12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2024:0206-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: - CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing. (bsc#1217649) Other fixes: - Streamline how patches are handled in the spec file of the package
first Jan 24, 2024 -
High max 7.5openSUSE-SU-2024:10616-1 3 CVEs
ant-1.10.10-1.2 on GA media
These are all security issues fixed in the ant-1.10.10-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0openSUSE-SU-2024:11049-1 1 CVE
minicom-2.7.1-2.9 on GA media
These are all security issues fixed in the minicom-2.7.1-2.9 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2024:2543-1 6 CVEs
Security update for nodejs20
This update for nodejs20 fixes the following issues: Update to 20.15.1: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560) - CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554) - CVE-2024-22018: Fixed fs.lstat …
first Jul 17, 2024 -
High max 8.8openSUSE-SU-2024:12922-1 10 CVEs
chromedriver-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the chromedriver-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2024:2283-1 1 CVE
Security update for libndp
This update for libndp fixes the following issues: - CVE-2024-5564: Add a check on the route information option length field. (bsc#1225771)
first Jul 2, 2024 -
High max 7.7SUSE-SU-2020:1790-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)
first Jun 26, 2020 -
High max 8.7SUSE-SU-2021:2644-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3659: Fixed a NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (bsc#1188876). - CVE-20…
first Aug 10, 2021 -
High max 8.4openSUSE-SU-2024:13647-1 1 CVE
glibc-2.39-1.2 on GA media
These are all security issues fixed in the glibc-2.39-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2022:0803-1 4 CVEs
Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2018-19787: Fixed XSS vulnerability via unescaped URL (bsc#1118088). - CVE-2021-28957: Fixed XSS vulnerability ia HTML5 attributes unescaped (bsc#1184177). - CVE-2021-43818: Fixed XSS vulnerability…
first Mar 10, 2022 -
High max 7.5openSUSE-SU-2024:12263-1 2 CVEs
java-1_8_0-openj9-1.8.0.345-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.345-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:3639-1 4 CVEs
Security update for libeconf
This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078). - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-ove…
first Sep 18, 2023 -
High max 7.5openSUSE-SU-2025:14740-1 2 CVEs
python311-cryptography-vectors-44.0.0-1.1 on GA media
These are all security issues fixed in the python311-cryptography-vectors-44.0.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2025 -
High max 8.8openSUSE-SU-2024:13434-1 1 CVE
ucode-intel-20231114-1.1 on GA media
These are all security issues fixed in the ucode-intel-20231114-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2018:3084-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. - CVE-2018-10853: A flaw was found in the way the KVM hypervisor emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL)…
first Oct 9, 2018 -
High max 8.2SUSE-SU-2024:2121-1 4 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-afte…
first Jun 21, 2024 -
High max 7.9SUSE-SU-2019:1289-1 33 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data …
first May 28, 2019 -
High max 7.5SUSE-SU-2025:0458-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227052) - CVE-2023-45288: possible excessive CPU consumption due t…
first Feb 12, 2025 -
High max 7.5SUSE-SU-2023:1737-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 3, 2023 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are …
first Mar 9, 2022 -
High max 7.8SUSE-SU-2021:2808-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - A patch previously applied to remedy CVE-2021-38185 introduced a regression that had the potential to cause a segmentation fault in cpio. [bsc#1189465]
first Aug 23, 2021 -
High max 7.5SUSE-SU-2025:02010-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2025-21605: output buffer denial of service (bsc#1241708).
first Jun 18, 2025 -
High max 7.5openSUSE-SU-2024:12496-1 2 CVEs
libvarnishapi3-7.2.1-1.1 on GA media
These are all security issues fixed in the libvarnishapi3-7.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:0130-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - Version update to 2.90: - CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823) - CVE-2023-50868: Fixed a Denial Of Service while trying to va…
first Jan 15, 2025 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…
first Mar 8, 2022 -
High max 8.0SUSE-SU-2025:02096-1 7 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acce…
first Jun 24, 2025 -
High max 7.3SUSE-SU-2018:2381-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read dat…
first Aug 16, 2018 -
High max 7.8openSUSE-SU-2021:0945-1 1 CVE
Security update for arpwatch
This update for arpwatch fixes the following issues: - CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240). This update was imported from the SUSE:SLE-15:Update update project.
first Jul 1, 2021 -
High max 7.5openSUSE-SU-2020:0990-1 2 CVEs
Security update for rubygem-puma
This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1…
first Jul 18, 2020 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3 (bnc#1206750): - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. - CVE-2022-42856: Fixed a potential arbitrary code execution when processing mali…
first Jan 10, 2023 -
High max 8.8SUSE-SU-2022:3766-1 3 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to execute arbitrary binaries on the host (bsc#1181961). - CVE-2020-10696: Fixed an issue that could lead to files being overwritten du…
first Oct 26, 2022 -
High max 8.6openSUSE-SU-2024:12364-1 2 CVEs
squid-5.7-2.1 on GA media
These are all security issues fixed in the squid-5.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:14608-1 4 CVEs
govulncheck-vulndb-0.0.20241220T214820-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241220T214820-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 22, 2024 -
High max 7.5openSUSE-SU-2024:12919-1 1 CVE
rekor-1.1.1-2.1 on GA media
These are all security issues fixed in the rekor-1.1.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:0305-1 3 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-430…
first Feb 7, 2023 -
High max 8.3openSUSE-SU-2024:10872-1 95 CVEs
java-13-openjdk-13.0.8.0-3.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:02385-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_26 fixes several issues. The following security issues were fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac:…
first Jul 18, 2025 -
High max 7.4SUSE-SU-2022:3093-1 1 CVE
Security update for python-Flask-Security-Too
This update for python-Flask-Security-Too fixes the following issues: - CVE-2021-21241: Fixed an issue where GET requests lacking CSRF protection to certain endpoints could return the user's authentication token (bsc#1181058).
first Sep 6, 2022 -
High max 7.8SUSE-SU-2023:4804-1 1 CVE
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_169 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).
first Dec 13, 2023 -
High max 7.8SUSE-SU-2023:4184-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI pa…
first Oct 24, 2023