12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:03194-1 7 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_97 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 12, 2025 -
High max 8.8SUSE-SU-2023:0171-1 3 CVEs
Security update for libXpm
This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption t…
first Jan 26, 2023 -
High max 7.8SUSE-SU-2022:3407-1 3 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_34 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116). - C…
first Sep 26, 2022 -
High max 7.8SUSE-SU-2022:4309-1 1 CVE
Security update for busybox
This update for busybox fixes the following issues: - CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744).
first Dec 1, 2022 -
High max 8.8SUSE-SU-2024:0971-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.9.0 ESR (bsc#1221327): - CVE-2024-0743: Crash in NSS TLS method (bmo#1867408). - CVE-2024-2605: Windows Error Reporter could be used as a Sandbox escape vector (bm…
first Mar 22, 2024 -
High max 7.8SUSE-SU-2023:3963-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684). - CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685). - CVE-2023…
first Oct 4, 2023 -
High max 7.0SUSE-SU-2024:3549-1 3 CVEs
Security update for redis7
This update for redis7 fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service (bsc#1231266) - CVE-2024-31228: Fixed unbounded recursive pattern matching (bsc#1231265) - CVE-2024-31449: Fixed integer overflow bug in Lua …
first Oct 8, 2024 -
High max 7.5SUSE-SU-2018:0865-1 1 CVE
Security update for docker-distribution
This update for docker-distribution fixes the following issues: Security issues fixed: - CVE-2017-11468: Fixed a denial of service (memory consumption) via the manifest endpoint (bsc#1049850). Bug fixes: - bsc#1083474: docker-distirbution-registry overwrites …
first Apr 3, 2018 -
High max 8.2SUSE-SU-2025:02311-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).
first Jul 15, 2025 -
High max 7.8SUSE-SU-2023:2849-1 13 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR * New: - Required fields are now highlighted in …
first Jul 17, 2023 -
High max 7.8openSUSE-SU-2024:12834-1 1 CVE
xwayland-23.1.1-1.1 on GA media
These are all security issues fixed in the xwayland-23.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:3741-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2024-9675: Fixed cache arbitrary directory mount (bsc#1231499). - CVE-2024-9407: Fixed improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208). The follo…
first Oct 21, 2024 -
High max 7.5
httrack-3.48.22-1.3 on GA media
These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:1769-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622). - CVE-2023-24998: Fixed FileUpload deny-of-service with excessive parts (bsc#1208513).
first Apr 5, 2023 -
High max 7.5SUSE-SU-2020:1132-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851).
first Apr 28, 2020 -
High max 7.5openSUSE-SU-2024:12861-1 1 CVE
rustup-1.25.2~0-4.1 on GA media
These are all security issues fixed in the rustup-1.25.2~0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.7openSUSE-SU-2024:14299-1 1 CVE
python311-3.11.9-7.1 on GA media
These are all security issues fixed in the python311-3.11.9-7.1 package on the GA media of openSUSE Tumbleweed.
first Aug 30, 2024 -
High max 7.8SUSE-SU-2025:3888-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_13 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38618: vsock: Do not allow binding to…
first Oct 31, 2025 -
High max 7.5SUSE-SU-2020:1695-1 1 CVE
Security update for osc
This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths (bsc#1122675). Non-security issues fixed: - Improved the speed and usability of osc bash …
first Jun 19, 2020 -
High max 7.8
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-26622: Fixe…
first May 9, 2024 -
High max 7.8SUSE-SU-2023:4810-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality (bsc#1217332). - CVE-2023…
first Dec 13, 2023 -
High max 7.5SUSE-SU-2024:1624-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
first May 13, 2024 -
High max 8.3openSUSE-SU-2024:13951-1 1 CVE
apptainer-1.3.0-2.1 on GA media
These are all security issues fixed in the apptainer-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:0166-1 5 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum dat…
first Jan 17, 2025 -
High max 8.8openSUSE-SU-2024:13335-1 14 CVEs
ungoogled-chromium-118.0.5993.70-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-118.0.5993.70-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2024:13851-1 3 CVEs
corepack20-20.12.1-1.1 on GA media
These are all security issues fixed in the corepack20-20.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7openSUSE-SU-2024:10864-1 1 CVE
ipmitool-1.8.18.238.gb7adc1d-1.2 on GA media
These are all security issues fixed in the ipmitool-1.8.18.238.gb7adc1d-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4347-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE…
first Nov 2, 2023 -
High max 7.8SUSE-SU-2018:2787-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 12)
This update for the Linux Kernel 3.12.61-52_106 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to…
first Sep 21, 2018 -
High max 7.5openSUSE-SU-2024:12889-1 3 CVEs
git-2.40.1-1.1 on GA media
These are all security issues fixed in the git-2.40.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:3359-1 3 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_111 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#120…
first Sep 24, 2022 -
High max 7.5SUSE-SU-2024:4290-1 3 CVEs
Security update for libsoup2
This update for libsoup2 fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_li…
first Dec 11, 2024 -
High max 8.8openSUSE-SU-2024:13144-1 21 CVEs
ungoogled-chromium-116.0.5845.96-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-116.0.5845.96-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4273-1 3 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_176 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#12…
first Oct 30, 2023 -
High max 7.5SUSE-SU-2022:2117-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-21716: Fixed that ssh server accepts an infinite amount of data using all the available memory (bsc#1196739).
first Jun 20, 2022 -
High max 7.6SUSE-SU-2019:2710-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-18595: A double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c (bnc#114…
first Oct 18, 2019 -
High max 7.4openSUSE-SU-2021:1189-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bs…
first Aug 25, 2021 -
High max 8.8SUSE-SU-2024:3159-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 16.4 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013) - CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ex…
first Sep 6, 2024 -
High max 7.5SUSE-SU-2025:01792-1 1 CVE
Security update for dnsdist
This update for dnsdist fixes the following issues: - CVE-2025-30193: stack exhaustion when processing too many queries on incoming TCP connections leads to a denial-of-service (bsc#1243378).
first Jun 2, 2025 -
High max 7.2SUSE-SU-2023:2205-1 2 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Updated to version 14.8: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). -…
first May 15, 2023