6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2025:20455-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-47081: Fixed incorrect URL processing leading to .netrc credential leak (bsc#1244039)
first Jun 30, 2025 -
Medium max 6.5SUSE-SU-2025:20442-1 2 CVEs
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772) - Fix ping on s390x printing invalid ttl (bsc#1243284) - CVE-2025-47268: Fixed integer overflow in RTT calculation…
first Jun 20, 2025 -
Medium max 5.6SUSE-SU-2025:20333-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed out-of-bounds read when parsing text via the Python API (bsc#1241551) - CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read (bsc#1241453)
first May 21, 2025 -
Medium max 5.6SUSE-SU-2025:20323-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to release 3.49.1: * Improve portability of makefiles and configure scripts. * CVE-2025-29087, bsc#1241020: Fix a bug in the concat_ws() function, introduced in version 3.44.0, that could lead to a …
first May 16, 2025 -
Medium max 5.3SUSE-SU-2025:20297-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: Fixed inefficient DER Decoding in libtasn1 which could lead to remote DoS (bsc#1236974).
first Apr 29, 2025 -
Medium max 5.9SUSE-SU-2025:20258-1 1 CVE
Security update for expat
This update for expat fixes the following issues: -CVE-2024-50602: Fixed DoS via XML_ResumeParser (bsc#1232579).
first Mar 31, 2025 -
Medium max 6.7SUSE-SU-2025:20225-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-24531: Fixed regression in version 0.6.12 returning PAM_IGNORE in many situations with possible authentication bypass (bsc#1236314).
first Feb 26, 2025 -
Medium max 6.8SUSE-SU-2025:20160-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040). - CVE-2025-26466: Fixed DoS attack against OpenSSH's client and server (bsc#1237041). Other bugfixes: - Fi…
first Mar 25, 2025 -
Medium max 4.5SUSE-SU-2025:20128-1 8 CVEs
Security update for vim
This update for vim fixes the following issues: vim was updated to 9.1.1101: - CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238) - CVE-2024-43790: Fixed Out of bounds read when performing a search command (bsc#1229685) - CVE-2024-43802: Fixed …
first Feb 25, 2025 -
Medium max 6.2SUSE-SU-2025:20082-1 3 CVEs
Security update for Mesa
This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040). - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041). - CVE-2023-45922: Fixed …
first Feb 3, 2025 -
Medium max 4.3SUSE-SU-2025:20072-1 7 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2024-8443: Fixed heap buffer overflow in OpenPGP driver when generating key (bsc#1230364) - CVE-2024-45620: Fixed incorrect handling of the length of buffers or files in pkcs15init (bsc#1230076) - CVE-2…
first Feb 3, 2025 -
Medium max 5.3SUSE-SU-2025:1523-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-32873: Fixed denial-of-service possibility in `strip_tags()` (bsc#1242210)
first May 9, 2025 -
Medium max 6.9SUSE-SU-2025:1492-1 1 CVE
Security update for rubygem-rack-1_6
This update for rubygem-rack-1_6 fixes the following issues: - CVE-2025-27111: Fixed Escape Sequence Injection vulnerability (bsc#1238607)
first May 6, 2025 -
Medium max 5.6SUSE-SU-2025:1435-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551) - CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
first May 2, 2025 -
Medium max 4.3SUSE-SU-2025:1434-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-43903: improper verification of adbe.pkcs7.sha1 signatures allows for signature forgeries. (bsc#1241620)
first May 2, 2025 -
Medium max 5.4SUSE-SU-2025:03524-1 1 CVE
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.1, released 2025-09-03 (bsc#1244485). Security issues fixed: - CVE-2025-47910: net/http: `CrossOriginProtection` insecure bypass patterns not limited to exact matches (bsc#12491…
first Oct 10, 2025 -
Medium max 5.1SUSE-SU-2025:03445-1 2 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2024-12224: idna: acceptance of Punycode labels that do not produce any non-ASCII output may lead to incorrect hostname comparisons and incorrect URL parsing (bsc#1243869). - CVE-2025-3416: openssl: u…
first Oct 1, 2025 -
Medium max 5.5SUSE-SU-2025:03275-1 5 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.11.14. Security issues fixed: - CVE-2025-30693: InnoDB issue allows high privileged attacker with network access to gain unauthorized update, insert or delete access to data and cause re…
first Sep 19, 2025 -
Medium max 4.5SUSE-SU-2025:03237-1 4 CVEs
Security update for libavif
This update for libavif fixes the following issues: Update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. (bsc#1243270) - CVE-2025-48174: Fixed an integer overflow and resu…
first Sep 16, 2025 -
Medium max 5.9SUSE-SU-2025:03227-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5, as a very old protocol, supported quite a number of ciphers…
first Sep 15, 2025 -
Medium max 5.5SUSE-SU-2025:03205-1 3 CVEs
Security update for busybox, busybox-links
This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 (jsc#PED-13039): - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580) - CVE-2023-42364: Fixed use-after-free in…
first Sep 12, 2025 -
Medium max 6.9SUSE-SU-2025:03199-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737)
first Sep 12, 2025 -
Medium max 5.4SUSE-SU-2025:03049-1 1 CVE
Security update for python-future
This update for python-future fixes the following issues: - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)
first Sep 2, 2025 -
Medium max 5.3SUSE-SU-2025:02985-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. (bsc#1244925)
first Aug 25, 2025 -
Medium max 6.2SUSE-SU-2025:02972-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2024-36618: Fixed integer overflow iff ULONG_MAX < INT64_MAX (bsc#1234020). - CVE-2025-7700: Fixed potential NULL pointer dereference (bsc#1246790).
first Aug 25, 2025 -
Medium max 5.1SUSE-SU-2025:02914-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. (bsc#1247367)
first Aug 19, 2025 -
Medium max 4.5SUSE-SU-2025:02816-1 2 CVEs
Security update for libavif
This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. (bsc#1243270) - CVE-2025-48174: Fixed an integer overflow and re…
first Aug 15, 2025 -
Medium max 5.3SUSE-SU-2025:02815-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c (bsc#1247108) - CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow() when processing malformed TIFF files (bsc#1247106)
first Aug 15, 2025 -
Medium max 5.3SUSE-SU-2025:02818-1 1 CVE
Security update for apache-commons-lang3
This update for apache-commons-lang3 fixes the following issues: - Update to version 3.18.0 - CVE-2025-48924: Fixed an uncontrolled recursion vulnerability that may lead to a DoS. (bsc#1246397)
first Aug 15, 2025 -
Medium max 5.3SUSE-SU-2025:02770-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: - Updated TIFFMergeFieldInfo() with read_count=write_count=0 for FIELD_IGNORE (bsc#1243503) - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c (bsc#1247108) - CVE-2025-8177: Fixed possible buffer …
first Aug 12, 2025 -
Medium max 6.8SUSE-SU-2025:02762-1 1 CVE
Security update for eclipse-jgit
This update for eclipse-jgit fixes the following issues: - CVE-2025-4949: Fixed the XXE vulnerability in ManifestParser and AmazonS3 class (bsc#1243647).
first Aug 12, 2025 -
Medium max 6.5SUSE-SU-2025:02589-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing …
first Aug 1, 2025 -
Medium max 5.9SUSE-SU-2025:02463-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2025-1220: Fixed null byte termination in hostnames (bsc#1246167) - CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping (bsc#1246146) - CVE-2025-6491: Fixed NULL Pointer Derefer…
first Jul 22, 2025 -
Medium max 6.5SUSE-SU-2025:02432-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
first Jul 21, 2025 -
Medium max 6.5SUSE-SU-2025:02431-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
first Jul 21, 2025 -
Medium max 6.5SUSE-SU-2025:02430-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772).
first Jul 21, 2025 -
Medium max 6.1SUSE-SU-2025:02367-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-6035: Fixed Integer Overflow or Wraparound in GIMP Despeckle Filter (bsc#1244536).
first Jul 18, 2025 -
Medium max 4.4SUSE-SU-2025:02353-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issues: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767)
first Jul 17, 2025 -
Medium max 6.5SUSE-SU-2025:02351-1 1 CVE
Security update for kubernetes1.25
This update for kubernetes1.25 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Jul 17, 2025 -
Medium max 6.5SUSE-SU-2025:02340-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing …
first Jul 17, 2025