12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2017:0726-1 1 CVE
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm to 8.0-4.1 fixes the following issues: Security issue fixed: - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately …
first Mar 17, 2017 -
High max 8.0openSUSE-SU-2020:0405-1 3 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin to version 4.9.5 fixes the following issues: - phpmyadmin was updated to 4.9.5: - CVE-2020-10804: Fixed an SQL injection in the user accounts page, particularly when changing a password (boo#1167335 PMASA-2020-2). - CVE-2020-10802: …
first Mar 29, 2020 -
High max 7.8
Security update for flash-player
flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute a…
first Jul 16, 2015 -
High max 8.8SUSE-SU-2023:4980-1 1 CVE
Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2023-40474: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215796).
first Dec 27, 2023 -
High max 7.8openSUSE-SU-2024:11423-1 2 CVEs
python36-targetcli-fb-2.1.54-1.2 on GA media
These are all security issues fixed in the python36-targetcli-fb-2.1.54-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:02145-1 3 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_185 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-56605: Bluetooth: L2CAP: do not le…
first Jun 27, 2025 -
High max 7.0SUSE-SU-2018:2678-1 2 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15)
This update for the Linux Kernel 4.12.14-25_6 fixes several issues. The following security issues were fixed: - CVE-2018-15471: An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c. The Linux netback driver allowed frontends to…
first Sep 10, 2018 -
High max 8.6SUSE-SU-2024:1059-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed full container escape at build time in buildah (bsc#1221677).
first Mar 28, 2024 -
High max 7.4SUSE-SU-2023:1940-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).
first Apr 21, 2023 -
High max 8.0SUSE-SU-2019:2864-1 3 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_15 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow in …
first Oct 30, 2019 -
High max 8.7openSUSE-SU-2021:1142-1 5 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3679: A lack of CPU resource in the Linux kernel tracing module functionality was found in the way user uses trace ring buff…
first Aug 10, 2021 -
High max 7.0SUSE-SU-2020:1363-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.35. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) * CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persisten…
first May 21, 2020 -
High max 7.5SUSE-SU-2018:3965-1 1 CVE
Security update for pam
This update for pam fixes the following issue: Security issue fixed: - CVE-2018-17953: Fixed IP address and subnet handling of pam_access.so that was not honoured correctly when a single host was specified (bsc#1115640).
first Dec 3, 2018 -
High max 7.5SUSE-SU-2022:2919-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2022-2509: Fixed a double free issue during PKCS7 verification (bsc#1202020). Non-security fixes: - FIPS: Check minimum keylength for symmetric key generation [bsc#1190698] - FIPS: Only allows ECDSA sig…
first Aug 26, 2022 -
High max 8.8SUSE-SU-2023:2175-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential perm…
first May 11, 2023 -
High max 7.0openSUSE-SU-2020:0937-1 1 CVE
Security update for coturn
This update for coturn fixes the following issues: Version 4.5.1.3: * Remove reference to SSLv3: gh#coturn/coturn#566 * Ignore MD5 for BoringSSL: gh#coturn/coturn#579 * STUN response buffer not initialized properly; he issue found and reported gh#coturn/cotur…
first Jul 6, 2020 -
High max 8.8SUSE-SU-2022:4483-1 6 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-46342: Server XvdiSelectVideoNoti…
first Dec 14, 2022 -
High max 7.0
kernel-debug-4.8.13-1.1 on GA media
These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:1650-1 1 CVE
Security update for rubygem-actionpack-4_2
This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2021-22885: Fixed possible information disclosure / unintended method execution in Action Pack (bsc#1185715).
first May 19, 2021 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#121942…
first Feb 15, 2024 -
High max 7.8SUSE-SU-2024:2099-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). - CVE-2024-26852: Fi…
first Jun 19, 2024 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
first Jan 25, 2022 -
High max 8.1SUSE-SU-2022:2314-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2022-24903: fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) Upgrade to rsyslog 8.2106.0 (bsc#1188039) * NOTE: the prime new feature is support for TLS and non-TLS c…
first Jul 6, 2022 -
High max 8.8openSUSE-SU-2019:2050-1 1 CVE
Security update for httpie
This update for httpie fixes the following issues: httpie was updated to version 1.0.3: * Fix CVE-2019-10751 (HTTPie is volnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory,…
first Sep 2, 2019 -
High max 7.5SUSE-SU-2023:3290-1 1 CVE
Security update for qatengine
This update for qatengine fixes the following issues: - CVE-2022-43507: Fixed a buffer overflow issue with SHA3. (bsc#1211296)
first Aug 11, 2023 -
High max 7.5
lighttpd-1.4.73-1.1 on GA media
These are all security issues fixed in the lighttpd-1.4.73-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2023:2545-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
first Jun 19, 2023 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …
first Jul 21, 2021 -
High max 8.8SUSE-SU-2022:0251-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
first Jan 31, 2022 -
High max 7.5openSUSE-SU-2024:12062-1 6 CVEs
curl-7.83.1-1.1 on GA media
These are all security issues fixed in the curl-7.83.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:02700-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).
first Aug 5, 2025 -
High max 7.5SUSE-SU-2022:1750-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490). - CVE-2022-29824: Fixed integer overflow that could have led to an out-of-bounds write in buf.c (xmlBuf*) and tree.c (xmlBuf…
first May 19, 2022 -
High max 7.0SUSE-SU-2018:3789-1 2 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_98 fixes several issues. The following security issues were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authe…
first Nov 16, 2018 -
High max 7.8SUSE-SU-2025:0440-1 2 CVEs
Security update for the Linux Kernel (Live Patch 52 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_189 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_…
first Feb 12, 2025 -
High max 7.5SUSE-SU-2023:2038-2 3 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2023-25652: Fixed partial overwrite of paths outside the working tree (bsc#1210686). - CVE-2023-25815: Fixed malicious placemtn of crafted message (bsc#1210686). - CVE-2023-29007: Fixed arbitrary configura…
first May 2, 2023 -
High max 7.4SUSE-SU-2024:0479-1 7 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u402 build 06 with OpenJ9 0.43.0 virtual machine * Including OpenJ9 0.41.0 fixes of CVE-2023-5676, bsc#1217214 * CVE-2024-20918 (bsc#1218907), CVE-2024-20919 (bsc#1218903), CVE-2…
first Feb 15, 2024 -
High max 8.3openSUSE-SU-2022:0132-1 2 CVEs
Security update for php-composer
This update for php-composer fixes the following issues: php-composer was updated to version 1.10.26: * Security: Fixed command injection vulnerability in HgDriver/GitDriver: CVE-2022-24828 boo#1198494 Update to version 1.10.25 * Fix regression with PHP 8.1.0…
first May 10, 2022 -
High max 8.2openSUSE-SU-2021:1092-1 4 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: Version bump to 6.1.24 (released July 20 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - Storage: Fixed starting a VM if a device is attached to a VirtIO SCSI…
first Aug 4, 2021 -
High max 8.7SUSE-SU-2021:2647-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-2021-225…
first Aug 10, 2021 -
High max 7.5SUSE-SU-2020:2509-1 4 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_54 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACP…
first Sep 4, 2020