12,602 results · Clear filters · Feed
-
High max 8.1SUSE-SU-2025:0606-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.20: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 20, 2025 -
High max 7.1SUSE-SU-2018:0213-1 22 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 Realtime kernel was updated to 4.4.104 to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc…
first Jan 25, 2018 -
High max 7.5openSUSE-SU-2018:4177-1 4 CVEs
Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157). - CVE-2018-14644: Fixed denial of service via crafted query for meta-types (bsc…
first Dec 18, 2018 -
High max 7.5SUSE-SU-2023:2304-1 2 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Updated to version 2.13: - CVE-2023-28120: Fixed a potential XSS issue in an embedded dependency (bsc#1209507). - CVE-2023-27530: Fixed a denial of service issue in multipart request parsing (bsc#1209096)…
first May 25, 2023 -
High max 8.0SUSE-SU-2019:14218-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11-SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to fac…
first Nov 13, 2019 -
High max 8.1SUSE-SU-2024:2542-1 3 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to 18.20.4: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560) - CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554) Changes in 18.20.3: - This releas…
first Jul 17, 2024 -
High max 7.5openSUSE-SU-2024:14166-1 1 CVE
python310-websockets-12.0-2.6 on GA media
These are all security issues fixed in the python310-websockets-12.0-2.6 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 7.5SUSE-SU-2019:1889-1 2 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow when handling TCP Selecti…
first Jul 18, 2019 -
High max 8.0SUSE-SU-2019:1532-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.180 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading…
first Jun 17, 2019 -
High max 7.8SUSE-SU-2025:01956-1 4 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_195 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow …
first Jun 13, 2025 -
High max 7.9
Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_144 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-0266: Fixed a use-after-free vulner…
first Mar 28, 2023 -
High max 8.6openSUSE-SU-2025:14625-1 1 CVE
gstreamer-plugins-base-1.24.11-1.1 on GA media
These are all security issues fixed in the gstreamer-plugins-base-1.24.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 9, 2025 -
High max 7.8SUSE-SU-2024:1847-1 4 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854). …
first May 29, 2024 -
High max 8.8SUSE-SU-2021:3675-1 15 CVEs
Security update for the Linux Kernel
The following security bugs were fixed: - CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063). - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc…
first Nov 16, 2021 -
High max 7.8SUSE-SU-2025:3741-1 1 CVE
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_121 fixes one issue. The following security issue was fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).
first Oct 23, 2025 -
High max 8.8SUSE-SU-2023:4425-1 3 CVEs
Security update for postgresql, postgresql15, postgresql16
This update for postgresql, postgresql15, postgresql16 fixes the following issues: This update ships postgresql 16 (jsc#PED-5586). Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error…
first Nov 13, 2023 -
High max 8.7SUSE-SU-2021:2646-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-20…
first Aug 10, 2021 -
High max 7.5SUSE-SU-2023:0005-1 14 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442). - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavf…
first Jan 2, 2023 -
High max 8.8openSUSE-SU-2024:13423-1 14 CVEs
ungoogled-chromium-119.0.6045.123-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-119.0.6045.123-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2021:0771-1 2 CVEs
Security update for crmsh
This update for crmsh fixes the following issues: - Update to version 3.0.4+git.1614156978.4c1dc46d: * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571) * Fix: bootstrap: setup authorized s…
first Mar 11, 2021 -
High max 7.8openSUSE-SU-2024:12560-1 2 CVEs
kernel-devel-6.0.12-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.0.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.3openSUSE-SU-2020:0757-1 13 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511). Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of servi…
first Jun 2, 2020 -
High max 7.8SUSE-SU-2018:2963-1 4 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP3)
This update for the Linux Kernel 4.4.140-94_42 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to …
first Oct 1, 2018 -
High max 7.3openSUSE-SU-2024:11767-1 1 CVE
cargo1.56-1.56.1-4.1 on GA media
These are all security issues fixed in the cargo1.56-1.56.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:4176-1 4 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2023-28755: Fixed a ReDoS vulnerability in URI. (bsc#1209891) - CVE-2023-28756: Fixed an expensive regexp in the RFC2822 time parser. (bsc#1209967) - CVE-2021-41817: Fixed a Regular Expression Denial o…
first Oct 24, 2023 -
High max 7.0SUSE-SU-2024:1053-1 2 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…
first Mar 28, 2024 -
High max 7.5SUSE-SU-2024:1572-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
first May 9, 2024 -
High max 8.8SUSE-SU-2022:2525-1 3 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 (bsc#1201221): - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupt…
first Jul 22, 2022 -
High max 7.5openSUSE-SU-2022:10144-1 2 CVEs
Security update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer
This update for gdcm, orthanc, orthanc-gdcm, orthanc-webviewer fixes the following issues: Changes in gdcm: - Provides/obsoletes moved to lbgdcm-package (Thx DimStar) - rename of gdcm-libgdcm3_0 to libgdcm3_0 (proposal S. Br�ns) - version 3.0.18 no changelog …
first Oct 12, 2022 -
High max 7.8openSUSE-SU-2024:10918-1 6 CVEs
libX11-6-1.7.2-1.2 on GA media
These are all security issues fixed in the libX11-6-1.7.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:2190-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: Update to 3.6.12 (bsc#1179193), including: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project.
first Dec 7, 2020 -
High max 7.5SUSE-SU-2022:1513-1 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672). - CVE-2022-21434: Fixed Oracle Java SE compromission via un…
first May 3, 2022 -
High max 7.8SUSE-SU-2025:02697-1 4 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vuln…
first Aug 5, 2025 -
High max 8.3SUSE-SU-2024:1989-1 1 CVE
Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: - Bump gith…
first Jun 11, 2024 -
High max 8.8SUSE-SU-2021:0434-1 26 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3348: Fixed a use-after-free in nbd_add_socket() that could be triggered by local attackers (with access to the nb…
first Feb 11, 2021 -
High max 7.1SUSE-SU-2017:2525-1 40 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-5243: The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel did not properly co…
first Sep 19, 2017 -
High max 7.4SUSE-SU-2017:2695-1 3 CVEs
Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624) - CVE-2017-12150: Always enforc…
first Oct 10, 2017 -
High max 7.5SUSE-SU-2024:1204-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2024-24549: Fixed denial of service during header validation for HTTP/2 stream (bsc#1221386) - CVE-2024-23672: Fixed denial of service due to malicious WebSocket client keeping connection open (bsc#12…
first Apr 11, 2024 -
High max 8.8SUSE-SU-2024:2906-1 1 CVE
Security update for python39-setuptools
This update for python39-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)
first Aug 14, 2024 -
High max 8.1openSUSE-SU-2017:0792-1 1 CVE
Security update for mbedtls
This update to mbedtls 1.3.19 fixes security issues and bugs. The following vulnerability was fixed: CVE-2017-2784: A remote user could have used a specially crafted certificate to cause mbedtls to free a buffer allocated on the stack when verifying the valid…
first Mar 22, 2017