6,765 results · Clear filters · Feed
-
Medium max 5.6SUSE-SU-2025:02316-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471) - CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)
first Jul 15, 2025 -
Medium max 5.6SUSE-SU-2025:02304-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404). - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403). - CVE-2025…
first Jul 14, 2025 -
Medium max 6.5SUSE-SU-2025:02289-2 2 CVEs
Security update for docker
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configurat…
first Jul 16, 2025 -
Medium max 5.3SUSE-SU-2025:02236-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 (bsc#1240366). - Backport mdless cms signing support [jsc#PED-12895]
first Jul 7, 2025 -
Medium max 6.5SUSE-SU-2025:02121-1 1 CVE
Security update for helm
This update for helm fixes the following issues: Update to version 3.18.3: * build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc (dependabot[bot]) * fix: user username password for login 5b9e2f6 (Terry Howe) * Update pkg/registry/transport.go …
first Jun 26, 2025 -
Medium max 7.4SUSE-SU-2025:02042-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-27587: timing side-channel vulnerability in the P-384 implementation when used with ECDSA (bsc#1243459). - CVE-2024-12797: Fixed that RFC7250 handshakes with unauthenticated servers don't abort …
first Jun 20, 2025 -
Medium max 5.9SUSE-SU-2025:02038-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-4516: CPython DecodeError Handling Vulnerability (bsc#1243273) Other fixes: - Add python36-* provides/obsoletes to enable SLE-12 -> SLE-15 migration (bsc#1233012) - Update vendored ipaddress modul…
first Jun 20, 2025 -
Medium max 5.3SUSE-SU-2025:01998-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-47081: fixed netrc credential leak (bsc#1244039).
first Jun 18, 2025 -
Medium max 5.9SUSE-SU-2025:01786-2 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
first Aug 11, 2025 -
Medium max 4.3SUSE-SU-2025:01638-2 1 CVE
Security update for openssh
This update for openssh fixes the following issue: Security fixes: - CVE-2025-32728: Fixed logic error in DisableForwarding option (bsc#1241012) Other fixes: - Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2 due to gssapi proposal not being cor…
first Jun 6, 2025 -
Medium max 6.1SUSE-SU-2025:01548-1 1 CVE
Security update for rabbitmq-server313
This update for rabbitmq-server313 fixes the following issues: - CVE-2025-30219: incorrectly escaped virtual hostname present in error message could lead to XSS attack. (bsc#1240071) Non-security fixes: - Require rabbitmq-server313-plugins rather then rabbitm…
first Jun 11, 2025 -
Medium max 4.7SUSE-SU-2025:01511-1 1 CVE
Security update for apparmor
This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
first May 29, 2025 -
Medium max 5.3SUSE-SU-2025:00764-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).
first Jun 6, 2025 -
Medium max 4.0SUSE-SU-2025:4346-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)
first Dec 10, 2025 -
Medium max 4.3SUSE-SU-2025:4258-1 2 CVEs
Security update for python312
This update for python312 fixes the following issues: Update to 3.12.12: - CVE-2025-6075: Fixed quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not checked…
first Nov 26, 2025 -
Medium max 5.9SUSE-SU-2025:3942-1 3 CVEs
Security update for qatengine, qatlib
This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: * bsc#1233363 (CVE-2024-28885) * bsc#1233365 (CVE-2024-31074) * bsc#1233366 (CVE-2024-33617) Update to 1.7.0: * ip…
first Nov 5, 2025 -
Medium max 5.9SUSE-SU-2025:3867-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
first Oct 30, 2025 -
Medium max 6.5SUSE-SU-2025:3842-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2025-62706: fixed a denial of service condition (bsc#1252504, gh#authlib/authlib@e0863d512931)
first Oct 28, 2025 -
Medium max 4.6SUSE-SU-2025:21198-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757).
first Dec 9, 2025 -
Medium max 4.3SUSE-SU-2025:21199-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' module (bsc#1251305). - CVE-2025-6075: Fixed the value passed to os.path.expa…
first Dec 9, 2025 -
Medium max 5.6SUSE-SU-2025:21195-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 (a problem related to LTO vs fortran COMMON blocks). - Do not enable '-z gcs=implicit' on aarch64 for old codestr…
first Dec 12, 2025 -
Medium max 6.1SUSE-SU-2025:21132-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized (bsc#1251940)
first Nov 20, 2025 -
Medium max 6.6SUSE-SU-2025:21016-1 1 CVE
Security update for ongres-scram
This update for ongres-scram fixes the following issues: - CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399)
first Nov 19, 2025 -
Medium max 5.5SUSE-SU-2025:20897-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979) - CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc#1250553)
first Oct 23, 2025 -
Medium max 6.9SUSE-SU-2025:20857-1 4 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2025-53906: malicious zip archive may cause a path traversal (bsc#1246602) - CVE-2025-53905: malicious tar archive may cause a path traversal (bsc#1246604) - CVE-2025-55157: use-after-free in internal tupl…
first Oct 14, 2025 -
Medium max 4.7SUSE-SU-2025:20847-1 2 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange (KEX) process (bsc#1246974) - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange (bsc#1249…
first Oct 14, 2025 -
Medium max 5.1SUSE-SU-2025:20783-1 2 CVEs
Security update for sevctl
This update for sevctl fixes the following issues: - CVE-2025-3416: openssl: Fixed Use-After-Free in Md::fetch and Cipher::fetch (bsc#1242618) - CVE-2024-12224: idna: Fixed Punycode improper validation (bsc#1243860)
first Sep 17, 2025 -
Medium max 6.6SUSE-SU-2025:20747-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fixed stack buffer overflow in parse_hex, proc_gen_fmt, ax25 and netrom (bsc#1248687) - CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks (bsc#1243581)
first Sep 16, 2025 -
Medium max 5.1SUSE-SU-2025:20743-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Update to docker-buildx v0.28.0. See upstream changelog: <https://github.com/docker/buildx/releases/tag/v0.28.0> Update to Docker 28.4.0-ce. See upstream changelog: <https://docs.docker.com/engine/release-not…
first Sep 10, 2025 -
Medium max 6.6SUSE-SU-2025:20566-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Provide more readable error for interface name size checking (bsc#1243581) - Perform bound checks when parsing interface labels in /proc/net/dev (bsc#1243581, bsc#1246608. CVE-2025-46836)
first Aug 21, 2025 -
Medium max 5.3SUSE-SU-2025:20531-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - Avoid problems with certificate caching in sslcontext. (bsc#1246104, gh#psf/requests#6767) Update to 2.32.4: * CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment …
first Jul 24, 2025 -
Medium max 5.6SUSE-SU-2025:20530-1 1 CVE
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
first Aug 1, 2025 -
Medium max 5.9SUSE-SU-2025:20490-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: Fixed timing based side-channel in RSA implementation (bsc#1221107)
first Jul 11, 2025 -
Medium max 4.1SUSE-SU-2025:20468-1 1 CVE
Security update for stalld
This update for stalld fixes the following issues: Update to 1.19.8. Check https://gitlab.com/rt-linux-tools/stalld/-/releases for the full list of changes. Changes since 1.19.6: * Address CVE-2024-54159, which is a DoS issue with the way throttlectl.sh uses …
first Jul 4, 2025 -
Medium max 5.6SUSE-SU-2025:20395-1 2 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to release 3.49.1: * Improve portability of makefiles and configure scripts. * CVE-2025-29087: Fixed Integer Overflow in SQLite concat Function (bsc#1241020) * CVE-2025-29088: Fixed integer overflow…
first Jun 10, 2025 -
Medium max 5.3SUSE-SU-2025:20359-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: Update to 1.22.0: - CVE-2024-8508: Fixed unbounded name compression that could have led to a denial of service (bsc#1231284).
first May 27, 2025 -
Medium max 5.3SUSE-SU-2025:20308-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS (bsc#1233420) - Drop rcFOO symlinks (jsc#PED-266).
first May 12, 2025 -
Medium max 5.3SUSE-SU-2025:20157-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: Fixed inefficient DER decoding in libtasn1 which could lead to a remote denial-of-service (bsc#1236974).
first Mar 24, 2025 -
Medium max 5.4SUSE-SU-2025:20117-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template (bsc#1234808) - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method (bsc#123…
first Feb 3, 2025 -
Medium max 5.9SUSE-SU-2025:20086-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2024-50602: Fixed possible denial-of-service vulnerability inside XML_ResumeParser (bsc#1232579).
first Feb 3, 2025