SUSE-SU-2025:0388-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation bsc1236136...

SUSE-SU-2025:0387-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation bsc1236136...

SUSE-SU-2025:0386-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705...

SUSE-SU-2025:0384-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

SUSE-SU-2025:20223-1 Security update for rsync

This update for rsync fixes the following issues: - Bump protocol version to 32 - make it easier to show server is patched. - Fix FLAGGOTDIRFLIST collission with FLAGHLINKED - Security update,CVE-2024-12747, bsc1235475 race condition in handling symbolic links - Security update, fix multiple...

SUSE-SU-2025:0382-1 Security update for podman

This update for podman fixes the following issues: - CVE-2024-11218: Fixed a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. bsc1236270...

SUSE-SU-2025:0380-1 Security update for wget

This update for wget fixes the following issues: - CVE-2021-31879: Authorization header disclosed upon redirects to different origins. bsc1185551...

SUSE-SU-2025:0377-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - Update to version 20250115.01 bsc1236406, bsc1236407 - CVE-2024-24790: Bump the golang compiler version to 1.22.4 bsc1225974...

SUSE-SU-2025:0374-1 Security update for MozillaFirefox

This update for MozillaFirefox to 128.7esr fixes the following issues: MFSA 2025-09 CVE-2025-1009 bmo1936613 Use-after-free in XSLT CVE-2025-1010 bmo1936982 Use-after-free in Custom Highlight CVE-2025-1011 bmo1936454 A bug in WebAssembly code generation could result in a crash CVE-2025-1012...

SUSE-SU-2025:0372-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow bsc1236590 - CVE-2025-0167: Fixed netrc and default credential leak bsc1236588...

SUSE-SU-2025:0371-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow bsc1236590 - CVE-2025-0167: Fixed netrc and default credential leak bsc1236588...

SUSE-SU-2025:0370-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow bsc1236590 - CVE-2025-0167: Fixed netrc and default credential leak bsc1236588...

SUSE-SU-2025:0369-1 Security update for curl

This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow bsc1236590 - CVE-2025-0167: Fixed netrc and default credential leak bsc1236588...

SUSE-SU-2025:0366-1 Security update for wget

This update for wget fixes the following issues: - CVE-2021-31879: Authorization header disclosed upon redirects to different origins. bsc1185551...

SUSE-SU-2025:0058-1 Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.98 - Fixed CVEs: + CVE-2024-54677: DoS in examples web application bsc1234664 + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation bsc1234663 + CVE-2024-52317: Request/response mix-up with HTTP/2 bsc1233435 - Catalina...

SUSE-SU-2025:0033-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.34 - Fixed CVEs: + CVE-2024-54677: DoS in examples web application bsc1234664 + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation bsc1234663 + CVE-2024-52317: Request/response mix-up with HTTP/2 bsc1233435 +...

SUSE-SU-2025:0359-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

SUSE-SU-2025:0357-1 Security update for etcd

This update for etcd fixes the following issues: Security Update to version 3.5.18: Ensure all goroutines created by StartEtcd to exit before closing the errc mvcc: restore tombstone index if it's first revision Bump go toolchain to 1.22.11 Avoid deadlock in etcd.Close when stopping during...

SUSE-SU-2025:0356-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136...

SUSE-SU-2025:0355-1 Security update for bind

This update for bind fixes the following issues: Update to release 9.18.33 Security Fixes: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 - CVE-2024-12705: Fixes multiple issues in DNS-over-HTTPS implementation when under heavy query load...

SUSE-SU-2025:0351-1 Security update for krb5

This update for krb5 fixes the following issues: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619...

SUSE-SU-2025:0350-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2024-39917: Enforce no login screen if requirecredentials is set bsc1227769...

SUSE-SU-2025:20122-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2024-12084: Fixed Heap Buffer Overflow in Checksum Parsing bsc1234100. - CVE-2024-12085: Fixed Info Leak via uninitialized Stack contents defeating ASLR bsc1234101. - CVE-2024-12086: Fixed server leaking arbitrary client files bsc1234102. -...

SUSE-SU-2025:0349-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136...

SUSE-SU-2025:0348-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. bsc1236460...

SUSE-SU-2025:0346-1 Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518...

SUSE-SU-2025:0345-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136...

SUSE-SU-2025:0344-1 Security update for orc

This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files bsc1228184...

SUSE-SU-2025:0343-1 Security update for krb5

This update for krb5 fixes the following issues: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619...

SUSE-SU-2025:0342-1 Security update for ignition

This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 bsc1236518...

SUSE-SU-2025:0341-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. bsc1236460...

SUSE-SU-2025:0340-1 Security update for rsync

This update for rsync fixes the following issues: - Bump rsync protocol version to 32 to show server is patched against recent vulnerabilities...

SUSE-SU-2025:0339-1 Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.14+7 January 2025 CPU: Security fixes: - CVE-2025-21502: Enhance array handling JDK-8330045, bsc1236278 Other changes: - JDK-7093691: Nimbus LAF: disabled JComboBox using renderer has bad font color -...

SUSE-SU-2025:0338-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.26+4 January 2025 CPU Security fixes: - CVE-2025-21502: Enhance array handling JDK-8330045, bsc1236278 Other changes: - JDK-8224624: Inefficiencies in CodeStrings::addcomment cause - timeouts - JDK-822504...

SUSE-SU-2025:0337-1 Security update for bind

This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596...

SUSE-SU-2025:0336-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2024-39917: Enforce no login screen if requirecredentials is set bsc1227769...

SUSE-SU-2025:0335-1 Security update for xrdp

This update for xrdp fixes the following issues: - CVE-2024-39917: Enforce no login screen if requirecredentials is set bsc1227769...

SUSE-SU-2025:0328-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

SUSE-SU-2025:0327-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

SUSE-SU-2025:0325-1 Security update for clamav

This update for clamav fixes the following issues: New version 1.4.2: CVE-2025-20128, bsc1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service DoS condition. - Start clamonacc with --fdpass to avoid errors due to clamd not being able to...

SUSE-SU-2025:20118-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues: - Update to 2.90: CVE-2023-50387, CVE-2023-50868: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses bsc1219823, bsc1219826. Fix reversion in --rev-server introduced in 2.88 which caused breakage if the prefix...

SUSE-SU-2025:20119-1 Security update for python-dnspython

This update for python-dnspython fixes the following issues: - CVE-2023-29483: Fixed potential DoS via the Tudoor mechanism bsc1222693...

SUSE-SU-2025:20117-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template bsc1234808 - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809...

SUSE-SU-2025:20116-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2024-40896: Fixed XML external entity vulnerability bsc1234812...

SUSE-SU-2025:20110-1 Security update for docker

This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Docker whic...

SUSE-SU-2025:20108-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Make sure the correct FW package is installed on non-CUDA. - only obsolete 555 CUDA driver/firmware packages - For CUDA: update version to 565.57.01 - Add 'dummy' firmware package on SLE to work around update issues. On...

SUSE-SU-2025:20107-1 Security update for buildkit

This update for buildkit fixes the following issues: - Update to version 0.12.5: update runc to v1.1.12 exec: add extra validation for submount sources fixes CVE-2024-23651, bsc1219267 oci: fix error handling on submount calls executor: recheck mount stub path within root after container run fixe...

SUSE-SU-2025:20106-1 Security update for curl

This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances bsc1234068...

SUSE-SU-2025:20105-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names bsc1233285. - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soupheaderparseparamliststrict bsc1233292. - CVE-2024-52532: Fixed...

SUSE-SU-2025:20104-1 Security update for pam

This update for pam fixes the following issues: - CVE-2024-10963: Fixed improper hostname interpretation in pamaccess that could lead to access control bypass bsc1233078...