12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2021:3941-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the pas…
first Dec 6, 2021 -
High max 7.5SUSE-SU-2023:4214-1 11 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 115.4.0 ESR (bsc#1216338): - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5722: Fixed a cross-Origin size and header leakage. - CVE-2023-5723: Fi…
first Oct 26, 2023 -
High max 7.8SUSE-SU-2025:4059-1 5 CVEs
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.103 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched…
first Nov 11, 2025 -
High max 7.8SUSE-SU-2024:2101-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (…
first Jun 19, 2024 -
High max 7.5SUSE-SU-2025:03508-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).
first Oct 9, 2025 -
High max 8.8openSUSE-SU-2023:0016-1 13 CVEs
Security update for chromium
This update for chromium fixes the following issues: Update to version 109.0.5414.74 (boo#1207018): - CVE-2023-0128: Use after free in Overview Mode - CVE-2023-0129: Heap buffer overflow in Network Service - CVE-2023-0130: Inappropriate implementation in Full…
first Jan 13, 2023 -
High max 7.2SUSE-SU-2024:0851-1 1 CVE
Security update for axis
This update for axis fixes the following issues: - CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605).
first Mar 12, 2024 -
High max 7.0SUSE-SU-2022:1123-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2020-1752: Fix use-after-free in glob when expanding ~user (bsc#1167631)
first Apr 6, 2022 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to version 77.0.4054.146 - CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114 - DNA-92171 Create active linkdiscovery service - DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiA…
first Jul 1, 2021 -
High max 7.5SUSE-SU-2021:4015-2 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287) - CVE-2021-3426: Fixed an information disclosure v…
first Dec 23, 2021 -
High max 8.8openSUSE-SU-2024:12525-1 1 CVE
ctdb-4.17.3+git.279.ff9bb8a298-1.1 on GA media
These are all security issues fixed in the ctdb-4.17.3+git.279.ff9bb8a298-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:3904-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
first Nov 4, 2024 -
High max 7.5
Security update for rubygem-actionpack-4_1
This update for rubygem-actionpack-4_1 fixes the following issues: - CVE-2016-0751: Object Leak DoS (bsc#963331) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) - CVE-2016-0752: directory traversal and information leak…
first Mar 22, 2016 -
High max 7.5openSUSE-SU-2019:2668-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: - CVE-2019-15961: Fixed a denial of service which might occur when scanning a specially crafted email file as (bsc#1157763). This update was imported from the SUSE:SLE-15:Update update project.
first Dec 11, 2019 -
High max 7.8SUSE-SU-2025:03583-1 1 CVE
Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_207 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 13, 2025 -
High max 7.0SUSE-SU-2018:3159-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger …
first Oct 16, 2018 -
High max 7.8SUSE-SU-2023:0262-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_43 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (…
first Feb 4, 2023 -
High max 8.1SUSE-SU-2020:0213-1 7 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Update to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968) Fixing these security related issues: - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilit…
first Jan 22, 2020 -
High max 7.5SUSE-SU-2018:2863-1 1 CVE
Security update for dom4j
This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection vulnerability that allowed an attacker to tamper with XML documents (bsc#1105443).
first Sep 25, 2018 -
High max 7.5SUSE-SU-2024:3500-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-41996: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE (bs…
first Sep 30, 2024 -
High max 7.5SUSE-SU-2024:0922-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).
first Mar 18, 2024 -
High max 7.8SUSE-SU-2024:1738-1 3 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 21, 2024 -
High max 7.5openSUSE-SU-2025:14956-1 1 CVE
headscale-0.25.1-2.1 on GA media
These are all security issues fixed in the headscale-0.25.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
High max 8.2openSUSE-SU-2023:0166-1 10 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: - Fix Vagrant/virtualbox startup problems boo#1209727 - VirtualBox 7.0.8 (released April 18 2023) This is a maintenance release. The following items were fixed and/or added: - VMM: Introduced general impr…
first Jul 4, 2023 -
High max 7.5openSUSE-SU-2024:12847-1 1 CVE
tomcat-9.0.43-16.1 on GA media
These are all security issues fixed in the tomcat-9.0.43-16.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_ap…
first Sep 25, 2023 -
High max 7.5SUSE-SU-2023:2484-1 1 CVE
Security update for openldap2
This update for openldap2 fixes the following issues: - CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).
first Jun 12, 2023 -
High max 7.0SUSE-SU-2018:2353-1 3 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_63 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 8.8SUSE-SU-2023:0654-1 1 CVE
Security update for xwayland
This update for xwayland fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).
first Mar 8, 2023 -
High max 7.5openSUSE-SU-2024:13838-1 1 CVE
kubernetes1.26-apiserver-1.26.15-1.1 on GA media
These are all security issues fixed in the kubernetes1.26-apiserver-1.26.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2021:0348-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execu…
first Feb 9, 2021 -
High max 7.5openSUSE-SU-2024:12784-1 1 CVE
ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:0933-1 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2020-25613: Fixed a potential HTTP Request Smuggling in WEBrick (bsc#1177125). - Enable optimizations also on ARM64 (bsc#1177222)
first Mar 24, 2021 -
High max 7.5openSUSE-SU-2025:14839-1 3 CVEs
teleport-17.2.9-1.1 on GA media
These are all security issues fixed in the teleport-17.2.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 26, 2025 -
High max 8.8SUSE-SU-2021:3642-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351). - CVE-2021-3655: Fixed a missing size validat…
first Nov 9, 2021 -
High max 7.1SUSE-SU-2025:0611-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - CVE-2024-45339: github.com/golang/glog: a privileged process' log file path can be easily predicted and used to overwrite other sensitive files in a system. (bsc#1236560)
first Feb 21, 2025 -
High max 7.5SUSE-SU-2023:0607-1 2 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Update to 14.21.3: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA envi…
first Mar 3, 2023 -
High max 7.5SUSE-SU-2024:3455-1 3 CVEs
Security update for kubernetes1.27
This update of kubernetes1.27 fixes the following issues: - rebuild the package with the current go 1.23 security release (bsc#1229122).
first Oct 2, 2024 -
High max 8.3openSUSE-SU-2024:14019-1 1 CVE
skopeo-1.15.1-1.1 on GA media
These are all security issues fixed in the skopeo-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7openSUSE-SU-2024:13718-1 1 CVE
kubernetes1.26-apiserver-1.26.14-1.1 on GA media
These are all security issues fixed in the kubernetes1.26-apiserver-1.26.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024