12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2022:2765-1 1 CVE
Security update for rubygem-tzinfo
This update for rubygem-tzinfo fixes the following issues: - CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).
first Aug 10, 2022 -
High max 7.5openSUSE-SU-2020:2129-1 10 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes: * adds ECDSA keys and host key support when using OpenSSL * adds ED25519 key and host key support when using OpenSSL 1.1…
first Dec 1, 2020 -
High max 7.5SUSE-SU-2020:3594-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
first Dec 2, 2020 -
High max 7.5SUSE-SU-2019:0135-1 3 CVEs
Security update for systemd
This update for systemd provides the following fixes: Security issues fixed: - CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323) - CVE-2018-16866: Fixed an information leak in journald (bsc#112032…
first Jan 21, 2019 -
High max 7.8SUSE-SU-2021:1238-1 33 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation whe…
first Apr 16, 2021 -
High max 7.1SUSE-SU-2022:14891-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). The following non-security bugs were fixed: - Move configuration files ownership to apache (bsc#1195906)
first Feb 18, 2022 -
High max 8.8SUSE-SU-2022:3007-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.13.0 ESR (bsc#1202645): - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling. - CVE-2022-38473: Fixed an issue where cross-origin XSLT d…
first Sep 2, 2022 -
High max 7.8SUSE-SU-2020:0580-1 22 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data structures…
first Mar 4, 2020 -
High max 7.5openSUSE-SU-2024:10715-1 5 CVEs
dhcp-4.4.2.P1-2.4 on GA media
These are all security issues fixed in the dhcp-4.4.2.P1-2.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2024:2789-1 1 CVE
Security update for libnbd
This update for libnbd fixes the following issues: - CVE-2024-7383: Fixed incorrect verification of a NBD server's certificate when using TLS to connect to the server (bsc#1228872) Other fixes: - Update to version 1.18.5.
first Aug 6, 2024 -
High max 8.8SUSE-SU-2017:1581-1 2 CVEs
Security update for Salt
This update for salt provides version 2016.11.4 and brings various fixes and improvements: - Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade. - Fix format error. (bsc#1043111) - Fix ow…
first Jun 16, 2017 -
High max 8.1openSUSE-SU-2024:12615-1 3 CVEs
traefik-2.9.6-1.1 on GA media
These are all security issues fixed in the traefik-2.9.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3SUSE-SU-2024:3980-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) - CVE-2024-45817: xen: x8…
first Nov 12, 2024 -
High max 8.8
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.4.1 fixes the following issues: Security issues fixed: - CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement - CVE-2019-17016: Bypass of @namespace CSS sanitization during pa…
first Jan 22, 2020 -
High max 8.5SUSE-SU-2023:0418-1 4 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2023-22490: Fixed incorrectly usable local clone optimization even when using a non-local transport (bsc#1208027). - CVE-2023-23946: Fixed issue where a path outside the working tree can be overwritten as …
first Feb 15, 2023 -
High max 7.5openSUSE-SU-2024:13742-1 2 CVEs
libunbound8-1.19.1-1.1 on GA media
These are all security issues fixed in the libunbound8-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1openSUSE-SU-2023:0223-1 1 CVE
Security update for perl-HTTP-Tiny
This update for perl-HTTP-Tiny fixes the following issues: perl-HTTP-Tiny was updated to 0.086: see /usr/share/doc/packages/perl-HTTP-Tiny/Changes 0.086 2023-06-22 10:06:37-04:00 America/New_York - Fix code to use `$ENV{PERL_HTTP_TINY_SSL_INSECURE_BY_DEFAULT}…
first Aug 15, 2023 -
High max 7.8SUSE-SU-2023:4338-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). - CVE-2023-5380: Fixed a memory safety issue that could be triggered when …
first Nov 2, 2023 -
High max 8.8SUSE-SU-2022:1057-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#11…
first Mar 30, 2022 -
High max 8.8SUSE-SU-2026:0034-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflo…
first Jan 5, 2026 -
High max 7.5SUSE-SU-2019:1207-2 5 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-10850: Fixed a race condition on reference counter that would lead to a denial of service using persistent search (bsc#1096368) - CVE-2017-151…
first Jul 1, 2019 -
High max 7.5openSUSE-SU-2024:12179-1 1 CVE
libopenssl-1_1-devel-1.1.1q-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1q-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:02522-2 2 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5916, Fixed integer overflow while reading warc files at archive_read_support_format_warc.c (bsc#1244270) - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_forma…
first Sep 1, 2025 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 89.0.4389.128 (boo#1184700): * CVE-2021-21206: Use after free in blink * CVE-2021-21220: Insufficient validation of untrusted input in v8 for x86_64 This update was imported from the openSUSE:Lea…
first Apr 19, 2021 -
High max 7.6openSUSE-SU-2021:1954-1 4 CVEs
Security update for containerd, docker, runc
This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fi…
first Jul 10, 2021 -
High max 7.8SUSE-SU-2022:3494-1 2 CVEs
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234). - CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
first Oct 4, 2022 -
High max 8.8openSUSE-SU-2025:14857-1 1 CVE
grype-0.88.0-1.1 on GA media
These are all security issues fixed in the grype-0.88.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 6, 2025 -
High max 7.5SUSE-SU-2024:3004-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2023-52425: denial of service (resource consumption) caused by processing large tokens (bsc#1219559)
first Aug 23, 2024 -
High max 7.8SUSE-SU-2025:03321-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_3 fixes several issues. The following security issues were fixed: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{…
first Sep 23, 2025 -
High max 7.5SUSE-SU-2023:2224-1 4 CVEs
Security update for curl
This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard m…
first May 17, 2023 -
High max 7.5openSUSE-SU-2024:11429-1 1 CVE
terraform-0.14.10-1.12 on GA media
These are all security issues fixed in the terraform-0.14.10-1.12 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:2784-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2024-7264: Fixed ASN.1 date parser overread (bsc#1228535) - CVE-2024-6197: Fixed freeing stack buffer in utf8asn1str (bsc#1227888)
first Aug 6, 2024 -
High max 8.0
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix po…
first Feb 25, 2025 -
High max 8.1openSUSE-SU-2024:12640-1 6 CVEs
python3-virtualbox-7.0.6-1.1 on GA media
These are all security issues fixed in the python3-virtualbox-7.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:13325-1 2 CVEs
curl-8.4.0-1.1 on GA media
These are all security issues fixed in the curl-8.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2021:1658-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: Security issues fixed: CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698) - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408). - …
first May 19, 2021 -
High max 7.5
ruby3.1-rubygem-activejob-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activejob-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:4978-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033). - CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218…
first Dec 27, 2023 -
High max 8.8SUSE-SU-2025:0599-1 1 CVE
Security update for emacs
This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. (bsc#1237091)
first Feb 19, 2025 -
High max 7.7SUSE-SU-2024:1525-1 2 CVEs
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (b…
first May 6, 2024