1,565 results · Clear filters · Feed
-
Critical max 9.8
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
High max 7.0
Security update for Linux Kernel Live Patch 10 for SLE 12
This update for the Linux Kernel 3.12.51-52_34 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004418). - CVE-2016-4997: T…
first Oct 25, 2016 -
High max 7.7
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400) - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugi…
first Sep 19, 2024 -
High max 8.8
Security update for flash-player
This update for flash-player fixes the following issues: - Security update to 24.0.0.186 (bsc#1015379) APSB16-39: * These updates resolve use-after-free vulnerabilities that could have lead to code execution (CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2…
first Dec 14, 2016 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 re…
first Dec 19, 2024 -
Critical max 9.8
ruby3.1-rubygem-activesupport-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activesupport-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.7
Security update for php5
This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095). - CVE-201…
first Feb 28, 2020 -
Critical max 9.8
tomcat10-10.1.14-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …
first Jul 20, 2021 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454) - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688)
first Jan 20, 2022 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 25, 2025 -
High max 7.5
ruby3.1-rubygem-rails-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-rails-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - C…
first Nov 15, 2020 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …
first Jan 27, 2021 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-0775: Fixed use-…
first Apr 20, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jul 11, 2021 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal red…
first Jul 22, 2024 -
High max 8.0
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)
This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in block/blk-core.c due to improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privilege escal…
first Dec 11, 2019 -
High max 8.4
ImageMagick-6.9.6.6-1.1 on GA media
These are all security issues fixed in the ImageMagick-6.9.6.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 112.0.5615.121: * CVE-2023-2033: Type Confusion in V8 (boo#1210478) - Chromium 112.0.5615.49 * CSS now supports nesting rules. * The algorithm to set the initial focus on <dialog> elements was up…
first Apr 19, 2023 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web …
first Jun 27, 2023 -
High max 8.8
Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed a heap buffer overflow (bsc#1215231).
first Sep 26, 2023 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to 93.0.4585.11: - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -[FramedBrows…
first Nov 26, 2022 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 114.0.5735.106 (boo#1212044): * CVE-2023-3079: Type Confusion in V8 - Chromium 114.0.5735.90 (boo#1211843): * CSS text-wrap: balance is available * Cookies partitioned by top level site (CHIPS) *…
first Jun 9, 2023 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list (bsc#1220927). - CVE-2024-49925: fbdev: efifb: Register …
first Dec 13, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 27, 2025 -
High max 8.8
Security update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp
This update for openstack-barbican, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-neutron, openstack-neutron-gbp fixes the following issues: Security fixes included on this update: openstack-barbican: - CVE-2022-3100: Fixed an access policy b…
first Jan 11, 2023 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount rac…
first Nov 1, 2022 -
High max 7.0
Security update for Linux Kernel Live Patch 1 for SLE 12 SP1
This update for the Linux Kernel 3.12.51-60_20 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…
first Oct 25, 2016 -
High max 7.5
velero-1.12.2-1.1 on GA media
These are all security issues fixed in the velero-1.12.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#117…
first Nov 6, 2020 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Nov 2, 2021 -
High max 7.5
ruby3.1-rubygem-activestorage-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activestorage-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.6.5: - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server set…
first Oct 26, 2020 -
Critical max 9.8
Security update for tomcat
Tomcat was updated to version 7.0.78, fixing various bugs and security issues. For full details see https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2016-0762: A realm timing attack in tomcat was fixed which could disclose …
first Jun 23, 2017 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
first Apr 20, 2021 -
High max 8.4
Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled by default but can be re-enabled by editing '/etc/ImageMagick-*/policy.xml' (…
first May 7, 2016 -
High max 7.8
sudo-1.9.7p2-1.4 on GA media
These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5
libnghttp2-14-1.57.0-1.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.57.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024