2025 -
Medium max 5.5SUSE-SU-2025:21031-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: Changes in libxslt: - CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979) - CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc…
first Nov 19, 2025 -
Medium max 5.1SUSE-SU-2025:20921-1 1 CVE
Recommended update of flake-pilot
This update for flake-pilot fixes the following issues: Update version to 3.1.22. - Fixes to use flakes as normal user Running a flake is a container based instance provisioning and startup. Some part of this process requires root permissions for example moun…
first Oct 15, 2025 -
Medium max 5.6SUSE-SU-2025:20751-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47806: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244407). - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403). - CVE-2025-4780…
first Sep 22, 2025 -
Medium max 5.9SUSE-SU-2025:20719-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: Fixed Kerberos RC4-HMAC-MD5 Checksum Vulnerability (bsc#1241219)
first Sep 22, 2025 -
Medium max 6.9SUSE-SU-2025:20696-1 4 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2025-53906: Fixed malicious zip archive causing path traversal (bsc#1246602) - CVE-2025-53905: Fixed malicious tar archive causing path traversal (bsc#1246604) - CVE-2025-55157: Fixed use-after-free in int…
first Sep 11, 2025 -
Medium max 5.1SUSE-SU-2025:20565-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce: * CVE-2025-54388: firewalld reload can make published container ports accessible from remote hosts (bsc#1247367) - Update to docker-buildx v0.26.1.
first Aug 21, 2025 -
Medium max 6.7SUSE-SU-2025:20559-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: - CVE-2025-7519: Fixed that a XML policy file with a large number of nested elements may lead to out-of-bounds write (bsc#1246472)
first Aug 20, 2025 -
Medium max 5.9SUSE-SU-2025:20538-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: Fixed timing based side-channel in RSA implementation (bsc#1221107)
first Jul 31, 2025 -
Medium max 4.3SUSE-SU-2025:20509-1 1 CVE
Security update for jbigkit
This update for jbigkit fixes the following issues: - Updated to version 2.1: * CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146)
first Jul 28, 2025 -
Medium max 4.6SUSE-SU-2025:20459-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - Updated to version 1.7.27: * CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749)
first Jul 1, 2025