35,661 results · Feed
-
High max 7.5SUSE-SU-2026:0039-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-6505: qemu-kvm: virtio-net: Fixed queue index out-of-bounds access in software RSS (bsc#1227397) - CVE-2025-12464: net: pad packets to minimum length in qemu_receive_packet() (bsc#1253002) - CVE-2025…
first Jan 6, 2026 -
High max 7.5SUSE-SU-2026:0028-1 3 CVEs
Security update for alloy
This update for alloy fixes the following issues: Upgrade to version 1.12.1. Security issues fixed: - CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents (bsc#1251509). - CVE-2025-47913: golang.org…
first Jan 5, 2026 -
Medium max 6.3SUSE-SU-2026:0027-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) …
first Jan 5, 2026 -
Medium max 6.3SUSE-SU-2026:0024-1 3 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.11. Security issues fixed: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availab…
first Jan 5, 2026 -
Medium max 6.9SUSE-SU-2026:0023-1 3 CVEs
Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-48040: Excessive resource consumption (bsc#1249472) - CVE-2025-48039: Excessive use of system resources (bsc#1249469) - CVE-2025-48038: Excessive use of system resources (bsc#1249470)
first Jan 5, 2026 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Jan 5, 2026 -
High max 8.3SUSE-SU-2026:0019-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…
first Jan 5, 2026 -
High max 8.3SUSE-SU-2026:0020-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…
first Jan 5, 2026 -
High max 7.7SUSE-SU-2026:0018-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0017-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555)
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0014-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination …
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0011-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Jan 5, 2026 -
Critical max 9.8SUSE-SU-2025:4517-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi…
first Dec 23, 2025 -
High max 7.5SUSE-SU-2026:0013-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Jan 5, 2026 -
Medium max 4.3SUSE-SU-2026:0005-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)
first Jan 2, 2026 -
High max 7.5SUSE-SU-2025:4526-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed out of bounds read caused by non validated message size (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination …
first Dec 26, 2025 -
Medium max 4.0SUSE-SU-2025:4525-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)
first Dec 26, 2025 -
Critical max 9.0SUSE-SU-2025:4514-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-12105: Fixed heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555)
first Dec 23, 2025 -
Critical max 9.8SUSE-SU-2025:4512-1 4 CVEs
Security update for mozjs52
This update for mozjs52 fixes the following issues: - CVE-2024-45491: Fixed integer overflow in dtdCopy (bsc#1230037) - CVE-2024-50602: Fixed DoS via XML_ResumeParser (bsc#1232599) - CVE-2024-45492: Fixed integer overflow in function nextScaffoldPart (bsc#123…
first Dec 23, 2025 -
Medium max 4.3SUSE-SU-2025:4511-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out-of-bounds array access via negative index (bsc#1254441)
first Dec 23, 2025 -
Low max 2.9SUSE-SU-2025:4501-1 1 CVE
Security update for taglib
This update for taglib fixes the following issues: - CVE-2023-47466: application crash when processing specially crafted WAV files during tag writing operations (bsc#1243499).
first Dec 19, 2025 -
High max 7.1SUSE-SU-2025:4494-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160) - CVE-2025-66293: Fixed LIBPNG out-of-bounds read in `png_image_read_composite` (bsc#125…
first Dec 19, 2025 -
High max 7.0SUSE-SU-2025:4491-1 6 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.5.29. Release notes and changelog: - https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/ - https://mariadb.com/kb/en/mariadb-10-5-29-changelog/ - https://mariadb.com/kb/en/mariadb-1…
first Dec 19, 2025 -
High max 7.5SUSE-SU-2025:4490-1 1 CVE
Security update for xen
This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them (bsc#1252692). Other i…
first Dec 19, 2025 -
Critical max 9.8SUSE-SU-2025:4140-1 190 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph: Fix t…
first Nov 19, 2025 -
High max 8.8SUSE-SU-2025:4139-1 173 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix n…
first Nov 19, 2025 -
Low max 3.6SUSE-SU-2025:4112-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyComman…
first Nov 15, 2025 -
High max 8.4SUSE-SU-2026:20123-1 5 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47914: golang.org/x/crypto/ssh/agent: Fixed non validated message size causing a panic due to an out of bounds read (bsc#1254054) - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client proc…
first Jan 22, 2026 -
High max 8.1SUSE-SU-2026:0555-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.11 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sun…
first Feb 16, 2026 -
High max 9.8SUSE-SU-2025:4126-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232).
first Nov 18, 2025 -
Medium max 4.3SUSE-SU-2025:4125-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-59798: Fixed stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (bsc#1250353) - CVE-2025-59799: Fixed stack-based buffer overflow in pdfmark_coerce_dest in devices/vec…
first Nov 18, 2025 -
Critical max 9.6SUSE-SU-2025:4103-1 3 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.48 - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) - CVE-2025-55754: Fixed improper neutralization of escape, meta, or control…
first Nov 14, 2025 -
Critical max 9.1SUSE-SU-2025:4100-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via the '_connector' keyword (bsc#1252926)
first Nov 14, 2025 -
Low max 3.6SUSE-SU-2025:4098-1 2 CVEs
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCom…
first Nov 14, 2025 -
Critical max 9.1SUSE-SU-2026:20122-1 6 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd…
first Jan 22, 2026 -
High max 8.1
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …
first Feb 16, 2026 -
High max 8.3openSUSE-SU-2025:15262-1 1 CVE
podman-5.5.2-1.1 on GA media
These are all security issues fixed in the podman-5.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 3, 2025 -
Medium max 5.3SUSE-SU-2026:20070-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)
first Jan 11, 2026 -
UnscoredSUSE-SU-2026:0459-1 0 CVEs
Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda
This update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda fixes the following issues: Changes in nvidia-open-driver-G06-signed: - updated CUDA variant to version 580.126.09 - update non-CUDA variant to version 580.126.09 (b…
first Feb 11, 2026 -
High max 7.5SUSE-SU-2026:0430-1 1 CVE
Security update for python-pyasn1
This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902)
first Feb 11, 2026