12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2023:3089-1 1 CVE
Security update for xmltooling
This update for xmltooling fixes the following issues: - CVE-2023-36661: Fix server-side request forgery vulnerability (bsc#1212359)
first Aug 1, 2023 -
High max 7.5SUSE-SU-2020:2575-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629). - CVE-2020-14314: Fixed a potential negativ…
first Sep 9, 2020 -
High max 7.1SUSE-SU-2025:1418-1 1 CVE
Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_188 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).
first Apr 30, 2025 -
High max 7.6SUSE-SU-2023:3248-1 1 CVE
Security update for gstreamer-plugins-good
This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128)
first Aug 8, 2023 -
High max 7.0SUSE-SU-2018:2391-1 3 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)
This update for the Linux Kernel 4.4.114-92_64 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present i…
first Aug 16, 2018 -
High max 8.8SUSE-SU-2023:0461-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Updated to version 102.8.0 ESR (bsc#1208144): - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes. - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode…
first Feb 20, 2023 -
High max 8.8SUSE-SU-2023:0301-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474) - Move systemd RPM macros managing the service…
first Feb 7, 2023 -
High max 8.2SUSE-SU-2019:1220-2 1 CVE
Security update for cf-cli
This update for cf-cli fixes the following issues: cf-cli was updated: to version 6.43.0 (bsc#1132242) Enhancements : - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://ww…
first Jul 2, 2019 -
High max 7.8SUSE-SU-2024:3615-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.2.8: - CVE-2024-9781: Fixed AppleTalk and RELOAD Framing dissector crash (bsc#1231476). - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.…
first Oct 14, 2024 -
High max 7.5
Security update for MozillaFirefox, mozilla-nss
This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026 bsc#1012964): - CVE-2016-9079: Use-after-free in SVG Animation (MFSA 2016-92 bsc#1012964) - CVE-2016-5297: …
first Dec 10, 2016 -
High max 8.8SUSE-SU-2022:1431-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.36.0 (bsc#1198290): - CVE-2022-22624: Fixed use after free that may lead to arbitrary code execution. - CVE-2022-22628: Fixed use after free that may lead to arbitrary code execution.…
first Apr 27, 2022 -
High max 7.7SUSE-SU-2020:0247-1 3 CVEs
Security update for nodejs6
This update for nodejs6 to version 6.17.1 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352).
first Jan 28, 2020 -
High max 7.8SUSE-SU-2025:0187-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2024-36904: tcp: Use refcoun…
first Jan 18, 2025 -
High max 8.1SUSE-SU-2022:2185-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645) - CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (b…
first Jun 24, 2022 -
High max 7.5SUSE-SU-2021:0755-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)
first Mar 9, 2021 -
High max 8.8SUSE-SU-2023:4479-1 3 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that…
first Nov 20, 2023 -
High max 8.1SUSE-SU-2016:1842-1 9 CVEs
Security update for php5
This update for php5 fixes the following issues: * It is possible to launch a web server with 'php -S localhost:8080' It used to be possible to set an arbitrary $HTTP_PROXY environment variable for request handlers -- like CGI scripts -- by including a specia…
first Jul 20, 2016 -
High max 7.5SUSE-SU-2022:1434-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: Security fixes for golang-github-prometheus-prometheus: - CVE-2022-21698: Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests …
first Apr 27, 2022 -
High max 7.5SUSE-SU-2023:1745-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 4, 2023 -
High max 8.0
Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_13 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privile…
first Dec 10, 2019 -
High max 7.8SUSE-SU-2021:2067-1 3 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following issues were fixed: - CVE-2021-33034: Fixed a use-after-free when destroying an hci_chan. This could lead to writing an arbitrary values (bsc#1186111). - CVE-2021-23134: A Use Af…
first Jun 18, 2021 -
High max 7.1SUSE-SU-2019:3307-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095).
first Dec 16, 2019 -
High max 8.2openSUSE-SU-2021:1552-1 7 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: * deps: update llhttp to 2.1.4 - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body (bsc#1191602, C…
first Dec 10, 2021 -
High max 7.5SUSE-SU-2021:3235-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-23437: Fixed regular expression denial of service (ReDoS) via the getrgb function (bsc#1190229).
first Sep 27, 2021 -
High max 8.8SUSE-SU-2018:1815-1 4 CVEs
Security update for zlib
This update brings zlib to 1.2.7, bringing bugfixes and speedups. It also reduces a buildtime issue with clamav 0.100 which caused hangs on 32bit platforms. (bsc#1095016)
first Jun 26, 2018 -
High max 8.6SUSE-SU-2020:14590-1 3 CVEs
Security update for squid3
This update for squid3 fixes the following issues: - CVE-2020-15811: Fixed an HTTP request splitting vulnerability (bsc#1175665). - CVE-2020-24606: Fixed a DoS vulnerability when processing Cache Digest Responses (bsc#1175671). - CVE-2020-15810: Fixed an HTTP…
first Dec 30, 2020 -
High max 7.4SUSE-SU-2018:2839-2 10 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm to 8.0.5.20 fixes the following security issues: - CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to comp…
first Oct 18, 2018 -
High max 8.1SUSE-SU-2023:3406-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 10 (bsc#1213541) - CVE-2022-40609: Fixed an unsafe deserialization flaw which could allow a remote attacker to execute arbitrary code on the system. (bs…
first Aug 23, 2023 -
High max 8.8SUSE-SU-2025:1448-1 4 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2023-52885: SUNRPC: Fix UAF in svc_tcp_lis…
first May 5, 2025 -
High max 7.5SUSE-SU-2021:0479-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
first Feb 15, 2021 -
High max 7.8SUSE-SU-2024:1846-1 1 CVE
Security update for libfastjson
This update for libfastjson fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).
first May 29, 2024 -
High max 7.8SUSE-SU-2023:2810-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3358: Fixed a NUL…
first Jul 12, 2023 -
High max 7.6openSUSE-SU-2024:0139-1 3 CVEs
Security update for cJSON
This update for cJSON fixes the following issues: - Update to 1.7.18: * CVE-2024-31755: NULL pointer dereference via cJSON_SetValuestring() (boo#1223420) * Remove non-functional list handling of compiler flags * Fix heap buffer overflow * remove misused optim…
first May 25, 2024 -
High max 7.1openSUSE-SU-2025:15335-1 1 CVE
afterburn-5.8.2-3.1 on GA media
These are all security issues fixed in the afterburn-5.8.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 11, 2025 -
High max 7.5SUSE-SU-2023:2225-1 5 CVEs
Security update for curl
This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard m…
first May 17, 2023 -
High max 7.5SUSE-SU-2025:0325-1 6 CVEs
Security update for clamav
This update for clamav fixes the following issues: New version 1.4.2: * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow read bug in the OLE2 file parser that could cause a denial-of-service (DoS) condition. - Start clamonacc with --fdpass to avo…
first Feb 3, 2025 -
High max 7.8SUSE-SU-2025:03195-1 5 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_110 fixes several issues. The following security issues were fixed: - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2025-38000: sch_hfsc: Fix qle…
first Sep 12, 2025 -
High max 7.8SUSE-SU-2023:2834-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3358: Fixed a NULL p…
first Jul 14, 2023 -
High max 7.8SUSE-SU-2022:4631-1 7 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.0.1040: - CVE-2022-3491: vim: Heap-based Buffer Overflow prior to 9.0.0742 (bsc#1206028). - CVE-2022-3520: vim: Heap-based Buffer Overflow (bsc#1206071). - CVE-2022-3591: vim: Use After Free…
first Dec 28, 2022 -
High max 7.8openSUSE-SU-2024:12170-1 2 CVEs
gvim-9.0.0032-1.1 on GA media
These are all security issues fixed in the gvim-9.0.0032-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024