35,661 results · Feed
-
High max 8.8SUSE-SU-2026:20373-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…
first Feb 16, 2026 -
High max 7.8SUSE-SU-2026:0736-1 1 CVE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).
first Mar 2, 2026 -
High max 7.5SUSE-SU-2026:0703-1 6 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2026-0716: improper bounds handling may allow out-of-bounds read (bsc#1256418). - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422). - CVE-2025-32049: denial of Servic…
first Feb 28, 2026 -
Medium max 4.3SUSE-SU-2026:0604-1 3 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow (bsc#1258000). - CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow (bsc#1257999)…
first Feb 24, 2026 -
Critical max 9.0SUSE-SU-2026:0558-1 2 CVEs
Security update for libnvidia-container
This update for libnvidia-container fixes the following issues: Update to version 1.18.0. Security issues fixed: - CVE-2024-0132: time-of-check time-of-use (TOCTOU) race condition in default configuration via specifically crafted container image (bsc#1231033)…
first Feb 16, 2026 -
High max 8.1SUSE-SU-2026:0490-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.13 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunr…
first Feb 13, 2026 -
Low max 1.8SUSE-SU-2026:0337-1 1 CVE
Security update for python
This update for python fixes the following issues: - Modified CVE-2025-6075 fix to not use `re.ASCII` flag (not available in Python 2.7) (bsc#1257064).
first Jan 29, 2026 -
High max 7.5SUSE-SU-2026:0295-1 7 CVEs
Security update for nodejs22
This update for nodejs22 fixes the following issues: Security fixes: - CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion (bsc#1256848) - CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks tha…
first Jan 26, 2026 -
Low max 3.7SUSE-SU-2026:0266-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
first Jan 23, 2026 -
High max 8.8SUSE-SU-2025:4530-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53659: iavf: Fix out-of-bounds when setting chann…
first Dec 29, 2025 -
Critical max 9.9
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4249 CVE-2025-68120 CVE-2025-68120 * GO-2025-4…
first Jan 6, 2026 -
Critical max 9.8SUSE-SU-2026:0195-1 1 CVE
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)
first Jan 21, 2026 -
Critical max 9.8SUSE-SU-2026:0184-1 9 CVEs
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: n…
first Jan 20, 2026 -
High max 8.2SUSE-SU-2026:0123-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-14523: Reject duplicated Host in headers (bsc#1254876).
first Jan 14, 2026 -
Low max 2.1SUSE-SU-2026:0081-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Jan 9, 2026 -
High max 7.5SUSE-SU-2026:0022-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2025-12464: stack-based buffer overflow in the e1000 network device operations can be exploited by a malicious guest user to crash the QEMU process on the host (bsc#1253002). - CVE-…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2026:0010-1 3 CVEs
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …
first Jan 5, 2026 -
High max 8.8SUSE-SU-2025:4515-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083). - CVE-2022-50368: drm/ms…
first Dec 23, 2025 -
Medium max 6.5SUSE-SU-2025:4489-1 1 CVE
Security update for netty
This update for netty fixes the following issues: Update to upstream version 4.1.130. Security issues fixed: - CVE-2025-67735: lack of URI sanitization in `HttpRequestEncoder` allows for CRLF injection through a request URI and can lead to request smuggling (…
first Dec 19, 2025 -
Medium max 4.3SUSE-SU-2025:4487-1 2 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on th…
first Dec 18, 2025 -
Medium max 5.9SUSE-SU-2025:4486-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgraded to 13.23: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 18, 2025 -
Medium max 5.9SUSE-SU-2025:4485-1 2 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 18, 2025 -
High max 7.6SUSE-SU-2025:4482-1 7 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 11.5.5 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Dropped experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4477-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4474-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4478-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4476-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4475-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored torn…
first Dec 18, 2025 -
High max 7.8SUSE-SU-2025:4467-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vend…
first Dec 18, 2025 -
High max 7.6SUSE-SU-2025:4458-1 4 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 1.0.0 * Reboot on salt key timeout (bsc#1237495) * Fixed parsing files with space in the name (bsc#1252100) grafana was updated from version 11.5.5 to 11.5.10: - Security issues fixe…
first Dec 18, 2025 -
Medium max 5.8SUSE-SU-2025:4446-1 4 CVEs
Security update 5.1.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: grafana was updated from version 11.5.7 to 11.5.10: - Security issues fixed: * CVE-2025-64751: Drop experimental implementation of authorization Zanzana server/client (version 11.5.10) (bsc#1254113) * CVE-2025-47911: Fi…
first Dec 18, 2025 -
High max 7.7SUSE-SU-2025:4442-1 3 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to denial-of-service (bsc#1254878). - CVE-2025-14087…
first Dec 17, 2025 -
Low max 2.1SUSE-SU-2025:4439-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Dec 17, 2025 -
High max 7.0SUSE-SU-2025:4438-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2025-13699: Fixed MariaDB mariadb-dump utility vulnerable to Path Traversal and Remote Code Execution (bsc#1254313) Other fixes: - Updated to 11.8.5 - Added %license tags to license files (bsc#1252162)…
first Dec 17, 2025 -
UnscoredSUSE-SU-2025:4437-1 0 CVEs
Security update for helm
This update for helm rebuilds it against current GO to fix security issues in go-stdlib.
first Dec 17, 2025 -
Medium max 5.7SUSE-SU-2025:4435-1 1 CVE
Security update for usbmuxd
This update for usbmuxd fixes the following issues: - CVE-2025-66004: Fixed LPE from nobody to usbmux (bsc#1254302)
first Dec 17, 2025 -
Low max 2.1SUSE-SU-2025:4434-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-11896: Fixed infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337)
first Dec 17, 2025 -
High max 7.5SUSE-SU-2025:4427-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Dec 17, 2025 -
UnscoredSUSE-SU-2025:4433-1 0 CVEs
Security update for python39
This update for python39 fixes the following issues: * Update to 3.9.25: - Security - gh-137836: Add support of the “plaintext” element, RAWTEXT elements “xmp”, “iframe”, “noembed” and “noframes”, and optionally RAWTEXT element “noscript” in html.parser.HTMLP…
first Dec 17, 2025 -
Medium max 6.1SUSE-SU-2025:4432-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issues: - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)
first Dec 17, 2025