6,765 results · Clear filters · Feed
-
Medium max 5.4SUSE-SU-2025:03038-1 1 CVE
Security update for python-future
This update for python-future fixes the following issues: - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)
first Sep 1, 2025 -
Medium max 5.4SUSE-SU-2025:03028-1 1 CVE
Security update for python-future
This update for python-future fixes the following issues: - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)
first Aug 29, 2025 -
Medium max 6.6SUSE-SU-2025:02974-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: - CVE-2025-46836: Fixed absence of bound check that might lead to a stack buffer overflow (bsc#1243581)
first Aug 25, 2025 -
Medium max 4.7SUSE-SU-2025:02971-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - Improve previous CVE-2024-10041 fix which led to CPU performance issues (bsc#1232234)
first Aug 25, 2025 -
Medium max 5.9SUSE-SU-2025:02964-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-8058: Fixed double-free after allocation failure in regcomp. (bsc#1246965)
first Aug 22, 2025 -
Medium max 5.1SUSE-SU-2025:02961-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: - Update slab to version 0.4.11: * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function (bsc#1248006) - Update to version 0.2.8+12: * build(deps): bump actions/checkout from 4 to 5 …
first Aug 22, 2025 -
Medium max 5.6SUSE-SU-2025:02919-1 3 CVEs
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issues: - CVE-2025-47808: Fixed stack buffer overflow in SubRip subtitle parser (bsc#1244404) - CVE-2025-47807: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244403) - CVE-2025…
first Aug 19, 2025 -
Medium max 5.1SUSE-SU-2025:02913-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 28.3.3-ce. - CVE-2025-54388: Fixed a bug where firewalld when reloaded can make published container ports accessible from remote hosts. (bsc#1247367)
first Aug 19, 2025 -
Medium max 6.5SUSE-SU-2025:02790-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
first Aug 13, 2025 -
Medium max 6.5SUSE-SU-2025:02788-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-50420: Fixed Denial of Service in pdfseparate utility (bsc#1247590)
first Aug 13, 2025 -
Medium max 6.5SUSE-SU-2025:02739-2 2 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2025-6442: Fixed read_header HTTP Request Smuggling Vulnerability in WEBrick (bsc#1245254) - CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805)
first Sep 1, 2025 -
Medium max 4.7SUSE-SU-2025:02675-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).
first Aug 4, 2025 -
Medium max 6.5SUSE-SU-2025:02595-1 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299) - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries containing …
first Aug 1, 2025 -
Medium max 5.3SUSE-SU-2025:02544-1 1 CVE
Security update for python-starlette
This update for python-starlette fixes the following issues: - CVE-2025-54121: Correctly parse multi-part form with large files to avoid DoS. (bsc#1246855)
first Jul 29, 2025 -
Medium max 6.7SUSE-SU-2025:02527-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: - CVE-2025-7519: Fixed a XML policy file with a large number of nested elements that may lead to out-of-bounds write. (bsc#1246472)
first Jul 25, 2025 -
Medium max 5.9SUSE-SU-2025:02474-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Version update to 8.2.29: - CVE-2025-1220: Fixed null byte termination in hostnames (bsc#1246167) - CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping (bsc#1246146) - CVE-2025-6491: …
first Jul 23, 2025 -
Medium max 5.9SUSE-SU-2025:02464-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Jul 22, 2025 -
Medium max 5.9SUSE-SU-2025:02462-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Version update to 8.3.23: - CVE-2025-1220: Fixed null byte termination in hostnames (bsc#1246167) - CVE-2025-1735: Fixed pgsql extension does not check for errors during escaping (bsc#1246146) - CVE-2025-6491: …
first Jul 22, 2025 -
Medium max 6.5SUSE-SU-2025:02383-2 1 CVE
Security update for kubernetes1.26
This update for kubernetes1.26 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Aug 14, 2025 -
Medium max 5.3SUSE-SU-2025:02371-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-47081: fixed netrc credential leak (bsc#1244039).
first Jul 18, 2025 -
Medium max 4.3SUSE-SU-2025:02358-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705).
first Jul 17, 2025 -
Medium max 5.5SUSE-SU-2025:02357-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
first Jul 17, 2025 -
Medium max 5.5SUSE-SU-2025:02356-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
first Jul 17, 2025 -
Medium max 6.5SUSE-SU-2025:02350-2 1 CVE
Security update for kubernetes1.28
This update for kubernetes1.28 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Aug 1, 2025 -
Medium max 5.6SUSE-SU-2025:02319-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471) - CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)
first Jul 15, 2025 -
Medium max 5.5SUSE-SU-2025:02318-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
first Jul 15, 2025 -
Medium max 5.5SUSE-SU-2025:02317-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
first Jul 15, 2025 -
Medium max 5.6SUSE-SU-2025:02315-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - Update to Xen 4.20.1 - CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471) - CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)
first Jul 15, 2025 -
Medium max 6.6SUSE-SU-2025:02303-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2025-47183: Fixed out-of-bounds read when parsing mvhd box (bsc#1244406).
first Jul 14, 2025 -
Medium max 5.6SUSE-SU-2025:02302-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404). - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403). - CVE-2025…
first Jul 14, 2025 -
Medium max 5.4SUSE-SU-2025:02279-1 4 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318…
first Jul 10, 2025 -
Medium max 5.4SUSE-SU-2025:02229-1 4 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311). - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4…
first Jul 4, 2025 -
Medium max 6.0SUSE-SU-2025:02186-1 1 CVE
Security update for screen
This update for screen fixes the following issues: Security issues fixed: - CVE-2025-46802: temporary `chmod` of a user's TTY to mode 0666 when attempting to attach to a multi-user session allows for TTY hijacking (bsc#1242269). Other issues fixed: - Use TTY …
first Jul 1, 2025 -
Medium max 5.5SUSE-SU-2025:02088-1 3 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747): - CVE-2024-44244: Processing maliciously crafted web content may lead to an unexpected process crash. - CVE-2024-44296: Processing maliciously crafted web content …
first Jun 24, 2025 -
Medium max 5.3SUSE-SU-2025:01997-1 1 CVE
Security update for python3-requests
This update for python3-requests fixes the following issues: - CVE-2024-47081: fixes netrc credential leak (bsc#1244039).
first Jun 18, 2025 -
Medium max 6.5SUSE-SU-2025:01940-2 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Aug 14, 2025 -
Medium max 6.2SUSE-SU-2025:01811-1 7 CVEs
Security update for gnuplot
This update for gnuplot fixes the following issues: - CVE-2025-31176: invalid read leads to segmentation fault on plot3d_points (bsc#1240325). - CVE-2025-31177: improper bounds check leads to heap-buffer overflow on utf8_copy_one (bsc#1240326). - CVE-2025-311…
first Jun 4, 2025 -
Medium max 6.2SUSE-SU-2025:01805-1 4 CVEs
Security update for gnuplot
This update for gnuplot fixes the following issues: - CVE-2025-31178: unvalidated user input leads to segmentation fault on GetAnnotateString (bsc#1240327). - CVE-2025-31179: improper verification of time values leads to segmentation fault on xstrftime (bsc#1…
first Jun 3, 2025 -
Medium max 5.9SUSE-SU-2025:01772-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
first May 30, 2025 -
Medium max 6.5SUSE-SU-2025:01771-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300). Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian…
first May 30, 2025