6,765 results · Clear filters · Feed
-
Medium max 4.7SUSE-SU-2025:20405-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - coredump: use %d in kernel core pattern (CVE-2025-4598) - Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific) - umount: do not move busy network mounts (bsc#1236…
first Jun 12, 2025 -
Medium max 5.6SUSE-SU-2025:20364-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed out-of-bounds read when parsing text via the Python API (bsc#1241551). - CVE-2025-32415: Fixed heap-based buffer under-read via crafted XML documents (bsc#1241453).
first May 28, 2025 -
Medium max 5.3SUSE-SU-2025:20275-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: Fixed potential DoS in handling of numerous SEQUENCE OF or SET OF elements (bsc#1236878)
first Apr 22, 2025 -
Medium max 6.8SUSE-SU-2025:20226-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040) - CVE-2025-26466: Fixed a DoS attack against OpenSSH's client and server (bsc#1237…
first Feb 26, 2025 -
Medium max 5.3SUSE-SU-2025:20171-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: Fixed potential DoS in handling of numerous SEQUENCE OF or SET OF elements (bsc#1236878).
first Apr 1, 2025 -
Medium max 6.2SUSE-SU-2025:20135-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). Other fixes: - Fix underallocation of abort_msg_s struct - Correctly determine livepatching support - Remove nss-systemd from defa…
first Mar 5, 2025 -
Medium max 5.6SUSE-SU-2025:20094-1 1 CVE
Security update for python-requests
This update for python-requests contains the following fixes: - Add patch to fix to inject the default CA bundles if they are not specified. (bsc#1226321, bsc#1231500) - Remove Requires on python-py, it should have been removed earlier. - update to 2.32.3: * …
first Feb 3, 2025 -
Medium max 5.7SUSE-SU-2025:20071-1 1 CVE
Security update for sevctl
This update for sevctl fixes the following issues: Security issue fixed: - CVE-2023-50711: Fixed out of bounds memory accesses in a vendored dependency (bsc#1218502) Non-security issue fixed: - Update vendored dependencies and re-enable cargo update obs servi…
first Feb 3, 2025 -
Medium max 6.5SUSE-SU-2025:20085-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: - CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could have let to a denial-of-service attack (bsc#1231698).
first Feb 3, 2025 -
Medium max 4.4SUSE-SU-2025:20059-1 2 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2024-8006: Fixed NULL pointer dereference in pcap_findalldevs_ex() (bsc#1230034) - CVE-2023-7256: Fixed double free via addrinfo in sock_initaddress() (bsc#1230020)
first Feb 3, 2025 -
Medium max 5.4SUSE-SU-2025:20035-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-34064, CVE-2024-22195: HTML attribute injection when passing user input as keys to xmlattr filter (bsc#1223980, bsc#1218722)
first Feb 3, 2025 -
Medium max 6.5SUSE-SU-2025:20030-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - update to NSS 3.101.2 - ChaChaXor to return after the function - update to NSS 3.101.1 - missing sqlite header. - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME. - update to NSS 3.101 - add di…
first Feb 3, 2025 -
Medium max 4.7SUSE-SU-2025:1549-1 1 CVE
Security update for apparmor
This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
first May 14, 2025 -
Medium max 6.1SUSE-SU-2025:1548-1 1 CVE
Security update for rabbitmq-server313
This update for rabbitmq-server313 fixes the following issues: - CVE-2025-30219: incorrectly escaped virtual hostname present in error message could lead to XSS attack. (bsc#1240071) Non-security fixes: - Require rabbitmq-server313-plugins rather then rabbitm…
first May 14, 2025 -
Medium max 4.0SUSE-SU-2025:03607-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow (bsc#1250627)
first Oct 15, 2025 -
Medium max 4.0SUSE-SU-2025:03606-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow (bsc#1250627)
first Oct 15, 2025 -
Medium max 5.4SUSE-SU-2025:03525-1 1 CVE
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.1, released 2025-09-03 (bsc#1244485). Security issues fixed: - CVE-2025-47910: net/http: `CrossOriginProtection` insecure bypass patterns not limited to exact matches (bsc#12491…
first Oct 10, 2025 -
Medium max 5.5SUSE-SU-2025:03271-2 3 CVEs
Security update for busybox, busybox-links
This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 (jsc#PED-13039): - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580) - CVE-2023-42364: Fixed use-after-free in…
first Sep 23, 2025 -
Medium max 5.1SUSE-SU-2025:03307-1 2 CVEs
Security update for sevctl
This update for sevctl fixes the following issues: - CVE-2024-12224: idna: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243860) - CVE-2025-3416: openssl: Fixed use-after-free in Md::fetch and Cipher::fetch (bsc#1242618)
first Sep 23, 2025 -
Medium max 5.4SUSE-SU-2025:03200-1 1 CVE
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.1, released 2025-09-03 (bsc#1244485). Security issues fixed: - CVE-2025-47910: net/http: `CrossOriginProtection` insecure bypass patterns not limited to exact matches (bsc#1249141). Other iss…
first Sep 12, 2025 -
Medium max 6.5SUSE-SU-2025:03088-1 1 CVE
Security update for perl-Authen-SASL, perl-Crypt-URandom
This update for perl-Authen-SASL, perl-Crypt-URandom fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: insecurely generated client nonce (bsc#1246623) Changes in perl-Crypt-URandom: Shipped in version 0.540.0 (0.54).
first Sep 5, 2025 -
Medium max 6.5SUSE-SU-2025:03087-1 1 CVE
Security update for perl-Authen-SASL, perl-Crypt-URandom
This update for perl-Authen-SASL, perl-Crypt-URandom fixes the following issues: Changes in perl-Authen-SASL: - CVE-2025-40918: Fixed insecurely generated client nonce (bsc#1246623) Changes in perl-Crypt-URandom: - Included 0.540.0 for use by perl-Authen-SASL…
first Sep 5, 2025 -
Medium max 6.3SUSE-SU-2025:03051-1 1 CVE
Security update for python-eventlet
This update for python-eventlet fixes the following issues: - CVE-2025-58068: improper handling of HTTP trailer sections in WSGI parser leads to HTTP request smuggling (bsc#1248994).
first Sep 2, 2025 -
Medium max 6.0SUSE-SU-2025:03025-1 1 CVE
Security update for javamail
This update for javamail fixes the following issues: - Update to version 1.6.2 - CVE-2025-7962: Fixed an improper neutralization of \r and \n UTF-8 characters can lead to SMTP injection (bsc#1246873)
first Aug 29, 2025 -
Medium max 5.1SUSE-SU-2025:02962-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update slab to version 0.4.11: * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function (bsc#1248006) - Update to version 0.2.8+12: * build(deps): bump actions/checkout from 4 to 5 …
first Aug 22, 2025 -
Medium max 4.5SUSE-SU-2025:02817-1 2 CVEs
Security update for libavif
This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. (bsc#1243270) - CVE-2025-48174: Fixed an integer overflow and re…
first Aug 15, 2025 -
Medium max 4.3SUSE-SU-2025:02814-2 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote denial of service via YAML manifest (bsc#1225905)
first Sep 4, 2025 -
Medium max 4.3SUSE-SU-2025:02814-1 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote denial of service via YAML manifest (bsc#1225905)
first Aug 15, 2025 -
Medium max 5.3SUSE-SU-2025:02813-1 1 CVE
Recommended update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959) Other fixes: - Fix test -f and -s do not work properly over the network files served via tftp …
first Aug 15, 2025 -
Medium max 6.5SUSE-SU-2025:02797-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-48964: Fixed integer overflow in ping statistics via zero timestamp (bsc#1243772). Other bugfixes: - Fixed ping on s390x that printed invalid ttl (bsc#1243284).
first Aug 14, 2025 -
Medium max 5.6SUSE-SU-2025:02796-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404). - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403). - CVE-2025…
first Aug 14, 2025 -
Medium max 6.5SUSE-SU-2025:02791-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
first Aug 13, 2025 -
Medium max 6.5SUSE-SU-2025:02789-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
first Aug 13, 2025 -
Medium max 4.3SUSE-SU-2025:02597-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705).
first Aug 1, 2025 -
Medium max 6.5SUSE-SU-2025:02583-1 3 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing …
first Jul 31, 2025 -
Medium max 6.7SUSE-SU-2025:02528-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: - CVE-2025-7519: Fixed a XML policy file with a large number of nested elements that may lead to out-of-bounds write. (bsc#1246472)
first Jul 25, 2025 -
Medium max 6.5SUSE-SU-2025:02366-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). O…
first Jul 18, 2025 -
Medium max 6.5SUSE-SU-2025:02352-1 4 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2022-1475: Fixed integer overflow in g729_parse() in llibavcodec/g729_parser.c (bsc#1198898). - CVE-2024-36616: Fixed integer overflow in the component libavformat/westwood_vqa.c (bsc#1234018). - CVE-20…
first Jul 17, 2025 -
Medium max 4.8SUSE-SU-2025:02332-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)
first Jul 16, 2025 -
Medium max 4.8SUSE-SU-2025:02331-1 1 CVE
Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-4748: Fixed improper limitation of a pathname to a restricted directory vulnerability in Erlang OTP (stdlib modules) that allowed absolute path traversal (bsc#1244642)
first Jul 16, 2025