24092 matches found
SUSE-SU-2025:3897-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375...
SUSE-SU-2025:1771-1 Security update for iputils
This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior bsc1242300. Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCKDGRAM on big endian systems bsc1243284...
SUSE-SU-2025:3892-1 Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506001017 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...
SUSE-SU-2025:3888-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700713 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38618: vsock: Do not allow binding to VMADDRPORTANY bsc1249207...
SUSE-SU-2025:3889-1 Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700716 fixes one issue. The following security issue was fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631...
SUSE-SU-2025:3886-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc bsc1248176. - CVE-2025-38617: net/packet...
SUSE-SU-2025:3880-1 Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506001023 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...
SUSE-SU-2025:3878-1 Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-1506001026 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in icecopyandinitpkg bsc1248631. - CVE-2025-38617: net/packet: fix a race in packetsetring and packetnotifier bsc1249208. -...
SUSE-SU-2025:3875-1 Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function leading to denial of service bsc1251979 - CVE-2025-10911: last fix caused a regression, patch was temporary disabled bsc1250553...
SUSE-SU-2025:3874-1 Security update for xwayland
This update for xwayland fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed Use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed Value overflow in Xkb extension XkbSetCompatMap CVE-2025-62231,...
SUSE-SU-2025:3873-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
SUSE-SU-2025:3872-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:3869-1 Security update for himmelblau
This update for himmelblau fixes the following issues: Update to version 0.7.18+git.0.8485a75. - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences could be injected into terminal output when logged bsc1249013...
SUSE-SU-2025:3868-1 Security update for chrony
This update for chrony fixes the following issues: Security issues fixed: - Race condition during socket creation by chronyc allows privilege escalation from user chrony to root bsc1246544. Other issues fixed: - Improve connection retry intervals when facing NTS-KE related issues bsc1213551. nts:...
SUSE-SU-2025:3867-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282...
SUSE-SU-2025:3866-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:3865-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:3864-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:3863-1 Security update for xwayland
This update for xwayland fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap CVE-2025-62231,...
SUSE-SU-2025:20965-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Ignore invalid date when processing cookies to prevent out-of-bounds read bsc1250562...
SUSE-SU-2025:20964-1 Security update for colord
This update for colord fixes the following issues: - CVE-2021-42523: Fixed information disclosure in cd-device-db.c and cd-profile-db.c bsc1250750...
SUSE-SU-2025:3859-1 Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.9+10 October 2025 CPU: - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data bsc1252414. - CVE-2025-53066: Fixed unauthenticat...
SUSE-SU-2025:3858-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed use-after-free in XPresentNotify structures creation CVE-2025-62229, bsc1251958 - Fixed use-after-free in Xkb client resource removal CVE-2025-62230, bsc1251959 - Fixed value overflow in Xkb extension XkbSetCompatMap...
SUSE-SU-2025:3857-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
SUSE-SU-2025:3856-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
SUSE-SU-2025:3855-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
SUSE-SU-2025:3845-1 Security update for fetchmail
This update for fetchmail fixes the following issues: - CVE-2025-61962: fixed a denial of service condition bsc1251194...
SUSE-SU-2025:3844-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282...
SUSE-SU-2025:3843-1 Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls bsc1251271, XSA-475 - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian interface bsc1248807, XSA-472...
SUSE-SU-2025:3842-1 Security update for python-Authlib
This update for python-Authlib fixes the following issues: - CVE-2025-62706: fixed a denial of service condition bsc1252504, ghauthlib/authlib@e0863d512931...
SUSE-SU-2025:3839-1 Security update 5.1.1 for Multi-Linux Manager Server
This update fixes the following issues: Multi-Linux-Manager-Server-SLE-release: - Update for the release packages for fixing the EOL - Fixed migration issue bsc1243486 server-attestation-image was updated from version 5.1.7 to 5.1.10: - CVE-2025-53192: Do not use apache-commons-ognl but its...
SUSE-SU-2025:3835-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.29+7 October 2025 CPU: - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data bsc1252414. - CVE-2025-53066: Fixed...
SUSE-SU-2025:3834-1 Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests bsc1251941...
SUSE-SU-2025:3827-1 Security update 4.3.16.1 for SUSE Manager Server Release Notes
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16.1 CVEs Fixed: CVE-2025-53883, CVE-2025-53880, CVE-2025-53192 Bugs mentioned: bsc1246439, bsc1246277, bsc1248252...
SUSE-SU-2025:3826-1 Security update 4.3.16.1 for SUSE Manager Server 4.3 LTS
This update fixes the following issues: susemanager-build-keys: - Update SUSE GPG key and make it available for Salt bsc1250911 susemanager-sls: - Version 4.3.50-0 Fix OS Family grain name bsc1250911 - Version 4.3.49-0 Fixed syntax error in Salt state - Version 4.3.48-0 Automatically deploy the...
SUSE-SU-2025:3825-1 Recommended update 5.0.5.1 for Multi-Linux Manager Server
This update fixes the following issues: server-attestation-image: - CVE-2025-53192: Do not use apache-commons-ognl but its successor ognl bsc1248252 - Image rebuilt to the newest version and updated build dependencies server-hub-xmlrpc-api-image, server-image, server-migration-14-16-image: - Imag...
SUSE-SU-2025:3819-1 Security update 5.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: dracut-saltboot was updated from version 0.1 to version 1.0.0: - Version 1.0.0 bugs fixed: Reboot on salt key timeout bsc1237495 Fixed parsing files with space in the name bsc1252100 golang-github-prometheus-alertmanager was updated from version 0.26.0 to...
SUSE-SU-2025:3817-1 Security update 5.1.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-alertmanager: - Update to version 0.28.1 jscPED-13285: Improved performance of inhibition rules when using Equal labels. Improve the documentation on escaping in UTF-8 matchers. Update alertmanagerconfighash metric help to document...
SUSE-SU-2025:3812-1 Security update for cmake
This update for cmake fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461...
SUSE-SU-2025:3811-1 Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-11626: fixed MONGO dissector infinite loop bsc1251933...
SUSE-SU-2025:3810-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2025-59728: allocated space for the appended '/' bsc1251137...
SUSE-RU-2025:20961-1 Recommended update for afterburn
This update for afterburn fixes the following issues: - Update to version 5.9.0.git21.a73f509: docs/release-notes: update for release 5.10.0 cargo: update dependencies microsoft/azure: Add XML attribute alias for serde-xml-rs Fedora compat docs/release-notes: Add entry for Azure SharedConfig XML...
SUSE-SU-2025:3809-1 Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2025-50200: prevented logging of Basic Auth header from HTTP requests bsc1245105 - fixed a bad logrotate configuration that allowed escalation from rabbitmq to root, /var/log/rabbitmq ownership is now 750 bsc1246091...
SUSE-SU-2025:3808-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.4.0 ESR bsc1251263. - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance - CVE-2025-11709: Out of bounds read/write in a privileged process triggered by WebGL textures -...
SUSE-SU-2025:3807-1 Security update for erlang
This update for erlang fixes the following issues: - CVE-2025-48041: fixed erlang exhaustion of file handles in SSH bsc1249473...
SUSE-SU-2025:3804-1 Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1 Update to NSS 3.112.2: Prevent leaks during pkcs12 decoding. SECASN1Decode should ensure it has read as many bytes as each length field indicates Update to NSS 3.112.1: restore support for finding...
SUSE-SU-2025:3799-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251023T162509 2025-10-23T16:25:09Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3979 CVE-2025-59824 GHSA-hqrf-67pm-wgfq GO-2025-3981 CVE-2025-59823 GHSA-227x-7mh8-3cf6...
SUSE-SU-2025:3798-1 Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls bsc1251271, XSA-475 - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian interface bsc1248807, XSA-472...
SUSE-SU-2025:3797-1 Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls bsc1251271, XSA-475 - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian interface bsc1248807, XSA-472...