12,602 results · Clear filters · Feed
-
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. This feature was added: - Support for the 2017 Intel Purley platform. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using …
first Dec 9, 2016 -
High max 8.8SUSE-SU-2023:0081-1 8 CVEs
Security update for samba
This update for samba fixes the following issues: - Updated to version 4.15.13: - CVE-2022-38023: Removed weak cryptographic algorithms from the Netlogon RPC implementation (bsc#1206504). - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on 32-b…
first Jan 12, 2023 -
High max 8.0SUSE-SU-2022:4615-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial of s…
first Dec 23, 2022 -
High max 7.5SUSE-SU-2020:0940-1 2 CVEs
Security update for the Linux Kernel (Live Patch 16 for SLE 15)
This update for the Linux Kernel 4.12.14-150_41 fixes several issues. The following security issues were fixed: - CVE-2020-1749: Fixed an issue in the networking protocols in encrypted IPsec tunnel (bsc#1165631) - CVE-2019-5108: Fixed an issue where by trigge…
first Apr 7, 2020 -
High max 7.5SUSE-SU-2022:0857-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). - Allow CRYPTO_THREADID_set_callback to be called with NULL parameter (bsc#1196249).
first Mar 15, 2022 -
High max 7.5SUSE-SU-2024:3729-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Update to php 8.2.24: - CVE-2024-8925: Fixed erroneous parsing of multipart form data in HTTP POST requests leads to legitimate data not being processed (bsc#1231360) - CVE-2024-8927: Fixed cgi.force_redirect c…
first Oct 18, 2024 -
High max 8.8SUSE-SU-2025:02873-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_7_3 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can …
first Aug 19, 2025 -
High max 8.8
nodejs-electron-21.3.4-1.1 on GA media
These are all security issues fixed in the nodejs-electron-21.3.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2019:0655-1 9 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490). - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message c…
first Mar 20, 2019 -
High max 7.8SUSE-SU-2025:03418-1 5 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow …
first Sep 28, 2025 -
High max 8.8openSUSE-SU-2025:0115-1 9 CVEs
Security update for chromium, gn
This update for chromium, gn fixes the following issues: Changes in chromium: - Chromium 135.0.7049.52 (stable release 2025-04-01) (boo#1240555) * CVE-2025-3066: Use after free in Navigations * CVE-2025-3067: Inappropriate implementation in Custom Tabs * CVE-…
first Apr 6, 2025 -
High max 8.8SUSE-SU-2025:02932-1 5 CVEs
Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_198 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 20, 2025 -
High max 7.5openSUSE-SU-2024:12704-1 3 CVEs
ucode-intel-20230214-1.1 on GA media
These are all security issues fixed in the ucode-intel-20230214-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:2123-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418) - CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
first Jun 22, 2021 -
High max 8.9openSUSE-SU-2025:14653-1 5 CVEs
govulncheck-vulndb-0.0.20250115T172141-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250115T172141-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 16, 2025 -
High max 7.5SUSE-SU-2022:3499-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-38177: Fixed a memory leak that could be externally tri…
first Oct 4, 2022 -
High max 7.8SUSE-SU-2022:1274-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2022-1270: Fixed a heap buffer overflow when parsing MIFF (bsc#1198351).
first Apr 20, 2022 -
High max 7.7SUSE-SU-2021:0599-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2020-13692: Fixed a XML External Entity vulnerability (bsc#1172746) .
first Feb 25, 2021 -
High max 7.0SUSE-SU-2026:0120-1 1 CVE
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2022-36765: Fixed integer overflow to buffer overflow via local network vulnerability (bsc#1218680).
first Jan 14, 2026 -
High max 7.5SUSE-SU-2024:4272-1 1 CVE
Security update for nodejs18
This update for nodejs18 fixes the following issues: - CVE-2024-21538: Fixed regular expression denial of service in cross-spawn dependency (bsc#1233856) - Update to 18.20.5 * esm: mark import attributes and JSON module as stable * deps: + upgrade npm to 10.8…
first Dec 10, 2024 -
High max 8.4SUSE-SU-2020:0356-1 2 CVEs
Security update for pcp
This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3696: Fixed a local privilege escalation in migrate_tempdirs() (bsc#1153921). - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#11527…
first Feb 7, 2020 -
High max 8.1SUSE-SU-2015:1581-1 5 CVEs
Security update for openssh
openssh was updated to fix several security issues and bugs. These security issues were fixed: * CVE-2015-5352: The x11_open_helper function in channels.c in ssh in OpenSSH when ForwardX11Trusted mode is not used, lacked a check of the refusal deadline for X …
first Sep 17, 2015 -
High max 8.0SUSE-SU-2020:2513-1 7 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_29 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious AC…
first Sep 4, 2020 -
High max 7.7SUSE-SU-2024:1165-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - Upgrade from v1.25.14 to v1.25.16 - CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)
first Apr 8, 2024 -
High max 7.3SUSE-SU-2024:4163-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) - CVE-2024-45817: xen: x8…
first Dec 4, 2024 -
High max 7.5SUSE-SU-2022:0499-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-21712: Fixed secret exposure in cross-origin redirects by properly removing sensitive headers when redirecting to a different origin (bsc#1195667).
first Feb 18, 2022 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
first Jul 11, 2021 -
High max 7.5SUSE-SU-2024:2309-1 1 CVE
Security update for go1.22
This update for go1.22 fixes the following issues: Updated to version 1.22.5 (bsc#1218424): - CVE-2024-24791: Fixed a potential denial of service due to improper handling of HTTP 100-continue headers (bsc#1227314).
first Jul 5, 2024 -
High max 8.8SUSE-SU-2022:4284-1 5 CVEs
Security update for webkit2gtk3
Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user inte…
first Nov 29, 2022 -
High max 8.8
Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Me…
first Jul 5, 2021 -
High max 9.8SUSE-SU-2025:03522-1 1 CVE
Security update for openssl-1_1-livepatches
This update for openssl-1_1-livepatches fixes the following issues: - Add livepatch for CVE-2025-9230 (bsc#1250410).
first Oct 10, 2025 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
first Jan 25, 2022 -
High max 7.5openSUSE-SU-2024:11804-1 2 CVEs
python310-Django-4.0.2-1.1 on GA media
These are all security issues fixed in the python310-Django-4.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:1173-1 1 CVE
Security update for prosody
This update for prosody fixes the following issues: prosody was updated to 0.11.10: Security: * MUC: Fix logic for access to affiliation lists CVE-2021-37601 (boo#1188976) https://prosody.im/security/advisory_20210722/ Minor changes: * prosodyctl: Add ‘limits…
first Aug 20, 2021 -
High max 7.5SUSE-SU-2020:2609-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517). - CVE-2020-24977: Fixed a global-buffer-overflow in xmlEncod…
first Sep 11, 2020 -
High max 7.4openSUSE-SU-2024:12542-1 1 CVE
ovmf-202211-1.1 on GA media
These are all security issues fixed in the ovmf-202211-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2020:2491-1 12 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2019-0155: Fixed a privilege escalation in the i915 graphics driv…
first Sep 4, 2020 -
High max 8.8
MozillaFirefox-117.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-117.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2023:4018-1 1 CVE
Security update for go1.20
This update for go1.20 fixes the following issues: - Updated to version 1.20.9 (bsc#1206346): - CVE-2023-39323: Fixed an arbitrary execution issue during build time due to path directive bypass (bsc#1215985).
first Oct 9, 2023 -
High max 7.1SUSE-SU-2023:1978-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_18 fixes one issue. The following security issue was fixed: - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
first Apr 25, 2023