12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2024:11581-1 1 CVE
python36-sqlparse-0.4.2-1.1 on GA media
These are all security issues fixed in the python36-sqlparse-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for apache2
This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could…
first Apr 4, 2019 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 89.0.4389.128 (boo#1184700): * CVE-2021-21206: Use after free in blink * CVE-2021-21220: Insufficient validation of untrusted input in v8 for x86_64
first Apr 17, 2021 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed an out-of-bounds memory access in vmwgfx driver causing denial of service (bsc#1203332). - CVE-202…
first Feb 23, 2023 -
High max 7.5
Security update for cacti, cacti-spine
This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (C…
first Jul 25, 2020 -
High max 8.8SUSE-SU-2023:4558-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 (bsc#1217210): - CVE-2023-41983: Processing web content may lead to a denial-of-service. - CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already pr…
first Nov 24, 2023 -
High max 7.8SUSE-SU-2024:1299-1 4 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-4…
first Apr 15, 2024 -
High max 7.1SUSE-SU-2019:3267-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095).
first Dec 11, 2019 -
High max 7.5openSUSE-SU-2024:10991-1 2 CVEs
libslirp-devel-4.6.1+7-1.2 on GA media
These are all security issues fixed in the libslirp-devel-4.6.1+7-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (…
first Feb 2, 2022 -
High max 7.5openSUSE-SU-2020:0731-1 3 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101). - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains cer…
first May 28, 2020 -
High max 7.8SUSE-SU-2023:2710-1 5 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_76 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE-…
first Jun 29, 2023 -
High max 7.5openSUSE-SU-2024:11961-1 1 CVE
c3p0-0.9.5.5-2.1 on GA media
These are all security issues fixed in the c3p0-0.9.5.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2019:1826-1 1 CVE
Security update for bubblewrap
This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp (bsc#1136958).
first Jul 12, 2019 -
High max 7.7SUSE-SU-2024:0508-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_…
first Feb 15, 2024 -
High max 7.7SUSE-SU-2020:1144-1 1 CVE
Security update for munge
This update for munge to 0.5.14 fixes the following issues: Security issue fixed: - CVE-2019-3691: Fixed a local privilege escalation during update (bsc#1155075) Non-security issue fixed: - Add Provides for 'munge-libs' to package libmunge (bsc#1160075).
first Apr 29, 2020 -
High max 7.8openSUSE-SU-2024:10983-1 24 CVEs
libreoffice-7.1.5.2-3.13 on GA media
These are all security issues fixed in the libreoffice-7.1.5.2-3.13 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2017:1737-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection co…
first Jun 29, 2017 -
High max 7.5SUSE-SU-2023:0273-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_38 fixes one issue. The following security issue was fixed: - CVE-2022-4379: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowed an attac…
first Feb 6, 2023 -
High max 7.8SUSE-SU-2017:0946-1 10 CVEs
Security update for jasper
This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530) - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977). - CVE-2016-…
first Apr 5, 2017 -
High max 7.8SUSE-SU-2023:0767-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-23559: Fixed i…
first Mar 16, 2023 -
High max 7.5openSUSE-SU-2024:14177-1 1 CVE
ruby3.3-rubygem-sprockets-4.2.1-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-sprockets-4.2.1-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.8SUSE-SU-2023:4912-1 18 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974) * CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). * CVE…
first Dec 19, 2023 -
High max 7.8SUSE-SU-2025:03160-1 6 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_150 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930)…
first Sep 11, 2025 -
High max 7.5SUSE-SU-2018:4297-1 4 CVEs
Security update for containerd, docker and go
This update for containerd, docker and go fixes the following issues: containerd and docker: - Add backport for building containerd (bsc#1102522, bsc#1113313) - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. (bsc#1102522) - Enable sec…
first Dec 28, 2018 -
High max 8.1openSUSE-SU-2024:10228-1 16 CVEs
python-libxml2-2.9.4-1.4 on GA media
These are all security issues fixed in the python-libxml2-2.9.4-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:0861-1 1 CVE
Security update for python-HyperKitty
This update for python-HyperKitty fixes the following issues: - CVE-2021-33038 [boo#1186575], information disclosure when importing a private mailing list
first Jun 9, 2021 -
High max 8.8SUSE-SU-2024:0057-1 1 CVE
Security update for eclipse-jgit, jsch
This update for eclipse-jgit, jsch fixes the following issues: Security fix: - CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. (bsc#1215298) Other fixes: jsc…
first Jan 8, 2024 -
High max 7.8SUSE-SU-2023:4160-1 2 CVEs
Security update for suse-module-tools
This update for suse-module-tools fixes the following issues: - Updated to version 15.1.25: - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335). - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#P…
first Oct 23, 2023 -
High max 7.8SUSE-SU-2023:1609-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (…
first Mar 28, 2023 -
High max 7.5SUSE-SU-2020:3566-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
first Nov 30, 2020 -
High max 8.8openSUSE-SU-2024:14351-1 1 CVE
postgresql15-15.8-1.1 on GA media
These are all security issues fixed in the postgresql15-15.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 19, 2024 -
High max 7.8openSUSE-SU-2024:11853-1 1 CVE
cobbler-3.3.1.0+git.f5b0599a-1.1 on GA media
These are all security issues fixed in the cobbler-3.3.1.0+git.f5b0599a-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8openSUSE-SU-2024:12961-1 1 CVE
sysstat-12.6.2-2.1 on GA media
These are all security issues fixed in the sysstat-12.6.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:12577-1 8 CVEs
MozillaFirefox-108.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-108.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2024:3032-1 2 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID removal (bsc#1225850). - CVE-2023-52772: Fixed use-after-free in unix_stream_re…
first Aug 27, 2024 -
High max 7.5SUSE-SU-2024:0730-1 6 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to 18.19.1: (security updates) * CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992). * CVE-2024-22019: http: Reading unprocessed HTTP request with unboun…
first Feb 29, 2024 -
High max 8.1SUSE-RU-2024:0560-1 1 CVE
Recommended update for Java
This update for Java fixes the following issues: plexus-archiver was updated from version 4.2.1 to 4.8.0: - Changes of 4.8.0: * Security issues fixed: + CVE-2023-37460: Avoid override target symlink by standard file in AbstractUnArchiver (bsc#1215973) * New f…
first Feb 21, 2024 -
High max 8.8openSUSE-SU-2021:0242-1 78 CVEs
Security update for RT kernel
This update syncs the RT kernel from the SUSE Linux Enterprise 15-SP2 codestream. This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Feb 5, 2021 -
High max 8.0SUSE-SU-2019:0422-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Security issue fixed: - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301).
first Feb 18, 2019