12,602 results · Clear filters · Feed
-
High max 7.8
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UAF…
first Apr 22, 2024 -
High max 7.5SUSE-SU-2022:3547-1 1 CVE
Security update for jdom
This update for jdom fixes the following issues: - CVE-2021-33813: Fixed XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446).
first Oct 25, 2022 -
High max 7.0SUSE-SU-2018:2345-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 12)
This update for the Linux Kernel 3.12.61-52_128 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …
first Aug 16, 2018 -
High max 7.5SUSE-SU-2017:0603-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366)…
first Mar 3, 2017 -
High max 7.8
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…
first May 7, 2024 -
High max 8.6SUSE-SU-2024:0295-1 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to runc v1.1.11: - CVE-2024-21626: Fixed container breakout. (bsc#1218894)
first Feb 1, 2024 -
High max 7.8SUSE-SU-2023:1679-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).
first Mar 29, 2023 -
High max 7.8SUSE-SU-2023:0774-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability …
first Mar 16, 2023 -
High max 7.4openSUSE-SU-2024:11899-1 1 CVE
ruby3.1-rubygem-actionpack-7.0-7.0.2.2-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-actionpack-7.0-7.0.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0852-1 1 CVE
Security update for osc
This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths (bsc#1122675). Non-security issues fixed: - Improved the speed and usability of osc bash …
first Jun 22, 2020 -
High max 7.8SUSE-SU-2022:2216-1 5 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_68 fixes several issues. The following security issues were fixed: - CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privi…
first Jun 29, 2022 -
High max 8.1openSUSE-SU-2024:11175-1 1 CVE
platformsh-cli-3.67.2-1.2 on GA media
These are all security issues fixed in the platformsh-cli-3.67.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:13615-1 1 CVE
etcd-3.5.11-1.1 on GA media
These are all security issues fixed in the etcd-3.5.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2020:1486-1 25 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: Update to Oracle version 6.1.14a. This minor update enables the building of libvirt again. Version update to 6.1.14 (released September 04 2020 by Oracle) File 'fix_virtio_build.patch' is added to fix a b…
first Sep 20, 2020 -
High max 8.8openSUSE-SU-2024:14205-1 8 CVEs
chromedriver-126.0.6478.182-1.1 on GA media
These are all security issues fixed in the chromedriver-126.0.6478.182-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 19, 2024 -
High max 7.5openSUSE-SU-2023:0257-1 4 CVEs
Security update for modsecurity
This update for modsecurity fixes the following issues: Update to version 3.0.10: * Security impacting issue (fix boo#1213702, CVE-2023-38285) - Fix: worst-case time in implementation of four transformations - Additional information on this issue is available…
first Sep 25, 2023 -
High max 8.1openSUSE-SU-2024:13333-1 2 CVEs
exim-4.96.2-1.1 on GA media
These are all security issues fixed in the exim-4.96.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4openSUSE-SU-2024:14610-1 4 CVEs
assimp-devel-5.4.3-3.1 on GA media
These are all security issues fixed in the assimp-devel-5.4.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Dec 29, 2024 -
High max 8.8openSUSE-SU-2024:13312-1 1 CVE
eclipse-jgit-5.11.0-9.1 on GA media
These are all security issues fixed in the eclipse-jgit-5.11.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2022:10198-1 2 CVEs
Security update for varnish
This update for varnish fixes the following issues: Update to 7.2.1: - CVE-2022-45059: Fixed a HTTP request smuggling via hop-by-hop headers (boo#1205243). - CVE-2022-45060: Fixed a HTTP request forgery via character injection through HTTP/2 pseudo-headers (b…
first Nov 11, 2022 -
High max 5.3SUSE-SU-2022:2567-1 1 CVE
Important update for SUSE Manager 4.2.8 Release Notes
This update for SUSE Manager 4.2.8 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.8 * Notification about SUSE Manager end-of-life has been added * CVEs fixed CVE-2022-31248 * Bugs mentioned bsc#1179962, bsc#118…
first Jul 27, 2022 -
High max 7.8SUSE-SU-2021:0086-1 1 CVE
Security update for crmsh
This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).
first Jan 12, 2021 -
High max 7.8SUSE-SU-2025:0732-1 8 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427). - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429). - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237…
first Feb 26, 2025 -
High max 8.1openSUSE-SU-2024:11019-1 5 CVEs
libzypp-17.28.4-1.2 on GA media
These are all security issues fixed in the libzypp-17.28.4-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4244-1 1 CVE
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_160 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215…
first Oct 30, 2023 -
High max 7.5SUSE-SU-2021:0031-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issue: - CVE-2020-17527: Fixed a HTTP/2 request header mix-up (bsc#1179602).
first Jan 5, 2021 -
High max 7.5SUSE-SU-2022:0935-1 1 CVE
Security update for nodejs12
This update for nodejs12 fixes the following issues: Update to 12.22.11, which adjusts dependencies for openssl sources to 1.1.1n. Addressing the following issue in openssl: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (…
first Mar 22, 2022 -
High max 7.0SUSE-SU-2018:3268-1 1 CVE
Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP3)
This update for the Linux Kernel 4.4.156-94_61 fixes one issue. The following security issue was fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way an authentication request from an I…
first Oct 22, 2018 -
High max 7.4SUSE-SU-2021:1841-1 1 CVE
Security update for dhcp
This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)
first Jun 2, 2021 -
High max 8.8openSUSE-SU-2024:0348-1 2 CVEs
Security update for chromium
This update for chromium fixes the following issues: Update to version 130.0.6723.91 (boo#1232566): - CVE-2024-10487: Out of bounds write in Dawn - CVE-2024-10488: Use after free in WebRTC
first Nov 5, 2024 -
High max 8.8SUSE-SU-2022:4207-1 5 CVEs
Security update for webkit2gtk3
Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user inte…
first Nov 23, 2022 -
High max 7.8SUSE-SU-2023:0226-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_105 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1…
first Feb 1, 2023 -
High max 7.5SUSE-SU-2024:1767-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2024-4340: Catch RecursionError to avoid a denial of service. (bsc#1223603)
first May 23, 2024 -
High max 7.6SUSE-SU-2019:2879-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#114…
first Oct 31, 2019 -
High max 8.8openSUSE-SU-2024:12358-1 7 CVEs
MozillaThunderbird-102.3.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:2000-1 3 CVEs
Security update for go1.12
This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth. (bsc#1146111) - CVE-2019-9514: Fixed HTTP/2 implementation is vulnerable to a reset flood,…
first Aug 24, 2019 -
High max 8.1openSUSE-SU-2024:12359-1 1 CVE
expat-2.4.9-1.1 on GA media
These are all security issues fixed in the expat-2.4.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:13753-1 1 CVE
MozillaThunderbird-115.8.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:3929-1 25 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15-SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-2964, CVE-2022-28748: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686 bsc#1196018). - CVE-2…
first Nov 10, 2022 -
High max 7.5openSUSE-SU-2024:11896-1 14 CVEs
java-1_8_0-openj9-1.8.0.322-2.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.322-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024