12,602 results · Clear filters · Feed
-
High max 8.4SUSE-SU-2023:2103-1 3 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.0 with patch level 1443, fixes the following security problems - CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042). - CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187). -…
first May 4, 2023 -
High max 8.4openSUSE-SU-2025:0004-1 2 CVEs
Security update for rubygem-json-jwt
This update for rubygem-json-jwt fixes the following issues: - New upstream release 1.16.6, see bundled CHANGELOG.md - Remove padding oracle by @btoews in https://github.com/nov/json-jwt/pull/109 - Fixes CVE-2023-51774 boo#1220727 - updated to version 1.11.0 …
first Jan 7, 2025 -
High max 8.8SUSE-SU-2022:0271-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
first Feb 1, 2022 -
High max 7.4SUSE-SU-2023:1921-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
first Apr 19, 2023 -
High max 7.5
Security update for susestudio
This update provides SUSE Studio Runner 1.3.14, which brings fixes for the following issues: - bsc#968797: 11 SP3 appliance gets invalid distribution upgrade from SLMS. - bsc#947225: Second build of appliance will not register to SLMS, wrong product name. - b…
first Feb 16, 2017 -
High max 8.8SUSE-SU-2019:1962-1 5 CVEs
Security update for openexr
This update for openexr fixes the following issues: Security issue fixed: - CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109). - CVE-2017-9113: Fixed an invalid write of size 1 in the buffered…
first Jul 24, 2019 -
High max 8.8openSUSE-SU-2024:11975-1 11 CVEs
MozillaFirefox-99.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-99.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:12259-1 1 CVE
golang-github-prometheus-node_exporter-1.3.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-node_exporter-1.3.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6openSUSE-SU-2024:12517-1 2 CVEs
grub2-2.06-31.1 on GA media
These are all security issues fixed in the grub2-2.06-31.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2SUSE-SU-2023:2621-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial-of-service via crafted packets with IP proto 0 (bsc#1210054).
first Jun 23, 2023 -
High max 7.8SUSE-SU-2025:1248-1 4 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#12…
first Apr 14, 2025 -
High max 7.5openSUSE-SU-2024:13814-1 1 CVE
buildah-1.35.3-1.1 on GA media
These are all security issues fixed in the buildah-1.35.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3openSUSE-SU-2024:11769-1 1 CVE
cargo1.58-1.58.0-2.1 on GA media
These are all security issues fixed in the cargo1.58-1.58.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2025:14940-1 1 CVE
podman-5.4.1-3.1 on GA media
These are all security issues fixed in the podman-5.4.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
High max 7.8SUSE-SU-2025:02026-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 19, 2025 -
High max 7.4openSUSE-SU-2024:13654-1 6 CVEs
java-1_8_0-openjdk-1.8.0.402-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.402-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:1790-1 3 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624). - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). -…
first Apr 6, 2023 -
High max 7.5openSUSE-SU-2024:13487-1 4 CVEs
frr-8.4-8.1 on GA media
These are all security issues fixed in the frr-8.4-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:02359-1 2 CVEs
Security update for python312
This update for python312 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705). - CVE-2025-4435: Fixed that Tarfile extracts filtered members when err…
first Sep 23, 2025 -
High max 8.0SUSE-SU-2019:1534-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel version 4.4.121 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an…
first Jun 17, 2019 -
High max 8.2SUSE-SU-2021:2660-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call (bsc#1183803) - Update to version 7.5.7: * Updated relref to 'Configuring exemplars' section (#34240) (…
first Aug 12, 2021 -
High max 7.8SUSE-SU-2021:2177-1 1 CVE
Security update for arpwatch
This update for arpwatch fixes the following issues: - CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
first Jun 28, 2021 -
High max 8.6SUSE-SU-2025:0319-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. (bsc#1236272)
first Feb 1, 2025 -
High max 7.0SUSE-SU-2023:2003-1 3 CVEs
Security update for runc
This update for runc fixes the following issues: Update to runc v1.1.5: Security fixes: - CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884). - CVE-2023-27561: Fixed regression that reintroduced CVE-2019-199…
first Apr 25, 2023 -
High max 7.5SUSE-SU-2021:1623-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc …
first May 18, 2021 -
High max 7.5SUSE-SU-2018:3973-1 6 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the n…
first Dec 4, 2018 -
High max 8.4openSUSE-SU-2025:14847-1 1 CVE
python311-spotipy-2.25.1-1.1 on GA media
These are all security issues fixed in the python311-spotipy-2.25.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 28, 2025 -
High max 7.8SUSE-SU-2023:4278-1 1 CVE
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_148 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#12…
first Oct 30, 2023 -
High max 7.5SUSE-SU-2018:2530-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2016-10708: Prevent DoS due to crashes caused by out-of-sequence NEWKEYS message (bsc#1076957).
first Aug 27, 2018 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8…
first May 6, 2019 -
High max 8.4openSUSE-SU-2024:0082-1 1 CVE
Security update for python-rpyc
This update for python-rpyc fixes the following issues: - CVE-2024-27758: Fixed remote code execution via exposed methods (boo#1221331).
first Mar 15, 2024 -
High max 7.8SUSE-SU-2024:4120-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024 -
High max 7.8SUSE-SU-2022:3450-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still…
first Sep 28, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 52 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_189 fixes one issue. The following security issue was fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation…
first Apr 23, 2024 -
High max 7.8openSUSE-SU-2024:13767-1 5 CVEs
kernel-devel-6.7.9-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.7.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2024:2009-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2023-27534: Properly resolve ~ when used in a SFTP path. (bsc#1219273)
first Jun 12, 2024 -
High max 7.5SUSE-SU-2023:3534-1 4 CVEs
Security update for rubygem-rails-html-sanitizer
This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking (bsc#1206433). - CVE-2022-23518: Fixed XSS via data URIs when used in combination wit…
first Sep 5, 2023 -
High max 7.5SUSE-SU-2022:2592-1 1 CVE
Security update for rubygem-tzinfo
This update for rubygem-tzinfo fixes the following issues: - CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).
first Jul 29, 2022 -
High max 7.5
Security update for rubygem-actionpack-3_2
This update for rubygem-actionpack-3_2 fixes the following issues: - CVE-2016-0751: Object Leak DoS (bsc#963331) - CVE-2016-0752: Directory traversal and information leak in Action View (bsc#963332) - CVE-2015-7576: Timing attack vulnerability in basic authen…
first Mar 1, 2016 -
High max 8.6SUSE-SU-2024:0296-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) - CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)
first Feb 1, 2024