12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2024:3702-1 6 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling …
first Oct 16, 2024 -
High max 8.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 12-SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of th…
first Nov 15, 2019 -
High max 7.2openSUSE-SU-2024:12512-1 1 CVE
cni-1.0.1-3.1 on GA media
These are all security issues fixed in the cni-1.0.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3openSUSE-SU-2024:11305-1 2 CVEs
librpmbuild9-4.16.1.3-3.2 on GA media
These are all security issues fixed in the librpmbuild9-4.16.1.3-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1openSUSE-SU-2019:2689-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Dec 16, 2019 -
High max 7.5SUSE-SU-2023:1738-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 3, 2023 -
High max 8.8SUSE-SU-2025:0849-1 12 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Updated to Mozilla Thunderbird 128.8 MFSA 2025-18 (bsc#1237683): - CVE-2024-43097: Overflow when growing an SkRegion's RunArray - CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free …
first Mar 12, 2025 -
High max 7.5SUSE-SU-2020:1918-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch
first Jul 15, 2020 -
High max 7.0SUSE-SU-2018:2367-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_66 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 9.8SUSE-SU-2024:2088-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
first Jun 19, 2024 -
High max 8.8SUSE-SU-2020:3423-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: buildah was updated to v1.17.0 (bsc#1165184): * Handle cases where other tools mount/unmount containers * overlay.MountReadOnly: support RO overlay mounts * overlay: use fusermount for rootless umounts * ove…
first Nov 19, 2020 -
High max 7.5SUSE-SU-2021:3524-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
first Oct 26, 2021 -
High max 7.5openSUSE-SU-2019:1533-1 4 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues fixed: - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069). - CVE-2018-5745: Fixed a denial of service vulne…
first Jun 10, 2019 -
High max 7.9SUSE-SU-2019:1287-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampl…
first May 17, 2019 -
High max 7.5openSUSE-SU-2024:13005-1 2 CVEs
kubescape-2.3.6-1.1 on GA media
These are all security issues fixed in the kubescape-2.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.2SUSE-SU-2024:0034-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2023-49081: fixed an HTTP header injection via a crafted version (bsc#1217684).
first Jan 5, 2024 -
High max 7.8SUSE-SU-2023:3079-1 3 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt …
first Jul 31, 2023 -
High max 7.8SUSE-SU-2024:0154-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…
first Jan 18, 2024 -
High max 7.8SUSE-SU-2021:14788-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - A patch previously applied to remedy CVE-2021-38185 introduced a regression that had the potential to cause a segmentation fault in cpio. [bsc#1189465]
first Aug 23, 2021 -
High max 7.5openSUSE-SU-2024:14121-1 1 CVE
cadvisor-0.49.1-1.1 on GA media
These are all security issues fixed in the cadvisor-0.49.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.1SUSE-SU-2025:0303-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)
first Jan 30, 2025 -
High max 7.8
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 26, 2025 -
High max 7.5openSUSE-SU-2024:13439-1 1 CVE
python310-Pillow-10.0.1-2.1 on GA media
These are all security issues fixed in the python310-Pillow-10.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:0079-1 1 CVE
Security update for python-future
This update for python-future fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header (bsc#1206673).
first Jan 12, 2023 -
High max 8.2SUSE-SU-2023:2536-1 1 CVE
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: - CVE-2023-1668: Fixed a remote denial of service that could be triggered via malformed IP packets (bsc#1210054).
first Jun 19, 2023 -
High max 7.5openSUSE-SU-2024:12940-1 4 CVEs
curl-8.1.0-1.1 on GA media
These are all security issues fixed in the curl-8.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:0754-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 4.2.11: - CVE-2025-1492: uncontrolled recursion leading to a stack buffer overflow can cause Bundle Protocol and CBOR dissector to crash (bsc#1237414).
first Feb 28, 2025 -
High max 7.8SUSE-SU-2024:4219-1 3 CVEs
Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 5, 2024 -
High max 7.5SUSE-SU-2019:0495-1 4 CVEs
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues: Security issues fixed: - CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899). - CVE-2018-16874: Fixed a vulnerabity in go get command wh…
first Feb 26, 2019 -
High max 7.5SUSE-SU-2023:0648-1 1 CVE
Security update for python-rsa
This update for python-rsa fixes the following issues: - CVE-2020-25658: Fixed a Bleichenbacher timing oracle attack against RSA decryption (bsc#1178676).
first Mar 7, 2023 -
High max 7.4SUSE-SU-2017:2715-1 2 CVEs
Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624) - CVE-2017-12150: Always enforc…
first Oct 12, 2017 -
High max 7.8SUSE-SU-2023:0762-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4129: Fixed a denial of s…
first Mar 16, 2023 -
High max 7.5SUSE-SU-2023:1748-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 4, 2023 -
High max 7.8SUSE-SU-2022:0327-1 5 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_144 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where…
first Feb 4, 2022 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…
first Dec 14, 2023 -
High max 8.8SUSE-SU-2022:2839-1 3 CVEs
Security update for podman
This update for podman fixes the following issues: Updated to version 3.4.7: - CVE-2022-1227: Fixed an issue that could allow an attacker to publish a malicious image to a public registry and run arbitrary code in the victim's context via the 'podman top' com…
first Aug 18, 2022 -
High max 8.8SUSE-SU-2024:0211-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA 2024-02) (bsc#1218955): - CVE-2024-0741: Out of bounds write in ANGLE - CVE-2024-0742: Failure to update user input timestamp - CVE-2024-07…
first Jan 24, 2024 -
High max 8.8SUSE-SU-2022:3502-1 2 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.36.8 (bsc#1203530): - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution. - CVE-2022-32912: Fixed an out-of-bounds read that could potentiall…
first Oct 4, 2022 -
High max 7.8SUSE-SU-2025:02693-1 3 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_50 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limi…
first Aug 5, 2025 -
High max 8.3SUSE-SU-2020:14391-1 8 CVEs
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues: java-1_7_1-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 65 (bsc#1172277 and bsc#1169511) - CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial …
first Jun 9, 2020