12,602 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2024:14009-1 2 CVEs
cargo-audit-advisory-db-20240528-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20240528-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190)
first Oct 31, 2023 -
High max 8.8SUSE-SU-2023:4597-1 2 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). - CVE-2023-40476: Fixed possible overflow using max_sub_layers_minu…
first Nov 28, 2023 -
High max 8.3SUSE-SU-2020:3460-1 16 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)', introduced in October 2020 CPU. - Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157, and October 2020 C…
first Nov 20, 2020 -
High max 7.5SUSE-SU-2021:3332-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
first Oct 11, 2021 -
High max 7.5openSUSE-SU-2024:13781-1 1 CVE
rclone-1.66.0-1.1 on GA media
These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4openSUSE-SU-2024:12909-1 7 CVEs
java-1_8_0-openjdk-1.8.0.372-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.372-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:2645-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911).
first Aug 3, 2022 -
High max 7.3openSUSE-SU-2019:2160-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621). This update was imported from the SUSE:SLE-15:Update update project.
first Sep 24, 2019 -
High max 8.0SUSE-SU-2024:0542-1 1 CVE
Security update for postgresql12
This update for postgresql12 fixes the following issues: Upgrade to 12.18: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).
first Feb 20, 2024 -
High max 7.5SUSE-SU-2023:0312-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0401: Fixed NULL pointer dereference during PKCS7 data verification (…
first Feb 7, 2023 -
High max 7.8SUSE-SU-2018:2864-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_85 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to …
first Sep 25, 2018 -
High max 7.0SUSE-SU-2020:0820-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2020-1752: Fixed a use after free in glob which could have allowed a local attacker to create a specially crafted path that, when processed by the glob function, could potentially have led to arbitrary c…
first Mar 31, 2020 -
High max 7.5SUSE-SU-2024:1464-1 1 CVE
Security update for jasper
This update for jasper fixes the following issues: - CVE-2024-31744: Fixed denial of service through assertion failure in jpc_streamlist_remove() (bsc#1223155).
first Apr 29, 2024 -
High max 7.8openSUSE-SU-2024:10634-1 1 CVE
arpwatch-3.1-1.2 on GA media
These are all security issues fixed in the arpwatch-3.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2018:4045-1 1 CVE
Security update for dom4j
This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection that could have resulted in an attacker tampering with XML documents (bsc#1105443). This update was imported from the SUSE:SLE-15:Update update project. This update wa…
first Dec 7, 2018 -
High max 8.8openSUSE-SU-2024:14157-1 1 CVE
python310-python-engineio-4.3.4-3.3 on GA media
These are all security issues fixed in the python310-python-engineio-4.3.4-3.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.8SUSE-SU-2023:0168-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2022-39176: Fixed a memory safety issue that could allow physically proximate attackers to obtain sensitive information (bsc#1203121). - CVE-2022-39177: Fixed a memory safety issue that could allow physi…
first Jan 26, 2023 -
High max 7.5openSUSE-SU-2024:12666-1 1 CVE
caddy-2.6.3-1.1 on GA media
These are all security issues fixed in the caddy-2.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7openSUSE-SU-2020:0059-1 3 CVEs
Security update for nodejs8
This update for nodejs8 to version 8.17.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352). This update was …
first Jan 14, 2020 -
High max 7.5SUSE-SU-2020:0264-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing …
first Jan 30, 2020 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…
first Aug 8, 2023 -
High max 7.5SUSE-SU-2024:1198-1 1 CVE
Security update for apache2-mod_jk
This update for apache2-mod_jk fixes the following issues: - Upgrade from version 1.2.40 to 1.2.49 - CVE-2023-41081: Fix an information disclosure issue in mod_jk. (bsc#1215301)
first Apr 10, 2024 -
High max 7.8SUSE-SU-2023:3391-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inform…
first Aug 23, 2023 -
High max 8.3openSUSE-SU-2024:12048-1 1 CVE
php-composer2-2.3.5-1.1 on GA media
These are all security issues fixed in the php-composer2-2.3.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1openSUSE-SU-2020:1997-1 1 CVE
Security update for blueman
This update for blueman fixes the following issues: - Update to version 2.1.4 * CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface (boo#1178196)
first Nov 22, 2020 -
High max 7.5SUSE-SU-2024:0808-1 4 CVEs
Security update for xmlgraphics-batik
This update for xmlgraphics-batik fixes the following issues: - CVE-2022-41704: Fixed information disclosure vulnerability in Apache Batik (bsc#1204704). - CVE-2022-42890: Fixed information disclosure vulnerability in Apache Batik (bsc#1204709). - CVE-2022-44…
first Mar 7, 2024 -
High max 7.5SUSE-SU-2022:2840-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15393: CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514). - CVE-2020-36557: Fixed race …
first Aug 18, 2022 -
High max 7.0openSUSE-SU-2020:0711-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.35. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) * CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persisten…
first May 24, 2020 -
High max 8.8SUSE-SU-2022:0252-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)
first Jan 31, 2022 -
High max 8.4
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_64 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Feb 2, 2022 -
High max 8.8openSUSE-SU-2025:0133-1 2 CVEs
Security update for chromium
This update for chromium fixes the following issue: chromium 135.0.7049.95 (stable release 2025-04-15) (boo#1241288): * CVE-2025-3619: Heap buffer overflow in Codecs * CVE-2025-3620: Use after free in USB
first Apr 20, 2025 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).
first Feb 21, 2025 -
High max 7.4SUSE-SU-2025:02168-1 1 CVE
Security update for yelp-xsl
This update for yelp-xsl fixes the following issues: - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
first Jun 30, 2025 -
High max 7.6openSUSE-SU-2019:2307-1 4 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the driver…
first Oct 10, 2019 -
High max 7.8SUSE-SU-2025:4208-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-2025-…
first Nov 24, 2025 -
High max 7.8SUSE-SU-2024:0472-1 5 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Updated to Tomcat 9.0.85: - CVE-2023-45648: Improve trailer header parsing (bsc#1216118). - CVE-2023-42794: FileUpload: remove tmp files to avoid DoS on Windows (bsc#1216120). - CVE-2023-42795: Improve handli…
first Feb 14, 2024 -
High max 7.8openSUSE-SU-2024:13828-1 4 CVEs
xorg-x11-server-21.1.12-1.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6openSUSE-SU-2024:12674-1 1 CVE
c-ares-devel-1.19.0-2.1 on GA media
These are all security issues fixed in the c-ares-devel-1.19.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:1678-1 3 CVEs
Security update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core
This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues: Security issues fixed: - CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of …
first May 16, 2022