Lucene search
+L
SuseMost viewed

5957 matches found

SUSE Linux
SUSE Linux
•added 2024/10/29 12:55 p.m.•4 views

Security update for pgadmin4

This update for pgadmin4 fixes the following issues: CVE-2024-38355: Fixed socket.io: unhandled 'error' event bsc1226967 CVE-2024-38998: Fixed requirejs: prototype pollution via function config bsc1227248 CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts..configure...

9.1CVSS7.2AI score0.09685EPSS
SaveExploits9References40
SUSE Linux
SUSE Linux
•added 2024/10/29 12:55 p.m.•4 views

Security update for libgsf

This update for libgsf fixes the following issues: CVE-2016-9888: Fixed null pointer dereference with corrupted tar files bsc1014609 CVE-2024-36474: Fixed out-of-bounds index when processing a directory via an integer overflow in the compound document binary file format parser bsc1231282...

7.8CVSS7.9AI score0.0133EPSS
SaveExploits0References12
SUSE Linux
SUSE Linux
•added 2024/10/24 8:29 a.m.•4 views

Security update for cups-filters

This update for cups-filters fixes the following issues: CVE-2024-47850: Fixed cups-browsed can be abused to initiate remote DDoS against third-party targets bsc1231294 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.9CVSS7.4AI score0.00853EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/10/23 11:33 a.m.•4 views

Security update for cargo-c

This update for cargo-c fixes the following issues: Security fixes: CVE-2024-45405: Fixed gix-path improper path resolution bsc1230683 Other fixes: Update to version 0.10.3git0.ee7d7ef: Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

5.6CVSS6.8AI score0.00257EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/10/22 1:34 p.m.•4 views

Security update for qemu

This update for qemu fixes the following issues: Security fixes: CVE-2024-8354: Fixed assertion failure in usbepget bsc1230834 CVE-2024-8612: Fixed information leak in virtio devices bsc1230915 Update version to 8.2.7: Security fixes: CVE-2024-7409: Fixed denial of service via improper...

8.2CVSS7.3AI score0.01027EPSS
SaveExploits0References22
SUSE Linux
SUSE Linux
•added 2024/10/18 2:47 p.m.•4 views

Security update for php74

This update for php74 fixes the following issues: CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed bsc1231360 CVE-2024-8927: Fixed cgi.forceredirect configuration is bypassable due to an environment variable collision...

6.9CVSS7AI score0.01054EPSS
SaveExploits3References12
SUSE Linux
SUSE Linux
•added 2024/10/18 6:34 a.m.•4 views

Security update for jetty-minimal

This update for jetty-minimal fixes the following issues: CVE-2024-8184: Fixed remote denial-of-service in ThreadLimitHandler.getRemote bsc1231651. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

6.9CVSS7.5AI score0.0103EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/10/16 7:33 p.m.•4 views

Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005544 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954:...

7.8CVSS8.3AI score0.00662EPSS
SaveExploits0References20
SUSE Linux
SUSE Linux
•added 2024/10/16 7:4 p.m.•4 views

Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005552 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954:...

7.8CVSS8.5AI score0.00821EPSS
SaveExploits1References76
SUSE Linux
SUSE Linux
•added 2024/10/16 7:4 p.m.•4 views

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954...

7.8CVSS8.5AI score0.00821EPSS
SaveExploits1References72
SUSE Linux
SUSE Linux
•added 2024/10/16 5:33 p.m.•4 views

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024194 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6nhflushexceptions bsc1227651...

7.8CVSS7.6AI score0.00662EPSS
SaveExploits0References24
SUSE Linux
SUSE Linux
•added 2024/10/15 12:33 p.m.•4 views

Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122183 fixes several issues. The following security issues were fixed: CVE-2024-41059: hfsplus: fix uninit-value in copyname bsc1228573. CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 bsc1226325. Patch Instructions: To install this...

7.8CVSS7.6AI score0.00503EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2024/10/15 9:21 a.m.•4 views

Security update for keepalived

This update for keepalived fixes the following issues: CVE-2024-41184: Fixed integer overflow in vrrpipsetshandler bsc1228123 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

6.4CVSS8.5AI score0.00616EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/10/15 6:57 a.m.•4 views

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 MFSA 2024-51, bsc1231413: CVE-2024-9680: Use-after-free in Animation timeline Update to Mozilla Thunderbird 128.3 MFSA 2024-49, bsc1230979: CVE-2024-9392: Compromised content process can bypass si...

8.8CVSS8.9AI score0.23184EPSS
SaveExploits1References28
SUSE Linux
SUSE Linux
•added 2024/10/15 1:3 a.m.•4 views

Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001355 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954:...

7.8CVSS8.4AI score0.00821EPSS
SaveExploits1References36
SUSE Linux
SUSE Linux
•added 2024/10/14 9:35 p.m.•4 views

Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505001338 fixes several issues. The following security issues were fixed: CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. CVE-2024-40954:...

7.8CVSS8.5AI score0.00821EPSS
SaveExploits1References76
SUSE Linux
SUSE Linux
•added 2024/10/14 10:1 a.m.•4 views

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.1 ESR MFSA 2024-51 bsc1231413 CVE-2024-9680: Use-after-free in Animation timeline bmo1923344 Also includes the following CVEs from MFSA 2024-47 bsc1230979 CVE-2024-9392: Compromised content...

8.8CVSS8.8AI score0.23184EPSS
SaveExploits1References28
SUSE Linux
SUSE Linux
•added 2024/10/04 2:40 p.m.•4 views

Security update for pcp

This update for pcp fixes the following issues: pcp was updated from version 5.3.7 to version 6.2.0 jscPED-8192, jscPED-8389: Security issues fixed: CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user bsc1230552 CVE-2024-45769: Fixed a heap corruption throu...

8.8CVSS8.2AI score0.01002EPSS
SaveExploits0References22
SUSE Linux
SUSE Linux
•added 2024/10/03 1:4 p.m.•4 views

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.0 ESR MFSA-2024-47, bsc1230979: CVE-2024-8900: Clipboard write permission bypass CVE-2024-9392: Compromised content process can bypass site isolation CVE-2024-9393: Cross-origin access to P...

9.8CVSS10AI score0.00733EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for python3-pip

This update for python3-pip fixes the following issue: CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090. Patch Instructions: To install this SUSE update use the SUSE recommended...

5.6CVSS5.5AI score0.00347EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

5.7AI score
SaveExploits0References8
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: Security fixes: CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to any location on the guest operati...

8.8CVSS5.9AI score0.00126EPSS
SaveExploits0References10
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for snpguest

This update for snpguest fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274139. CVE-2026-41678: openssl: incorrect bounds assertion in AES keywrap can lead to an out-of-bounds write bsc1270642. CVE-2026-4232...

8.7CVSS5.4AI score0.00552EPSS
SaveExploits1References12
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for himmelblau, himmelblau.SUSE_SLE-15-SP5_Update

This update for himmelblau, himmelblau.SUSESLE-15-SP5Update fixes the following issues: Security fixes: CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270182. CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when...

8.7CVSS6.2AI score0.00359EPSS
SaveExploits0References40
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

5.7AI score
SaveExploits0References10
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue: CVE-2026-52718: byte count instead of a bit count in gstav1parserparsetilelistobu can cause parser desynchronization and an application crash bsc1268394. Patch Instructions: To install this SUSE update use the SUSE recommended...

6.5CVSS7.7AI score0.00386EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.4CVSS5AI score0.00268EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added yesterday•3 views

Security update for ImageMagick

This update for ImageMagick fixes the following issue: CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check bsc1272953. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

4CVSS5.5AI score0.00197EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2 days ago•3 views

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

9.2CVSS5.4AI score0.00509EPSS
SaveExploits0References24
SUSE Linux
SUSE Linux
•added 2026/04/15 2:33 p.m.•3 views

Security update for bind

This update for bind fixes the following issues: CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations bsc1260805. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

8.7CVSS7.4AI score0.01599EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/15 1:37 p.m.•3 views

Security update for rubygem-bundler

This update for rubygem-bundler fixes the following issues: Updated to version 2.2.34. CVE-2020-36327: Bundler chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen bsc1185842 CVE-2021-43809: rubygem-bundler: remot...

8.8CVSS6AI score0.06307EPSS
SaveExploits2References8
SUSE Linux
SUSE Linux
•added 2026/04/13 4:3 p.m.•3 views

Security update for tigervnc

This update for tigervnc fixes the following issues: CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. bsc1260871 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7CVSS5.8AI score0.00247EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/04/12 10:34 a.m.•3 views

Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues The following security issues were fixed: CVE-2025-71120: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxyverf bsc1256780. CVE-2026-22999: net/sched: schqfq: do not free...

8.7CVSS5.8AI score0.00481EPSS
SaveExploits8References20
SUSE Linux
SUSE Linux
•added 2026/04/10 8:4 a.m.•3 views

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: CVE-2025-39973: i40e: add validation for ringlen param bsc1252036. CVE-2025-40018: ipvs: Defer ipvsftp unregister during netns cleanup bsc1252689...

8.7CVSS5.8AI score0.00481EPSS
SaveExploits8References32
SUSE Linux
SUSE Linux
•added 2026/04/07 10:25 a.m.•3 views

Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: CVE-2026-32597: Fixed unknown crit header extensions accepts bsc1259616. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

8.7CVSS5.8AI score0.00269EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2026/03/31 10:2 p.m.•3 views

Security update for python-tornado

This update for python-tornado fixes the following issues: CVE-2025-67724: missing validation of the supplied reason phrase bsc1254903. CVE-2025-67725: Denial of Service DoS via maliciously crafted HTTP request caused by the HTTPHeaders.add method bsc1254905. CVE-2026-31958: parsing large multipa...

8.7CVSS6.4AI score0.00559EPSS
SaveExploits0References14
SUSE Linux
SUSE Linux
•added 2026/03/27 1:33 a.m.•3 views

Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds bsc1257629. CVE-2025-38488: smb: client: fix use-after-free in...

8.7CVSS6.8AI score0.00603EPSS
SaveExploits0References36
SUSE Linux
SUSE Linux
•added 2026/03/26 5:52 p.m.•3 views

Security update for xen

This update for xen fixes the following issues: CVE-2026-23554: xen: Use after free of paging structures in EPT bsc1259247, XSA-480 CVE-2026-23555: xen: Xenstored DoS by unprivileged domain bsc1259248, XSA-481 Patch Instructions: To install this SUSE update use the SUSE recommended installation...

8.2CVSS5.8AI score0.00181EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/03/26 5:51 p.m.•3 views

Security update for xen

This update for xen fixes the following issues: CVE-2026-23554: xen: Use after free of paging structures in EPT bsc1259247, XSA-480 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

7.8CVSS5.9AI score0.00128EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/26 7:34 a.m.•3 views

Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues The following security issues were fixed: CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255595. CVE-2023-53781: smc: Fix use-after-free in tcpwritetimerhandl...

8.7CVSS6.8AI score0.00522EPSS
SaveExploits0References36
SUSE Linux
SUSE Linux
•added 2026/03/12 2:50 p.m.•3 views

Security update for libsoup2

This update for libsoup2 fixes the following issue: CVE-2026-0716: improper bounds handling may allow out-of-bounds read bsc1256418. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

8.3CVSS5.8AI score0.00323EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/12 10:20 a.m.•3 views

Security update for postgresql17

This update for postgresql17 fixes the following issues: Update to version 17.9 bsc1258754. Security issues fixed: CVE-2026-2003: improper validation of type "oidvector" may allow disclose a few bytes of server memory bsc1258008. CVE-2026-2004: intarray missing validation of type of input to...

8.8CVSS6.3AI score0.01208EPSS
SaveExploits4References18
SUSE Linux
SUSE Linux
•added 2026/03/09 3:34 p.m.•3 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression bsc1258743. CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. CVE-2026-24485: denial of service via malforme...

9.2CVSS5.8AI score0.00671EPSS
SaveExploits0References108
SUSE Linux
SUSE Linux
•added 2026/03/04 12:33 p.m.•3 views

Security update for libxslt

This update for libxslt fixes the following issues: CVE-2025-10911: use-after-free will be fixed on libxml2 side instead bsc1250553. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...

6.8CVSS5.9AI score0.00161EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/03 12:41 p.m.•3 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-22855: heap-buffer-overflow in smartcardunpacksetattribcall bsc1256721. CVE-2026-22857: heap-use-after-free in irpthreadfunc bsc1256723. CVE-2026-23533: improper validation can lead to heap buffer overflow in cleardecompressresidualdata...

7.7CVSS6.1AI score0.00756EPSS
SaveExploits5References44
SUSE Linux
SUSE Linux
•added 2026/03/02 12:4 p.m.•3 views

Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes one security issue The following security issue was fixed: CVE-2025-38129: pagepool: fix use-after-free in pagepoolrecycleinring bsc1258139. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

8.5CVSS6.9AI score0.00165EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/03/02 9:34 a.m.•3 views

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.42 fixes one security issue The following security issue was fixed: CVE-2025-38129: pagepool: fix use-after-free in pagepoolrecycleinring bsc1258139. Patch Instructions: To install this SUSE update use the SUSE recommended...

8.5CVSS5.9AI score0.00165EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/02/25 4:29 p.m.•3 views

Security update for expat

This update for expat fixes the following issues: CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 CVE-2026-25210: Fixed an integer overflow in doContent. bsc1257496 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

7.3CVSS5.5AI score0.00193EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2026/02/24 3:36 p.m.•3 views

Security update for openvswitch

This update for openvswitch fixes the following issues: CVE-2024-2182: Fixed insufficient validation of incoming BFD packets may lead to denial of service bsc1255435 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.5CVSS5.4AI score0.00776EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/02/13 2:23 p.m.•3 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-23874: manipulation of digital images can lead to stack overflow bsc1256976. CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow bsc1256962. CVE-2026-23952: processing comment tag can cause null pointer...

9.2CVSS5.2AI score0.00578EPSS
SaveExploits3References12
Total number of security vulnerabilities5000