12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2024:3054-1 1 CVE
Security update for python3-setuptools
This update for python3-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)
first Aug 28, 2024 -
High max 7.8SUSE-SU-2023:4264-1 1 CVE
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_138 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
first Oct 30, 2023 -
High max 7.5SUSE-SU-2020:1133-1 1 CVE
Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2020-10704: Fixed a stack overflow in the AD DC (C)LDAP server (bsc#1169851). Non-security issues fixed: - Fixed spnego fallback from kerberos to ntlmssp in smbd server (bsc#1169473…
first Apr 28, 2020 -
High max 7.5SUSE-SU-2023:0147-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3344: Fixed a flaw found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail t…
first Jan 26, 2023 -
High max 7.5openSUSE-SU-2024:13695-1 2 CVEs
expat-2.6.0-1.1 on GA media
These are all security issues fixed in the expat-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465).
first Mar 19, 2025 -
High max 8.1
Security update for go1.21-openssl
This update for go1.21-openssl fixes the following issues: Update to version 1.21.4.1 cut from the go1.21-openssl-fips branch at the revision tagged go1.21.4-1-openssl-fips. * Update to go1.21.4 go1.21.4 (released 2023-11-07) includes security fixes to the pa…
first Nov 16, 2023 -
High max 7.5SUSE-SU-2020:1919-1 2 CVEs
Security update for rubygem-puma
This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1…
first Jul 15, 2020 -
High max 7.7SUSE-SU-2025:01709-1 1 CVE
Security update for python310-setuptools
This update for python310-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first May 26, 2025 -
High max 7.5SUSE-SU-2024:0589-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3638: hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609) - CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request (bsc#1213925) - CVE-2023-3354: io: remove io …
first Feb 22, 2024 -
High max 7.8SUSE-SU-2023:1800-1 21 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prl…
first Jul 6, 2023 -
High max 7.5openSUSE-SU-2025:14985-1 3 CVEs
docker-27.5.1_ce-15.1 on GA media
These are all security issues fixed in the docker-27.5.1_ce-15.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2025 -
High max 8.6SUSE-RU-2020:0671-1 3 CVEs
Recommended update for SUSE Manager Proxy 4.0
This update fixes the following issues: mgr-osad: - Take care that osad is not disabled nor deactivated during update (bsc#1157700, bsc#1158697) patterns-suse-manager: - Add recommends for virtualization-host-formula to suma_server pattern - Add recommends fo…
first Mar 13, 2020 -
High max 7.5openSUSE-SU-2024:14171-1 6 CVEs
ruby3.3-rubygem-loofah-2.22.0-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-loofah-2.22.0-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.8openSUSE-SU-2024:13908-1 4 CVEs
ffmpeg-5-5.1.4-6.1 on GA media
These are all security issues fixed in the ffmpeg-5-5.1.4-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2024:2574-1 6 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.15.1: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560) - CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554) - CVE-2024-22018: Fixed fs.lstat …
first Jul 22, 2024 -
High max 7.4openSUSE-SU-2024:12303-1 1 CVE
ncat-7.93-1.1 on GA media
These are all security issues fixed in the ncat-7.93-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media
These are all security issues fixed in the perl-Spreadsheet-ParseExcel-0.660.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.2SUSE-SU-2023:2206-1 2 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Updated to version 15.3: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). -…
first May 15, 2023 -
High max 7.5openSUSE-SU-2025:14997-1 4 CVEs
oci-cli-3.54.1-1.1 on GA media
These are all security issues fixed in the oci-cli-3.54.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2025 -
High max 7.5SUSE-SU-2019:2473-1 2 CVEs
Security update for nghttp2
This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementatio…
first Sep 26, 2019 -
High max 7.1SUSE-SU-2022:2877-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues: - Updated to 1.10.1 (jsc#SLE-23879): - CVE-2022-35929: Fixed an issue where cosign verify-attestation --type could report false positives when there was at least one attestation with a valid signature and the…
first Aug 23, 2022 -
High max 8.2openSUSE-SU-2022:10067-1 7 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: - Save and restore FPU status during interrupt. (boo#1199803) - Update support of building with Python - Replace SDL-devel BuildRequires with pkgconfig(sdl): allow to use sdl12_compat as an alternative. V…
first Jul 27, 2022 -
High max 7.7openSUSE-SU-2024:12345-1 1 CVE
helm-3.9.4-3.1 on GA media
These are all security issues fixed in the helm-3.9.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2016:3256-1 6 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: * CVE-2016-9556: Possible Heap-overflow found by fuzzing [bsc#1011130] * CVE-2016-9559: Possible Null pointer access found by fuzzing [bsc#1011136] * CVE-2016-8707: Possible code execution in the tiff de…
first Dec 23, 2016 -
High max 8.1SUSE-SU-2023:0126-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546). - CVE-2022-38023: Disabled weak ciph…
first Jan 24, 2023 -
High max 8.2openSUSE-SU-2024:12211-1 1 CVE
python3-virtualbox-6.1.36-1.1 on GA media
These are all security issues fixed in the python3-virtualbox-6.1.36-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4925-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765).
first Dec 20, 2023 -
High max 7.5SUSE-SU-2017:3389-1 1 CVE
Security update for xstream
This update for xstream fixes the following issues: - CVE-2017-7957: XStream could cause a Denial of Service when unmarshalling void. (bsc#1070731)
first Dec 20, 2017 -
High max 8.8SUSE-SU-2024:3976-1 4 CVEs
Security update for pcp
This update for pcp fixes the following issues: pcp was updated from version 3.11.9 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389): - Security issues fixed: * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#1230…
first Nov 12, 2024 -
High max 7.8SUSE-SU-2024:4241-1 2 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_175 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
High max 7.0SUSE-SU-2018:2369-1 2 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 12)
This update for the Linux Kernel 3.12.61-52_136 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …
first Aug 16, 2018 -
High max 7.5openSUSE-SU-2024:13629-1 1 CVE
ghostscript-10.02.1-1.1 on GA media
These are all security issues fixed in the ghostscript-10.02.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2020:1511-1 25 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: Version Bump to 6.0.24 (released July 14 2020 by Oracle) This is a maintenance release. The following items were fixed and/or added: - API: Fix unintentionally enabled audio due to a settings file version…
first Sep 23, 2020 -
High max 8.3SUSE-SU-2018:2595-1 2 CVEs
Security update for spice
This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
first Sep 3, 2018 -
High max 7.8
Security update for flash-player
flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).
first Oct 16, 2015 -
High max 7.0SUSE-SU-2024:1047-1 2 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_118 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…
first Mar 28, 2024 -
High max 7.2SUSE-SU-2024:0852-1 1 CVE
Security update for axis
This update for axis fixes the following issues: - CVE-2023-51441: Fixed SSRF when untrusted input is passed to the service admin HTTP API (bsc#1218605).
first Mar 12, 2024 -
High max 7.7openSUSE-SU-2025:14825-1 1 CVE
luanti-5.11.0-1.1 on GA media
These are all security issues fixed in the luanti-5.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 20, 2025 -
High max 8.8SUSE-SU-2025:02933-1 3 CVEs
Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_211 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 20, 2025