35,648 results · Feed
-
High max 9.8openSUSE-SU-2025:20164-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
High max 7.5openSUSE-SU-2025:20162-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash (bsc#1252749). - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362). - C…
first Dec 15, 2025 -
High max 7.4openSUSE-SU-2025:20160-1 8 CVEs
Security update for hauler
This update for hauler fixes the following issues: - Update to version 1.3.1 (bsc#1251516, CVE-2025-47911, bsc#1251891, CVE-2025-11579, bsc#1251651, CVE-2025-58190, bsc#1248937, CVE-2025-58058): * bump github.com/containerd/containerd (#474) * another fix to …
first Dec 12, 2025 -
High max 8.2openSUSE-SU-2025:20159-1 2 CVEs
Security update for keylime
This update for keylime fixes the following issues: Update to version 7.13.0+40. Security issues fixed: - CVE-2025-13609: possible agent identity takeover due to registrar allowing the registration of agents with duplicate UUIDs (bsc#1254199). - CVE-2025-1057…
first Dec 12, 2025 -
High max 7.8openSUSE-SU-2025:20163-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-aft…
first Dec 15, 2025 -
High max 7.5openSUSE-SU-2025:20158-1 12 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.11. Security issues fixed: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). - CVE-2025-58183: archive/tar: unbounded allocation when parsing GNU s…
first Dec 12, 2025 -
High max 7.5openSUSE-SU-2025:20157-1 13 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.5. Security issues fixed: - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host certificate validation (bsc#1254431). - CVE-2025-61727: crypto/x509: …
first Dec 12, 2025 -
Medium max 6.9openSUSE-SU-2025:20155-1 1 CVE
Security update for exim
This update for exim fixes the following issues: - CVE-2025-53881: Fixed a potential security issue with logfile rotation (bsc#1246457)
first Dec 30, 2025 -
Critical max 9.1openSUSE-SU-2025:20153-1 3 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via `_connector` keyword argument in `QuerySet` and `Q` objects (bsc#1252926) - CVE-2025-13372,CVE-2025-64460: Fixed Denial of Service in 'django.core.…
first Dec 9, 2025 -
Medium max 5.6openSUSE-SU-2025:20150-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 (a problem related to LTO vs fortran COMMON blocks). - Do not enable '-z gcs=implicit' on aarch64 for old codestr…
first Dec 12, 2025 -
High max 7.8openSUSE-SU-2025:20148-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: Changes in openexr: - CVE-2025-12495: Fixed a file parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability [bsc#1253714] - CVE-2025-12839: Fixed a file parsing Heap-based Buffer Overflow Remot…
first Dec 9, 2025 -
Critical max 9.1openSUSE-SU-2025:20143-1 7 CVEs
Security update for git-bug
This update for git-bug fixes the following issues: Changes in git-bug: - Revendor to include fixed version of depending libraries: - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade golang.org/x/crypto to v0.43.0 - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrad…
first Dec 4, 2025 -
High max 7.5openSUSE-SU-2025:20138-1 1 CVE
Security update for act
This update for act fixes the following issues: - CVE-2025-47913: Prevent panic in embedded golang.org/x/crypto/ssh/agent client when receiving unexpected message types for key listing or signing requests (boo#1253608)
first Dec 4, 2025 -
Critical max 9.8openSUSE-SU-2025:20135-1 26 CVEs
Security update for mozjs128
This update for mozjs128 fixes the following issues: - Update to version 128.14.0 (bsc#1248162): + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D comp…
first Dec 3, 2025 -
High max 7.5openSUSE-SU-2025:20133-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-64076: Fixed bug in decode_definite_long_string() that causes incorrect chunk length calculation (bsc#1253746). Already fixed in release 5.6.3: - CVE-2024-26134: Fixed potential crash when ha…
first Dec 2, 2025 -
High max 8.1openSUSE-SU-2025:20132-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).
first Dec 2, 2025 -
Medium max 6.8openSUSE-SU-2025:20130-1 1 CVE
Security update for bash-git-prompt
This update for bash-git-prompt fixes the following issues: - CVE-2025-61659: Fixed an issue where predictable files in /tmp were used for a copy of the git index (bsc#1247489)
first Dec 30, 2025 -
Medium max 5.3openSUSE-SU-2025:20128-1 1 CVE
Security update for shadowsocks-v2ray-plugin, v2ray-core
This update for shadowsocks-v2ray-plugin, v2ray-core fixes the following issues: Changes in shadowsocks-v2ray-plugin: - Update version to 5.25.0 * Update v2ray-core to v5.25.0 - Add update-vendor.patch, update v2ray-core to v5.33.0 (boo#1243954 and CVE-2025-2…
first Dec 30, 2025 -
High max 7.5openSUSE-SU-2025:20125-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-53057: Fixed enhance certificate handling (bsc#1252414). Other bug …
first Nov 28, 2025 -
High max 7.5openSUSE-SU-2025:20123-1 3 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-61748: Fixed enhance string handling (bsc#1252418). - CVE-2025-53057:…
first Nov 28, 2025 -
Low max 3.6openSUSE-SU-2025:20122-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…
first Nov 28, 2025 -
Critical max 10.0openSUSE-SU-2025:20121-1 5 CVEs
Security update for redis
This update for redis fixes the following issues: - Updated to 8.2.3 (boo#1252996 CVE-2025-62507) * https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - (CVE-2025-62507) Bug in `XACKDEL` may lead to stack overflow and potential RCE - Bug fixes…
first Dec 30, 2025 -
High max 7.8openSUSE-SU-2025:20119-1 11 CVEs
Security update for tcpreplay
This update for tcpreplay fixes the following issues: - update to 4.5.2: * features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AF_XDP socket support - tcpreplay -w (write into a pcap file) - tcpreplay --fi…
first Nov 27, 2025 -
Medium max 5.3openSUSE-SU-2025:20118-1 2 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: Changes in gitea-tea: - update to 0.11.1: * 61d4e57 Fix Pr Create crash (#823) * 4f33146 add test for matching logins (#820) * 08b8398 Update README.md (#819) - CVE-2025-58190: golang.org/x/net/html: exces…
first Nov 27, 2025 -
High max 7.5openSUSE-SU-2025:20116-1 1 CVE
Security update for rnp
This update for rnp fixes the following issues: - update to 0.18.1: * CVE-2025-13470: PKESK (public-key encrypted) session keys were generated as all-zero, allowing trivial decryption of messages encrypted with public keys only (boo#1253957, CVE-2025-13402)
first Nov 27, 2025 -
Medium max 5.3openSUSE-SU-2025:20115-1 1 CVE
Security update for pnpm
This update for pnpm fixes the following issues: Changes in pnpm: - update to 10.22.0: * Minor Changes - Added support for trustPolicyExclude #10164. You can now list one or more specific packages or versions that pnpm should allow to install, even if those p…
first Nov 27, 2025 -
Medium max 4.4openSUSE-SU-2025:20114-1 2 CVEs
Security update for himmelblau
This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: * CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation (bsc#1250687) * deps(rust): bump the all-cargo-updates group * CVE-2025-58…
first Nov 27, 2025 -
High max 7.4openSUSE-SU-2025:20113-1 1 CVE
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled (bsc#1252839) - Changes - auth: Remove proxy_always field. - config: Change settings history …
first Nov 27, 2025 -
Critical max 9.6openSUSE-SU-2025:20106-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Fixed Improper Neutralization of Escape, Meta, or Contr…
first Nov 27, 2025 -
Medium max 5.5openSUSE-SU-2025:20100-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots (bsc#1253703) - CVE-2025-12748: Fixed Denial of service in XML parsing (bsc#1253278) Other fixes: - spec: Adjust dbus dependency…
first Nov 27, 2025 -
Critical max 9.8openSUSE-SU-2025:20091-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…
first Nov 26, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
High max 7.3openSUSE-SU-2025:20099-1 3 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-62229: Fixed use-after-free in XPresentNotify structures creation (bsc#1251958). - CVE-2025-62230: Fixed use-after-free in Xkb client resource removal (bsc#1251959). - CVE-2025-62231: Fixed value…
first Nov 27, 2025 -
High max 7.5openSUSE-SU-2025:20097-1 2 CVEs
Security update for helmfile
This update for helmfile fixes the following issues: Changes in helmfile: Update to version 1.1.9: * feat: update strategy for reinstall by @simbou2000 in #2019 * build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.88.7 to 1.89.0 by @dependabot[b…
first Dec 30, 2025 -
High max 7.5openSUSE-SU-2025:20090-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757) - CVE-2025-10148: Fixed predictable WebSocket mask…
first Nov 26, 2025 -
High max 7.5openSUSE-SU-2025:20089-1 1 CVE
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability (bsc#1241693) - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not c…
first Nov 26, 2025 -
Critical max 9.8openSUSE-SU-2025:20083-1 3 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092). - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093). - CVE…
first Nov 25, 2025 -
UnscoredopenSUSE-SU-2025:20074-1 0 CVEs
Security update for certbot
This update for certbot fixes the following issues: This update adds the certbot stack. (python modules: ConfigArgParse, acme, certbot, certbot-nginx, josepy, pyRFC3339).
first Nov 19, 2025 -
Medium max 5.3openSUSE-SU-2025:20073-1 2 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960). - CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).
first Nov 20, 2025 -
High max 8.4openSUSE-SU-2025:20072-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3: * CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252232)
first Nov 20, 2025