Lucene search
+L
SuseMost viewed

6458 matches found

SUSE Linux
SUSE Linux
•added 2025/02/26 2:29 p.m.•9 views

Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: CVE-2025-26594: Use-after-free of the root cursor bsc1237427. CVE-2025-26595: Buffer overflow in XkbVModMaskText bsc1237429. CVE-2025-26596: Heap overflow in XkbWriteKeySyms bsc1237430. CVE-2025-26597: Buffer overflow in...

7.8CVSS8.4AI score0.00444EPSS
SaveExploits0References32
SUSE Linux
SUSE Linux
•added 2025/02/26 1:37 p.m.•9 views

Security update for socat

This update for socat fixes the following issues: CVE-2015-1379: lack of async-signal-safe signal handlers can lead to crashes or freezing of socat processes bsc922903. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

4CVSS7.3AI score0.0393EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/25 10:38 a.m.•9 views

Security update for pam_pkcs11

This update for pampkcs11 fixes the following issues: CVE-2025-24032: default value for certpolicy none allows for authentication bypass bsc1237062. CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when asked for PIN leads to crash bsc1237058. Patch...

7.5CVSS7.6AI score0.00712EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/02/24 1:12 p.m.•9 views

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.46.6 bsc1236946: CVE-2025-24143: A maliciously crafted webpage may be able to fingerprint the user. CVE-2025-24150: Copying a URL from Web Inspector may lead to command injection. CVE-2025-24158: Processing web content ma...

8.5CVSS8.2AI score0.02959EPSS
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2025/02/24 9:03 a.m.•9 views

Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-1506002314 fixes several issues. The following security issues were fixed: CVE-2024-36974: net/sched: taprio: always validate TCATAPRIOATTRPRIOMAP bsc1227371. CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat...

7.8CVSS8.3AI score0.03395EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2025/02/21 10:47 a.m.•9 views

Security update for postgresql13

This update for postgresql13 fixes the following issues: Upgrade to 13.20: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS7.3AI score0.9003EPSS
SaveExploits10References4
SUSE Linux
SUSE Linux
•added 2025/02/21 10:41 a.m.•9 views

Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgrade to 14.17: CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings bsc1237093. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS7.3AI score0.9003EPSS
SaveExploits10References4
SUSE Linux
SUSE Linux
•added 2025/02/21 10:38 a.m.•9 views

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136. Other bugfixes: Non approved PBKDF parameters wrongly resulting as approved bsc1236771. Patch Instructions: To install this SUSE update use the SUSE...

6CVSS6.4AI score0.00613EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2025/02/20 2:43 p.m.•9 views

Security update for openssh

This update for openssh fixes the following issues: CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client bsc1237040. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively...

6.8CVSS7.2AI score0.07723EPSS
SaveExploits4References4
SUSE Linux
SUSE Linux
•added 2025/02/17 1:26 p.m.•9 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-40980: dropmonitor: replace spinlock by rawspinlock bsc1227937. CVE-2024-46858: mptcp: pm: Fix uaf in timerdeletesync bsc1231088...

8.5CVSS8AI score0.00757EPSS
SaveExploits3References258
SUSE Linux
SUSE Linux
•added 2025/02/14 3:26 p.m.•9 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction bsc1235969. CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages bsc1235920...

8.8CVSS7.8AI score0.03395EPSS
SaveExploits2References396
SUSE Linux
SUSE Linux
•added 2025/02/14 3:10 p.m.•9 views

Security update for python

This update for python fixes the following issues: CVE-2025-0938: functions urllib.parse.urlsplit and urlparse accept domain names including square brackets bsc1236705. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

6.3CVSS7.3AI score0.01556EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/14 3:10 p.m.•9 views

Security update for python311

This update for python311 fixes the following issues: CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. bsc1236705 Other fixes: Update to version 3.11.11. Remove -IVendor/ from python-config. bsc1231795 Patch Instructions: To install this SUSE...

6.3CVSS7.7AI score0.01556EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/02/13 12:29 p.m.•9 views

Security update for unbound

This update for unbound fixes the following issues: Update to 1.22.0: Features: Add iter-scrub-ns, iter-scrub-cname and max-global-quota configuration options. Merge patch to fix for glue that is outside of zone, with harden-unverified-glue, from Karthik Umashankar Microsoft. Enabling this option...

6.9CVSS7.2AI score0.00801EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/13 12:02 p.m.•9 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-35863: Fixed potential UAF in isvalidoplockbreak bsc1224763. CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unusevma bsc1233112. CVE-2024-53104: media:...

8.7CVSS8.4AI score0.03395EPSS
SaveExploits1References66
SUSE Linux
SUSE Linux
•added 2025/02/12 12:02 p.m.•9 views

Security update for podman

This update for podman fixes the following issues: CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. bsc1227052 CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of...

6.9CVSS7AI score0.91969EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2025/02/11 10:40 a.m.•9 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2023-52489: mm/sparsemem: fix race in accessing memorysection-usage bsc1221326. CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop...

8.7CVSS8.4AI score0.03558EPSS
SaveExploits5References1078
SUSE Linux
SUSE Linux
•added 2025/02/10 7:34 a.m.•9 views

Security update for go1.22

This update for go1.22 fixes the following issues: CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le bsc1236801. Bug fixes: go1.22 release tracking bsc1218424 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...

6CVSS7.1AI score0.0029EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2025/02/10 7:33 a.m.•9 views

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation bsc1236136 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...

8.2CVSS7.3AI score0.00613EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/07 1:00 p.m.•9 views

Security update for bind

This update for bind fixes the following issues: CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section bsc1236596 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.7CVSS7.8AI score0.16734EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/03 5:03 p.m.•9 views

Security update for krb5

This update for krb5 fixes the following issues: CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

6.5CVSS7.5AI score0.00514EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/03 9:22 a.m.•9 views

Security update for python-dnspython

This update for python-dnspython fixes the following issues: CVE-2023-29483: Fixed potential DoS via the Tudoor mechanism bsc1222693. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

5.9CVSS7.3AI score0.01857EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/02/03 9:20 a.m.•9 views

Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template bsc1234808 CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method bsc1234809 Patch Instructions: To install this SUSE...

8.1CVSS7.3AI score0.00521EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/02/03 9:09 a.m.•9 views

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2023-52160: Fixed WiFi authentication bypass bsc1219975. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...

6.5CVSS7.6AI score0.01177EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/03 9:09 a.m.•9 views

Security update for libndp

This update for libndp fixes the following issues: CVE-2024-5564: Fixed buffer overflow in route information length field bsc1225771. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

7.5CVSS7.6AI score0.01165EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/03 9:00 a.m.•9 views

Security update for python311

This update for python311 fixes the following issues: CVE-2024-8088: Fixed a denial of service in zipfile bsc1229704 CVE-2024-6232: Fixed a ReDos via excessive backtracking while parsing header values bsc1230227 CVE-2024-7592: Fixed a denial of service in the http.cookies module bsc1229596 Patch...

8.2CVSS7.3AI score0.02303EPSS
SaveExploits3References12
SUSE Linux
SUSE Linux
•added 2025/02/03 8:54 a.m.•9 views

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2024-34459: Fixed buffer over-read in bsc1224282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

3.3CVSS7.6AI score0.018EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/02/03 8:53 a.m.•9 views

Security update for keepalived

This update for keepalived fixes the following issues: CVE-2024-41184: Fixed integer overflow in vrrpipsetshandler bsc1228123 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

6.4CVSS7.6AI score0.00621EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/02/03 8:48 a.m.•9 views

Security update for skopeo

This update for skopeo fixes the following issues: Update to version 1.14.4: CVE-2024-3727: digest type does not guarantee valid type bsc1224123 Packit: update packit targets Bump gopkg.in/go-jose to v2.6.3 Bump ocicrypt and go-jose CVE-2024-28180 Freeze the fedora-minimal image reference at Fedo...

8.3CVSS7.4AI score0.01956EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/02/03 8:47 a.m.•9 views

Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: CVE-2024-4418: rpc: ensure temporary GSource is removed from client event loop bsc1223849 Non-security issue fixed: libxl: Fix domxml-to-native conversion bsc1222584 qemu: Fix migration with custom XML bsc1226492 Patch...

6.2CVSS7.3AI score0.00486EPSS
SaveExploits0References8
SUSE Linux
SUSE Linux
•added 2025/02/03 8:47 a.m.•9 views

Security update for wget

This update for wget fixes the following issues: CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. bsc1226419 Update to GNU wget 1.24.5: Fix how subdomain matches are checked for HSTS. Wget will now also parse the srcset attribute in HTML tags Support reading...

6.2CVSS7.1AI score0.00672EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/31 12:42 p.m.•9 views

Security update for python-pydantic

This update for python-pydantic fixes the following issues: CVE-2024-3772: Fixed Regular expression DoS bsc1222806 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...

5.9CVSS6.1AI score0.00957EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/01/30 2:52 p.m.•9 views

Security update for krb5

This update for krb5 fixes the following issues: CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash bsc1236619. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

6.5CVSS7.4AI score0.00514EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/30 2:51 p.m.•9 views

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. bsc1236460 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comman...

7.5CVSS7.2AI score0.00264EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/30 2:03 p.m.•9 views

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z. Refs jscPED-11136 Go CVE Numbering Authority IDs added or updated with aliases: GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx GO-2025-3410 CVE-2025-24337 GHSA-3qc3-mx6x-267...

8.7CVSS7AI score0.0107EPSS
SaveExploits2References68
SUSE Linux
SUSE Linux
•added 2025/01/29 10:41 p.m.•9 views

Security update for shadow

This update for shadow fixes the following issues: Fixed not copying of skel files bsc1228770 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE...

6.7CVSS7.3AI score0.00305EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/28 11:47 p.m.•9 views

Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Upgrade to upstream tag jdk-21.0.6+7 January 2025 CPU Security fixes: CVE-2025-21502: Enhance array handling JDK-8330045, bsc1236278 Other changes: JDK-6942632: Hotspot should be able to use more than 64 logical processors on Windows...

6.3CVSS7.7AI score0.01007EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/28 11:46 p.m.•9 views

Security update for openvpn

This update for openvpn fixes the following issues: CVE-2024-5594: Fixed wrong handling of null bytes and invalid characters in control messages bsc1235147 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.4CVSS9.5AI score0.00835EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/28 11:46 p.m.•9 views

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0 Patch Instruction...

8.1CVSS7.8AI score0.01287EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/01/28 1:03 p.m.•9 views

Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-150600105 fixes several issues. The following security issues were fixed: CVE-2024-40921: net: bridge: mst: pass vlan group directly to brmstvlansetstate bsc1227784. CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in brmstsetstate bsc1227781...

7.8CVSS7.6AI score0.00417EPSS
SaveExploits1References40
SUSE Linux
SUSE Linux
•added 2025/01/27 2:33 p.m.•9 views

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

This update for the Linux Kernel 6.4.0-15060021 fixes several issues. The following security issues were fixed: CVE-2024-40921: net: bridge: mst: pass vlan group directly to brmstvlansetstate bsc1227784. CVE-2024-40920: net: bridge: mst: fix suspicious rcu usage in brmstsetstate bsc1227781...

7.8CVSS8.2AI score0.02701EPSS
SaveExploits1References24
SUSE Linux
SUSE Linux
•added 2025/01/27 1:03 p.m.•9 views

Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv...

7.8CVSS8.7AI score0.02701EPSS
SaveExploits3References130
SUSE Linux
SUSE Linux
•added 2025/01/27 1:03 p.m.•9 views

Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024103 fixes one issue. The following security issue was fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

7CVSS7.9AI score0.02701EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/01/27 12:04 p.m.•9 views

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv...

7.8CVSS8.7AI score0.02701EPSS
SaveExploits3References122
SUSE Linux
SUSE Linux
•added 2025/01/17 8:03 p.m.•9 views

Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005573 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637...

7.8CVSS8AI score0.00353EPSS
SaveExploits1References16
SUSE Linux
SUSE Linux
•added 2025/01/17 2:39 p.m.•9 views

Security update for redis

This update for redis fixes the following issues: CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. bsc1235387 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

8.8CVSS8AI score0.08169EPSS
SaveExploits2References4
SUSE Linux
SUSE Linux
•added 2025/01/16 1:20 p.m.•9 views

Security update for xen

This update for xen fixes the following issues: CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: Update to Xen 4.18.4 security bug fix release bsc1027519 x86: Prefer ACPI reboot over UEFI ResetSystem run time service call No other changes mentioned in...

6.8CVSS8.1AI score0.0031EPSS
SaveExploits0References6
SUSE Linux
SUSE Linux
•added 2025/01/15 9:08 a.m.•9 views

Security update for rsync

This update for rsync fixes the following issues: CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. bsc1234102 CVE-2024-12087: arbitrary file...

8.8CVSS7.4AI score0.08823EPSS
SaveExploits4References16
SUSE Linux
SUSE Linux
•added 2025/01/14 9:34 p.m.•9 views

Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005544 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. Patch...

7.8CVSS8.2AI score0.00353EPSS
SaveExploits1References8
SUSE Linux
SUSE Linux
•added 2025/01/14 7:04 p.m.•9 views

Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024103 fixes several issues. The following security issues were fixed: CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6: avoid use-after-free in ip6fragment bsc1232637. Patch...

7.8CVSS8.2AI score0.00353EPSS
SaveExploits1References8
Total number of security vulnerabilities5000