12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2017:2105-1 1 CVE
Security update for python-tablib
This update for python-tablib fixes the following issues: - CVE-2017-2810: Use yaml.safe_load and yaml.safe_dump to avoid executing code when importing data (bsc#1044329)
first Aug 8, 2017 -
High max 8.6SUSE-SU-2024:0328-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.1.12 (bsc#1218894) The following CVE was already fixed with the previous release. - CVE-2024-21626: Fixed container breakout.
first Feb 5, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_154 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…
first May 7, 2024 -
High max 7.0
Security update for Linux Kernel Live Patch 9 for SLE 12
This update for the Linux Kernel 3.12.51-52_31 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…
first Oct 25, 2016 -
High max 7.5SUSE-FU-2021:2130-1 4 CVEs
Feature implementation for python39-pip, python39-setuptools
This update for python39-pip, python39-setuptools fixes the following issues: Changes in python39-setuptools: - Provide `python39-setuptools` version 44.1.1 with vendored dependencies. (jsc#SLE-17532, jsc#SLE-17957) Changes in python39-pip: - Provide `python3…
first Jun 23, 2021 -
High max 7.5SUSE-SU-2021:1807-1 2 CVEs
Security update for python-httplib2
This update for python-httplib2 contains the following fixes: Security fixes included in this update: - CVE-2021-21240: Fixed a regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed an issue where an attacker could c…
first May 31, 2021 -
High max 8.1SUSE-SU-2024:1977-1 5 CVEs
Security update for glibc
This update for glibc fixes the following issues: - nscd: Release read lock after resetting timeout - nscd: Fix use-after-free in addgetnetgrentX (BZ #23520) - CVE-2024-33599; nscd: Stack-based buffer overflow in netgroup cache (bsc#1223423, BZ #31677) - CVE-…
first Jun 11, 2024 -
High max 7.5SUSE-SU-2021:3473-1 1 CVE
Security update for python-Pygments
This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169).
first Oct 20, 2021 -
High max 7.7SUSE-SU-2024:0513-1 3 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.11 * Migrate from RHEL and its clones to SUSE Liberty Linux * Reboot required indication for non-SUSE distributions * SSH key rotation for enhanced security * Conf…
first Feb 15, 2024 -
High max 7.8SUSE-SU-2021:3727-1 1 CVE
Security update for php72
This update for php72 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050).
first Nov 19, 2021 -
High max 7.5SUSE-SU-2021:0793-1 2 CVEs
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
first Mar 16, 2021 -
High max 7.8SUSE-SU-2024:3941-1 4 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space (bsc#1232265). - CVE-2024-46953: Fixed integer overflow when parsing the page format resul…
first Nov 7, 2024 -
High max 7.2openSUSE-SU-2024:11547-1 2 CVEs
gdm-41.0-1.1 on GA media
These are all security issues fixed in the gdm-41.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.5
Security update for xstream
This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…
first Oct 20, 2021 -
High max 8.3openSUSE-SU-2020:2083-1 16 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)', introduced in October 2020 CPU. - Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157, and October 2020 C…
first Nov 27, 2020 -
High max 8.8SUSE-SU-2024:3171-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 13.16 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 9, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_175 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-1086: Fixed…
first May 6, 2024 -
High max 8.4openSUSE-SU-2022:0736-1 14 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004). - CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570). - CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_sta…
first Mar 4, 2022 -
High max 7.5openSUSE-SU-2024:0150-1 1 CVE
Security update for libhtp
This update for libhtp fixes the following issues: - CVE-2024-23837: excessive processing time of HTTP headers can lead to denial of service (boo#1220403)
first Jun 4, 2024 -
High max 8.5openSUSE-SU-2020:0763-1 1 CVE
Security update for python-rpyc
This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987). This update was imported from the openSUSE:Leap:15.1:Update u…
first Jun 3, 2020 -
High max 7.6openSUSE-SU-2024:12031-1 1 CVE
rke-1.3.10-1.1 on GA media
These are all security issues fixed in the rke-1.3.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:4561-1 31 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631). - CVE-2022-3424:…
first Dec 19, 2022 -
High max 7.5openSUSE-SU-2024:11237-1 2 CVEs
python36-markdown2-2.4.0-2.4 on GA media
These are all security issues fixed in the python36-markdown2-2.4.0-2.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2022:2073-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…
first Jun 14, 2022 -
High max 7.5openSUSE-SU-2020:1111-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Jul 29, 2020 -
High max 7.5SUSE-SU-2024:4300-1 1 CVE
Security update for nodejs20
This update for nodejs20 fixes the following issues: - CVE-2024-21538: Fixed regular expression denial of service in cross-spawn dependency (bsc#1233856) Other fixes: - Updated to 20.18.1: * Experimental Network Inspection Support in Node.js * Exposes X509_V_…
first Dec 12, 2024 -
High max 7.5SUSE-SU-2023:3346-1 1 CVE
Security update for postgresql12
This update for postgresql12 fixes the following issues: This update for postgresql12 fixes the following issues: - CVE-2023-39417: Fixed potential SQL injection for trusted extensions (bsc#1214059).
first Aug 17, 2023 -
High max 7.8SUSE-SU-2021:1573-1 35 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (…
first May 12, 2021 -
High max 8.8openSUSE-SU-2020:1966-1 2 CVEs
Security update for moinmoin-wiki
This update for moinmoin-wiki fixes the following issues: - update to version 1.9.11: CVE-2020-25074 (boo#1178744): fix remote code execution via cache action CVE-2020-15275 (boo#1178745): fix malicious SVG attachment causing stored XSS vulnerability
first Nov 19, 2020 -
High max 8.8SUSE-SU-2025:4506-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow i…
first Dec 22, 2025 -
High max 7.5openSUSE-SU-2023:0176-1 1 CVE
Security update for python-Django1
This update of python-Django1 fixes the following issue: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742)
first Jul 12, 2023 -
High max 7.5openSUSE-SU-2024:11540-1 3 CVEs
libzmq5-32bit-4.3.4-2.2 on GA media
These are all security issues fixed in the libzmq5-32bit-4.3.4-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:0674-1 3 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: New upstream LTS version 10.24.0: - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) - CVE-2021…
first Mar 2, 2021 -
High max 7.5SUSE-SU-2017:0400-1 2 CVEs
Security update for spice
This security update for spice fixes the following issues: CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers cou…
first Feb 6, 2017 -
High max 7.3SUSE-SU-2016:0967-1 2 CVEs
Security update for rubygem-actionpack-3_2
This update for rubygem-actionpack-3_2 fixes the following issues: - CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. (bsc#968850) - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in A…
first Apr 7, 2016 -
High max 7.0openSUSE-SU-2024:14216-1 1 CVE
liborc-0_4-0-0.4.39-1.1 on GA media
These are all security issues fixed in the liborc-0_4-0-0.4.39-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2024 -
High max 8.4
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_52 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Feb 2, 2022 -
High max 8.1SUSE-SU-2025:0341-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)
first Feb 3, 2025 -
High max 8.4openSUSE-SU-2024:11501-1 43 CVEs
python3-virtualbox-6.1.26-3.2 on GA media
These are all security issues fixed in the python3-virtualbox-6.1.26-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
chromedriver-120.0.6099.216-1.1 on GA media
These are all security issues fixed in the chromedriver-120.0.6099.216-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024