6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2025:20058-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400) - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially ena…
first Feb 3, 2025 -
Medium max 5.3SUSE-SU-2025:20002-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
first Feb 3, 2025 -
Medium max 5.4SUSE-SU-2025:1004-2 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879)
first Dec 10, 2025 -
Medium max 6.9SUSE-SU-2025:03273-1 1 CVE
Security update for python-h2
This update for python-h2 fixes the following issues: - CVE-2025-57804: Fixed HTTP Request Smuggling due to illegal characters in headers (bsc#1248737)
first Sep 19, 2025 -
Medium max 6.3SUSE-SU-2025:03202-1 1 CVE
Security update for python-eventlet
This update for python-eventlet fixes the following issues: - CVE-2025-58068: improper handling of HTTP trailer sections in WSGI parser leads to HTTP request smuggling (bsc#1248994).
first Sep 12, 2025 -
Medium max 5.4SUSE-SU-2025:03029-1 1 CVE
Security update for python-future
This update for python-future fixes the following issues: - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)
first Aug 29, 2025 -
Medium max 4.7SUSE-SU-2025:02970-2 1 CVE
Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues (bsc#1232234)
first Oct 17, 2025 -
Medium max 4.7SUSE-SU-2025:02970-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues (bsc#1232234)
first Aug 25, 2025 -
Medium max 5.3SUSE-SU-2025:02771-1 2 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c (bsc#1247108) - CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow() when processing malformed TIFF files (bsc#1247106)
first Aug 12, 2025 -
Medium max 5.1SUSE-SU-2025:02768-1 1 CVE
Security update for sccache
This update for sccache fixes the following issues: - Update to version 0.4.2~4: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243868)
first Aug 12, 2025 -
Medium max 5.9SUSE-SU-2025:02752-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Aug 11, 2025 -
Medium max 6.7SUSE-SU-2025:02525-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: - CVE-2025-7519: Fixed a XML policy file with a large number of nested elements that may lead to out-of-bounds write. (bsc#1246472)
first Jul 25, 2025 -
Medium max 5.9SUSE-SU-2025:02473-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2025-1220: Fixed null byte termination in hostnames (bsc#1246167) - CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping (bsc#1246146) - CVE-2025-6491: Fixed NULL Pointer Derefer…
first Jul 23, 2025 -
Medium max 6.5SUSE-SU-2025:02381-1 3 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2024-36618: Fixed integer overflow iff ULONG_MAX < INT64_MAX (bsc#1234020). New CVE references, fixed in previous release: - CVE-2024-36617: avformat/cafdec: dont seek beyond 64bit (bsc#1234019). - CV…
first Jul 18, 2025 -
Medium max 4.8SUSE-SU-2025:02375-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-4373: integer overflow in the `g_string_insert_unichar()` function can lead to buffer underwrite and memory corruption (bsc#1242844).
first Jul 18, 2025 -
Medium max 4.4SUSE-SU-2025:02354-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issues: Security fixes: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767) Other fixes: - ls: avoid triggering automounts (bsc#1221632) - tail: fix tailing sysfs…
first Jul 17, 2025 -
Medium max 6.5SUSE-SU-2025:02350-1 1 CVE
Security update for kubernetes1.28
This update for kubernetes1.28 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Aug 1, 2025 -
Medium max 6.5SUSE-SU-2025:02336-1 1 CVE
Security update for kubernetes1.27
This update for kubernetes1.27 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Jul 16, 2025 -
Medium max 5.4SUSE-SU-2025:02281-1 4 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318…
first Jul 10, 2025 -
Medium max 4.9SUSE-SU-2025:02230-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2025-0620: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session (bsc#1244136). Other bugfixes: - net ad join fails with 'Failed to join domain: failed to create ker…
first Jul 4, 2025 -
Medium max 6.5SUSE-SU-2025:01945-1 1 CVE
Security update for kubernetes-old
This update for kubernetes-old fixes the following issues: - CVE-2025-22872: Fixed golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241781) This update to version 1.31.9 (jsc#PED-1110…
first Jun 13, 2025 -
Medium max 5.9SUSE-SU-2025:01766-2 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.9: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first Jun 4, 2025 -
Medium max 5.9SUSE-RU-2024:1829-1 1 CVE
Recommended update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-python-sdk-acms-open, python-aliyun-python-sdk-actiontrail, python-aliyun-python-sdk-adb, python-aliyun-python-sdk-adcp, python-aliyun-python-sdk-address-purification, python-aliyun-python-sdk-aegis, python-aliyun-python-sdk-afs, python-aliyun-python-sdk-aigen, python-aliyun-python-sdk-aimiaobi, python-aliyun-python-sdk-airec, python-aliyun-python-sdk-airticketopen, python-a
This update for python-aliyun-python-sdk, python-aliyun-python-sdk-aas, python-aliyun-python-sdk-acm, python-aliyun-python-sdk-acms-open, python-aliyun-python-sdk-actiontrail, python-aliyun-python-sdk-adb, python-aliyun-python-sdk-adcp, python-aliyun-python-s…
first May 29, 2024 -
Medium max 5.9SUSE-SU-2025:01654-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 22, 2025 -
Medium max 5.9SUSE-SU-2025:01705-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 26, 2025 -
Medium max 6.5SUSE-SU-2025:01651-2 8 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123) - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel…
first May 29, 2025 -
Medium max 6.5SUSE-SU-2024:1639-1 2 CVEs
Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-
This update for python-argcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-j…
first Jul 1, 2024 -
Medium max 6.1SUSE-SU-2025:01466-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2025-30219: Fixed XSS in an error message in Management UI (bsc#1240071) Other fixes: - Disable parallel make, this causes build failures
first Jun 11, 2025 -
Medium max 6.7SUSE-RU-2026:20004-1 1 CVE
Recommended update for shim
This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults c…
first Dec 30, 2025 -
Medium max 5.6SUSE-SU-2025:20671-1 8 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386). - CVE-2024-8443: Heap buffer overflow in OpenPGP driver when generating key (bsc#1230364). - CVE-2024-45620: Incorr…
first Sep 5, 2025 -
Medium max 6.2SUSE-SU-2025:20664-1 3 CVEs
Security update for Mesa
This update for Mesa fixes the following issues: - CVE-2023-45913: NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040). - CVE-2023-45919: Buffer over-read in glXQueryServerString() (bsc#1222041). - CVE-2023-45922: Segmentation viola…
first Aug 29, 2025 -
Medium max 6.5SUSE-SU-2025:20563-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-32988: Fixed double-free due to incorrect ownership handling (bsc#1246232) - CVE-2025-32989: Fixed heap buffer overread during X.509 certificate parsing (bsc#1246233) - CVE-2025-32990: Fixed 1-byte…
first Aug 20, 2025 -
Medium max 5.3SUSE-SU-2025:20558-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2025-50181: * Pool managers now properly control redirects when retries is passed (GHSA-pq67-6m6q-mj2v, bsc#1244925)
first Aug 14, 2025 -
Medium max 6.5SUSE-SU-2025:20535-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Go 1.24 for builds, to match upstream. - Update to Docker 28.3.2-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2832> - Update to Docker 28.3.1-ce. See upst…
first Jul 29, 2025 -
Medium max 6.5SUSE-SU-2025:20510-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Go 1.24 for builds, to match upstream. - Update to Docker 28.3.2-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2832> - Update to Docker 28.3.1-ce. See upst…
first Jul 28, 2025 -
Medium max 4.3SUSE-SU-2025:20506-1 1 CVE
Security update for jq
This update for jq fixes the following issues: - CVE-2024-23337: Fixed signed integer overflow in jv.c:jvp_array_write (bsc#1243450)
first Jul 24, 2025 -
Medium max 6.5SUSE-SU-2025:20502-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772)
first Jul 21, 2025 -
Medium max 6.5SUSE-SU-2025:20424-1 8 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123): - Security updates for INTEL-SA-01153 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html - CVE-202…
first Jun 16, 2025 -
Medium max 4.7SUSE-SU-2025:20416-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - coredump: use %d in kernel core pattern (CVE-2025-4598) - Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) - umount: do not move busy network mounts (bsc#1236…
first Jun 12, 2025 -
Medium max 5.3SUSE-SU-2025:20406-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-27587: Fixed Minerva side channel vulnerability in P-384 on PPC arch (bsc#1240366) - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
first Jun 13, 2025