12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2023:0023-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.10: - Add option to turn off system token support (bsc#1205089) - Update the `last_seen_at` column on zypper service refresh - Do not retry to import non-existing files in air-gapped m…
first Jan 3, 2023 -
High max 8.3SUSE-SU-2025:4518-1 4 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…
first Dec 23, 2025 -
High max 8.8SUSE-SU-2024:2198-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491)
first Jun 25, 2024 -
High max 7.8SUSE-SU-2017:0264-1 5 CVEs
Security update for openssh
This update for openssh fixes several issues. These security issues were fixed: - CVE-2016-8858: The kex_input_kexinit function in kex.c allowed remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests (bsc…
first Jan 23, 2017 -
High max 7.5SUSE-SU-2018:1130-1 1 CVE
Security update for corosync
This update for corosync provides the following fixes: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix…
first May 2, 2018 -
High max 8.0SUSE-SU-2019:2821-1 8 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_110 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow …
first Oct 30, 2019 -
High max 7.2openSUSE-SU-2024:12932-1 2 CVEs
postgresql14-14.8-1.1 on GA media
These are all security issues fixed in the postgresql14-14.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2025:1392-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_20 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
first Apr 28, 2025 -
High max 7.8
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …
first Jun 6, 2023 -
High max 8.1SUSE-SU-2022:2064-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…
first Jun 13, 2022 -
High max 7.3SUSE-SU-2023:0781-2 4 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2023-0512: Fixed a divide By Zero (bsc#1207780). - CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957). - CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959). - CVE-2023-1…
first Apr 27, 2023 -
High max 7.8SUSE-SU-2023:3812-1 5 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_129 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…
first Sep 27, 2023 -
High max 7.5SUSE-SU-2021:14670-1 2 CVEs
Security update for openssl
This update for openssl fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
first Mar 19, 2021 -
High max 8.0SUSE-SU-2018:1640-1 4 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3)
This update for the Linux Kernel 4.4.103-6_38 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…
first Jun 11, 2018 -
High max 8.2openSUSE-SU-2024:14439-1 2 CVEs
alloy-1.4.3-1.1 on GA media
These are all security issues fixed in the alloy-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2024 -
High max 8.8SUSE-SU-2022:2821-1 2 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 (bsc#1201980): - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp document…
first Aug 16, 2022 -
High max 7.5SUSE-SU-2023:0616-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). Bugfixes: - Solve a program error in the Python Garbage Collection. (bsc#1188607) - Fixed issue where email.generator…
first Mar 3, 2023 -
High max 8.1SUSE-SU-2019:1790-1 2 CVEs
Security update for SUSE Manager Server 3.2
This update fixes the following issues: release-notes-susemanager: - Fix invalid characters in ncurses mode (bsc#1102770) spacewalk-backend: - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits a…
first Jul 9, 2019 -
High max 8.4openSUSE-SU-2025:0113-1 9 CVEs
Security update for assimp
This update for assimp fixes the following issues: - CVE-2024-48425: Fixed SEGV in Assimp:SplitLargeMeshesProcess_Triangle:UpdateNode (boo#1232324) - CVE-2024-48423: Fixed a arbitrary code execution via CallbackToLogRedirector() (boo#1232322) - CVE-2024-48424…
first Apr 2, 2025 -
High max 7.9SUSE-SU-2024:1771-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) - CVE-2023-45733: Fixed a potential security vulnerability in some Intel® Processors that may have allowed information disclosure. - …
first May 23, 2024 -
High max 7.8
Security update for Adobe Flash Player
Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabiliti…
first Apr 15, 2015 -
High max 7.5SUSE-SU-2022:4620-1 3 CVEs
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abina…
first Dec 27, 2022 -
High max 7.5openSUSE-SU-2024:12573-1 1 CVE
libopenssl-3-devel-3.0.7-2.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.0.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2023:2115-1 3 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754). - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778). - CVE-2022-48434: Fix…
first May 5, 2023 -
High max 7.5SUSE-RU-2018:4018-1 1 CVE
Security update for SUSE Manager Server 3.2
This update fixes the following issues: apache-mybatis: - Install missing LICENSE.txt file (bsc#1114814) cobbler: - Fix service restart after logrotate for cobblerd (bsc#1113747) - Rotate cobbler logs at higher frequency to prevent disk fillup (bsc#1113747) h…
first Dec 7, 2018 -
High max 7.5openSUSE-SU-2019:1499-1 5 CVEs
Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go sec…
first Jun 3, 2019 -
High max 7.5SUSE-SU-2023:0319-1 1 CVE
Security update for syslog-ng
This update for syslog-ng fixes the following issues: - CVE-2022-38725: Fixed an integer overflow in the RFC3164 protocol parser (bsc#1207460).
first Feb 8, 2023 -
High max 8.8SUSE-SU-2023:3250-1 2 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128) - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code ex…
first Aug 8, 2023 -
High max 7.0SUSE-SU-2018:2935-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15)
This update for the Linux Kernel 4.12.14-25_13 fixes several issues. The following security issues were fixed: - CVE-2018-10938: It was found that a crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cips…
first Sep 28, 2018 -
High max 7.5SUSE-SU-2022:3843-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2022-3358: Fixed vulnerability where a custom cipher passed to EVP_CipherInit() could lead into NULL encryption being unexpectedly used (bsc#1204226). - CVE-2022-3602: Fixed a buffer overflow in the …
first Nov 1, 2022 -
High max 7.5SUSE-SU-2023:4533-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230) * Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338) * CVE-2023-5721: Que…
first Nov 22, 2023 -
High max 8.4openSUSE-SU-2021:0630-1 3 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: - Version bump to 6.1.20 (released April 20 2021 by Oracle) Fixes boo#1183329 'virtualbox 6.1.18 crashes when it runs nested VM' Fixes boo#1183125 'Leap 15.3 installation in Virtualbox without VBox integr…
first Apr 30, 2021 -
High max 7.8SUSE-SU-2023:3675-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_28 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…
first Sep 19, 2023 -
High max 8.0SUSE-SU-2019:1671-1 4 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while co…
first Jun 21, 2019 -
High max 8.8SUSE-SU-2023:3802-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder (bsc#1213126).
first Sep 27, 2023 -
High max 7.7SUSE-SU-2023:0515-1 3 CVEs
Security update for php74
This update for php74 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367). - CVE-2023-0567: Fixed …
first Feb 24, 2023 -
High max 7.5SUSE-SU-2019:13982-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490). - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message c…
first Mar 19, 2019 -
High max 7.3openSUSE-SU-2021:0520-1 1 CVE
Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk
This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues: libostree: Update to version 2020.8 - Enable LTO. (bsc#1133120) - This update contains scalability improvements and bugfixes. - Caching-related HTTP hea…
first Apr 8, 2021 -
High max 8.5SUSE-SU-2025:03015-1 1 CVE
Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)
first Aug 29, 2025 -
High max 7.5SUSE-SU-2022:3287-1 1 CVE
Security update for python-rsa
This update for python-rsa fixes the following issues: - CVE-2020-13757: Fixed an issue where leading null bytes in a ciphertext would be ignored during decryption, leading to a potential information leak (bsc#1172389).
first Sep 16, 2022