35,661 results · Feed
-
High max 7.5SUSE-SU-2025:4429-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary memory disclosure on 32-bit systems (bsc#1254820).
first Dec 17, 2025 -
High max 7.5SUSE-SU-2025:4428-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-65955: possible use-after-free/double-free in `Options::fontFamily` when clearing a family can lead to crashes or memory corruption (bsc#1254435). - CVE-2025-66628: possible integer overflow i…
first Dec 17, 2025 -
Medium max 5.1SUSE-SU-2025:4425-1 1 CVE
Security update for cups
This update for cups fixes the following issues: Security issues fixed: - CVE-2025-58436: single client sending slow messages to cupsd can delay the application and make it unusable for other clients (bsc#1244057). Other issues fixed: - Update the CVE-2025-58…
first Dec 17, 2025 -
Critical max 9.8SUSE-SU-2025:4424-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR (bsc#1254551). - MFSA 2025-94 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorr…
first Dec 17, 2025 -
Critical max 9.8SUSE-SU-2025:4422-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: target: i…
first Dec 17, 2025 -
UnscoredSUSE-SU-2025:4421-1 0 CVEs
Security update for buildah
This update for buildah rebuilds it against the current security release of GO.
first Dec 17, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…
first Dec 16, 2025 -
Medium max 6.5SUSE-SU-2025:4411-1 2 CVEs
Security update for librsvg
This update for librsvg fixes the following issues: Update to version 2.52.12. - CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non-ASCII output when decoded (…
first Dec 16, 2025 -
Medium max 4.3SUSE-SU-2025:4398-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities on `os.path.expandvars()` (bsc#1252974). - CVE-2025-8291: Fixed missing validity checks of the ZIP64 End of Central D…
first Dec 15, 2025 -
Critical max 9.8SUSE-SU-2025:4397-1 10 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.6 (bsc#1254551). - MFSA 2025-96 * CVE-2025-14321: use-after-free in the WebRTC: Signaling component. * CVE-2025-14322: sandbox escape due to incorrect boundary co…
first Dec 15, 2025 -
Critical max 9.8SUSE-SU-2025:4393-1 69 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: target: i…
first Dec 15, 2025 -
Medium max 5.7SUSE-SU-2025:4391-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2025-11411: Fixed domain hijacking due to promiscuous records (bsc#1252525)
first Dec 15, 2025 -
Medium max 5.9SUSE-SU-2025:4364-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Dec 11, 2025 -
Medium max 5.9SUSE-SU-2025:4363-1 2 CVEs
Security update for postgresql17, postgresql18
This update for postgresql17, postgresql18 fixes the following issues: Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/18.1/…
first Dec 11, 2025 -
Low max 3.7SUSE-SU-2025:4347-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)
first Dec 10, 2025 -
High max 8.5SUSE-SU-2025:4330-1 6 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Dec 9, 2025 -
High max 7.8SUSE-SU-2025:4282-1 2 CVEs
Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-202…
first Nov 27, 2025 -
High max 8.8SUSE-SU-2025:4281-1 1 CVE
Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.173 fixes one security issue The following security issue was fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983).
first Nov 27, 2025 -
High max 7.5SUSE-SU-2025:4264-1 8 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905) - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930) - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3…
first Nov 26, 2025 -
High max 7.8SUSE-SU-2025:4262-1 3 CVEs
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…
first Nov 26, 2025 -
Medium max 4.3SUSE-SU-2025:4257-2 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not …
first Dec 15, 2025 -
High max 7.8SUSE-SU-2025:4256-1 1 CVE
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).
first Nov 26, 2025 -
High max 8.8SUSE-SU-2025:4232-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include…
first Nov 25, 2025 -
High max 8.8SUSE-SU-2025:4230-1 3 CVEs
Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.153 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…
first Nov 25, 2025 -
High max 7.5SUSE-SU-2025:4229-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
first Nov 25, 2025 -
High max 8.6SUSE-SU-2025:4222-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
first Nov 25, 2025 -
High max 8.8SUSE-SU-2025:4199-1 3 CVEs
Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.141 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…
first Nov 24, 2025 -
High max 8.5SUSE-SU-2025:4190-1 3 CVEs
Security update for helm
This update for helm fixes the following issues: - Update to version 3.19.1 - CVE-2025-53547: Fixed local code execution in Helm Chart. (bsc#1246152) - CVE-2025-58190: Fixed excessive memory consumption by `html.ParseFragment` when processing specially crafte…
first Nov 24, 2025 -
Critical max 9.8SUSE-SU-2025:4189-1 137 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2021-4460: drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (bsc#1250764). - CVE-2022-48631: ext4: fix bug in extents parsing w…
first Nov 24, 2025 -
Medium max 4.3SUSE-SU-2025:4221-1 2 CVEs
Security update for python39
This update for python39 fixes the following issues: Updated to 3.9.24: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not c…
first Nov 25, 2025 -
High max 7.8SUSE-SU-2025:4197-1 5 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - CVE-2025-61662: F…
first Nov 24, 2025 -
High max 8.8SUSE-SU-2025:4195-1 9 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update Mozilla Thunderbird to version 140.5 (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssemb…
first Nov 24, 2025 -
High max 7.8SUSE-SU-2025:4194-1 1 CVE
Security update for the Linux Kernel (Live Patch 62 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.234 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).
first Nov 24, 2025 -
High max 7.5SUSE-SU-2025:4191-1 1 CVE
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
first Nov 24, 2025 -
Critical max 9.0SUSE-SU-2025:4187-1 9 CVEs
Security update for nvidia-container-toolkit
This update for nvidia-container-toolkit fixes the following issues: - Update to version 1.18.0: - This is a major release and includes the following high-level changes: - The default mode of the NVIDIA Container Runtime has been updated to make use of a just…
first Nov 24, 2025 -
High max 8.8SUSE-SU-2025:4171-1 4 CVEs
Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP3)
This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.185 fixes various security issues The following security issues were fixed: - CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250295). - CVE-202…
first Nov 23, 2025 -
High max 7.8SUSE-SU-2025:4167-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: fix u…
first Nov 22, 2025 -
High max 7.8SUSE-SU-2025:4161-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.17 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778). - CVE-2025-23145: mptcp: f…
first Nov 22, 2025 -
High max 7.8SUSE-SU-2025:4170-1 1 CVE
Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).
first Nov 23, 2025 -
High max 7.8SUSE-SU-2025:4169-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes one security issue The following security issue was fixed: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).
first Nov 22, 2025