6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2025:01999-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-47081: fixed netrc credential leak (bsc#1244039).
first Jun 18, 2025 -
Medium max 6.2SUSE-SU-2025:01811-2 7 CVEs
Security update for gnuplot
This update for gnuplot fixes the following issues: - CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325). - CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326). - CVE-2025-311…
first Jul 16, 2025 -
Medium max 5.9SUSE-SU-2025:01782-2 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.9: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first Aug 11, 2025 -
Medium max 6.5SUSE-SU-2025:01779-2 1 CVE
Security update for iputils
This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300). Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian…
first Jun 6, 2025 -
Medium max 4.9SUSE-SU-2025:01716-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.11.11. - CVE-2025-21490: vulnerability allows high privileged attacker with network access to cause hangs and frequent crashes on affected servers (bsc#1243356).
first May 27, 2025 -
Medium max 6.5SUSE-SU-2025:01651-1 8 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123) - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel…
first May 22, 2025 -
Medium max 5.9SUSE-SU-2025:01615-1 1 CVE
Security update for grub2
This update for grub2 rebuilds the existing package with the new 4k RSA secure boot key for IBM Power and Z. Note: the signing key of x86 / x86_64 and aarch64 architectures are unchanged. Also the following issue were fixed: - CVE-2025-4382: TPM auto-decrypti…
first May 21, 2025 -
Medium max 6.9SUSE-SU-2025:01456-1 3 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020) - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) Other fix…
first May 31, 2025 -
Medium max 6.9SUSE-SU-2025:01455-1 3 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-3277,CVE-2025-29087: Fixed integer overflow in sqlite concat function (bsc#1241020) - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) Other fix…
first Jun 27, 2025 -
Medium max 6.7SUSE-RU-2026:20683-1 1 CVE
Recommended update for shim
This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults c…
first Mar 5, 2026 -
Medium max 6.7SUSE-RU-2026:20056-1 1 CVE
Recommended update for shim
This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults c…
first Jan 1, 2026 -
Medium max 5.3SUSE-RU-2025:4092-1 4 CVEs
Security update for elfutils
This update for elfutils fixes the following issues: - Fixing build/testsuite for more recent glibc and kernels. - Fixing denial of service and general buffer overflow errors (bsc#1237236, bsc#1237240, bsc#1237241, bsc#1237242): - CVE-2025-1376: Fixed denial …
first Nov 24, 2025 -
Medium max 6.9SUSE-SU-2026:20650-1 1 CVE
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257325).
first Mar 3, 2026 -
Medium max 5.1SUSE-SU-2026:20112-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2851> - Update to Docker 28.5.0-ce. See upstream changelog online at <https:…
first Jan 17, 2026 -
Medium max 6.3SUSE-SU-2026:20110-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-1…
first Jan 14, 2026 -
Medium max 6.6SUSE-SU-2025:20825-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - Fixed stack buffer overflow in parse_hex, proc_gen_fmt, ax25 and netrom (bsc#1248687) - Fixed stack overflow in ax25 and netrom (bsc#1248687) - CVE-2025-46836: Fixed stack buffer overflow caused by the a…
first Sep 26, 2025 -
Medium max 6.5SUSE-SU-2025:20665-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-32988: Fixed double-free due to incorrect ownership handling in the export logic of SAN entries containing an otherName (bsc#1246232). - CVE-2025-32989: Fixed heap buffer overread when handling the…
first Aug 29, 2025 -
Medium max 4.8SUSE-SU-2025:20508-1 2 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via function g_string_insert_unichar (bsc#1242844) - CVE-2025-6052: Fixed integer overflow in g_string_maybe_expand() leads to potential buffer ov…
first Jul 24, 2025 -
Medium max 5.6SUSE-SU-2025:20507-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403) - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404) - CVE-2025-4…
first Jul 24, 2025 -
Medium max 5.1SUSE-SU-2025:20491-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - CVE-2024-12224: idna: Fixed improper validation in punycode (bsc#1243861) - Update to version 0.2.7+70: * build(deps): bump wiremock from 0.6.2 to 0.6.3 * build(deps): bump uuid from 1.16.0 to 1.17.0 …
first Jul 11, 2025 -
Medium max 4.8SUSE-SU-2025:20471-1 2 CVEs
Security update for glib2
This update for glib2 fixes the following issues: Security issues: - CVE-2025-4373: Fixed handling gssize parameters (bsc#1242844). - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_dat…
first Jul 7, 2025 -
Medium max 6.5SUSE-SU-2025:20457-1 1 CVE
Security update for helm
This update for helm fixes the following issues: Update to version 3.18.3: * build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc (dependabot[bot]) * fix: user username password for login 5b9e2f6 (Terry Howe) * Update pkg/registry/transport.go …
first Jun 28, 2025 -
Medium max 6.1SUSE-SU-2025:20452-1 1 CVE
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - Updated to 12.5.2: * CVE-2025-22247: Fixed Insecure file handling (bsc#1243106)
first Jun 25, 2025 -
Medium max 6.5SUSE-SU-2025:20410-1 8 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123) - Security updates for INTEL-SA-01153 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html) - CVE-202…
first Jun 16, 2025 -
Medium max 6.1SUSE-SU-2025:20379-1 1 CVE
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - Updated to 12.5.2: * CVE-2025-22247: Fixed insecure file handling (bsc#1243106) - Fixed gcc15 compile time error (bsc#1241938)
first Jun 8, 2025 -
Medium max 4.6SUSE-SU-2025:20216-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - Updated containerd to v1.7.27. - CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749).
first Apr 30, 2025 -
Medium max 5.4SUSE-SU-2025:20156-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879).
first Mar 24, 2025 -
Medium max 5.5SUSE-SU-2025:20892-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979) - CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
first Oct 24, 2025 -
Medium max 5.3SUSE-SU-2025:20126-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - Update to 1.22.0: Features: * Add iter-scrub-ns, iter-scrub-cname and max-global-quota configuration options. * Merge patch to fix for glue that is outside of zone, with `harden-unverified-glue`, from Kart…
first Feb 13, 2025 -
Medium max 5.5SUSE-SU-2025:20124-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: salt: - Revert setting SELinux context for minion service (bsc#1233667) - Removed System V init support - Fix the condition of alternatives for Tumbleweed and Leap 16 - Build all python bindings for all flavors - Make m…
first Feb 13, 2025 -
Medium max 5.3SUSE-SU-2025:20103-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Properly randomize query id of DNS packets (bsc#1233420). Bug fixes: - No longer supply bogus services to callbacks (bsc#1226586). - Tag hardening patches as PATCH-FEATURE-OPENSUSE - Remove d…
first Feb 3, 2025 -
Medium max 6.5SUSE-SU-2025:20097-1 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-10524: Drop support for shorthand URLs (bsc#1233773).
first Feb 3, 2025 -
Medium max 6.5SUSE-SU-2025:20089-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Fixed WiFi authentication bypass (bsc#1219975).
first Feb 3, 2025 -
Medium max 5.9SUSE-SU-2025:20083-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
first Feb 3, 2025 -
Medium max 4.4SUSE-SU-2025:20037-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed issue where proxy-authorization request header was not stripped during cross-origin redirects (bsc#1226469)
first Feb 3, 2025 -
Medium max 5.6SUSE-SU-2025:20034-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - Update to 2.32.2 * To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_conte…
first Feb 3, 2025 -
Medium max 5.2SUSE-SU-2025:20031-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).
first Feb 3, 2025 -
Medium max 4.7SUSE-SU-2025:20018-1 2 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update to version 20240712: * amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics * qcom: add gpu firmwares for x1e80100 chipset (bsc#1219458) * linux-firmware: add firmware for qat_402xx dev…
first Feb 3, 2025 -
Medium max 6.7SUSE-SU-2025:1477-1 1 CVE
Security update for libva
This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: * uncontrolled search path may allow an authenticated user to escalate privilege via local access (CVE-2023-39929, bsc#1224413, jsc#PED-11066) T…
first May 6, 2025 -
Medium max 4.6SUSE-SU-2025:0613-3 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136). Other bugfixes: - Non approved PBKDF parameters wrongly resulting as approved (bsc#1236771).
first May 15, 2025