35,661 results · Feed
-
High max 7.8SUSE-SU-2025:4160-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.29 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…
first Nov 22, 2025 -
Medium max 5.6SUSE-SU-2025:4096-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: - Do not enable '-z gcs=implicit' on aarch64 for old codestreams. Update to version 2.45: * New versioned release of libsframe.so.2 * s390: tools now support SFrame format 2; recognize 'z17' as CPU name [bs…
first Nov 14, 2025 -
Low max 3.6SUSE-SU-2025:4097-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
first Nov 14, 2025 -
Medium max 5.3SUSE-SU-2025:4092-1 4 CVEs
Security update for elfutils
This update for elfutils fixes the following issues: - Fixing build/testsuite for more recent glibc and kernels. - Fixing denial of service and general buffer overflow errors (bsc#1237236, bsc#1237240, bsc#1237241, bsc#1237242): - CVE-2025-1376: Fixed denial …
first Nov 24, 2025 -
Critical max 9.8SUSE-SU-2025:4090-1 4 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094) - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouver…
first Nov 13, 2025 -
High max 7.8SUSE-SU-2025:4078-1 5 CVEs
Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched:…
first Nov 12, 2025 -
High max 8.4SUSE-SU-2025:4077-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Up…
first Nov 12, 2025 -
High max 8.4SUSE-SU-2025:4073-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Up…
first Nov 12, 2025 -
Critical max 9.8SUSE-SU-2025:4068-1 3 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093) - CVE-2025-47151: Fixed type confusion vulnerability in…
first Nov 12, 2025 -
Low max 3.6SUSE-SU-2025:4067-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyComman…
first Nov 12, 2025 -
High max 7.3SUSE-SU-2025:4076-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096)
first Nov 12, 2025 -
High max 7.3SUSE-SU-2025:4074-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096) Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as…
first Nov 12, 2025 -
High max 7.8SUSE-SU-2025:4064-1 5 CVEs
Security update for the Linux Kernel (Live Patch 60 for SUSE Linux Enterprise 15 SP3)
This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.215 fixes various security issues The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2022-50252: igb: Do not free q_…
first Nov 12, 2025 -
High max 7.8SUSE-SU-2025:4036-1 5 CVEs
Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.136 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched…
first Nov 10, 2025 -
High max 7.1SUSE-SU-2025:4035-1 1 CVE
Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-48041: Fixed exhaustion of file handles in ssh (bsc#1249473)
first Nov 10, 2025 -
Critical max 10.0SUSE-SU-2025:4029-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)
first Nov 10, 2025 -
Critical max 10.0SUSE-SU-2025:4026-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)
first Nov 10, 2025 -
UnscoredSUSE-SU-2025:4025-1 0 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251105T184115 2025-11-05T18:41:15Z. (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3987 GHSA-fmjh-f678-cv3x * GO-2025-3988 GHSA-…
first Nov 10, 2025 -
High max 7.8SUSE-SU-2025:4024-1 3 CVEs
Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2025-38617: net/packet: fix …
first Nov 10, 2025 -
High max 7.8SUSE-SU-2025:4016-1 6 CVEs
Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3)
This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.179 fixes various security issues The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2022-50252: igb: Do not free q_…
first Nov 10, 2025 -
Critical max 9.8SUSE-SU-2025:4006-1 8 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issue: Mozilla Thunderbird is updated to 140.4. * changed: Account Hub is now disabled by default for second email account (bmo#1992027) * changed: Flatpak runtime has been updated to Freedesktop SDK 24.0…
first Nov 10, 2025 -
High max 7.8SUSE-SU-2025:4004-1 3 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_218 fixes several issues. The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2025-38664: ice: Fix a null pointer dereference in ice_…
first Nov 9, 2025 -
High max 7.8SUSE-SU-2025:4003-1 2 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_121 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2022-50252: igb: Do not free q_vector …
first Nov 9, 2025 -
High max 8.8SUSE-SU-2025:4001-1 5 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38511: drm/xe/pf: Clear all LMTT page…
first Nov 9, 2025 -
Medium max 5.3SUSE-SU-2025:3989-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-8851: Fixed stack-based buffer overflow vulnerability in tools/tiffcrop.c function readSeparateStripsIntoBuffer() by implementing additional error handling (bsc#1248278).
first Nov 7, 2025 -
Low max 2.7SUSE-SU-2025:3986-1 1 CVE
Security update for gpg2
This update for gpg2 fixes the following issues: - CVE-2025-30258: fixed a verification denial of service due to a malicious subkey in the keyring (bsc#1239119)
first Nov 7, 2025 -
Medium max 4.7SUSE-SU-2025:3985-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. (bsc#1252749)
first Nov 7, 2025 -
High max 8.6SUSE-SU-2025:3976-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379).
first Nov 6, 2025 -
UnscoredSUSE-SU-2025:3970-1 1 CVE
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_70 fixes one issue. The following security issue was fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631).
first Nov 6, 2025 -
Medium max 5.9SUSE-SU-2025:3966-1 1 CVE
Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: fixed a denial of service condition (bsc#1251194)
first Nov 6, 2025 -
High max 7.5SUSE-SU-2025:3965-1 3 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - CVE-2025-53057: Fixed an issue where an unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-2025-53066: Fixed an issue wh…
first Nov 6, 2025 -
High max 7.5SUSE-SU-2025:3964-1 3 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - CVE-2025-53057: Fixed an issue where an unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-2025-53066: Fixed an issue wh…
first Nov 6, 2025 -
High max 8.8SUSE-SU-2025:3961-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-9900: Fixed Write-What-Where in libtiff via TIFFReadRGBAImageOriented (bsc#1250413).
first Nov 6, 2025 -
High max 8.4SUSE-SU-2025:3951-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related …
first Nov 5, 2025 -
High max 8.4SUSE-SU-2025:3950-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related …
first Nov 5, 2025 -
UnscoredSUSE-SU-2025:3949-1 1 CVE
Security update for colord
This update for colord fixes the following issues: - CVE-2021-42523: The original fix was wrong and did not properly free the error, resulting in a crash that has now been addressed (bsc#1250750).
first Nov 5, 2025 -
Medium max 4.3SUSE-SU-2025:3946-1 1 CVE
Security update for openjpeg
This update for openjpeg fixes the following issues: - CVE-2023-39327: Fixed that malicious files can cause a large loop that continuously prints warning messages on the terminal (bsc#1227410). Other bug fixes: - Ensure no bundled libraries are used (bsc#1250…
first Nov 5, 2025 -
Medium max 5.1SUSE-SU-2025:3944-1 1 CVE
Security update for sccache
This update for sccache fixes the following issues: - CVE-2025-55159 - updated slab with the uninit memory access fix (bsc#1248003)
first Nov 5, 2025 -
Medium max 5.9SUSE-SU-2025:3943-1 3 CVEs
Security update for qatengine, qatlib
This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: * bsc#1233363 (CVE-2024-28885) * bsc#1233365 (CVE-2024-31074) * bsc#1233366 (CVE-2024-33617) Update to 1.7.0: * ip…
first Nov 5, 2025 -
UnscoredSUSE-SU-2025:3937-1 0 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251029T215107 2025-10-29T21:51:07Z. (jsc#PED-11136): * GO-2025-4006 * GO-2025-4007 * GO-2025-4008 * GO-2025-4009 * GO-2025-4010 * GO-2025-4011 * GO-2025-4012 * GO-2025-40…
first Nov 4, 2025