12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2024:3733-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) - CVE-2024-8927: Fixed cgi.force_redirect configuration is bypass…
first Oct 18, 2024 -
High max 8.1SUSE-SU-2022:1477-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-24801: Fixed to not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP request smuggling. (bsc#1198086)
first Apr 29, 2022 -
High max 7.8SUSE-SU-2021:0085-1 1 CVE
Security update for crmsh
This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).
first Jan 12, 2021 -
High max 7.5SUSE-SU-2023:0609-1 5 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to LTS version 16.19.1: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodej…
first Mar 3, 2023 -
High max 8.8SUSE-SU-2018:0401-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes one issue. This security issue was fixed: - CVE-2017-15412: Prevent use after free when calling XPath extension functions that allowed remote attackers to cause DoS or potentially RCE (bsc#1077993) - CVE-2016-5131: Use-after-free…
first Feb 8, 2018 -
High max 7.5SUSE-SU-2024:2138-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2024-26130: Fix a NULL pointer dereference in pkcs12.serialize_key_and_certificates(). (bsc#1220210)
first Jun 21, 2024 -
High max 7.8openSUSE-SU-2024:14422-1 1 CVE
NetworkManager-applet-libreswan-1.2.24-1.1 on GA media
These are all security issues fixed in the NetworkManager-applet-libreswan-1.2.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2024 -
High max 7.8SUSE-SU-2025:03363-1 2 CVEs
Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_211 fixes several issues. The following security issues were fixed: - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to ope…
first Sep 26, 2025 -
High max 7.5SUSE-SU-2023:0310-1 4 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4450:…
first Feb 7, 2023 -
High max 8.2SUSE-SU-2025:02309-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).
first Jul 15, 2025 -
High max 8.0SUSE-SU-2025:02116-1 11 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds a…
first Jun 25, 2025 -
High max 7.5openSUSE-SU-2024:14118-1 1 CVE
python310-certifi-2024.7.4-1.1 on GA media
These are all security issues fixed in the python310-certifi-2024.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2024 -
High max 8.8SUSE-SU-2024:3833-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_58 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
High max 7.8SUSE-SU-2023:4267-1 4 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network s…
first Oct 30, 2023 -
High max 7.5SUSE-SU-2022:3583-1 1 CVE
Security update for python-waitress
This update for python-waitress fixes the following issues: - CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197256)
first Oct 14, 2022 -
High max 7.8SUSE-SU-2025:0185-1 2 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid …
first Jan 17, 2025 -
High max 7.8SUSE-SU-2022:4517-1 6 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_98 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointve…
first Dec 16, 2022 -
High max 7.5SUSE-SU-2022:4258-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
first Nov 28, 2022 -
High max 8.8SUSE-SU-2020:3867-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free w…
first Dec 17, 2020 -
High max 7.0SUSE-SU-2024:1028-1 1 CVE
Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_176 fixes one issue. The following security issue was fixed: - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610).
first Mar 28, 2024 -
High max 8.6openSUSE-SU-2024:12047-1 5 CVEs
clamav-0.103.6-1.1 on GA media
These are all security issues fixed in the clamav-0.103.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:11672-1 2 CVEs
go1.17-1.17.5-1.1 on GA media
These are all security issues fixed in the go1.17-1.17.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:13590-1 1 CVE
tomcat-9.0.85-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.85-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:4283-1 2 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778). - CVE-2025-23145: mptcp:…
first Nov 27, 2025 -
High max 7.5openSUSE-SU-2024:10511-1 5 CVEs
python3-Pillow-3.4.2-1.1 on GA media
These are all security issues fixed in the python3-Pillow-3.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:0160-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…
first Jan 18, 2024 -
High max 7.5SUSE-SU-2023:2187-1 3 CVEs
Security update for Prometheus Golang clients
This update for golang-github-prometheus-alertmanager and golang-github-prometheus-node_exporter fixes the following issues: golang-github-prometheus-alertmanager: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1…
first May 11, 2023 -
High max 7.8openSUSE-SU-2024:13512-1 2 CVEs
xorg-x11-server-21.1.9-2.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Security issues fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq b…
first Jul 20, 2021 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: - Update to 90.0.4480.54 - CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102 - DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac - DNA-101309 Use base fil…
first Aug 29, 2022 -
High max 7.5SUSE-SU-2023:0697-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-24998: Fixed FileUpload DoS with excessive parts (bsc#1208513).
first Mar 10, 2023 -
High max 7.5SUSE-RU-2022:2145-1 1 CVE
Recommended update for SUSE Manager Proxy 4.1
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for Red Hat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?syste…
first Jun 20, 2022 -
High max 7.7openSUSE-SU-2024:11476-1 2 CVEs
libtspi1-0.3.15-1.7 on GA media
These are all security issues fixed in the libtspi1-0.3.15-1.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2019:2089-1 1 CVE
Security update for httpie
This update for httpie fixes the following issues: httpie was updated to version 1.0.3: * Fix CVE-2019-10751 (HTTPie is vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory,…
first Sep 7, 2019 -
High max 7.8SUSE-SU-2019:2648-1 43 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 for Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe fu…
first Oct 11, 2019 -
High max 7.8SUSE-SU-2020:1733-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option (bsc#1173027). - CVE-2020-8169: Fixed an issue where could have led to…
first Jun 24, 2020 -
High max 7.5openSUSE-SU-2021:2952-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.12+7 - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2388: Fixed a flaw inside the Hotspot component performed ra…
first Sep 3, 2021 -
High max 7.5SUSE-SU-2025:1022-1 2 CVEs
Security update for apache-commons-vfs2
This update for apache-commons-vfs2 fixes the following issues: - CVE-2025-27553: Fixed possible path traversal issue when using NameScope.DESCENDENT (bsc#1239973) - CVE-2025-30474: Fixed information disclosure due to failing to find an FTP file reveal the UR…
first Mar 26, 2025 -
High max 7.5openSUSE-SU-2024:12950-1 1 CVE
apache-commons-fileupload-1.5-1.1 on GA media
These are all security issues fixed in the apache-commons-fileupload-1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0SUSE-SU-2019:0427-2 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Security issue fixed: - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301).
first Apr 27, 2019