12,602 results · Clear filters · Feed
-
High max 8.4SUSE-SU-2024:4093-1 1 CVE
Security update for python-virtualenv
This update for python-virtualenv fixes the following issues: - CVE-2024-53899: Fixed a command injection through activation scripts (bsc#1233706)
first Nov 28, 2024 -
High max 7.5openSUSE-SU-2024:14107-1 1 CVE
forgejo-7.0.5-1.1 on GA media
These are all security issues fixed in the forgejo-7.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 5, 2024 -
High max 8.6SUSE-SU-2019:1156-1 3 CVEs
Security update for python-Jinja2
This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format…
first May 6, 2019 -
High max 7.8SUSE-SU-2023:2781-1 3 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.13: - CVE-2023-28120: Fixed a possible XSS Security Vulnerability in bytesliced strings for html_safe (bsc#1209507). - CVE-2023-27530: Fixed a DoS in multipart mime parsing (bsc#120909…
first Jul 4, 2023 -
High max 7.1SUSE-SU-2024:0772-1 3 CVEs
Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14: * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more…
first Mar 5, 2024 -
High max 7.8SUSE-SU-2023:4788-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2023-6377: Fixed Out-of-bounds memory write in XKB button actions(bsc#1217765). - CVE-2023-6478: Fixed Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (bsc#1217766).
first Dec 13, 2023 -
High max 7.5SUSE-SU-2024:1129-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2023-52425: Fixed a DoS caused by processing large tokens. (bsc#1219559) - CVE-2024-28757: Fixed an XML Entity Expansion. (bsc#1221289)
first Apr 8, 2024 -
High max 7.5SUSE-SU-2023:0348-1 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2022-46663: Fixed denial-of-service by printing specially crafted escape sequences to the terminal (bsc#1207815).
first Feb 10, 2023 -
High max 7.5openSUSE-SU-2024:12310-1 2 CVEs
go1.19-1.19.1-1.1 on GA media
These are all security issues fixed in the go1.19-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP2 LTSS kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).
first Oct 21, 2016 -
High max 8.8SUSE-SU-2022:2431-1 1 CVE
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).
first Jul 18, 2022 -
High max 7.5SUSE-SU-2019:14011-1 14 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2018-19965: Fixed an issue related to the INVPCID instruction in case non-canonical addresses are accessed, which may allow a guest to cause Xen to crash, resulting in a Denial of Se…
first Apr 3, 2019 -
High max 7.5SUSE-SU-2020:2784-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)
first Sep 29, 2020 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_33 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …
first Jun 7, 2023 -
High max 7.8SUSE-SU-2025:0111-1 6 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid …
first Jan 14, 2025 -
High max 7.5openSUSE-SU-2021:2353-1 6 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362:…
first Jul 15, 2021 -
High max 7.8openSUSE-SU-2024:13275-1 1 CVE
libopenssl-3-devel-3.1.3-1.2 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.1.3-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3SUSE-SU-2023:1904-1 3 CVEs
Security update for grafana
This version update from 8.5.20 to 8.5.22 for grafana fixes the following issues: - Security issues fixed: * CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645) * CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821) * CVE-2023…
first Apr 19, 2023 -
High max 8.2openSUSE-SU-2021:0165-1 2 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: Version update to 6.1.18 (released January 19 2021) This is a maintenance release. The following items were fixed and/or added: - Nested VM: Fixed hangs when executing SMP nested-guests under certain cond…
first Jan 25, 2021 -
High max 7.5SUSE-SU-2024:2810-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a …
first Aug 7, 2024 -
High max 7.8SUSE-SU-2023:4035-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bound…
first Oct 10, 2023 -
High max 8.8SUSE-SU-2022:3730-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: Updated to version 2.4.3: - CVE-2018-1000805: Fixed authentication bypass (bsc#1111151). Bugfixes: - Fixed Ed25519 key handling for certain key comment lengths (bsc#1200603).
first Oct 25, 2022 -
High max 8.2openSUSE-SU-2024:13876-1 4 CVEs
qemu-8.2.2-2.1 on GA media
These are all security issues fixed in the qemu-8.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:4580-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_112 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…
first Dec 20, 2022 -
High max 7.5openSUSE-SU-2024:12338-1 1 CVE
jasper-3.0.6-2.1 on GA media
These are all security issues fixed in the jasper-3.0.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2017:0999-1 5 CVEs
Security update for bind
This update for bind fixes the following issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of serv…
first Apr 13, 2017 -
High max 7.4SUSE-SU-2023:0794-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed Key confusion through non-blocklisted public key formats (bsc#1199756). - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 2.4.0 (bsc#1199756) - Explicit ch…
first Mar 17, 2023 -
High max 8.1openSUSE-SU-2024:11978-1 2 CVEs
python-Twisted-doc-22.2.0-1.1 on GA media
These are all security issues fixed in the python-Twisted-doc-22.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:0280-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_33 fixes several issues. The following security issues were fixed: - CVE-2022-4379: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowed a…
first Feb 7, 2023 -
High max 8.6SUSE-SU-2024:0459-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.1.12 (bsc#1218894) The following CVE was already fixed with the previous release. - CVE-2024-21626: Fixed container breakout.
first Feb 13, 2024 -
High max 7.0SUSE-SU-2024:2898-1 1 CVE
Security update for gtk3
This update for gtk3 fixes the following issues: - CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120).
first Aug 13, 2024 -
High max 8.8SUSE-SU-2020:14355-1 3 CVEs
Security update for LibVNCServer
This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fi…
first May 4, 2020 -
High max 7.8openSUSE-SU-2024:14268-1 5 CVEs
ucode-intel-20240813-1.1 on GA media
These are all security issues fixed in the ucode-intel-20240813-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 15, 2024 -
High max 7.5openSUSE-SU-2019:2598-1 5 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket…
first Nov 30, 2019 -
High max 7.7SUSE-SU-2020:1538-1 7 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2020-1711: Fixed a potential OOB access in the iSCSI client code (bsc#1166240). - CVE-2019-12068: Fixed a potential DoS in the LSI SCSI controller emulation (bsc#1146873). - CVE-202…
first Jun 4, 2020 -
High max 7.5openSUSE-SU-2021:3806-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened …
first Nov 25, 2021 -
High max 7.5SUSE-SU-2024:0759-1 5 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security issues fixed: - CVE-2020-29573: x86: printf was hardened against non-normal long double values (bsc#1179721, BZ #26649) - CVE-2021-3326: Fix assertion failure in gconv ISO-2022-JP-3 module (bsc#118150…
first Mar 5, 2024 -
High max 7.5SUSE-SU-2021:3267-1 1 CVE
Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-4_2 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169).
first Sep 30, 2021 -
High max 7.5SUSE-SU-2015:1112-1 5 CVEs
Security update for python-Django
python-django was updated to 1.6.11 to fix security issues and non-security bugs. The following vulnerabilities were fixed: * Made is_safe_url() reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bn…
first Mar 30, 2015 -
High max 7.5SUSE-SU-2021:2323-1 6 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362:…
first Jul 14, 2021