12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2023:3107-1 3 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_129 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt …
first Aug 1, 2023 -
High max 7.8openSUSE-SU-2024:12481-1 1 CVE
python310-3.10.8-2.1 on GA media
These are all security issues fixed in the python310-3.10.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:0041-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issue: - CVE-2020-17527: Fixed a HTTP/2 request header mix-up (bsc#1179602).
first Jan 7, 2021 -
High max 7.5SUSE-SU-2019:2078-1 1 CVE
Security update for nodejs4
This update for nodejs4 fixes the following issues: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290).
first Aug 7, 2019 -
High max 8.1openSUSE-SU-2024:10192-1 32 CVEs
libxml2-2-2.9.4-1.22 on GA media
These are all security issues fixed in the libxml2-2-2.9.4-1.22 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2020:3377-1 1 CVE
Security update for krb5
This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).
first Nov 19, 2020 -
High max 7.5SUSE-SU-2023:0124-1 3 CVEs
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixed an issue in EAP-PWD that could leak information about the password, which could facilitate dictionary attacks (bsc#1206204). - CVE-2022-41860: Fixed a crash in servers with …
first Jan 23, 2023 -
High max 8.0openSUSE-SU-2024:10787-1 1 CVE
git-annex-8.20210903-1.2 on GA media
These are all security issues fixed in the git-annex-8.20210903-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2022:0283-1 8 CVEs
Security update for samba
- CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#1…
first Feb 8, 2022 -
High max 7.8SUSE-SU-2022:1652-1 1 CVE
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues: - CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
first May 12, 2022 -
High max 8.8openSUSE-SU-2024:13258-1 1 CVE
nodejs-electron-25.8.2-1.1 on GA media
These are all security issues fixed in the nodejs-electron-25.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:0165-1 5 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum dat…
first Jan 17, 2025 -
High max 8.4SUSE-SU-2015:0984-1 4 CVEs
Security update for docker
The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues. - Security: - Fix read/write /proc paths. (CVE-2015-3630) - Prohibit VOLUME /proc and VOLUME /. (CVE-2015-3631) - Fix opening of file-…
first May 19, 2015 -
High max 7.1openSUSE-SU-2025:14722-1 1 CVE
rime-schema-all-20230603+git.5fdd2d6-3.1 on GA media
These are all security issues fixed in the rime-schema-all-20230603+git.5fdd2d6-3.1 package on the GA media of openSUSE Tumbleweed.
first Feb 3, 2025 -
High max 7.5SUSE-SU-2020:3865-1 4 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen() (bsc#1155094) - CVE-2019-20916: Fixed a directory traversal in _download_http_url() (bsc#1176262). - CVE-2020-27619:…
first Dec 17, 2020 -
High max 8.6SUSE-SU-2020:3165-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895).
first Nov 5, 2020 -
High max 7.4SUSE-SU-2023:4229-1 2 CVEs
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432). - CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
first Oct 27, 2023 -
High max 7.8SUSE-SU-2025:03124-1 9 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 9, 2025 -
High max 8.0SUSE-SU-2018:1523-1 3 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP2)
This update for the Linux Kernel 4.4.120-92_70 fixes several issues. The following security issues were fixed: - CVE-2018-8897: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandle…
first Jun 5, 2018 -
High max 7.1openSUSE-SU-2019:0174-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP (bsc#1123378). - CVE-2019-3822: Fixed a stack based buffer overflow in the function crea…
first Mar 23, 2019 -
High max 7.5SUSE-SU-2025:4337-1 2 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: go1.24.11 (released 2025-12-02) includes two security fixes to the crypto/x509 package, as well as bug fixes to the runtime. (bsc#1236217) CVE-2025-61727 CVE-2025-61729: * go#76460 go#76445 bsc#1254431 securi…
first Dec 9, 2025 -
High max 7.5SUSE-SU-2021:2124-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418) - CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
first Jun 22, 2021 -
High max 7.5SUSE-SU-2025:02159-1 1 CVE
Security update for apache-commons-fileupload
This update for apache-commons-fileupload fixes the following issues: Upgrade to upstream version 1.6.0 - CVE-2025-48976: Fixed allocation of resources for multipart headers with insufficient limits can lead to a DoS (bsc#1244657). Full changelog: https://com…
first Jun 27, 2025 -
High max 7.8SUSE-SU-2022:0555-1 16 CVEs
Security update for the Linux RT Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). …
first Feb 22, 2022 -
High max 7.5SUSE-SU-2025:0355-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: Update to release 9.18.33 Security Fixes: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596) - CVE-2024-12705: Fixes multiple issues in DNS-over-HTTPS implemen…
first Feb 4, 2025 -
High max 8.8openSUSE-SU-2020:2310-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free w…
first Dec 21, 2020 -
High max 8.8SUSE-SU-2025:03164-1 7 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels (bsc#1248076). - CVE-2025-55005: Fixed heap buffer overflow when transforming from …
first Sep 11, 2025 -
High max 7.5SUSE-SU-2021:2122-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418) - CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
first Jun 22, 2021 -
High max 7.4SUSE-SU-2024:0203-1 6 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Updated to version 11.0.22 (January 2024 CPU): - CVE-2024-20918: Fixed an out of bounds access in the Hotspot JVM due to a missing bounds check (bsc#1218907). - CVE-2024-20919: Fixed a sandbox bypass…
first Jan 24, 2024 -
High max 7.8SUSE-SU-2022:2262-1 5 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_63 fixes several issues. The following security issues were fixed: - CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privi…
first Jul 4, 2022 -
High max 7.0openSUSE-SU-2024:14406-1 1 CVE
element-desktop-1.11.81-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.81-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2024 -
High max 8.7SUSE-SU-2024:3746-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)
first Oct 22, 2024 -
High max 7.1SUSE-SU-2019:1597-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issue: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).
first Jun 21, 2019 -
High max 8.3openSUSE-SU-2024:11789-1 1 CVE
element-desktop-1.9.9-1.1 on GA media
These are all security issues fixed in the element-desktop-1.9.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2025:0091-1 1 CVE
Security update for restic
This update for restic fixes the following issues: - Fixed CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (boo#1239264) - Update to version 0.17.3 - Fix #4971: Fix unusable mount on macOS Son…
first Mar 15, 2025 -
High max 7.8SUSE-SU-2024:1318-1 3 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_97 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2024-1…
first Apr 16, 2024 -
High max 7.5
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - Updated netty to version 4.1.100: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - Updated netty-tcnative to version 2.0.62 Final.
first Oct 24, 2023 -
High max 8.6SUSE-SU-2025:1573-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865). - CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds wr…
first May 16, 2025 -
High max 7.2openSUSE-SU-2024:14334-1 1 CVE
grype-0.80.1-1.1 on GA media
These are all security issues fixed in the grype-0.80.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 12, 2024 -
High max 7.5openSUSE-SU-2024:12732-1 1 CVE
grafana-9.3.6-2.1 on GA media
These are all security issues fixed in the grafana-9.3.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024