12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2022:2070-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-21716: Fixed that ssh server accepts an infinite amount of data using all the available memory (bsc#1196739).
first Jun 14, 2022 -
High max 7.5SUSE-SU-2022:14887-1 4 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2018-16151: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874) - CVE-2018-16152: Fixed flaws in gmp plugin that could lead to authorization bypass. (bsc#1107874) - CVE-…
first Feb 18, 2022 -
High max 7.8openSUSE-SU-2021:0271-1 3 CVEs
Security update for firejail
This update for firejail fixes the following issues: firejail 0.9.64.4 is shipped to openSUSE Leap 15.2 - CVE-2021-26910: Fixed root privilege escalation due to race condition (boo#1181990) Update to 0.9.64.4: * disabled overlayfs, pending multiple fixes * fi…
first Feb 10, 2021 -
High max 7.5SUSE-SU-2024:1624-2 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
first Jun 18, 2024 -
High max 7.8SUSE-SU-2025:1571-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-2761: unvalidated user input in FLI file parsing may lead to an out-of-bounds write (bsc#1241691).
first May 16, 2025 -
High max 7.8SUSE-SU-2024:4195-1 2 CVEs
Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_194 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 5, 2024 -
High max 8.1SUSE-SU-2025:1423-1 3 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (bsc#1227753). - CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero …
first May 1, 2025 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to 86.0.4363.23: - CHR-8843 Update chromium on desktop-stable-100-4363 to 100.0.4896.127 - DNA-98236 Turn on #snap-text-selection on all streams - DNA-98507 DCHECK at address_bar_controller.cc(547) - DN…
first May 1, 2022 -
High max 7.5SUSE-SU-2024:2485-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Updated to version 9.0.91: - CVE-2024-34750: Fixed an improper handling of exceptional conditions (bsc#1227399).
first Jul 15, 2024 -
High max 8.1SUSE-SU-2015:1840-1 3 CVEs
Security update for openssh
openssh was updated to fix four security issues. These security issues were fixed: - CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X connections,…
first Oct 19, 2015 -
High max 8.4SUSE-SU-2025:01669-1 2 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-50115: KVM: nSVM: Ignore …
first May 22, 2025 -
High max 8.8SUSE-SU-2022:4249-1 1 CVE
Security update for pixman
This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
first Nov 28, 2022 -
High max 7.5SUSE-SU-2025:4039-1 2 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u472 (icedtea-3.37.0): - CVE-2025-53057: Fixed certificate handling leading to unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-202…
first Nov 10, 2025 -
High max 7.5SUSE-SU-2023:2313-1 4 CVEs
Security update for c-ares
This update for c-ares fixes the following issues: Update to version 1.19.1: - CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) - CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) - CVE-2023-31130: B…
first May 30, 2023 -
High max 8.1SUSE-SU-2023:3526-1 4 CVEs
Security update for sccache
This update for sccache fixes the following issues: - Update to version 0.4.2. - CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119) - CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972) - CVE…
first Sep 5, 2023 -
High max 7.8openSUSE-SU-2024:13241-1 1 CVE
libopenssl-1_1-devel-1.1.1w-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1w-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:13706-1 1 CVE
libhtp-devel-0.5.46-1.1 on GA media
These are all security issues fixed in the libhtp-devel-0.5.46-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:03110-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_8 fixes several issues. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 9, 2025 -
High max 7.3openSUSE-SU-2020:0551-1 18 CVEs
Recommended update for otrs
Otrs was updated to 5.0.42, fixing lots of bugs and security issues: https://community.otrs.com/otrs-community-edition-5s-patch-level-42/ - CVE-2020-1773 boo#1168029 OSA-2020-10: * Session / Password / Password token leak An attacker with the ability to gener…
first Apr 25, 2020 -
High max 7.4openSUSE-SU-2021:1248-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521). This update was imported from the SUSE:SLE-15-SP2:Update update p…
first Sep 12, 2021 -
High max 8.8SUSE-SU-2022:0135-1 27 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2011-5325: Fixed tar directory traversal (bsc#951562). - CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912). - CVE-2016-2147: Fixed out of bounds write (heap) due to inte…
first Jan 20, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside …
first Apr 22, 2024 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to version 76.0.4017.94 - released on the stable branch Update to version 76.0.4017.88 - CHR-8404 Update chromium on desktop-stable-90-4017 to 90.0.4430.85 - DNA-92219 Add bookmark API supports to the f…
first May 11, 2021 -
High max 7.8SUSE-SU-2024:1190-1 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).
first Apr 10, 2024 -
High max 7.5SUSE-SU-2022:3196-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-35949: Fixed SSRF when an application takes in user input into the path/pathname option of undici.request (bsc#1202382). - CVE-2022-35948: Fixed CRLF injection via Content-Type (bsc#1202383). - C…
first Sep 8, 2022 -
High max 8.1SUSE-SU-2022:2303-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2021-21707: Fixed a special character that breaks path in xml parsing. (bsc#1193041) - CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645) - CVE-2022-31626: Fixed buffer…
first Jul 6, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). -…
first Feb 10, 2022 -
High max 7.5SUSE-SU-2021:3298-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
first Oct 6, 2021 -
High max 7.8SUSE-SU-2025:4324-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-10922: Fixed GIMP DCM file parsing heap-based buffer overflow remote code execution vulnerability. (bsc#1250497)
first Dec 8, 2025 -
High max 8.1SUSE-SU-2025:03111-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_23 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 9, 2025 -
High max 7.5openSUSE-SU-2025:14703-1 1 CVE
apache2-mod_security2-2.9.8-2.1 on GA media
These are all security issues fixed in the apache2-mod_security2-2.9.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jan 28, 2025 -
High max 7.5SUSE-SU-2025:0102-1 2 CVEs
Security update for apache2-mod_jk
This update for apache2-mod_jk fixes the following issues: - Update to version 1.2.50: - CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. (bsc#1230916) - CVE-2023-41081: F…
first Jan 14, 2025 -
High max 7.9
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…
first Mar 28, 2023 -
High max 7.8SUSE-RU-2020:0793-1 1 CVE
Recommended update for systemd
This update for systemd fixes the following issues: - manager: fix job mode when signalled to shutdown etc (bsc#1161262) - remove fallback for user/exit.target - dbus method Manager.Exit() does not start exit.target - do not install rescue.target for alt-↑ - …
first Mar 25, 2020 -
High max 7.8SUSE-SU-2023:0225-1 1 CVE
Security update for ctags
This update for ctags fixes the following issues: - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename (bsc#1206543).
first Feb 1, 2023 -
High max 7.1SUSE-SU-2019:14111-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).
first Jul 2, 2019 -
High max 7.5SUSE-SU-2019:1006-1 1 CVE
Security update for SUSE Manager Server 3.2
This update includes the following new features: to the repository metadata (fate#325676) This update fixes the following issues: apache-commons-lang3: - Run fdupes on javadoc - Specify java target and source level 1.6 to make package compatible with JDK >= 1…
first Apr 24, 2019 -
High max 8.7SUSE-SU-2021:3969-1 37 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc…
first Dec 7, 2021 -
High max 8.1openSUSE-SU-2024:11716-1 1 CVE
sccache-0.2.15~git0.6b6d2f7-8.1 on GA media
These are all security issues fixed in the sccache-0.2.15~git0.6b6d2f7-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:14410-1 1 CVE
nodejs-electron-31.7.1-1.1 on GA media
These are all security issues fixed in the nodejs-electron-31.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2024