35,661 results · Feed
-
Medium max 4.6SUSE-SU-2025:21206-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757).
first Dec 9, 2025 -
Medium max 4.0SUSE-SU-2025:21202-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init (bsc#1254132).
first Dec 9, 2025 -
Low max 3.7SUSE-SU-2025:21201-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed Buffer Under-read in gfileutils.c (bsc#1249055)
first Dec 9, 2025 -
High max 7.5SUSE-SU-2025:21200-1 2 CVEs
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference (bsc#1253177). - CVE-2025-62689: Fixed heap-based buffer overflow(bsc#1253178).
first Dec 9, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
Medium max 5.6SUSE-SU-2025:21197-1 27 CVEs
Security update for binutils
This update for binutils fixes the following issues: Changes in binutils: - Update to current 2.45 branch at 94cb1c075 to include fix for PR33584 (a problem related to LTO vs fortran COMMON blocks). - Do not enable '-z gcs=implicit' on aarch64 for old codestr…
first Dec 12, 2025 -
High max 7.5SUSE-SU-2025:21192-1 13 CVEs
Security update for go1.25
This update for go1.25 fixes the following issues: Update to go1.25.5. Security issues fixed: - CVE-2025-61729: crypto/x509: excessive resource consumption in printing error string for host certificate validation (bsc#1254431). - CVE-2025-61727: crypto/x509: …
first Dec 12, 2025 -
High max 7.5SUSE-SU-2025:21168-1 2 CVEs
Security update for python-cbor2
This update for python-cbor2 fixes the following issues: - CVE-2025-64076: Fixed bug in decode_definite_long_string() that causes incorrect chunk length calculation (bsc#1253746). Already fixed in release 5.6.3: - CVE-2024-26134: Fixed potential crash when ha…
first Dec 2, 2025 -
High max 8.1SUSE-SU-2025:21167-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: Fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941).
first Dec 2, 2025 -
High max 7.5SUSE-SU-2025:21164-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 (October 2025 CPU): - CVE-2025-53066: Fixed enhance path factories (bsc#1252417). - CVE-2025-53057: Fixed enhance certificate handling (bsc#1252414). Other bug …
first Nov 28, 2025 -
Low max 3.6SUSE-SU-2025:21161-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…
first Nov 28, 2025 -
High max 7.4SUSE-SU-2025:21159-1 1 CVE
Security update for dovecot24
This update for dovecot24 fixes the following issues: - Update dovecot to 2.4.2: - CVE-2025-30189: Fixed users cached with same cache key when auth cache was enabled (bsc#1252839) - Changes - auth: Remove proxy_always field. - config: Change settings history …
first Nov 27, 2025 -
Medium max 4.4SUSE-SU-2025:21158-1 2 CVEs
Security update for himmelblau
This update for himmelblau fixes the following issues: - Update to version 0.9.23+git.0.9776141: * CVE-2025-59044: Fixed GID collision of same-name groups allowing privilege escalation (bsc#1250687) * deps(rust): bump the all-cargo-updates group * CVE-2025-58…
first Nov 27, 2025 -
Medium max 5.5SUSE-SU-2025:21150-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2025-13193: Fixed Information disclosure via world-readable VM snapshots (bsc#1253703) - CVE-2025-12748: Fixed Denial of service in XML parsing (bsc#1253278) Other fixes: - spec: Adjust dbus dependency…
first Nov 27, 2025 -
Critical max 9.8SUSE-SU-2025:21147-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…
first Nov 26, 2025 -
High max 7.5SUSE-SU-2025:21145-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757) - CVE-2025-10148: Fixed predictable WebSocket mask…
first Nov 26, 2025 -
Critical max 9.8SUSE-SU-2025:21140-1 3 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092). - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093). - CVE…
first Nov 25, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
Critical max 9.6SUSE-SU-2025:21152-1 3 CVEs
Security update for tomcat11
This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Fixed Improper Neutralization of Escape, Meta, or Contr…
first Nov 27, 2025 -
Medium max 5.3SUSE-SU-2025:21137-1 2 CVEs
Security update for alloy
This update for alloy fixes the following issues: - CVE-2025-58058: Removed dependency on vulnerable github.com/ulikunitz/xz (bsc#1248960). - CVE-2025-11065: Fixed sensitive information leak in logs (bsc#1250621).
first Nov 20, 2025 -
High max 8.4SUSE-SU-2025:21136-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.3.3: * CVE-2025-31133, CVE-2025-52565, CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1252232)
first Nov 20, 2025 -
Low max 3.6SUSE-SU-2025:21128-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21124-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0-RT_Update_12
This update for kernel-livepatch-MICRO-6-0-RT_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21119-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_7
This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21117-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21114-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_10
This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS UL…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21112-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_9
This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21110-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21108-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_5
This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21107-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_4
This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - CVE…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21102-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_12
This update for kernel-livepatch-MICRO-6-0_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21101-1 1 CVE
Security update for kernel-livepatch-MICRO-6-0_Update_11
This update for kernel-livepatch-MICRO-6-0_Update_11 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21097-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_8
This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21096-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_7
This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21095-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_6
This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…
first Nov 28, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…
first Nov 25, 2025 -
High max 7.8SUSE-SU-2025:21092-1 4 CVEs
Security update for kernel-livepatch-MICRO-6-0_Update_3
This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - CVE…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21090-1 2 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_8
This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS …
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:21087-1 3 CVEs
Security update for kernel-livepatch-MICRO-6-0-RT_Update_5
This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…
first Nov 28, 2025 -
High max 8.8SUSE-SU-2025:21084-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include sssd krb5 config snippets (bsc…
first Nov 27, 2025