12,602 results · Clear filters · Feed
-
High max 7.1openSUSE-SU-2024:12289-1 1 CVE
buildah-1.27.0-3.1 on GA media
These are all security issues fixed in the buildah-1.27.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2019:1049-1 2 CVEs
Security update for aubio
This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was…
first Mar 25, 2019 -
High max 7.5SUSE-SU-2024:3937-1 3 CVEs
Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: This update ships go1.23-openssl version 1.23.2.2. (jsc#SLE-18320) - go1.23.2 (released 2024-10-01) includes fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packag…
first Nov 7, 2024 -
High max 7.3SUSE-SU-2019:2347-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).
first Sep 10, 2019 -
High max 8.8SUSE-SU-2024:1103-1 5 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-26327: Fixed buffer overflow via invalid SR/IOV NumVFs value (bsc#1220062). - CVE-2024-24474: Fixed integer overflow results in buffer overflow via SCSI command (bsc#1220134). - CVE-2023-6693: Fixed …
first Apr 3, 2024 -
High max 8.1openSUSE-SU-2024:12028-1 4 CVEs
curl-7.83.0-1.1 on GA media
These are all security issues fixed in the curl-7.83.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0SUSE-SU-2020:1365-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.35. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) * CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persisten…
first May 21, 2020 -
High max 7.5
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes some potential security issues and bugs. The following security flaws cannot be exploited through email because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts: - …
first Dec 6, 2016 -
High max 7.5SUSE-SU-2024:1137-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: - CVE-2024-25620: Fixed with dependency management path traversal (bsc#1219969). - CVE-2024-26147: Fixed uninitialized variable in yaml parsing (bsc#1220207).
first Apr 8, 2024 -
High max 8.8
chromedriver-55.0.2883.75-3.1 on GA media
These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3SUSE-SU-2025:02191-1 1 CVE
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
first Jul 1, 2025 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 104.0.5112.101 (boo#1202509): * CVE-2022-2852: Use after free in FedCM * CVE-2022-2854: Use after free in SwiftShader * CVE-2022-2855: Use after free in ANGLE * CVE-2022-2857: Use after free in Bli…
first Aug 25, 2022 -
High max 7.8SUSE-SU-2023:1801-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability …
first Apr 10, 2023 -
High max 8.7
Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project.
first Nov 9, 2019 -
High max 7.8
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 27, 2025 -
High max 7.5SUSE-SU-2020:1532-2 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities (bsc#1172021).
first Jul 15, 2020 -
High max 7.8SUSE-SU-2018:4130-1 3 CVEs
Security update for ansible
This update for ansible fixes the following issues: Ansible was updated to ansible 2.4.6.0. The full release notes can be found on: https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md Security issues fixed: - CVE-2018-10875: ansible.cfg is read fr…
first Dec 14, 2018 -
High max 7.6openSUSE-SU-2021:1404-1 6 CVEs
Security update for containerd, docker, runc
This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.9-ce. (bsc#1191355) See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-4110…
first Oct 31, 2021 -
High max 7.8SUSE-SU-2023:4054-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-34323: A transaction conflict can crash C Xenstored (XSA-440, bsc#1215744) - CVE-2023-34326: Missing IOMMU TLB flushing (XSA-442, bsc#1215746) - CVE-2023-34325: Multiple vulnerabilities in libfsimage …
first Oct 12, 2023 -
High max 7.5SUSE-SU-2020:0868-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)
This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631) - CVE-2019-5108: Fixed an issue where by trigger…
first Apr 3, 2020 -
High max 7.0SUSE-SU-2018:2363-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_82 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 7.7SUSE-SU-2025:0237-1 3 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.18.2: - CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#12362…
first Jan 24, 2025 -
High max 7.8SUSE-SU-2025:0098-1 2 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 14, 2025 -
High max 7.8SUSE-SU-2020:3225-1 5 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_107 fixes several issues. The following security issues were fixed: - CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This cou…
first Nov 6, 2020 -
High max 7.8SUSE-SU-2024:0820-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666).
first Mar 8, 2024 -
High max 7.8SUSE-SU-2025:03106-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_5 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue …
first Sep 8, 2025 -
High max 7.5SUSE-SU-2024:0738-2 1 CVE
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).
first Mar 1, 2024 -
High max 8.8SUSE-SU-2025:0691-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.6 (bsc#1236946): - CVE-2025-24143: A maliciously crafted webpage may be able to fingerprint the user. - CVE-2025-24150: Copying a URL from Web Inspector may lead to command injecti…
first Feb 24, 2025 -
High max 7.3openSUSE-SU-2020:1509-1 18 CVEs
Recommended update for otrs
Otrs was updated to 5.0.42, fixing lots of bugs and security issues: https://community.otrs.com/otrs-community-edition-5s-patch-level-42/ - CVE-2020-1773 boo#1168029 OSA-2020-10: * Session / Password / Password token leak An attacker with the ability to gener…
first Sep 23, 2020 -
High max 8.8SUSE-SU-2022:3657-1 6 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_54 fixes several issues. The following security issues were fixed: - CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994). - CVE-2022-42719: Fixed use-after-free in…
first Oct 19, 2022 -
High max 7.8openSUSE-SU-2021:3943-1 2 CVEs
Recommended update for php7
This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - Added patch to prevent memory access violation…
first Dec 6, 2021 -
High max 7.8SUSE-SU-2025:03188-1 2 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_113 fixes several issues. The following security issues were fixed: - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805). - CVE-2025-38212: ipc: fix to protect IPCS look…
first Sep 12, 2025 -
High max 8.8openSUSE-SU-2024:0373-1 8 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 131.0.6778.69 (stable released 2024-11-12) (boo#1233311) * CVE-2024-11110: Inappropriate implementation in Blink. * CVE-2024-11111: Inappropriate implementation in Autofill. * CVE-2024-11112: Use a…
first Nov 22, 2024 -
High max 7.5SUSE-SU-2025:03536-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).
first Oct 10, 2025 -
High max 8.4SUSE-SU-2024:1536-1 1 CVE
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2024-32462: Fixed arbitrary code execution outside sandbox via malicious app due to insufficient 'command' argument sanitization (bsc#1223110)
first May 6, 2024 -
High max 7.5openSUSE-SU-2024:11133-1 2 CVEs
osc-0.174.0-1.2 on GA media
These are all security issues fixed in the osc-0.174.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2017:2871-1 2 CVEs
Security update for wget
This update for wget fixes the following security issues: - CVE-2017-13089,CVE-2017-13090: Missing checks for negative remaining_chunk_size in skip_short_body and fd_read_body could cause stack buffer overflows, which could have been exploited by malicious se…
first Nov 16, 2017 -
High max 7.5openSUSE-SU-2024:12202-1 3 CVEs
java-15-openjdk-15.0.8.0-1.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …
first Jan 27, 2021 -
High max 8.8SUSE-SU-2025:1257-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228714). - CVE-2024-56600: net: inet6: do not leave a dangling sk poin…
first Apr 14, 2025