12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2022:1127-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.8.0 ESR (bsc#1197903): MFSA 2022-14 (bsc#1197903) * CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use * CV…
first Apr 7, 2022 -
High max 7.5SUSE-SU-2025:1516-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks (bsc#1229465) Other fixes: - FIPS: Deny SHA-1 signature verification in FIPS provider (bsc#1221365). - FIPS: RSA keygen PCT requirements. - FIP…
first May 8, 2025 -
High max 7.5
ruby3.1-rubygem-activerecord-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activerecord-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - Fixed a potential crash on exit as a result of the fix of CVE-2021-3156 [bsc#1181090]
first Mar 24, 2021 -
High max 8.6SUSE-SU-2024:2060-1 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2024-32487: Fixed OS command injection via a newline character in the file name. (bsc#1222849)
first Jun 18, 2024 -
High max 7.8SUSE-SU-2024:0666-1 3 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_63 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escala…
first Feb 28, 2024 -
High max 7.8SUSE-SU-2025:0465-1 3 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2022-48912: Fix use-after-free in __nf_register_net…
first Feb 12, 2025 -
High max 7.5openSUSE-SU-2025:14634-1 2 CVEs
operator-sdk-1.39.0-1.1 on GA media
These are all security issues fixed in the operator-sdk-1.39.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 12, 2025 -
High max 8.8SUSE-SU-2024:3533-1 4 CVEs
Security update for pcp
This update for pcp fixes the following issues: pcp was updated from version 5.3.7 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389): - Security issues fixed: * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#12305…
first Oct 4, 2024 -
High max 7.5SUSE-SU-2020:0891-1 1 CVE
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_34 fixes one issue. The following security issue was fixed: - CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631)
first Apr 3, 2020 -
High max 7.5openSUSE-SU-2024:12208-1 4 CVEs
java-17-openjdk-17.0.4.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4SUSE-SU-2019:2336-1 8 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: Update to Java 7.1 Service Refresh 4 Fix Pack 50. Security issues fixed: - CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021) - CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021) - C…
first Sep 9, 2019 -
High max 7.8SUSE-SU-2022:0364-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - C…
first Feb 10, 2022 -
High max 7.5SUSE-SU-2026:0348-1 1 CVE
Security update for bind
This update for bind fixes the following issues: Upgrade to release 9.20.18: - CVE-2025-13878: Fixed incorrect length checks for BRID and HHIT records (bsc#1256997) Feature Changes: * Add more information to the rndc recursing output about fetches. * Reduce t…
first Jan 30, 2026 -
High max 7.8openSUSE-SU-2023:0219-1 1 CVE
Security update for opensuse-welcome
This update for opensuse-welcome fixes the following issues: Update to version 0.1.9+git.35.4b9444a: * CVE-2023-32184: panellayouter: use QTemporaryFile for applyLayout() (boo#1213708). * Translation updates.
first Aug 14, 2023 -
High max 8.8SUSE-SU-2025:1254-1 5 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#12…
first Apr 14, 2025 -
High max 7.7SUSE-SU-2024:1163-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)
first Apr 8, 2024 -
High max 8.4
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - bsc#978061: A vulnerability in ImageMagick's 'https' module allowed users to execute arbitrary shell commands on the host performing the image conversion. The issue had the potential for remote command…
first May 13, 2016 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …
first Jul 22, 2021 -
High max 7.4SUSE-SU-2025:01487-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.27+6 (April 2025 CPU) CVEs: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274) + CVE-2025-30691: Fixed Oracle J…
first Jun 16, 2025 -
High max 7.0SUSE-SU-2024:1033-1 1 CVE
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_147 fixes one issue. The following security issue was fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_gener…
first Mar 28, 2024 -
High max 7.8SUSE-SU-2023:4306-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). - CVE-2023-5367: Fixed a memory safety issue in both the XI2 and RandR protocols …
first Oct 31, 2023 -
High max 7.4SUSE-SU-2023:1941-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
first Apr 21, 2023 -
High max 7.8SUSE-SU-2023:3838-1 4 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_145 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vu…
first Sep 27, 2023 -
High max 7.5SUSE-SU-2018:4237-1 6 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the n…
first Dec 22, 2018 -
High max 7.5openSUSE-SU-2025:14918-1 2 CVEs
warewulf4-4.6.0-2.1 on GA media
These are all security issues fixed in the warewulf4-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 21, 2025 -
High max 7.8SUSE-SU-2024:1882-2 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806)
first May 31, 2024 -
High max 8.8SUSE-SU-2022:1275-1 1 CVE
Security update for gzip
This update for gzip fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)
first Apr 20, 2022 -
High max 7.5SUSE-SU-2021:4112-1 1 CVE
Security update for log4j12
This update for log4j12 fixes the following issues: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]
first Dec 17, 2021 -
High max 8.8SUSE-SU-2021:0367-1 8 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-22 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can e…
first Feb 10, 2021 -
High max 7.1SUSE-SU-2023:2533-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
first Jun 19, 2023 -
High max 7.5SUSE-SU-2021:14667-1 2 CVEs
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
first Mar 17, 2021 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability v…
first Sep 27, 2018 -
High max 8.8SUSE-SU-2016:1010-1 3 CVEs
Security update for mercurial
mercurial was updated to fix three security issues. These security issues were fixed: - CVE-2016-3069: Arbitrary code execution when converting Git repos (bsc#973176). - CVE-2016-3068: Arbitrary code execution with Git subrepos (bsc#973177). - CVE-2016-3630: …
first Apr 12, 2016 -
High max 8.6SUSE-SU-2024:3510-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-38286: OutOfMemory exception triggered through abuse of the TLS handshake process. (bsc#1230986)
first Oct 2, 2024 -
High max 8.7openSUSE-SU-2024:14298-1 1 CVE
python310-3.10.14-7.1 on GA media
These are all security issues fixed in the python310-3.10.14-7.1 package on the GA media of openSUSE Tumbleweed.
first Aug 30, 2024 -
High max 7.7SUSE-SU-2020:0630-1 1 CVE
Security update for ipmitool
This update for ipmitool fixes the following issues: - CVE-2020-5208: Fixed multiple remote code executtion vulnerabilities (bsc#1163026). - picmg discover messages are now DEBUG and not INFO messages (bsc#1085469).
first Mar 10, 2020 -
High max 7.8SUSE-SU-2022:2875-1 18 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36516: Fixed TCP session data injection vulnerability via the mixed IPID assignment method (bnc#1196616). - CVE-20…
first Aug 23, 2022 -
High max 8.4SUSE-SU-2025:3723-1 2 CVEs
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2025-5455: processing of malformed data in `qDecodeDataUrl()` can trigger assertion and cause a crash (bsc#1243958). - CVE-2025-30348: complex algorithm used in `encodeText…
first Oct 22, 2025 -
High max 7.5SUSE-SU-2024:1591-2 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
first Jun 18, 2024