Lucene search
+L
SuseMost viewed

5929 matches found

SUSE Linux
SUSE Linux
•added 2026/05/25 2:0 p.m.•11 views

Security update for xz

This update for xz fixes the following issue CVE-2026-34743: buffer overflow in lzmaindexappend bsc1261280. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

7.5CVSS5.9AI score0.0045EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/21 1:33 p.m.•11 views

Security update for rsync

This update for rsync fixes the following issues CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. CVE-2026-41035: Count of entries mismatch can lead to a use-after-free bsc1262223 CVE-2026-43617: Authorization Bypass via Hostname Resolution bsc1264515. CVE-2026-43618: Integer Overflow...

9.8CVSS7AI score0.72059EPSS
SaveExploits9References56
SUSE Linux
SUSE Linux
•added 2026/05/20 9:18 a.m.•11 views

Security update for vim

This update for vim fixes the following issue: Security fixes: CVE-2026-39881: command injection in NetBeans interface can lead to arbitrary file reads and writes bsc1261833. Other fixes: Update to 9.2.0398. 9.2.0398: MS-Windows: missing strptime support 9.2.0397: tabpanel: double-click opens a n...

6CVSS6.2AI score0.0062EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/20 7:13 a.m.•11 views

Security update for cockpit

This update for cockpit fixes the following issues CVE-2026-0775: npm: loading of modules from an unsecured location can be used for local privilege escalation and arbitrary code execution in the context of a target user bsc1256521. CVE-2026-4802: remote command execution via unsanitized...

8.8CVSS7.7AI score0.01016EPSS
SaveExploits1References12
SUSE Linux
SUSE Linux
•added 2026/05/19 11:9 a.m.•11 views

Security update for postgresql14

This update for postgresql14 fixes the following issues Update to version 14.23. Security issues: CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. CVE-2026-6474: Guard against...

8.8CVSS6.1AI score0.01006EPSS
SaveExploits0References36
SUSE Linux
SUSE Linux
•added 2026/05/18 12:9 p.m.•11 views

Security update for cloud-init

This update for cloud-init fixes the following issues: Update to version 25.1.3 bsc1245403, CVE-2024-11584, CVE-2024-6174 Update to version 25.1.1 bsc1239715, jscPED-8680, bsc1228414, bsc1237764 Make sure a directory exists, if not create it, before writing in that location bsc1236720 rsyslog...

8.8CVSS5.8AI score0.00205EPSS
SaveExploits0References24
SUSE Linux
SUSE Linux
•added 2026/05/18 8:12 a.m.•11 views

Security update for tiff

This update for tiff fixes the following issue CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function bsc1260411. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

8.8CVSS5.8AI score0.00553EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/18 7:51 a.m.•11 views

Security update for valkey

This update for valkey fixes the following issues CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution bsc1264164. CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution bsc1264165. CVE-2026-25243:...

7.7CVSS6.5AI score0.03301EPSS
SaveExploits7References12
SUSE Linux
SUSE Linux
•added 2026/05/18 7:51 a.m.•11 views

Security update for cups-filters

This update for cups-filters fixes the following issues error about PPD file during 'driverless' printer setup bsc1256868. ppd pull out from driverless printer feature broken bsc1256977. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

9.3CVSS7AI score0.63607EPSS
SaveExploits6References6
SUSE Linux
SUSE Linux
•added 2026/05/18 7:49 a.m.•11 views

Security update for python310

This update for python310 fixes the following issues Security issues: CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bsc1261969. CVE-2026-3446: base64 decoding stops at first padded quad by default bsc1261970. CVE-2026-4786: incomplete mitigation of , %action expansion fo...

9.1CVSS7.9AI score0.00579EPSS
SaveExploits1References22
SUSE Linux
SUSE Linux
•added 2026/05/18 7:34 a.m.•11 views

Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes one security issue The following security issue was fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

8.8CVSS6AI score0.93235EPSS
SaveExploits32References4
SUSE Linux
SUSE Linux
•added 2026/05/17 5:13 p.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix the following issue: Security issues fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present bsc1264450. CVE-2025-5451...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits48References20
SUSE Linux
SUSE Linux
•added 2026/05/17 3:22 p.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. CVE-2026-46300: net: skbuff: propagate shared-frag marker through...

8.8CVSS6.1AI score0.93235EPSS
SaveExploits46References16
SUSE Linux
SUSE Linux
•added 2026/05/17 10:4 a.m.•11 views

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes one security issue The following security issue was fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459. Patch Instructions: To install this SUSE update use the SUSE recommended...

8.8CVSS6AI score0.93235EPSS
SaveExploits32References4
SUSE Linux
SUSE Linux
•added 2026/05/14 10:34 p.m.•11 views

Security update for go1.25

This update for go1.25 fixes the following issues Security issues: CVE-2026-33811: net: crash when handling long CNAME response bsc1264508. CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1264506. CVE-2026-39817: cmd/go: "go tool pack" does not...

7.5CVSS5.9AI score0.00813EPSS
SaveExploits0References48
SUSE Linux
SUSE Linux
•added 2026/05/14 3:5 p.m.•11 views

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.40 fixes one security issue The following security issue was fixed: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264459. Patch Instructions: To install this SUSE update use the SUSE recommended installati...

8.8CVSS6AI score0.93235EPSS
SaveExploits32References4
SUSE Linux
SUSE Linux
•added 2026/05/13 3:24 p.m.•11 views

Security update for log4j

This update for log4j fixes the following issues: CVE-2026-34477: TLS connections vulnerable to interception due to incomplete hostname verification configuration checks bsc1262050. CVE-2026-34479: silent log event loss due to improper XML escaping in Log4j1XmlLayout bsc1262091. CVE-2026-34480:...

6.5CVSS5.8AI score0.0086EPSS
SaveExploits1References16
SUSE Linux
SUSE Linux
•added 2026/05/08 3:20 p.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix the following issue: This fixes the DirtyFrag issues: CVE-2026-43284: xfrm: esp: avoid in-place decrypt on shared skb frags bsc1264449. CVE-2026-43500: rxrpc and afs modules are disabled bsc1264450 Special Instructions and Notes: Pleas...

8.8CVSS6AI score0.93235EPSS
SaveExploits34References8
SUSE Linux
SUSE Linux
•added 2026/05/08 12:33 p.m.•11 views

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size bsc1258073. CVE-2025-39977: futex: Prevent use-after-free during...

7.8CVSS6.8AI score0.99907EPSS
SaveExploits237References24
SUSE Linux
SUSE Linux
•added 2026/05/08 12:4 p.m.•11 views

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.37 fixes one security issue The following security issue was fixed: CVE-2026-31431: crypto: algifaead - Revert to operating out-of-place bsc1263689. Patch Instructions: To install this SUSE update use the SUSE recommended installati...

7.8CVSS6.1AI score0.99907EPSS
SaveExploits237References4
SUSE Linux
SUSE Linux
•added 2026/05/08 8:59 a.m.•11 views

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issues: CVE-2025-2286...

8.2CVSS6.7AI score0.00905EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/08 8:58 a.m.•11 views

Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-35329: NULL pointer dereference when processing padding in PKCS7 bsc1261717. CVE-2026-35330: integer underflow when handling EAP-SIM/AKA attributes bsc1261705. CVE-2026-35331: acceptance of certificates violating X.509 name constrain...

9.2CVSS5.8AI score
SaveExploits6References24
SUSE Linux
SUSE Linux
•added 2026/05/07 1:55 p.m.•11 views

Security update for freeipmi

This update for freeipmi fixes the following issue: CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses bsc1260414. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

7.6CVSS5.9AI score0.00403EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/07 1:54 p.m.•11 views

Security update for 389-ds

This update for 389-ds fixes the following issues: Update to version 2.0.20git89.937b1f291. Security issues fixed: CVE-2025-14905: heap buffer overflow due to improper size calculation in schemaattrenumcallback callback bsc1258727. Other updates and bugfixes: Issue 7224 - CI Test - Simplify...

8.6CVSS6AI score0.01138EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/05/07 7:15 a.m.•11 views

Security update for xen

This update for xen fixes the following issues: Update to Xen 4.20.3 bug fix release bsc1027519 jscPED-8907. CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 bsc1262428. CVE-2026-23557: Xenstored DoS via XSRESETWATCHES command bsc1262178. CVE-2026-23558: grant table v...

7.8CVSS5.8AI score0.00191EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/05/07 7:15 a.m.•11 views

Security update for mozjs52

This update for mozjs52 fixes the following issues CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value bsc1259728. CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing bsc1259713...

8.7CVSS5.8AI score0.00216EPSS
SaveExploits1References12
SUSE Linux
SUSE Linux
•added 2026/05/07 12:42 a.m.•11 views

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.31+11 April 2026 CPU. Security issues fixed: CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

8.7CVSS5.9AI score0.00702EPSS
SaveExploits1References34
SUSE Linux
SUSE Linux
•added 2026/05/06 12:8 p.m.•11 views

Security update for erlang

This update for erlang fixes the following issues: CVE-2026-21620: remote arbitrary read/write via TFTP relative path traversal bsc1258663. CVE-2026-23941: HTTP Request Smuggling in Erlang OTP bsc1259687. CVE-2026-23942: path traversal vulnerability in Erlang OTP bsc1259681. CVE-2026-23943: denia...

9.1CVSS7.2AI score0.00644EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2026/05/06 8:45 a.m.•11 views

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.31+11 April 2026 CPU. Security issues fixed: CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

8.7CVSS7.2AI score0.00702EPSS
SaveExploits1References34
SUSE Linux
SUSE Linux
•added 2026/05/04 9:19 a.m.•11 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix one security issue The following security issue was fixed: CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algifaead bsc1262573. Special Instructions and Notes: Please reboot the system after...

7.8CVSS6.1AI score0.99907EPSS
SaveExploits237References4
SUSE Linux
SUSE Linux
•added 2026/04/21 11:4 a.m.•11 views

Security update for python311

This update for python311 fixes the following issues: CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. CVE-2026-3479: python: improper resource argument validation can allow path traversal bsc1259989. CVE-2026-3644: incomplete contr...

8.2CVSS5.8AI score0.00638EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2026/04/21 9:26 a.m.•11 views

Security update 5.1.3 for Multi-Linux Manager Salt Bundle

This update fixes the following issues: venv-salt-minion: Security issues fixed: CVE-2026-31958: Security patch for Salt vendored tornado: Added limits on multipart form data parsing bsc1259554 Added x8664v2 as a possible rpm package architecture Make users with backslash working for salt-ssh...

8.7CVSS5.7AI score0.00375EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/04/21 9:26 a.m.•11 views

Security update 5.1.3 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: Security issues fixed: CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup bsc1258893 Bumped...

9.8CVSS6.5AI score0.01929EPSS
SaveExploits4References98
SUSE Linux
SUSE Linux
•added 2026/04/20 4:17 p.m.•11 views

Security update for python

This update for python fixes the following issue: CVE-2026-3446: Base64 decoding stops at first padded quad by default bsc1261970. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

6CVSS5.7AI score0.00188EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/20 4:16 p.m.•11 views

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issue: CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application bsc1261209. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

8.7CVSS5.7AI score0.00382EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/04/17 10:0 a.m.•11 views

Security update for bind

This update for bind fixes the following issues: CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations bsc1260805. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.7CVSS7.4AI score0.01599EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/16 1:34 p.m.•11 views

Security update for ovmf

This update for ovmf fixes the following issue: CVE-2025-59438: mbedtls: padding oracle attack possible through timing of cipher error reporting bsc1252441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.7CVSS5.8AI score0.00246EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/16 12:35 p.m.•11 views

Security update for util-linux

This update for util-linux fixes the following issues: Security issue: CVE-2026-3184: access control bypass due to improper hostname canonicalization in login bsc1258859. Non security issues: recognize fuse "portal" as a virtual file system bsc1234736. fdisk: fix possible partition overlay and da...

6.3CVSS5.8AI score0.00436EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/04/16 9:16 a.m.•11 views

Security update for python3

This update for python3 fixes the following issues: CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. CVE-2026-3479: improper resource argument validation can allow path traversal bsc1259989. CVE-2026-3644: incomplete control charact...

8.2CVSS5.9AI score0.00638EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2026/04/15 1:37 p.m.•11 views

Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: Upidate to 4.1.132: CVE-2026-33870: incorrectly parses quoted strings in HTTP/1.1 can lead to request smuggling bsc1261031. CVE-2026-33871: sending a flood of CONTINUATION frames can lead to a denial of service bsc1261043. Changelo...

8.7CVSS5.9AI score0.01125EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2026/04/15 1:36 p.m.•11 views

Security update for python311

This update for python311 fixes the following issues: Updated to Python 3.11.15 CVE-2025-6075: If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables bsc1252974. CVE-2025-11468: header injection when folding a long...

8.7CVSS5.8AI score0.01594EPSS
SaveExploits0References60
SUSE Linux
SUSE Linux
•added 2026/03/30 1:44 p.m.•11 views

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version 5.2.6-0 Update translation strings venv-salt-minion: Fix the typo causing buiding EL9 bundle without binary dependencies Backport security patches for Salt vendored tornado: CVE-2025-67724: missing validation of supplied reason phrase...

8.7CVSS6.7AI score0.00559EPSS
SaveExploits0References22
SUSE Linux
SUSE Linux
•added 2026/03/30 9:17 a.m.•11 views

Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd: Version 5.2.6-0 Update translation strings uyuni-tools: Version 5.2.5-0 Remove migrate command Remove template script from mgradm: use the one in the image Split the TFTP server into a separate container Explicitly start proxy pods after operation...

8.7CVSS6.8AI score0.00559EPSS
SaveExploits0References26
SUSE Linux
SUSE Linux
•added 2026/03/25 10:17 a.m.•11 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2025-67724: Fixed missing validation of supplied reason phrase bsc1254903 CVE-2025-67725: Fixed DoS via malicious HTTP request bsc1254905 CVE-2025-67726: Fixed HTTP header parameter parsing algorithm bsc1254904...

8.7CVSS5.8AI score0.01594EPSS
SaveExploits0References22
SUSE Linux
SUSE Linux
•added 2026/03/19 10:27 a.m.•11 views

Security update for tomcat

This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: CVE-2025-66614: client certificate verification bypass due to virtual host mapping bsc1258371. CVE-2026-24733: improper input validation on HTTP/0.9 requests bsc1258385. CVE-2026-24734: certificate revocation bypass due ...

8.7CVSS5.7AI score0.00498EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2026/03/18 9:15 a.m.•11 views

Security update for gvfs

This update for gvfs fixes the following issues: CVE-2026-28295: Fix ftp use control connection address for PASV data bsc1258953. CVE-2026-28296: Fix ftp reject paths containing CR/LF characters bsc1258954. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

7.3CVSS5.7AI score0.0036EPSS
SaveExploits2References8
SUSE Linux
SUSE Linux
•added 2026/03/17 5:34 p.m.•11 views

Security update for container-suseconnect

This update for container-suseconnect rebuilds it against the current go 1.25 security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product:...

5.8AI score
SaveExploits0
SUSE Linux
SUSE Linux
•added 2026/03/05 8:34 a.m.•11 views

Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Update to NSS 3.112.3: CVE-2026-2781: Avoid integer overflow in platform-independent ghash bsc1258568 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.3CVSS6AI score0.0036EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/03 1:19 p.m.•11 views

Security update for evolution-data-server

This update for evolution-data-server fixes the following issue: CVE-2026-2604: arbitrary file deletion via inconsistent URI handling bsc1258307. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

6.8CVSS6AI score0.00189EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/02 7:4 a.m.•11 views

Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes one security issue The following security issue was fixed: CVE-2025-38129: pagepool: fix use-after-free in pagepoolrecycleinring bsc1258139. Patch Instructions: To install this SUSE update use the SUSE recommended installati...

8.5CVSS6.9AI score0.00165EPSS
SaveExploits0References4
Total number of security vulnerabilities5000