12,602 results · Clear filters · Feed
-
High max 8.4
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_13 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Feb 2, 2022 -
High max 7.5openSUSE-SU-2024:12550-1 1 CVE
containerd-1.6.9-1.1 on GA media
These are all security issues fixed in the containerd-1.6.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:11515-1 16 CVEs
wpa_supplicant-2.9-13.4 on GA media
These are all security issues fixed in the wpa_supplicant-2.9-13.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2023:3230-1 1 CVE
Security update for cjose
This update for cjose fixes the following issues: - CVE-2023-37464: Fixed AES GCM decryption uses the Tag length from the actual Authentication Tag (bsc#1213385).
first Aug 8, 2023 -
High max 7.8openSUSE-SU-2021:1951-1 1 CVE
Security update for salt
This update for salt fixes the following issues: - Check if dpkgnotify is executable (bsc#1186674) - Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028…
first Jul 11, 2021 -
High max 8.0SUSE-SU-2018:1516-1 4 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP2)
This update for the Linux Kernel 4.4.90-92_50 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…
first Jun 5, 2018 -
High max 7.3SUSE-SU-2019:0450-2 5 CVEs
Security update for procps
This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting …
first Apr 27, 2019 -
High max 8.8openSUSE-SU-2023:0234-1 21 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 116.0.5845.96 * New CSS features: Motion Path, and 'display' and 'content-visibility' animations * Web APIs: AbortSignal.any(), BYOB support for Fetch, Back/ forward cache NotRestoredReason API, Do…
first Aug 21, 2023 -
High max 7.8SUSE-SU-2024:2977-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2023-2861: Fixed improper access control on special files via 9p protocol (bsc#1212968) - CVE-2024-4467: Fixed denial of service and file read/write via qemu-img info command (bsc#1227322) Other fixes: - …
first Aug 20, 2024 -
High max 7.5SUSE-SU-2022:14916-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2022-0778: Fixed an infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877)
first Mar 15, 2022 -
High max 7.1SUSE-SU-2023:1947-1 1 CVE
Security update for dmidecode
This update for dmidecode fixes the following issues: - CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
first Apr 21, 2023 -
High max 7.7openSUSE-SU-2020:0976-1 1 CVE
Security update for openldap2
This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704). This …
first Jul 17, 2020 -
High max 7.8SUSE-SU-2024:0473-1 1 CVE
Security update for tomcat10
This update for tomcat10 fixes the following issues: - CVE-2024-22029: Fixed escalation to root from tomcat user via %post script. (bsc#1219208)
first Feb 14, 2024 -
High max 8.8SUSE-SU-2022:3897-1 33 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system wi…
first Nov 8, 2022 -
High max 7.5SUSE-SU-2022:1308-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-23308: Fixed use-after-free of ID and IDREF attributes. (bsc#1196490)
first Apr 22, 2022 -
High max 7.5openSUSE-SU-2023:0269-1 4 CVEs
Security update for modsecurity
This update for modsecurity fixes the following issues: Update to version 3.0.10: * Security impacting issue (fix boo#1213702, CVE-2023-38285) - Fix: worst-case time in implementation of four transformations - Additional information on this issue is available…
first Sep 25, 2023 -
High max 7.5SUSE-SU-2025:03589-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Oct 13, 2025 -
High max 8.4openSUSE-SU-2025:0053-1 5 CVEs
Security update for dcmtk
This update for dcmtk fixes the following issues: Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes Security issues fixed: - CVE-2024-27628: Fixed buffer overflow via the EctEnhancedCT method (boo#1227235) - CVE-2024-34508: Fixed a segmentati…
first Feb 6, 2025 -
High max 8.0SUSE-SU-2019:3295-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() which might have led denial of service (bsc#1149448). -…
first Dec 13, 2019 -
High max 7.5openSUSE-SU-2024:12583-1 2 CVEs
curl-7.87.0-1.1 on GA media
These are all security issues fixed in the curl-7.87.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1openSUSE-SU-2024:11717-1 1 CVE
tuigreet-0.7.1-3.1 on GA media
These are all security issues fixed in the tuigreet-0.7.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2023:2234-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2021-38578: Fixed potential underflow in SmmEntryPointwhen computing BufferSize (bsc#1196741). - CVE-2019-14560: Fixed potential secure boot bypass caused by improper check of GetEfiGlobalVariable2() retu…
first May 17, 2023 -
High max 8.0SUSE-SU-2022:4566-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial of s…
first Dec 19, 2022 -
High max 7.5SUSE-SU-2024:1982-1 5 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2023-4408: Fixed denial of service during DNS message parsing with different names (bsc#1219851) - CVE-2023-50387: Fixed denial of service during DNS messages validation with DNSSEC signatures (bsc#121982…
first Jun 11, 2024 -
High max 7.5SUSE-SU-2019:1407-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues fixed: - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069). - CVE-2018-5745: Fixed a denial of service vulne…
first Jun 3, 2019 -
High max 8.0
Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_109 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…
first Dec 11, 2019 -
High max 8.8openSUSE-SU-2024:12938-1 6 CVEs
chromedriver-113.0.5672.126-1.1 on GA media
These are all security issues fixed in the chromedriver-113.0.5672.126-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2024:1142-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677)
first Apr 8, 2024 -
High max 7.8openSUSE-SU-2025:14841-1 8 CVEs
xorg-x11-server-21.1.15-2.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.15-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 26, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)
first Jun 18, 2024 -
High max 8.8SUSE-SU-2025:0835-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033). - CVE-2024-35949: btrfs: make sure that…
first Mar 11, 2025 -
High max 7.5openSUSE-SU-2024:10839-1 9 CVEs
haproxy-2.4.4+git0.acb1d0bea-1.2 on GA media
These are all security issues fixed in the haproxy-2.4.4+git0.acb1d0bea-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:4518-1 6 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…
first Dec 16, 2022 -
High max 7.3openSUSE-SU-2025:14688-1 2 CVEs
phpMyAdmin-5.2.2-1.1 on GA media
These are all security issues fixed in the phpMyAdmin-5.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 23, 2025 -
High max 8.6SUSE-SU-2025:0382-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2024-11218: Fixed a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. (bsc#1236270)
first Feb 7, 2025 -
High max 7.5SUSE-SU-2023:4868-1 1 CVE
Security update for tracker-miners
This update for tracker-miners fixes the following issues: - CVE-2023-5557: Fixed a sandbox escape by adding seccomp rules and applying it to the whole process (bsc#1216199) - rebuild against current ICU 73.
first Dec 14, 2023 -
High max 7.5openSUSE-SU-2025:14870-1 1 CVE
google-osconfig-agent-20250115.01-3.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20250115.01-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 11, 2025 -
High max 8.8openSUSE-SU-2024:12439-1 4 CVEs
MozillaThunderbird-102.4.0-2.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2024:1144-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677) - Update to version 1.34.1 for compatibility with Docker 25.0 (which is not in SLES yet, but will eventually be…
first Apr 8, 2024 -
High max 8.1openSUSE-SU-2024:13711-1 8 CVEs
MozillaThunderbird-115.8.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024