12,602 results · Clear filters · Feed
-
High max 8.0SUSE-SU-2018:1173-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to 4.4.121 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-8781: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c had an integer-overflow vulnerabili…
first May 8, 2018 -
High max 8.8SUSE-SU-2024:0779-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-44446: Fixed use-after-free remote code execution vulnerability via MXF file (bsc#1217213).
first Mar 6, 2024 -
High max 7.0SUSE-SU-2023:2395-1 2 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_156 fixes several issues. The following security issues were fixed: - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_crea…
first Jun 6, 2023 -
High max 7.1openSUSE-SU-2024:13186-1 1 CVE
libvmtools-devel-12.2.0-6.1 on GA media
These are all security issues fixed in the libvmtools-devel-12.2.0-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:2814-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in load_input_picture (bsc#1227296)
first Aug 7, 2024 -
High max 7.0SUSE-SU-2024:2663-1 1 CVE
Security update for orc
This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages for certain input files (bsc#1228184)
first Jul 30, 2024 -
High max 7.8SUSE-SU-2023:4313-1 1 CVE
Security update for the Linux Kernel (Live Patch 45 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_165 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440).
first Oct 31, 2023 -
High max 8.2SUSE-SU-2021:3940-1 7 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers (bsc#1191601). - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body (bsc#1191602). - CVE-2021-37701: Fixed arbitrary f…
first Dec 6, 2021 -
High max 8.8SUSE-SU-2021:0095-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559). - CVE-2020-27825: F…
first Jan 12, 2021 -
High max 7.5SUSE-SU-2020:1841-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Tomcat was updated to 9.0.36 See changelog at - CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making p…
first Jul 3, 2020 -
High max 7.8SUSE-SU-2024:2983-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322) - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closur…
first Aug 20, 2024 -
High max 7.5SUSE-SU-2021:3602-1 3 CVEs
Security update for tomcat
This update for tomcat, javapackages-tools fixes the following issue: Security issue fixed: - CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). -…
first Nov 3, 2021 -
High max 7.8SUSE-SU-2021:1888-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to p…
first Jun 8, 2021 -
High max 7.5openSUSE-SU-2021:3938-1 8 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - Update to Wireshark 3.4.10: - CVE-2021-39920: IPPUSB dissector crash (bsc#1192830). - CVE-2021-39921: Modbus dissector crash (bsc#1192830). - CVE-2021-39922: C12.22 dissector crash (bsc#1192830). - CVE-2…
first Dec 6, 2021 -
High max 8.1SUSE-SU-2025:0637-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.8: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 21, 2025 -
High max 7.5openSUSE-SU-2025:14990-1 6 CVEs
rekor-1.3.10-1.1 on GA media
These are all security issues fixed in the rekor-1.3.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2025 -
High max 7.8SUSE-SU-2025:0414-1 1 CVE
Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_234 fixes one issue. The following security issue was fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998).
first Feb 11, 2025 -
High max 8.1SUSE-SU-2025:03584-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue in kube play command that could cause overwriting host files (bsc#1249154)
first Oct 13, 2025 -
High max 8.8openSUSE-SU-2019:2108-1 12 CVEs
Security update for SDL2_image
This update for SDL2_image fixes the following issues: Update to new upstream release 2.0.5. Security issues fixed: * TALOS-2019-0820 CVE-2019-5051: exploitable heap-based buffer overflow vulnerability when loading a PCX file (boo#1140419) * TALOS-2019-0821 C…
first Sep 10, 2019 -
High max 7.5openSUSE-SU-2024:13811-1 1 CVE
python310-validators-0.24.0-1.2 on GA media
These are all security issues fixed in the python310-validators-0.24.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2025:0580-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2024-45339: github.com/golang/glog: a privileged process' log file path can be easily predicted and used to overwrite other sensitive files in a system. (bsc#1236560)
first Feb 18, 2025 -
High max 8.1openSUSE-SU-2024:14112-1 1 CVE
libndp-1.8-2.1 on GA media
These are all security issues fixed in the libndp-1.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2024 -
High max 7.5openSUSE-SU-2019:1673-1 2 CVEs
Security update for tomcat
This update for tomcat to version 9.0.20 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fi…
first Jun 30, 2019 -
High max 8.8SUSE-SU-2023:4090-1 1 CVE
Security update for libcue
This update for libcue fixes the following issues: - CVE-2023-43641: Fixed a buffer overflow while parsing a malicious file (bsc#1215728).
first Oct 17, 2023 -
High max 7.5SUSE-SU-2021:0298-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.5.11 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345) - datapath: Clear the L4 portion of the key for 'later' fragments - datapath: Properly se…
first Feb 3, 2021 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential info…
first Aug 3, 2021 -
High max 8.0SUSE-SU-2019:1588-1 4 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while conne…
first Jun 20, 2019 -
High max 7.5SUSE-SU-2025:0337-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596)
first Feb 3, 2025 -
High max 8.1SUSE-SU-2016:0700-1 1 CVE
Security update for bsh2
This update for bsh2 fixes the following issues: - CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted source. Ple…
first Mar 9, 2016 -
High max 7.8openSUSE-SU-2024:12124-1 4 CVEs
go1.18-1.18.3-1.1 on GA media
These are all security issues fixed in the go1.18-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2025:14735-1 2 CVEs
go1.24-1.24rc3-1.1 on GA media
These are all security issues fixed in the go1.24-1.24rc3-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2025 -
High max 7.5SUSE-SU-2020:1963-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Tomcat was updated to 9.0.36 See changelog at - CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making p…
first Jul 20, 2020 -
High max 7.3SUSE-SU-2025:0192-1 1 CVE
Security update for pam_u2f
This update for pam_u2f fixes the following issues: - CVE-2025-23013: Fixed problematic PAM_IGNORE return values in `pam_sm_authenticate()` (bsc#1233517)
first Jan 20, 2025 -
High max 7.5SUSE-SU-2024:0526-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).
first Feb 19, 2024 -
High max 7.5SUSE-SU-2025:0318-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 (bsc#1236518)
first Feb 1, 2025 -
High max 8.8openSUSE-SU-2022:10151-1 6 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 106.0.5249.119 (boo#1204223): * CVE-2022-3445: Use after free in Skia * CVE-2022-3446: Heap buffer overflow in WebSQL * CVE-2022-3447: Inappropriate implementation in Custom Tabs * CVE-2022-3448: U…
first Oct 17, 2022 -
High max 7.8SUSE-SU-2023:4072-2 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local attacker …
first Nov 6, 2023 -
High max 7.5SUSE-SU-2023:1764-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 4, 2023 -
High max 7.1SUSE-SU-2022:3886-1 1 CVE
Security update for sudo
This update for sudo fixes the following issues: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
first Nov 7, 2022 -
High max 7.5SUSE-SU-2023:0587-1 1 CVE
Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-4_2 contains the following fixes: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values. (bsc#1207450) - fixed regression caused by fix for CVE-2022-44566…
first Mar 1, 2023