12,602 results · Clear filters · Feed
-
High max 8.1openSUSE-SU-2024:12488-1 1 CVE
corepack18-18.12.1-1.1 on GA media
These are all security issues fixed in the corepack18-18.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of servi…
first Oct 18, 2022 -
High max 7.0openSUSE-SU-2024:11623-1 3 CVEs
libruby3_0-3_0-3.0.2-1.1 on GA media
These are all security issues fixed in the libruby3_0-3_0-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: opera was updated to 88.0.4412.74: - DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches Update to 88.0.4412.53 - DNA-99108 [Lin] Options on video pop out not possible to change - DNA-99832 On aut…
first Jul 13, 2022 -
High max 8.1SUSE-SU-2022:4084-1 1 CVE
Security update for nodejs16
This update for nodejs16 fixes the following issues: - Update to LTS versino 16.18.1. - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). - Update to LTS version 16.18.0: * http: throw error on content-length mismatc…
first Nov 18, 2022 -
High max 8.8SUSE-SU-2019:1963-1 3 CVEs
Security update for openexr
This update for openexr fixes the following issues: Security issues fixed: - CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109). - CVE-2017-9113: Fixed an invalid write of size 1 in the buffere…
first Jul 24, 2019 -
High max 7.5SUSE-SU-2024:3105-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks (bsc#1229465)
first Sep 3, 2024 -
High max 7.8SUSE-SU-2024:0358-1 2 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 6, 2024 -
High max 8.7SUSE-SU-2025:3715-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2025-59728: allocated space for the appended '/' (bsc#1251137)
first Oct 22, 2025 -
High max 7.8SUSE-SU-2021:0826-1 4 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_48 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a T…
first Mar 17, 2021 -
High max 7.5openSUSE-SU-2024:12716-1 8 CVEs
libopenssl-3-devel-3.0.8-1.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.7
Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project.
first Nov 5, 2019 -
High max 7.8SUSE-SU-2025:02514-1 1 CVE
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_47 fixes several issues. The following security issue was fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579).
first Jul 24, 2025 -
High max 7.5SUSE-SU-2016:1205-1 1 CVE
Security update for libxml2
This update for libxml2 fixes two security issues: - libxml2 limits the number of recursions an XML document can contain so to protect against the 'Billion Laughs' denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in…
first May 3, 2016 -
High max 7.5SUSE-SU-2022:14915-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
first Mar 15, 2022 -
High max 8.8SUSE-SU-2016:0822-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following security issues. Tomcat has been updated from 7.0.55 to 7.0.68. * CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass intended SecurityMa…
first Mar 18, 2016 -
High max 7.5SUSE-SU-2020:3565-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
first Nov 30, 2020 -
High max 8.8openSUSE-SU-2024:0223-1 29 CVEs
Security update for opera
This update for opera fixes the following issues: - Update to 112.0.5197.25 * CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127 - The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CV…
first Jul 26, 2024 -
High max 7.5SUSE-SU-2025:02014-1 2 CVEs
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22870: golang.org/x/net/http/httpproxy: proxy bypass using IPv6 zone IDs (bsc#1238681). - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org…
first Jun 19, 2025 -
High max 8.6SUSE-SU-2024:1151-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665) - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)
first Apr 8, 2024 -
High max 7.0SUSE-SU-2023:2386-1 3 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_142 fixes several issues. The following security issues were fixed: - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210500). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_sessi…
first Jun 6, 2023 -
High max 7.5openSUSE-SU-2020:0165-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2020-7216: Fixed a potential denial of service via a memory leak when processing packets with missing …
first Feb 4, 2020 -
High max 7.0SUSE-SU-2020:1364-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.35. See changelog at http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.35_(markt) * CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persisten…
first May 21, 2020 -
High max 7.5openSUSE-SU-2020:1102-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117) This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Jul 27, 2020 -
High max 8.1SUSE-SU-2025:0631-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.17: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 21, 2025 -
High max 8.4SUSE-SU-2023:3463-1 6 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.0 with patch level 1572. - CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996). - CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256). - CVE-2023-2610: Fixed nteger Ov…
first Aug 28, 2023 -
High max 8.0SUSE-SU-2018:1545-1 4 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-92_38 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…
first Jun 5, 2018 -
High max 7.8SUSE-SU-2023:3251-1 1 CVE
Security update for rust1.71
This update for rust1.71 fixes the following issues: Update to version 1.71.1: - CVE-2023-38497: Fixed privilege escalation with Cargo not respecting umask when extracting dependencies (bsc#1213817).
first Aug 8, 2023 -
High max 7.5SUSE-SU-2016:2469-1 11 CVEs
Security update for openssl1
This update for openssl1 fixes the following issues: penSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behaviour…
first Oct 6, 2016 -
High max 7.8
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: a…
first Feb 24, 2025 -
High max 7.5
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Dec 1, 2023 -
High max 7.8SUSE-SU-2017:0084-1 5 CVEs
Security update for jasper
This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. (bsc#1012530) - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010977) -…
first Jan 8, 2017 -
High max 7.5
Security update for nginx
This update for nginx fixes the following issues: - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171) - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)
first Jan 29, 2025 -
High max 7.5SUSE-RU-2024:3971-1 1 CVE
Recommended update for mojo-parent
This update for mojo-parent fixes the following issues: xalan-j2 was updated from version 2.7.2 to 2.7.3: - Security issues fixed: * CVE-2022-34169: Fixed integer truncation issue when processing malicious XSLT stylesheets (bsc#1201684) - Changes and Bugs fix…
first Nov 11, 2024 -
High max 7.7openSUSE-SU-2020:0468-1 6 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper …
first Apr 6, 2020 -
High max 7.5SUSE-SU-2023:2888-1 4 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service …
first Jul 19, 2023 -
High max 7.5SUSE-SU-2022:1091-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2022-0391: Fixed URL sanitization containing ASCII newline and tabs in urlparse (bsc#1195396). - CVE-2021-4189: Fixed ftplib not to trust the PASV response (bsc#1194146). - CVE-2021-3572: Fixed an impro…
first Apr 1, 2022 -
High max 7.8SUSE-SU-2020:3532-1 25 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports…
first Nov 26, 2020 -
High max 7.5openSUSE-SU-2023:0108-1 4 CVEs
Security update for dcmtk
This update for dcmtk fixes the following issues: - CVE-2022-43272: Fixed memory leak via the T_ASC_Association object (boo#1206070) - Update to 3.6.7 (boo#1208639, boo#1208638, boo#1208637, CVE-2022-2121, CVE-2022-2120, CVE-2022-2119) - CVE-2022-2121: Fixed …
first May 14, 2023 -
High max 7.8SUSE-SU-2023:2453-1 5 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_124 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE…
first Jun 7, 2023