24131 matches found
SUSE-SU-2025:0050-1 Security update for libmfx
This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. bsc1226897 - CVE-2023-45221: Fixed an improper buffer restrictions. bsc1226898 - CVE-2023-22656: Fixed an out-of-bounds read. bsc1226899 - CVE-2023-47282: Fixed an out-of-bounds write...
SUSE-SU-2025:0049-1 Security update for python310
This update for python310 fixes the following issues: - Update to 3.10.16...
SUSE-SU-2025:0048-1 Security update for python312
This update for python312 fixes the following issues: - Properly quote path names provided when creating a virtual environment bsc1232241, CVE-2024-9287...
SUSE-SU-2025:0047-1 Security update for python39
This update for python39 fixes the following issue: - Update to 3.9.21...
SUSE-SU-2025:0044-1 Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029...
SUSE-SU-2025:0043-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 bsc1234851: Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously crafted web content may lead to an unexpected...
SUSE-SU-2025:0040-1 Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c bsc1235029...
SUSE-SU-2025:0035-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48853: swiotlb: fix info leak with DMAFROMDEVICE bsc1228015. - CVE-2024-26801: Bluetooth: Avoid potential use-after-free in hcierrorreset bsc1222413. -...
SUSE-SU-2025:0034-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The Linux Enterprise 12 SP5 kernel turned LTSS Extended Security The following security bugs were fixed: - CVE-2021-46936: Fixed use-after-free in twtimerhandler bsc1220439. - CVE-2021-47163: kABI fix for...
SUSE-SU-2025:0032-1 Security update for file-roller
This update for file-roller fixes the following issues: - CVE-2020-36314: Fixed directory traversal via directory symlink pointing outside of the target directory bsc1189131...
SUSE-SU-2025:0031-1 Security update for gtk3
This update for gtk3 fixes the following issues: - CVE-2024-6655: Fixed library injection from current working directory bsc1228120. Other fixes: - Updated to version 3.24.43...
SUSE-SU-2025:0029-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809...
SUSE-SU-2025:0019-1 Security update for sysstat
This update for sysstat fixes the following issues: - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224...
SUSE-SU-2025:0018-1 Security update for dpdk
This update for dpdk fixes the following issues: - CVE-2024-11614: Fixed Denial Of Service from malicious guest on hypervisors using DPDK Vhost library bsc1234718...
SUSE-SU-2025:0016-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56326: sandbox breakout through indirect reference to format method in template file. bsc1234809...
SUSE-SU-2025:0012-1 Security update for sysstat
This update for sysstat fixes the following issues: - CVE-2023-33204: Fixed a multiplication integer overflow in checkoverflow in common.c bsc1211507 - CVE-2022-39377: Fixed arithmetic overflow in allocatestructures bsc1205224...
SUSE-SU-2025:0011-1 Security update for pcp
This update for pcp fixes the following issues: Upgrade to 6.2.0 bsc1217826 / PED8192: - CVE-2024-45770: Fixed symlink race bsc1230552. - CVE-2024-45769: Fixed pmstore corruption bsc1230551 - CVE-2023-6917: Fixed local privilege escalation from pcp user to root bsc1217826. Bug fixes: - Reintroduc...
SUSE-SU-2025:0006-1 Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template bsc1234808 - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809...
SUSE-SU-2025:0005-1 Security update for liboqs, oqs-provider
This update for liboqs, oqs-provider fixes the following issues: This update supplies the new FIPS standardized ML-KEM, ML-DSA, SHL-DSA algorithms. This update liboqs to 0.12.0: - This release updates the ML-DSA implementation to the final FIPS 204 version. This release still includes the NIST...
SUSE-SU-2024:4436-1 Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919 - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821...
SUSE-SU-2024:4435-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. bsc1234795...
SUSE-SU-2024:4433-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241218T202206 2024-12-18T20:22:06Z. jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2024-3333 - Update to version 0.0.20241218T163557 2024-12-18T16:35:57Z. jscPED-11136 Go CVE...
SUSE-SU-2024:4432-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc bsc1234795...
SUSE-SU-2024:4429-1 Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821 - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919...
SUSE-SU-2024:4428-1 Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821 - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919...
SUSE-SU-2024:4423-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc bsc1234795...
SUSE-SU-2024:4422-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. bsc1234795...
SUSE-SU-2024:4421-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc bsc1234795...
SUSE-SU-2024:4416-1 Security update for vhostmd
This update for vhostmd fixes the following issues: Updated to version 1.2 - Fix actions using the 'free' command - Fix buffer accounting when generating metric XML - Change actions to retrieve vendor and product info - Add a 'unit' attribute to the metrics element - vif-stats.py: convert to...
SUSE-SU-2024:4414-1 Security update for gdb
This update for gdb fixes the following issues: Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register named ZT0. GDB now supports the AArch64 Scalable Matrix Extension SME, which includes a new matrix register...
SUSE-SU-2024:4413-1 Security update for gdb
This update for gdb fixes the following issues: Mention changes in GDB 14: GDB now supports the AArch64 Scalable Matrix Extension 2 SME2, which includes a new 512 bit lookup table register named ZT0. GDB now supports the AArch64 Scalable Matrix Extension SME, which includes a new matrix register...
SUSE-SU-2024:4412-1 Security update for mozjs78
This update for mozjs78 fixes the following issues: - CVE-2024-50602: Fixed DoS via XMLResumeParser bsc1232599...
SUSE-SU-2024:4411-1 Security update for mozjs115
This update for mozjs115 fixes the following issues: - CVE-2024-11498: Fixed resource exhaustion via Stack overflow in libjxl bsc1233786 - CVE-2024-11403: Fixed out of Bounds Memory Read/Write in libjxl bsc1233766 - CVE-2024-50602: Fixed DoS via XMLResumeParser in libexpat bsc1232602...
SUSE-SU-2024:4409-1 Recommended update for vim
This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim bsc1231373 - CVE-2024-43374: Fixed use-after-free in alistadd bsc1229238 Other fixes: - Remove patch that introduced a bug caused significantly more CPU usage bsc1220618 - Updated to...
SUSE-SU-2024:4407-1 Security update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative
This update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative fixes the following issues: - CVE-2024-47535: Fixed unsafe reading of large environment files when Netty is loaded by a java application can lead to a crash due to the JVM memory limit being exceeded in nett...
SUSE-SU-2024:4401-1 Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919 - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821...
SUSE-SU-2024:4400-1 Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919 - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821...
SUSE-SU-2024:4397-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-49995: tipc: guard against string buffer overrun bsc1232432. - CVE-2024-50290: media: cx24116: prevent overflows on SNR calculus bsc1233479. - CVE-2024-5306...
SUSE-SU-2024:4396-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2024-27306: filenames and paths not escaped when generating index pages for static file handling. bsc1223098...
SUSE-SU-2024:4393-1 Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821 - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919...
SUSE-SU-2024:4392-1 Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion bsc1233894...
SUSE-RU-2024:4391-1 Recommended update for docker-stable
This update for docker-stable fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at . Some notable changelogs from the last update: - Add a new toggle file /etc/docker/suse-secrets-enable which allows users to disable the SUSEConnect integration with Dock...
SUSE-SU-2024:4390-1 Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2024-53008: Fixed HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server bsc1233973 Other fixes: - Update to version 2.8.11...
SUSE-SU-2024:4389-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2021-3156: Fixed regression in CVE bsc1234371...
SUSE-SU-2024:4388-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp bsc1220927. - CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core bsc1232224 -...
SUSE-SU-2024:4387-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size bsc1224948. - CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in...
SUSE-SU-2024:4386-1 Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs bsc1233420 Other fixes: - no longer supply bogus services to callbacks bsc1226586...
SUSE-SU-2024:3927-2 Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry bsc1232528...