12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2019:2145-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383). This update was imported from the SUSE:SLE-15-SP1:…
first Sep 17, 2019 -
High max 7.5SUSE-SU-2023:4655-1 11 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…
first Dec 6, 2023 -
High max 7.0SUSE-SU-2025:0161-1 2 CVEs
Security update for redis7
This update for redis7 fixes the following issues: - CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) - CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collec…
first Jan 17, 2025 -
High max 8.8SUSE-SU-2023:0469-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Updated to version 102.8.0 ESR (bsc#1208144): - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes. - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode…
first Feb 21, 2023 -
High max 8.1openSUSE-SU-2024:14514-1 2 CVEs
dcmtk-3.6.8-5.1 on GA media
These are all security issues fixed in the dcmtk-3.6.8-5.1 package on the GA media of openSUSE Tumbleweed.
first Nov 21, 2024 -
High max 8.8
chromedriver-96.0.4664.110-1.1 on GA media
These are all security issues fixed in the chromedriver-96.0.4664.110-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8openSUSE-SU-2019:2173-1 38 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-18551: There was an out of bounds write in the function i2c_smbus_xfer_emulated (bnc#1146163). - CVE-2018-20976: A use after…
first Sep 24, 2019 -
High max 8.8SUSE-SU-2019:2521-1 3 CVEs
Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Jinja2 template library fix (bsc#1141661) pgjdbc-ng: - Allow dots in database name (bsc#1146416) py26-compat-salt: - Get tornado dependency from the system on SLE12 (bsc#1149409) - Catch SSLError for TLS 1.2 …
first Oct 2, 2019 -
High max 8.1SUSE-SU-2023:0163-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546). - CVE-2022-38023: Disabled weak ciph…
first Jan 26, 2023 -
High max 7.3SUSE-SU-2022:3765-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: Updated to version 8.3.10 (jsc#SLE-24565, jsc#SLE-23422, jsc#SLE-23439): - CVE-2022-31097: Fixed XSS vulnerability in the Unified Alerting (bsc#1201535). - CVE-2022-31107: Fixed OAuth account takeover vulner…
first Oct 26, 2022 -
High max 8.8
chromedriver-104.0.5112.101-1.1 on GA media
These are all security issues fixed in the chromedriver-104.0.5112.101-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0openSUSE-SU-2024:13888-1 5 CVEs
ffmpeg-5-5.1.4-5.1 on GA media
These are all security issues fixed in the ffmpeg-5-5.1.4-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2022:3613-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2022-31197: Fixed SQL injection vulnerability (bsc#1202170).
first Oct 18, 2022 -
High max 7.5SUSE-SU-2023:4663-1 4 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2023-47235: Fixed denial of service caused by malformed BGP UPDATE message with an EOR is processed (bsc#1216896). - CVE-2023-47234: Fixed denial of service caused by crafted BGP UPDATE message with a MP_U…
first Dec 6, 2023 -
High max 7.8SUSE-SU-2025:03130-1 9 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 10, 2025 -
High max 7.4SUSE-SU-2021:14802-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).
first Sep 18, 2021 -
High max 7.5SUSE-SU-2024:0553-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
first Feb 20, 2024 -
High max 7.5SUSE-SU-2019:2400-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).
first Sep 18, 2019 -
High max 7.0SUSE-SU-2022:0782-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.43 (bsc#1196016): * 10.2.43: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.2.42: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659,…
first Mar 9, 2022 -
High max 7.8SUSE-SU-2023:4260-1 3 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_130 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (b…
first Oct 30, 2023 -
High max 7.1openSUSE-SU-2024:13792-1 1 CVE
diffoscope-261-1.1 on GA media
These are all security issues fixed in the diffoscope-261-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:0818-1 1 CVE
Security update for libxkbfile
This update for libxkbfile fixes the following issues: - CVE-2025-26595: Fixed buffer overflow in XkbVModMaskText() (bsc#1237429).
first Mar 10, 2025 -
High max 7.5SUSE-SU-2024:3664-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) - CVE-2024-8927: Fixed cgi.force_redirect configuration is bypass…
first Oct 16, 2024 -
High max 8.8openSUSE-SU-2024:13617-1 9 CVEs
MozillaThunderbird-115.7.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2025:1416-1 2 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (bsc#1233294). - CVE-2024-56650: netfilter: x_tabl…
first Apr 30, 2025 -
High max 8.8openSUSE-SU-2024:13020-1 2 CVEs
nodejs-electron-22.3.14-1.1 on GA media
These are all security issues fixed in the nodejs-electron-22.3.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0openSUSE-SU-2021:3531-1 5 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522). - CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426). - CVE-2018-1000517: Fixed buffer overflow …
first Oct 27, 2021 -
High max 7.8
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes one issue. The following security issue was fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).
first Jan 27, 2025 -
High max 7.5openSUSE-SU-2024:13778-1 1 CVE
cmctl-1.14.4-1.1 on GA media
These are all security issues fixed in the cmctl-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4781-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_24 fixes one issue. The following security issue was fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalation. (bsc…
first Dec 13, 2023 -
High max 7.0SUSE-SU-2023:3707-2 2 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). - CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254).
first Oct 18, 2023 -
High max 7.7SUSE-SU-2025:01744-1 1 CVE
Security update for python313-setuptools
This update for python313-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 29, 2025 -
High max 7.5SUSE-SU-2024:2636-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: Update to release 9.18.28 Security fixes: - CVE-2024-0760: Fixed a flood of DNS messages over TCP may make the server unstable (bsc#1228255) - CVE-2024-1737: Fixed BIND's database will be slow if a very large n…
first Jul 30, 2024 -
High max 8.8SUSE-SU-2022:3605-1 5 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994). - CVE-2022-42719: Fixed use-after-free i…
first Oct 17, 2022 -
High max 7.5SUSE-SU-2018:1994-1 1 CVE
Security update for rubygem-sprockets
This update for rubygem-sprockets fixes the following issues: The following security vulnerability was addressed: - CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbidden_request?(), which allowed remote attackers to read arbitrary files…
first Jul 19, 2018 -
High max 7.5SUSE-SU-2017:1000-1 5 CVEs
Security update for bind
This update for bind fixes the following security issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denia…
first Apr 13, 2017 -
High max 7.5openSUSE-SU-2024:10618-1 5 CVEs
apache-commons-compress-1.21-1.2 on GA media
These are all security issues fixed in the apache-commons-compress-1.21-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:01981-1 6 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49177: Data le…
first Jun 17, 2025 -
High max 7.5openSUSE-SU-2024:14175-1 9 CVEs
ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 7.5openSUSE-SU-2024:12475-1 3 CVEs
libopenssl-3-devel-3.0.7-1.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024