Lucene search
+L
Osv SuseMost viewed

23966 matches found

osv_suse
osv_suse
•added 2024/03/22 11:19 a.m.•35 views

SUSE-SU-2024:0976-1 Security update for the Linux Kernel

The SUSE Linux Enterprise SLE12SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free bsc1220409. - CVE-2020-36777: Fixed a memory leak in dvbmediadevicefree bsc1220526. - CVE-2020-36784: Fixed...

9.8CVSS6.5AI score0.0094EPSS
SaveExploits0References104
osv_suse
osv_suse
•added 2024/03/22 11:01 a.m.•35 views

SUSE-SU-2024:0975-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26600: Fixed NULL pointer dereference for SRP bsc1220340. - CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed bsc1220863 -...

9.8CVSS6.5AI score0.01549EPSS
SaveExploits0References112
osv_suse
osv_suse
•added 2023/08/16 10:45 a.m.•35 views

SUSE-SU-2023:3333-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3268: Fixed an out of bounds memory access flaw in relayfilereadstartpos in the relayfs bsc1212502. - CVE-2023-3776: Fixed improper refcount update in...

7.8CVSS6.8AI score0.60631EPSS
SaveExploits13References27
osv_suse
osv_suse
•added 2022/06/01 9:04 a.m.•35 views

SUSE-SU-2022:1903-1 Security update for hdf5

This update for hdf5 fixes the following issues: Security issues fixed: - CVE-2020-10811: Fixed heap-based buffer over-read in the function H5Olayoutdecode located in H5Olayout.c bsc1167405. - CVE-2020-10810: Fixed NULL pointer dereference in the function H5ACunpinentry located in H5AC.c...

9.8CVSS6.6AI score0.02789EPSS
SaveExploits21References60
osv_suse
osv_suse
•added 2022/03/24 11:04 a.m.•35 views

SUSE-RU-2022:0655-1 Recommended update for vsftpd

This update for vsftpd fixes the following issues: This update enables vsftpd to speak TLS 1.3 in ssl FTP mode by linking against openssl 1.1.1. Bugfixes added: - Fixed a seccomp failure in FIPS mode when SSL was enabled. bsc1052900 - allow stat to be called, which is required during SSL...

7.4CVSS7.1AI score0.02027EPSS
SaveExploits0References14
osv_suse
osv_suse
•added 2022/02/15 6:39 a.m.•35 views

SUSE-SU-2022:0176-2 Security update for unbound

This update for unbound fixes the following issues: - CVE-2019-25031: Fixed configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack bsc1185382. - CVE-2019-25032: Fixed integer overflow in the regional allocator via regionalalloc bsc1185383. - CVE-2019-25033...

9.8CVSS7.1AI score0.02881EPSS
SaveExploits0References30
osv_suse
osv_suse
•added 2020/10/26 11:11 a.m.•35 views

SUSE-SU-2020:3036-1 Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 2.6.5: - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server settings to /etc/rmt.conf: Now it's...

9.8CVSS6.7AI score0.98507EPSS
SaveExploits44References24
osv_suse
osv_suse
•added 2020/09/21 8:56 a.m.•35 views

SUSE-SU-2020:2689-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue bsc1010979. - CVE-2016-9399: Fix assert in calcstepsizes bsc1010980. - CVE-2017-5499: Validate component depth bit bsc1020451. - CVE-2017-5503: Check bounds in jasseq2dbindsub bsc1020456. -...

7.8CVSS6.4AI score0.05981EPSS
SaveExploits10References29
osv_suse
osv_suse
•added 2020/04/06 6:23 p.m.•35 views

SUSE-SU-2020:0930-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-1759: Fixed once reuse in msgr V2 secure mode bsc1166403 - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting bsc1166484...

6.8CVSS6.1AI score0.01625EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2019/02/01 6:55 p.m.•35 views

SUSE-SU-2019:0224-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features: - Support for Enhanced-IBRS on new Intel CPUs fate326564 The following security bugs were fixed: - CVE-2018-9568: In skclonelock of sock.c, there is a possible memory...

8CVSS7.8AI score0.06526EPSS
SaveExploits7References280
osv_suse
osv_suse
•added 2018/08/15 3:31 p.m.•35 views

SUSE-SU-2018:2338-1 Security update to ucode-intel

ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 Spectre v3a and is part of the mitigations for CVE-2018-3639 Spectre v4 and CVE-2018-3646 L1 Terminal fault. bsc1104134 bsc1087082 bsc1087083 bsc1089343 Processor Identifier Version Products Mode...

5.6CVSS6.9AI score0.60631EPSS
SaveExploits3References8
osv_suse
osv_suse
•added 2018/05/23 8:16 a.m.•35 views

SUSE-SU-2018:1382-1 Security update for mariadb

MariaDB was updated to 10.0.35 bsc1090518 Notable changes: PCRE updated to 8.42 XtraDB updated to 5.6.39-83.1 TokuDB updated to 5.6.39-83.1 InnoDB updated to 5.6.40 The embedded server library now supports SSL when connecting to remote servers bsc1088681, CVE-2018-2767 MDEV-15249 - Crash in MVCC...

7.7CVSS5.7AI score0.03983EPSS
SaveExploits0References15
osv_suse
osv_suse
•added 2018/05/15 1:08 p.m.•35 views

SUSE-SU-2018:1291-1 Security update for php5

This update for php5 fixes the following issues: Security issues fixed: - CVE-2018-10545: Fix access controls in FPM child processes bsc1091367. - CVE-2018-10547: Fix Reflected XSS on the PHAR 403 and 404 error pages bsc1091362. - CVE-2018-10546: Fix an infinite loop exists in ext/iconv/iconv.c...

7.5CVSS6.1AI score0.09775EPSS
SaveExploits0References9
osv_suse
osv_suse
•added 2018/01/22 11:02 a.m.•35 views

SUSE-SU-2018:0171-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update. This update enables those fixes...

5.6CVSS6.6AI score0.93838EPSS
SaveExploits13References4
osv_suse
osv_suse
•added 2017/07/28 1:21 p.m.•35 views

SUSE-SU-2017:1997-1 Security update for apache2

This update provides apache2 2.2.34, which brings many fixes and enhancements: Security issues fixed: - CVE-2017-9788: Uninitialized memory reflection in modauthdigest. bsc1048576 Bug fixes: - Remove /usr/bin/http2 link only during package uninstall, not upgrade. bsc1041830 - Don't put the backen...

9.1CVSS8.4AI score0.5677EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2017/06/29 11:41 a.m.•35 views

SUSE-SU-2017:1718-1 Security update for openvpn-openssl1

This update for openvpn-openssl1 fixes the following issues: - Some parts of the certificate-parsing code did not always clear all allocated memory. This would have allowed clients to leak a few bytes of memory for each connection attempt, thereby facilitating a quite inefficient DoS attack on th...

7.5CVSS7.1AI score0.13783EPSS
SaveExploits3References12
osv_suse
osv_suse
•added 2017/03/06 10:26 a.m.•35 views

SUSE-SU-2017:0607-3 Security update for openssh

This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

7.8CVSS7.9AI score0.37431EPSS
SaveExploits6References9
osv_suse
osv_suse
•added 2017/03/06 7:28 a.m.•35 views

SUSE-SU-2017:0606-1 Security update for openssh

This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of...

7.8CVSS8AI score0.37431EPSS
SaveExploits6References8
osv_suse
osv_suse
•added 2016/07/08 11:47 a.m.•35 views

SUSE-SU-2016:1764-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 Realtime kernel was updated to 3.12.58 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-7566: The treoattach function in drivers/usb/serial/visor.c in the Linux kernel allowed physically proximate attackers to cause a...

10CVSS6.8AI score0.14546EPSS
SaveExploits46References148
osv_suse
osv_suse
•added 2014/10/24 10:07 p.m.•35 views

SUSE-SU-2015:1182-1 Security update for OpenSSL

This OpenSSL update fixes the following issues: Session Ticket Memory Leak CVE-2014-3567 Build option no-ssl3 is incomplete CVE-2014-3568 Add support for TLSFALLBACKSCSV to mitigate CVE-2014-3566 POODLE Security Issues: CVE-2014-3567 CVE-2014-3566 CVE-2014-3568...

7.5CVSS6.7AI score0.99999EPSS
SaveExploits19References69
osv_suse
osv_suse
•added 2026/06/11 7:58 a.m.•34 views

SUSE-SU-2026:2365-1 Security update for cosign

This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Changes for cosign: - update to 3.0.6: Fix DSSE predicate check GHSA-w6c6-c85g-mmv6 4801 Handle whitespace-only certificate...

5.3CVSS7.9AI score0.00293EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2026/06/08 1:02 p.m.•34 views

SUSE-RU-2026:2237-1 Recommended update for aazure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-translation-text, python-azure-appconfiguration, python-azure-appconfiguration-provider, python-azure-batch, python-azure-cognitiveservices-anomalydetector, python-azure-cognitiveservices-knowledge-qnamaker, python-azure-cognitiveservices-language-luis, python-azure-cognitiveservices-language-spellcheck, python-azure-cognitiveservices-language-textanalytics, python-azure-cognitiveservices-search-autosuggest, python-azure-cognitiveservices-search-customimagesearch, python-azure-cognitiveservices-search-customsearch, python-azure-cognitiveservices-search-entitysearch, python-azure-cognitiveservices-search-imagesearch, python-azure-cognitiveservices-search-videosearch, python-azure-cognitiveservices-search-websearch, python-azure-cognitiveservices-vision-computervision, python-azure-cognitiveservices-vision-contentmoderator, python-azure-cognitiveservices-vision-customvision, python-azure-cognitiveservices-vision-face python-azure-communication-callautomation, python-azure-communication-chat, python-azure-communication-email, python-azure-communication-messages, python-azure-communication-phonenumbers, python-azure-communication-rooms, python-azure-communication-sms, python-azure-core, python-azure-core-tracing-opencensus, python-azure-core-tracing-opentelemetry, python-azure-cosmos, python-azure-data-tables, python-azure-datalake-store, python-azure-developer-devcenter, python-azure-developer-loadtesting, python-azure-digitaltwins-core, python-azure-eventgrid, python-azure-eventhub, python-azure-eventhub-checkpointstoreblob, python-azure-eventhub-checkpointstoreblob-aio, python-azure-graphrbac, python-azure-health-deidentification, python-azure-healthinsights-radiologyinsights, python-azure-identity, python-azure-identity-broker, python-azure-keyvault-administration, python-azure-keyvault-certificates, python-azure-keyvault-keys, python-azure-keyvault-secrets, python-azure-keyvault-securitydomain, python-azure-maps-geolocation, python-azure-maps-route, python-azure-maps-timezone, python-azure-messaging-webpubsubclient, python-azure-messaging-webpubsubservice, python-azure-mgmt-apimanagement, python-azure-mgmt-appcomplianceautomation, python-azure-mgmt-appconfiguration, python-azure-mgmt-appcontainers, python-azure-mgmt-applicationinsights, python-azure-mgmt-appplatform, python-azure-mgmt-arizeaiobservabilityeval, python-azure-mgmt-astro, python-azure-mgmt-authorization, python-azure-mgmt-avs, python-azure-mgmt-azurestackhcivm, python-azure-mgmt-batch, python-azure-mgmt-batchai, python-azure-mgmt-billing, python-azure-mgmt-billingbenefits, python-azure-mgmt-carbonoptimization, python-azure-mgmt-cdn, python-azure-mgmt-chaos, python-azure-mgmt-cloudhealth, python-azure-mgmt-cognitiveservices, python-azure-mgmt-communication, python-azure-mgmt-compute, python-azure-mgmt-computefleet, python-azure-mgmt-computerecommender, python-azure-mgmt-computeschedule, python-azure-mgmt-confluent, python-azure-mgmt-connectedcache, python-azure-mgmt-containerinstance, python-azure-mgmt-containerorchestratorruntime, python-azure-mgmt-containerregistry, python-azure-mgmt-containerservice, python-azure-mgmt-containerservicefleet, python-azure-mgmt-containerservicesafeguards, python-azure-mgmt-core, python-azure-mgmt-cosmosdb, python-azure-mgmt-databasewatcher, python-azure-mgmt-databox, python-azure-mgmt-databoxedge, python-azure-mgmt-datafactory, python-azure-mgmt-datalake-store, python-azure-mgmt-datamigration, python-azure-mgmt-dataprotection, python-azure-mgmt-dellstorage, python-azure-mgmt-dependencymap, python-azure-mgmt-desktopvirtualization, python-azure-mgmt-devcenter, python-azure-mgmt-deviceregistry, python-azure-mgmt-devopsinfrastructure, python-azure-mgmt-devtestlabs, python-azure-mgmt-digitaltwins, python-azure-mgmt-dns, python-azure-mgmt-dnsresolver, python-azure-mgmt-durabletask, python-azure-mgmt-edgeorder, python-azure-mgmt-edgezones, python-azure-mgmt-elastic, python-azure-mgmt-elasticsan, python-azure-mgmt-eventgrid, python-azure-mgmt-eventhub, python-azure-mgmt-extendedlocation, python-azure-mgmt-fabric, python-azure-mgmt-frontdoor, python-azure-mgmt-hardwaresecuritymodules, python-azure-mgmt-hdinsight, python-azure-mgmt-hdinsightcontainers, python-azure-mgmt-healthcareapis, python-azure-mgmt-healthdataaiservices, python-azure-mgmt-hybridcompute, python-azure-mgmt-imagebuilder, python-azure-mgmt-impactreporting, python-azure-mgmt-informaticadatamanagement, python-azure-mgmt-iotfirmwaredefense, python-azure-mgmt-iothub, python-azure-mgmt-iotoperations, python-azure-mgmt-keyvault, python-azure-mgmt-kubernetesconfiguration-extensions, python-azure-mgmt-kubernetesconfiguration-extensiontypes, python-azure-mgmt-kubernetesconfiguration-fluxconfigurations, python-azure-mgmt-kusto, python-azure-mgmt-lambdatesthyperexecute, python-azure-mgmt-largeinstance, python-azure-mgmt-loganalytics, python-azure-mgmt-logz, python-azure-mgmt-media, python-azure-mgmt-migrationassessment, python-azure-mgmt-migrationdiscoverysap, python-azure-mgmt-mobilenetwork, python-azure-mgmt-mongocluster, python-azure-mgmt-mongodbatlas, python-azure-mgmt-monitor, python-azure-mgmt-msi, python-azure-mgmt-mysqlflexibleservers, python-azure-mgmt-neonpostgres, python-azure-mgmt-netapp, python-azure-mgmt-network, python-azure-mgmt-networkcloud, python-azure-mgmt-newrelicobservability, python-azure-mgmt-onlineexperimentation, python-azure-mgmt-oracledatabase, python-azure-mgmt-paloaltonetworksngfw, python-azure-mgmt-pineconevectordb, python-azure-mgmt-planetarycomputer, python-azure-mgmt-playwright, python-azure-mgmt-playwrighttesting, python-azure-mgmt-portalservicescopilot, python-azure-mgmt-postgresqlflexibleservers, python-azure-mgmt-powerbiembedded, python-azure-mgmt-privatedns, python-azure-mgmt-purestorageblock, python-azure-mgmt-quantum, python-azure-mgmt-qumulo, python-azure-mgmt-quota, python-azure-mgmt-rdbms, python-azure-mgmt-recoveryservices, python-azure-mgmt-recoveryservicesbackup, python-azure-mgmt-recoveryservicesdatareplication, python-dnspython, python-trio, python-websocket-client, python-anyio

This update for azure-cli, azure-cli-core, azure-cli-telemetry, python-argcomplete, python-azure-ai-agents, python-azure-ai-formrecognizer, python-azure-ai-metricsadvisor, python-azure-ai-projects, python-azure-ai-translation-document, python-azure-ai-translation-text,...

8.4CVSS6.6AI score0.0095EPSS
SaveExploits0References11
osv_suse
osv_suse
•added 2026/06/01 9:26 a.m.•34 views

SUSE-SU-2026:21926-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264096. - CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259798. - CVE-2026-23274:...

7.8CVSS6.5AI score0.02425EPSS
SaveExploits22References13
osv_suse
osv_suse
•added 2026/06/01 8:22 a.m.•34 views

SUSE-SU-2026:21960-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264096. - CVE-2026-23243: RDMA/umad: Reject negative datalen in ibumadwrite bsc1259798. -...

7.8CVSS6.5AI score0.02425EPSS
SaveExploits22References13
osv_suse
osv_suse
•added 2026/05/21 8:54 a.m.•34 views

SUSE-SU-2026:21738-1 Security update for libsolv, libzypp, zypper

This update for libsolv, libzypp, zypper fixes the following issues: - CVE-2026-44933: prevent configured scripts from escaping the sigcheck directory bsc1265223 Changes in libsolv: - update to version 0.7.37: fix parsing of sha512 checksums in debian repositories improve speed of dirpooladddir...

8.5CVSS6AI score0.00193EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2026/03/23 4:34 p.m.•34 views

SUSE-SU-2026:0976-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to go 1.26.1 bsc1255111, jscSLE-18320: - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27137: crypto/x509: incorrect enforcement of email constraints bsc1259266. - CVE-2026-27138:...

7.5CVSS6.7AI score0.00834EPSS
SaveExploits0References12
osv_suse
osv_suse
•added 2026/03/05 9:51 a.m.•34 views

SUSE-SU-2026:0817-1 Security update for wireshark

This update for wireshark fixes the following issues: - CVE-2025-13946: MEGACO dissector infinite loop bsc1254472...

5.5CVSS6.1AI score0.00148EPSS
SaveExploits1References3
osv_suse
osv_suse
•added 2026/03/04 6:24 a.m.•34 views

SUSE-SU-2026:20695-1 Security update for cockpit-machines

This update for cockpit-machines fixes the following issues: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global prototypes bsc1257325...

8.2CVSS6.3AI score0.01823EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/10/24 10:12 a.m.•34 views

SUSE-SU-2025:20904-1 Security update for kernel-livepatch-MICRO-6-0_Update_8

This update for kernel-livepatch-MICRO-6-0Update8 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue wh...

9.8CVSS6.7AI score0.00587EPSS
SaveExploits1References17
osv_suse
osv_suse
•added 2025/10/24 10:10 a.m.•34 views

SUSE-SU-2025:20915-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

This update for kernel-livepatch-MICRO-6-0-RTUpdate7 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayedfree bsc1246075 - CVE-2025-38396: fs: export anoninodemakesecureinode and fix secretmem LSM bypass bsc1247158 - CVE-2025-38471: kernel: tls: always refresh the queue...

9.8CVSS6.7AI score0.00587EPSS
SaveExploits1References17
osv_suse
osv_suse
•added 2025/09/27 6:03 p.m.•34 views

SUSE-SU-2025:03397-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-15050055103 fixes several issues. The following security issues were fixed: - CVE-2025-38177: schhfsc: make hfscqlennotify idempotent bsc1246356. - CVE-2025-38181: calipso: Fix null-ptr-deref in calipsoreqset,delattr bsc1246001. - CVE-2025-38498:...

7.8CVSS7.1AI score0.00891EPSS
SaveExploits3References12
osv_suse
osv_suse
•added 2025/04/03 11:51 a.m.•34 views

SUSE-SU-2025:1126-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT bsc1239302 - Update to Tomcat 9.0.102 Fixes: + launch with java 17 bsc1239676 Catalina + Fix: Weak etags in the If-Range header should not match as...

10CVSS6.9AI score0.99927EPSS
SaveExploits52References5
osv_suse
osv_suse
•added 2025/03/26 11:30 a.m.•34 views

SUSE-SU-2025:1026-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2024-11235: Fixed reference counting in phprequestshutdown causing Use-After-Free bsc1239666 - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers bsc1239664 - CVE-2025-1219: Fixed libxml streams using wrong...

9.8CVSS8.3AI score0.01482EPSS
SaveExploits3References13
osv_suse
osv_suse
•added 2025/02/18 4:42 p.m.•34 views

SUSE-SU-2025:0585-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. - CVE-2025-26466: Fixed DoS attack against OpenSSH's client and server bsc1237041...

6.8CVSS6.6AI score0.4065EPSS
SaveExploits6References5
osv_suse
osv_suse
•added 2025/02/10 1:54 p.m.•34 views

SUSE-SU-2025:0405-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.7 MFSA 2025-10, bsc1236539. Security fixes: - CVE-2025-1009: use-after-free in XSLT. - CVE-2025-1010: use-after-free in Custom Highlight. - CVE-2025-1011: a bug in WebAssembly code generation could...

9.8CVSS8AI score0.0137EPSS
SaveExploits0References14
osv_suse
osv_suse
•added 2025/02/03 8:51 a.m.•34 views

SUSE-SU-2025:20028-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlogrecoverprocessdata bsc1228408. - CVE-2024-41013: xfs: do not walk off the end of a directory data block...

10CVSS5.8AI score0.02701EPSS
SaveExploits6References1801
osv_suse
osv_suse
•added 2024/12/19 6:32 p.m.•34 views

SUSE-SU-2024:4388-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 -...

9.8CVSS7.4AI score0.00811EPSS
SaveExploits1References38
osv_suse
osv_suse
•added 2024/11/26 3:36 a.m.•34 views

SUSE-SU-2024:4053-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20241112 release bsc1233313 - CVE-2024-21853: Faulty finite state machines FSMs in the hardware logic in some 4th and 5th Generation Intel Xeon Processors may allow an authorized user to potentially...

8.8CVSS6AI score0.00256EPSS
SaveExploits0References7
osv_suse
osv_suse
•added 2024/10/31 8:50 a.m.•34 views

SUSE-SU-2024:3844-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - Persist extracted key path for ldapsslclientinit over repeat invocations bsc1230852 - Re-enable use of .dsrc basedn for dsidm commands bsc1231462 - Update to version 2.2.10git18.20ce9289: RFE: Use previously extracted key path Update dsidm to...

7.5CVSS7.2AI score0.01256EPSS
SaveExploits0References9
osv_suse
osv_suse
•added 2024/10/29 6:03 a.m.•34 views

SUSE-SU-2024:3768-1 Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024197 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalancechildren bsc1227472. - CVE-2021-47598: schcake: do not call cakedestroy from cakeinit bsc1227471. - CVE-2021-47291:...

7.8CVSS7.1AI score0.00271EPSS
SaveExploits0References9
osv_suse
osv_suse
•added 2024/10/25 10:30 a.m.•34 views

SUSE-SU-2024:3757-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...

7.5CVSS7.7AI score0.01118EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2024/10/24 7:54 a.m.•34 views

SUSE-SU-2024:3755-1 Security update for go1.21-openssl

This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improper 100-continue handling bsc1227314 - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip bsc1225973 - CVE-2024-24790: Fixed unexpected behavior from ...

9.8CVSS8.4AI score0.91969EPSS
SaveExploits2References23
osv_suse
osv_suse
•added 2024/10/16 6:33 p.m.•34 views

SUSE-SU-2024:3687-1 Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122176 fixes several issues. The following security issues were fixed: - CVE-2024-41059: hfsplus: fix uninit-value in copyname bsc1228573. - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 bsc1226325...

8.8CVSS7.2AI score0.00503EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2024/10/16 6:55 a.m.•34 views

SUSE-SU-2024:3644-1 Security update for rubygem-puma

This update for rubygem-puma fixes the following issues: - CVE-2024-45614: Prevent underscores from clobbering hyphen headers bsc1230848. - CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies bsc1218638...

7.5CVSS6.4AI score0.00958EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2024/10/09 8:19 a.m.•34 views

SUSE-SU-2024:3559-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobjectput frees the memory bsc1225316. - CVE-2022-48788: nvme-rdma: fix possible use-after-free in transpor...

9.8CVSS8.5AI score0.00934EPSS
SaveExploits2References152
osv_suse
osv_suse
•added 2024/10/08 3:03 p.m.•34 views

SUSE-SU-2024:3551-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: actct: fix skb leak and crash on ooo frags bsc1221610. - CVE-2023-52752: smb: client: fix use-after-free bug in cifsdebugdataprocsho...

10CVSS8.3AI score0.00886EPSS
SaveExploits3References375
osv_suse
osv_suse
•added 2024/09/27 1:23 p.m.•34 views

SUSE-SU-2024:3478-1 Security update for quagga

This update for quagga fixes the following issues: - CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. bsc1230866 - CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. bsc1229438 - CVE-2022-37032: out-of-bounds read when...

9.8CVSS8AI score0.02494EPSS
SaveExploits2References7
osv_suse
osv_suse
•added 2024/09/24 4:46 p.m.•34 views

SUSE-SU-2024:3429-1 Security update for apr

This update for apr fixes the following issues: - CVE-2023-49582: Fixed an unexpected lax shared memory permissions. bsc1229783...

5.5CVSS5.7AI score0.00332EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2023/09/25 7:26 a.m.•34 views

SUSE-SU-2023:3753-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%apiver, then getting out of sync of what's...

9.8CVSS7.2AI score0.1895EPSS
SaveExploits0References19
osv_suse
osv_suse
•added 2023/04/25 4:33 p.m.•34 views

SUSE-SU-2023:2007-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024115 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdiscgraft bsc1207795. - CVE-2023-1118: Fixed a use-after-free bugs caused by enetxirqsim in media/rc bsc1208837. - CVE-2022-2991: Fixed an...

7.8CVSS6.9AI score0.00446EPSS
SaveExploits0References7
Total number of security vulnerabilities5000