12,602 results · Clear filters · Feed
-
High max 8.8openSUSE-SU-2020:2106-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: buildah was updated to v1.17.0 (bsc#1165184): * Handle cases where other tools mount/unmount containers * overlay.MountReadOnly: support RO overlay mounts * overlay: use fusermount for rootless umounts * ove…
first Nov 29, 2020 -
High max 8.7SUSE-SU-2021:2645-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-20…
first Aug 10, 2021 -
High max 7.5SUSE-SU-2020:0065-1 1 CVE
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#115230…
first Jan 10, 2020 -
High max 7.5openSUSE-SU-2025:15125-1 9 CVEs
ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
High max 8.6SUSE-SU-2024:2061-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to version 115.12.0 ESR (bsc#1226027) - CVE-2024-5702: Use-after-free in networking - CVE-2024-5688: Use-after-free in JavaScript object transplant - CVE-2024-5690: External protocol handlers…
first Jun 18, 2024 -
High max 7.8SUSE-SU-2023:2724-1 4 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_109 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE…
first Jun 29, 2023 -
High max 7.8SUSE-SU-2023:0331-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_21 fixes several issues. The following security issues were fixed: - CVE-2022-4379: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowed a…
first Feb 9, 2023 -
High max 7.5openSUSE-SU-2019:1112-1 1 CVE
Security update for python-Flask
This update for python-Flask to version 0.12.4 fixes the following issues: Security issue fixed: - CVE-2018-1000656: Fixed an improper input validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servic…
first Apr 2, 2019 -
High max 8.1openSUSE-SU-2023:0233-1 1 CVE
Security update for python-mitmproxy
This update for python-mitmproxy fixes the following issues: - CVE-2021-39214: Fixed HTTP smuggling attacks (boo#1190603)
first Aug 20, 2023 -
High max 7.8SUSE-SU-2025:3740-1 4 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_116 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 23, 2025 -
High max 8.7SUSE-SU-2021:2695-1 2 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_75 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control…
first Aug 17, 2021 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.0:Update update proj…
first Nov 3, 2019 -
High max 7.8openSUSE-SU-2022:10252-1 3 CVEs
Security update for vlc
This update for vlc fixes the following issues: - Update to version 3.0.18 (CVE-2022-41325, boo#1206142): + macOS: Fix audio device listing with non-latin names. + Misc: Fix rendering and performance issue with older GPUs. + Updated translations. - Changes fr…
first Dec 27, 2022 -
High max 7.0
Security update for Linux Kernel Live Patch 13 for SLE 12
This update for the Linux Kernel 3.12.55-52_45 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…
first Oct 26, 2016 -
High max 7.5openSUSE-SU-2024:13839-1 1 CVE
kubernetes1.27-apiserver-1.27.12-1.1 on GA media
These are all security issues fixed in the kubernetes1.27-apiserver-1.27.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:4495-1 3 CVEs
Security update for postgresql, postgresql15, postgresql16
This update for postgresql, postgresql15, postgresql16 fixes the following issues: This update ships postgresql 16. Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-…
first Nov 21, 2023 -
High max 7.8SUSE-SU-2018:2962-1 4 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP3)
This update for the Linux Kernel 4.4.114-94_11 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to …
first Oct 1, 2018 -
High max 7.8SUSE-SU-2025:3717-1 5 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_167 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 22, 2025 -
High max 7.5SUSE-SU-2025:01586-1 2 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2025-46727: possible memory exhaustion due to unbounded parameter parsing in Rack::QueryParser (bsc#1242894). - CVE-2025-32441: deleted sessions can be restored and occupied by unauthenticated use…
first May 19, 2025 -
High max 8.6SUSE-SU-2020:3034-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2020-27153: Fixed crash on disconnect (bsc#1177895). - CVE-2020-0556: Fixed potential escalation of privilege and denial of service via adjacent access, caused by improper access control (bsc#1166751).
first Oct 26, 2020 -
High max 7.5SUSE-SU-2023:0662-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).
first Mar 8, 2023 -
High max 7.5SUSE-SU-2019:0654-1 2 CVEs
Security update for openwsman
This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection()…
first Mar 20, 2019 -
High max 8.2openSUSE-SU-2025:0034-1 2 CVEs
Security update for chromium
This update for chromium fixes the following issues: - Chromium 132.0.6834.110 (boo#1236306) * CVE-2025-0611: Object corruption in V8 * CVE-2025-0612: Out of bounds memory access in V8
first Jan 27, 2025 -
High max 7.5openSUSE-SU-2025:14615-1 1 CVE
corepack22-22.12.0-1.1 on GA media
These are all security issues fixed in the corepack22-22.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 3, 2025 -
High max 7.8SUSE-SU-2022:0510-1 2 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). - CVE-2021-45082: Fixed incomplete template sanitation (bsc#1193678). The following non-security bugs were fixed: - Fix issues wit…
first Feb 18, 2022 -
High max 7.5SUSE-SU-2025:02564-1 2 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893) - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack sessio…
first Jul 31, 2025 -
High max 7.7SUSE-SU-2024:0510-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_…
first Feb 15, 2024 -
High max 7.5SUSE-SU-2022:1474-1 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols (bsc#1198672). - CVE-2022-21434: Fixed Oracle Java SE compromission via un…
first Apr 29, 2022 -
High max 7.8SUSE-SU-2025:03576-1 1 CVE
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_6 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 12, 2025 -
High max 7.8SUSE-SU-2024:1298-1 3 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_103 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2024-…
first Apr 15, 2024 -
High max 8.8SUSE-SU-2025:3995-1 5 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_6 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38511: drm/xe/pf: Clear all LMTT page…
first Nov 7, 2025 -
High max 8.8SUSE-SU-2022:3492-1 2 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.36.8 (bsc#1203530): - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution. - CVE-2022-32912: Fixed an out-of-bounds read that could potentiall…
first Oct 3, 2022 -
High max 7.5SUSE-SU-2022:3251-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-35949: Fixed SSRF when an application takes in user input into the path/pathname option of undici.request (bsc#1202382). - CVE-2022-35948: Fixed CRLF injection via Content-Type (bsc#1202383). - C…
first Sep 12, 2022 -
High max 7.5openSUSE-SU-2024:12688-1 4 CVEs
libopenssl-1_1-devel-1.1.1t-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1t-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2021:0427-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to ex…
first Feb 10, 2021 -
High max 7.8SUSE-SU-2025:0740-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2025-26597: improper resizing of key actions when nGroups is 0 can lead to buffer overflows in XkbChangeTypesOfKey() (bsc#1237431).
first Feb 28, 2025 -
High max 7.4SUSE-SU-2024:2766-1 6 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u422 (icedtea-3.32.0) * Security fixes + JDK-8314794, CVE-2024-21131, bsc#1228046: Improve UTF8 String supports + JDK-8319859, CVE-2024-21138, bsc#1228047: Better symbol stor…
first Aug 6, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A…
first Mar 4, 2022 -
High max 7.5openSUSE-SU-2024:13596-1 1 CVE
tomcat10-10.1.18-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2025:1408-1 1 CVE
Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_244 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
first Apr 29, 2025