12,602 results · Clear filters · Feed
-
High max 7.7SUSE-SU-2026:0484-1 1 CVE
Security update for munge
This update for munge fixes the following issues: - CVE-2026-25506: buffer overflow in message unpacking (bsc#1257651).
first Feb 12, 2026 -
High max 7.7SUSE-SU-2026:0451-1 1 CVE
Security update for munge
This update for munge fixes the following issues: - CVE-2026-25506: buffer overflow in message unpacking (bsc#1257651).
first Feb 11, 2026 -
High max 7.7SUSE-SU-2026:0450-1 1 CVE
Security update for munge
This update for munge fixes the following issues: - CVE-2026-25506: buffer overflow in message unpacking (bsc#1257651). - Make logrotate work on munge log as user munge. This prevents a local privilege escalation (bsc#1246088).
first Feb 11, 2026 -
High max 7.7SUSE-SU-2026:0449-1 8 CVEs
Security update for freerdp2
This update for freerdp2 fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). - CVE-2026-22854: server-controlled read length is used to read file data into an IRP outp…
first Feb 11, 2026 -
High max 7.7SUSE-SU-2026:0448-1 1 CVE
Security update for munge
This update for munge fixes the following issues: - CVE-2026-25506: buffer overflow in message unpacking (bsc#1257651). - Make `logrotate` work on log as user `munge` to prevent local privilege escalation (bsc#1246088).
first Feb 11, 2026 -
High max 7.7SUSE-SU-2026:0421-1 8 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). - CVE-2026-22854: server-controlled read length is used to read file data into an IRP outpu…
first Feb 10, 2026 -
High max 7.7SUSE-SU-2026:0417-1 8 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2026-22852: a malicious RDP server can trigger a heap-buffer-overflow in audin_process_formats (bsc#1256718). - CVE-2026-22854: server-controlled read length is used to read file data into an IRP outpu…
first Feb 10, 2026 -
High max 8.6SUSE-SU-2026:0419-1 1 CVE
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read_until to avoid a stack-based buffer overflow. (bsc#1257598)
first Feb 10, 2026 -
High max 8.6SUSE-SU-2026:0418-1 2 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read_until to avoid a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bounds rea…
first Feb 10, 2026 -
High max 7.5SUSE-SU-2026:0390-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI (bsc#1257034) - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX (bsc#1257036) - CVE-2026-21933: Fixed Oracle Java SE …
first Feb 5, 2026 -
High max 7.5openSUSE-SU-2026:10161-1 1 CVE
python311-azure-core-1.38.0-2.1 on GA media
These are all security issues fixed in the python311-azure-core-1.38.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
High max 7.5openSUSE-SU-2026:10160-1 6 CVEs
python311-Django-5.2.11-1.1 on GA media
These are all security issues fixed in the python311-Django-5.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
High max 8.2openSUSE-SU-2026:10159-1 1 CVE
opencloud-server-5.0.2-1.1 on GA media
These are all security issues fixed in the opencloud-server-5.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
High max 8.8SUSE-SU-2026:0394-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: …
first Feb 5, 2026 -
High max 8.8openSUSE-SU-2026:10153-1 2 CVEs
chromedriver-144.0.7559.132-1.1 on GA media
These are all security issues fixed in the chromedriver-144.0.7559.132-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
High max 7.5SUSE-SU-2026:0389-1 4 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - CV…
first Feb 5, 2026 -
High max 8.1openSUSE-SU-2025:15131-1 4 CVEs
MozillaThunderbird-128.10.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
High max 8.9SUSE-SU-2025:0297-1 33 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250128T150132 2025-01-28T15:01:32Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3409 CVE-2025-23208 GHSA-c9p4-xwr9-rfhx * G…
first Jan 30, 2025 -
High max 8.8SUSE-SU-2025:4182-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include…
first Nov 24, 2025 -
High max 7.5SUSE-SU-2025:4185-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
first Nov 24, 2025 -
High max 8.8SUSE-SU-2025:4181-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include…
first Nov 24, 2025 -
High max 7.5openSUSE-SU-2025:15067-1 1 CVE
ruby3.4-rubygem-rack-2.2-2.2.14-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.14-1.1 package on the GA media of openSUSE Tumbleweed.
first May 8, 2025 -
High max 8.8SUSE-SU-2025:3941-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2025-9900: Fixed Write-What-Where in libtiff via TIFFReadRGBAImageOriented (bsc#1250413).
first Nov 5, 2025 -
High max 8.8SUSE-SU-2025:03018-1 3 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.14: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Aug 29, 2025 -
High max 8.7SUSE-SU-2024:4042-1 7 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241112T145010 2024-11-12T14:50:10Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3250 CVE-2024-51744 GHSA-29wx-vh33-7x7r - U…
first Nov 22, 2024 -
High max 7.5SUSE-SU-2025:02992-1 1 CVE
Security update for tomcat11
This update for tomcat11 fixes the following issues: Updated to Tomcat 11.0.10 - CVE-2025-48989: Fixed 'MadeYouReset' DoS in HTTP/2 due to client triggered stream reset (bsc#1243895) Other fixes: * Catalina + Fix: Fix bloom filter population for archive index…
first Aug 27, 2025 -
High max 8.4SUSE-SU-2026:0371-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security fixes: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766). - CVE-2026-0915: Fixed uninitialized stack buffer used as DNS query name when…
first Feb 3, 2026 -
High max 8.6SUSE-SU-2025:0063-1 19 CVEs
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421) - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414) - CVE-2024-47543…
first Jun 24, 2025 -
High max 7.5SUSE-SU-2022:0160-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)
first Jan 24, 2022 -
High max 7.5SUSE-SU-2025:1094-1 2 CVEs
Security update for warewulf4
This update for warewulf4 fixes the following issues: warewulf4 was updated from version 4.5.8 to 4.6.0: - Security issues fixed for version 4.6.0: * CVE-2025-22869: Fixed Denial of Service vulnerability in the Key Exchange of golang.org/x/crypto/ssh (bsc#123…
first Apr 2, 2025 -
High max 7.8SUSE-SU-2023:2538-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in t…
first Jun 19, 2023 -
High max 7.8SUSE-SU-2024:1842-1 1 CVE
Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2022-48622: Fixed files rejection with multiple anih chunks (bsc#1219276).
first May 29, 2024 -
High max 7.5SUSE-SU-2025:0581-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2023-45288: possible excessive CPU consumption due to no limit being set on the number of CONTINUATION frames read for an HTTP/2 request in golang.org/x/net/http2. (bsc#1236531)
first Feb 18, 2025 -
High max 7.8SUSE-SU-2023:3680-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user accou…
first Sep 19, 2023 -
High max 7.8SUSE-SU-2023:3923-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-4273: Fixed a flaw in the exFAT dr…
first Sep 30, 2023 -
High max 8.1openSUSE-SU-2024:13611-1 1 CVE
python310-Pillow-10.2.0-1.1 on GA media
These are all security issues fixed in the python310-Pillow-10.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - C…
first Nov 5, 2020 -
High max 7.5openSUSE-SU-2024:14154-1 1 CVE
python310-pyOpenSSL-24.1.0-1.2 on GA media
These are all security issues fixed in the python310-pyOpenSSL-24.1.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.6SUSE-SU-2024:1860-1 2 CVEs
Security update for uriparser
This update for uriparser fixes the following issues: - CVE-2024-34402: Fixed integer overflow protection in ComposeQueryEngine (bsc#1223887). - CVE-2024-34403: Fixed integer overflow protection in ComposeQueryMallocExMm (bsc#1223888).
first May 30, 2024 -
High max 7.8SUSE-SU-2025:03129-1 6 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_195 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 10, 2025