12,602 results · Clear filters · Feed
-
High max 7.7SUSE-SU-2022:3899-1 1 CVE
Security update for sendmail
This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
first Nov 8, 2022 -
High max 7.5SUSE-SU-2020:0439-1 1 CVE
Security update for dpdk
This update for dpdk to version 18.11.3 fixes the following issues: Security issue fixed: - CVE-2019-14818: Fixed a denial of service by a malicious container via the vhost-user socket (bsc#1156146). Non-security issue fixed: - Added current version to the PM…
first Feb 24, 2020 -
High max 8.8SUSE-SU-2023:3220-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow (bsc#1213126).
first Aug 7, 2023 -
High max 8.1openSUSE-SU-2024:0168-1 1 CVE
Security update for gdcm
This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon (boo#1223398).
first Jun 18, 2024 -
High max 7.1SUSE-SU-2024:0167-1 3 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache (bsc#1192760). - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#…
first Jan 19, 2024 -
High max 8.8
libsharpyuv0-1.3.1-2.1 on GA media
These are all security issues fixed in the libsharpyuv0-1.3.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2017:3155-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2017-14746: Use-after-free vulnerability (bsc#1060427). - CVE-2017-15275: Server heap memory information leak (bsc#1063008). - CVE-2017-12163: Prevent client short SMB1 write from …
first Nov 30, 2017 -
High max 7.5openSUSE-SU-2020:0210-1 38 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.87 (boo#1162833). Security issues fixed: - CVE-2020-6381: Integer overflow in JavaScript (boo#1162833). - CVE-2020-6382: Type Confusion in JavaScript (boo#1162833).…
first Feb 12, 2020 -
High max 8.0openSUSE-SU-2021:0405-1 1 CVE
Security update for git
This update for git fixes the following issues: - On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code durin…
first Mar 14, 2021 -
High max 7.5SUSE-SU-2017:0392-1 2 CVEs
Security update for spice
This security update for spice fixes the following issues: CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers cou…
first Feb 6, 2017 -
High max 7.5SUSE-SU-2025:1332-1 6 CVEs
Security update for rekor
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure…
first Apr 17, 2025 -
High max 7.8SUSE-SU-2025:0976-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2024-56171: Fixed use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363). - CVE-2025-24928: Fixed stack-based buffer overflow in xmlSnprintfElements…
first Mar 21, 2025 -
High max 7.8SUSE-SU-2024:1669-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27043: Fixed a use-after-free in edia/dvbdev in different places (bsc#1223824). - CVE-2024-26733: Fixed an overflow in…
first May 16, 2024 -
High max 7.5SUSE-SU-2023:3345-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: - Update to 13.12 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)
first Aug 17, 2023 -
High max 7.5openSUSE-SU-2024:11829-1 1 CVE
ruby3.1-rubygem-json_pure-2.6.1-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-json_pure-2.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1openSUSE-SU-2024:14088-1 1 CVE
openssh-9.6p1-10.1 on GA media
These are all security issues fixed in the openssh-9.6p1-10.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2024 -
High max 8.1openSUSE-SU-2021:0375-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack [bsc#1182246] This update was imported from the SUSE:SLE-15:Update update project.
first Mar 3, 2021 -
High max 7.3SUSE-SU-2019:14155-1 1 CVE
Recommended update for ghostscript-library
This update for ghostscript-library fixes the following issues: Security issue fixed: - CVE-2019-3838: Fixed various bugs which allows to reenable and misuse system Postscript operators to read files from within Postscript files and send them with the help of…
first Aug 28, 2019 -
High max 7.8openSUSE-SU-2025:14999-1 1 CVE
python-lxml-doc-5.3.2-1.1 on GA media
These are all security issues fixed in the python-lxml-doc-5.3.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2025 -
High max 7.5openSUSE-SU-2024:13613-1 1 CVE
libzstd-devel-1.5.5-5.1 on GA media
These are all security issues fixed in the libzstd-devel-1.5.5-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2024:12299-1 4 CVEs
MozillaThunderbird-102.2.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0945-1 1 CVE
Security update for rust, rust-cbindgen
This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202) Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-19…
first Jul 7, 2020 -
High max 7.5SUSE-SU-2017:1538-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following security issues: * CVE-2017-9050: A heap-based buffer over-read in xmlDictAddString (bsc#1039069, bsc#1039661) * CVE-2017-9049: A heap-based buffer overflow in xmlDictComputeFastKey (bsc#1039066) * CVE-2017-9048: A …
first Jun 12, 2017 -
High max 7.8SUSE-SU-2022:2111-1 30 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) -…
first Jun 17, 2022 -
High max 7.5openSUSE-SU-2024:11563-1 8 CVEs
redis-6.2.6-1.1 on GA media
These are all security issues fixed in the redis-6.2.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3SUSE-SU-2024:1728-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2024-2961: iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (bsc#1222992)
first May 21, 2024 -
High max 7.5SUSE-SU-2023:3384-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: - Update to 12.16 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)
first Aug 23, 2023 -
High max 7.5SUSE-SU-2024:3115-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2024-7006: Fixed null pointer dereference in tif_dirinfo.c (bsc#1228924)
first Sep 3, 2024 -
High max 8.8openSUSE-SU-2024:11574-1 1 CVE
flatpak-1.12.1-1.1 on GA media
These are all security issues fixed in the flatpak-1.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:11311-1 3 CVEs
libruby3_0-3_0-3.0.1-3.2 on GA media
These are all security issues fixed in the libruby3_0-3_0-3.0.1-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4openSUSE-SU-2024:11229-1 2 CVEs
python36-ecdsa-0.16.1-1.5 on GA media
These are all security issues fixed in the python36-ecdsa-0.16.1-1.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2024:1294-1 3 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-30203: Fixed treating inline MIME contents as trusted (bsc#1222053) - CVE-2024-30204: Fixed LaTeX preview enabled by default for e-mail attachments (bsc#1222052) - CVE-2024-30205: Fixed Org mode con…
first Apr 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071) - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)
first Jun 11, 2024 -
High max 7.5SUSE-SU-2015:1524-1 1 CVE
Security update for net-snmp
net-snmp was updated to fix one security vulnerability and several bugs. - fix a vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bnc#940188, CVE-2015-5621) - Add build requirement 'procps' to fix a net-snmp-config error. (bsc#935863) - add …
first Aug 17, 2015 -
High max 7.1SUSE-SU-2020:3292-1 4 CVEs
Security update for python-waitress
This update for python-waitress to version 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089).…
first Nov 11, 2020 -
High max 8.8openSUSE-SU-2024:0305-1 4 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: Adding references for already fixed vulnerability: - CVE-2023-50186: Fixed heap-based buffer overflow in the AV1 codec parser (ZDI-CAN-22300, bsc#1218534, bsc#1223263) - CVE-2023-40475: Fixed G…
first Sep 17, 2024 -
High max 7.5openSUSE-SU-2024:13429-1 2 CVEs
openvpn-2.6.7-1.1 on GA media
These are all security issues fixed in the openvpn-2.6.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2020:2060-1 4 CVEs
Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: - Add patches for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965): - Add CVE-2020-11077.patch (bsc#1172175, CVE-2020-11077) - Add CVE-2020-11076.patch (bsc#1172176, CVE-2020-11076) - Add CVE-2020-5247.patc…
first Jul 28, 2020 -
High max 7.5openSUSE-SU-2024:14551-1 1 CVE
python310-python-multipart-0.0.19-1.1 on GA media
These are all security issues fixed in the python310-python-multipart-0.0.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 5, 2024 -
High max 7.4openSUSE-SU-2024:14555-1 3 CVEs
python310-Flask-Security-5.5.2-1.1 on GA media
These are all security issues fixed in the python310-Flask-Security-5.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024