12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2023:4183-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI pa…
first Oct 24, 2023 -
High max 7.3SUSE-SU-2018:3884-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: These security issues were fixed: - CVE-2017-7500: rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbi…
first Nov 23, 2018 -
High max 7.8SUSE-SU-2021:2102-1 1 CVE
Security update for Salt
This update fixes the following issues: salt: - Parsing Epoch out of version provided during pkg remove (bsc#1173692) - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607) - Tra…
first Jun 21, 2021 -
High max 7.5openSUSE-SU-2025:14881-1 1 CVE
forgejo-runner-6.2.2-3.1 on GA media
These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 12, 2025 -
High max 7.8SUSE-SU-2025:3721-1 6 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure th…
first Oct 22, 2025 -
High max 7.5SUSE-SU-2024:2376-1 11 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…
first Jul 9, 2024 -
High max 8.8SUSE-SU-2026:0312-1 8 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…
first Jan 28, 2026 -
High max 7.8SUSE-SU-2025:02032-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 20, 2025 -
High max 7.8SUSE-SU-2023:3631-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use…
first Sep 18, 2023 -
High max 7.5SUSE-SU-2023:1824-1 3 CVEs
Security update for liblouis
This update for liblouis fixes the following issues: - CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429). - CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431). - CVE-2023-26769: Fixed buffer Overflow v…
first Apr 12, 2023 -
High max 7.8openSUSE-SU-2024:10108-1 1 CVE
obs-service-set_version-0.5.3-4.2 on GA media
These are all security issues fixed in the obs-service-set_version-0.5.3-4.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:14075-1 1 CVE
ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
High max 8.8openSUSE-SU-2024:14510-1 1 CVE
nodejs-electron-31.7.5-1.1 on GA media
These are all security issues fixed in the nodejs-electron-31.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 19, 2024 -
High max 7.0openSUSE-SU-2024:14412-1 3 CVEs
valkey-8.0.1-1.1 on GA media
These are all security issues fixed in the valkey-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2024 -
High max 7.5openSUSE-SU-2024:13163-1 1 CVE
ruby3.2-rubygem-minitar-0.9-1.13 on GA media
These are all security issues fixed in the ruby3.2-rubygem-minitar-0.9-1.13 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:2294-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - Upgrade to 6.0.14 - CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution (bsc#1186722) - Fix crash in UNLINK on a stream key with …
first Jul 12, 2021 -
High max 7.5SUSE-SU-2023:3805-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).
first Sep 27, 2023 -
High max 7.5openSUSE-SU-2024:12309-1 1 CVE
go1.18-1.18.6-1.1 on GA media
These are all security issues fixed in the go1.18-1.18.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:2160-1 1 CVE
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_97 fixes one issue. The following security issue was fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).
first Jun 21, 2024 -
High max 7.5SUSE-SU-2020:3375-1 1 CVE
Security update for krb5
This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).
first Nov 19, 2020 -
High max 8.1SUSE-SU-2016:0117-1 2 CVEs
Security update for openssh-openssl1
This update for openssh-openssl1 fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malici…
first Jan 14, 2016 -
High max 8.8openSUSE-SU-2024:0278-1 2 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108) * CVE-2024-8362: Use after free in WebAudio * CVE-2024-7970: Out of bounds write in V8
first Sep 5, 2024 -
High max 7.8SUSE-SU-2025:3983-1 3 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…
first Nov 6, 2025 -
High max 7.8openSUSE-SU-2024:11542-1 5 CVEs
znc-1.8.2-1.11 on GA media
These are all security issues fixed in the znc-1.8.2-1.11 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0SUSE-SU-2019:2976-1 1 CVE
Security update for bash
This update for bash fixes the following issues: - CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters (bsc#1138676).
first Nov 14, 2019 -
High max 7.5SUSE-SU-2021:0300-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.11.5 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)
first Feb 3, 2021 -
High max 8.0SUSE-SU-2019:2953-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15-SP1 Azure Kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit…
first Nov 12, 2019 -
High max 7.8SUSE-SU-2025:03337-1 4 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (…
first Sep 24, 2025 -
High max 7.8
Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_176 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-1086: Fixed a use-af…
first Apr 22, 2024 -
High max 7.5SUSE-SU-2022:2140-1 1 CVE
Security update for node_exporter
This security update for golang-github-prometheus-node_exporter provides: Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239) - CVE-2022-21698: Denial of service using InstrumentHandler…
first Jun 20, 2022 -
High max 8.8openSUSE-SU-2024:10070-1 5 CVEs
mercurial-4.0-1.1 on GA media
These are all security issues fixed in the mercurial-4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:4928-1 18 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974). * CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). * CV…
first Dec 20, 2023 -
High max 8.0
Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_16 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a pare…
first Dec 10, 2019 -
High max 8.6SUSE-SU-2025:02657-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.8+9 (July 2025 CPU): Security fixes: - CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to w…
first Aug 4, 2025 -
High max 7.5openSUSE-SU-2024:14317-1 1 CVE
libopenssl-3-devel-3.1.4-13.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.1.4-13.1 package on the GA media of openSUSE Tumbleweed.
first Sep 5, 2024 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936) This update was imported from the SUSE:SLE-15:Update update project.
first Apr 23, 2021 -
High max 7.8openSUSE-SU-2025:15787-1 2 CVEs
python311-salt-3006.0-52.1 on GA media
These are all security issues fixed in the python311-salt-3006.0-52.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2025 -
High max 8.8SUSE-SU-2016:0839-1 4 CVEs
Security update for tomcat6
This update for tomcat6 fixes the following issues: The version was updated from 6.0.41 to 6.0.45. Security issues fixed: * CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass inte…
first Mar 21, 2016 -
High max 7.4openSUSE-SU-2024:13678-1 3 CVEs
java-17-openj9-17.0.10.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8openSUSE-SU-2024:12213-1 1 CVE
gvim-9.0.0032-1.2 on GA media
These are all security issues fixed in the gvim-9.0.0032-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024