35,661 results · Feed
-
High max 7.8SUSE-SU-2025:3936-1 3 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…
first Nov 4, 2025 -
Medium max 6.1SUSE-SU-2025:3910-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-43718: fixed uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files (bsc#1250908) - CVE-2025-52885: improved pointer handling that could have led to …
first Nov 2, 2025 -
Critical max 9.8SUSE-SU-2025:3905-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-43343: Fixed an issue where processing maliciously crafted web content may lead to an unexpected process crash (bsc#1251975) - CVE-2025-43272: Fixed an issue where processing maliciously craft…
first Nov 1, 2025 -
High max 8.1SUSE-SU-2025:3904-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Nov 1, 2025 -
High max 8.6SUSE-SU-2025:3903-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378). - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Ca…
first Oct 31, 2025 -
Critical max 10.0SUSE-SU-2025:3902-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2025-62168: Fixed proxy auth data visible to scripts (bsc#1252281).
first Oct 31, 2025 -
Medium max 5.5SUSE-SU-2025:3875-1 2 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service (bsc#1251979) - CVE-2025-10911: last fix caused a regression, patch was temporary disabled (bsc#1250553)
first Oct 30, 2025 -
High max 8.1SUSE-SU-2025:3873-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3872-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3865-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 7.3SUSE-SU-2025:3864-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation (CVE-2025-62229, bsc#1251958) - Fixed use-after-free in Xkb client resource removal (CVE-2025-62230, bsc#1251959) - Fixed value overflow i…
first Oct 30, 2025 -
High max 8.1SUSE-SU-2025:3857-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 29, 2025 -
High max 8.1SUSE-SU-2025:3856-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)
first Oct 29, 2025 -
Medium max 5.9SUSE-SU-2025:3844-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
first Oct 28, 2025 -
Critical max 9.8SUSE-SU-2025:3843-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls (bsc#1251271, XSA-475) - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian …
first Oct 28, 2025 -
Medium max 6.7SUSE-SU-2025:3809-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2025-50200: prevented logging of Basic Auth header from HTTP requests (bsc#1245105) - fixed a bad logrotate configuration that allowed escalation from rabbitmq to root, /var/log/rabbitmq owners…
first Oct 27, 2025 -
Critical max 9.8SUSE-SU-2025:3808-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.4.0 ESR (bsc#1251263). - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: Out of bounds read/write in a privileged …
first Oct 27, 2025 -
Critical max 9.8SUSE-SU-2025:3764-1 7 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2025:3759-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: * Prevent leaks during pkcs12 decoding. * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates Update …
first Oct 23, 2025 -
High max 7.8SUSE-SU-2025:3734-1 6 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_83 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure th…
first Oct 22, 2025 -
Medium max 5.9SUSE-SU-2025:3729-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5 as very old protocol supported quite a number of ciphers tha…
first Oct 22, 2025 -
High max 7.5SUSE-SU-2025:3706-1 2 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.7. - Fixes in 3.13.7: * gh-137583: Fix a deadlock introduced in 3.13.6 when a call to ssl.SSLSocket.recv was blocked in one thread, and then another method on the object (such as ssl…
first Oct 21, 2025 -
High max 7.8SUSE-SU-2025:3705-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 21, 2025 -
High max 7.8SUSE-SU-2025:3704-1 6 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 21, 2025 -
High max 7.5SUSE-SU-2025:3682-1 10 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: go1.24.9 (released 2025-10-13) includes fixes to the crypto/x509 package. (bsc#1236217) * crypto/x509: TLS validation fails for FQDNs with trailing dot go1.24.8 (released 2025-10-07) includes security fixes t…
first Oct 20, 2025 -
Critical max 10.0SUSE-SU-2025:3677-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed vfs_streams_xattr uninitialized memory write (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS Server Hook Script (bsc#1251280).
first Oct 20, 2025 -
Critical max 10.0SUSE-SU-2025:3676-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280). Update to 4.21.8: * netr_LogonSam…
first Oct 20, 2025 -
Medium max 5.3SUSE-SU-2025:2990-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2025-7700: Fixed NULL Pointer Dereference in FFmpeg ALS Decoder (libavcodec/alsdec.c) (bsc#1246790).
first Nov 5, 2025 -
High max 7.4SUSE-SU-2025:2169-1 1 CVE
Security update for yelp
This update for yelp fixes the following issues: - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
first Nov 26, 2025 -
High max 9.8SUSE-SU-2025:21224-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
Medium max 4.0SUSE-SU-2025:21222-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init (bsc#1254132).
first Dec 16, 2025 -
Medium max 5.3SUSE-SU-2025:21221-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.19.1 (bsc#1251649, CVE-2025-58190, bsc#1251442, CVE-2025-47911): * chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29 * jsonschema: warn and ignore unresolved URN $ref …
first Dec 16, 2025 -
High max 7.1SUSE-SU-2025:21220-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025…
first Dec 16, 2025 -
High max 7.8SUSE-SU-2025:21218-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: salt: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendore…
first Dec 16, 2025 -
High max 7.1SUSE-SU-2025:21217-1 5 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025…
first Dec 16, 2025 -
High max 7.8SUSE-SU-2025:21216-1 2 CVEs
Security update 5.0.6 for Multi-Linux Manager Client Tools, Salt and Salt Bundle
This update fixes the following issues: salt: - Security issues fixed: - CVE-2025-62349: Added minimum_auth_version to enforce security (bsc#1254257) - CVE-2025-62348: Fixed Junos module yaml loader (bsc#1254256) - Backport security fixes for vendored tornado…
first Dec 16, 2025 -
High max 9.8SUSE-SU-2025:21213-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - CVE-2025-9231: Fixedk timing side-channel in SM2 algorithm on 64 bit ARM (bsc#1250233) - CVE-2025-9232: Fixed out-of…
first Dec 15, 2025 -
High max 7.8SUSE-SU-2025:21212-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-aft…
first Dec 15, 2025 -
Medium max 4.3SUSE-SU-2025:21207-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) is not checked by the 'zipfile' module (bsc#1251305). - CVE-2025-6075: Fixed the value passed to os.path.expa…
first Dec 9, 2025 -
High max 7.5SUSE-SU-2025:21211-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash (bsc#1252749). - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation (bsc#1249362). - C…
first Dec 15, 2025