12,602 results · Clear filters · Feed
-
High max 7.2SUSE-SU-2023:2201-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Updated to version 13.11: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). …
first May 15, 2023 -
High max 7.4SUSE-SU-2020:14442-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10773: Fixed a memory leak on s390/s390x, in the cmm_timeout_hander in file arch/s390/mm/cmm.c (bnc#1172999). - CV…
first Aug 3, 2020 -
High max 7.8SUSE-SU-2023:1972-1 1 CVE
Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_120 fixes one issue. The following security issue was fixed: - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
first Apr 24, 2023 -
High max 7.8SUSE-SU-2023:3571-1 3 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_148 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds m…
first Sep 10, 2023 -
High max 7.8SUSE-SU-2023:4799-1 1 CVE
Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_156 fixes one issue. The following security issue was fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation…
first Dec 13, 2023 -
High max 8.8SUSE-SU-2023:2871-1 82 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fix…
first Jul 18, 2023 -
High max 7.8SUSE-SU-2023:0238-1 2 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_111 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1…
first Feb 3, 2023 -
High max 7.5SUSE-SU-2019:2559-1 3 CVEs
Security update for nginx
This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (b…
first Oct 4, 2019 -
High max 7.5openSUSE-SU-2024:0220-1 2 CVEs
Security update for caddy
This update for caddy fixes the following issues: - Update to version 2.8.4: * cmd: fix regression in auto-detect of Caddyfile (#6362) * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped - Update to version 2.8.2: * cmd: fix auto-detetction o…
first Jul 26, 2024 -
High max 8.8SUSE-SU-2022:3719-1 4 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Updated to version 102.4.0 ESR (bsc#1204421): - CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs. - CVE-2022-42928: Fixed memory Corruption in JS Engine. - C…
first Oct 25, 2022 -
High max 7.8SUSE-SU-2024:1288-1 4 CVEs
Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_81 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-4…
first Apr 15, 2024 -
High max 8.8SUSE-SU-2024:0307-1 1 CVE
Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2023-40474: Fixed an integer overflow during MXF file parsing (bsc#1215796).
first Feb 1, 2024 -
High max 7.5SUSE-SU-2022:4221-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868) - CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
first Nov 25, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …
first Jun 7, 2023 -
High max 8.3SUSE-SU-2018:2584-1 2 CVEs
Security update for spice
This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
first Aug 31, 2018 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497). This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Jun 4, 2021 -
High max 7.8SUSE-SU-2023:1674-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).
first Mar 29, 2023 -
High max 7.8SUSE-SU-2025:3683-1 4 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_185 fixes several issues. The following security issues were fixed: - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-21971: net_sched…
first Oct 20, 2025 -
High max 7.5openSUSE-SU-2024:14601-1 1 CVE
python310-xhtml2pdf-0.2.16-2.1 on GA media
These are all security issues fixed in the python310-xhtml2pdf-0.2.16-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 18, 2024 -
High max 8.8openSUSE-SU-2024:12524-1 1 CVE
krb5-1.20.1-1.1 on GA media
These are all security issues fixed in the krb5-1.20.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2021:1289-1 1 CVE
Security update for php-composer
This update for php-composer fixes the following issues: - Require php-mbstring as requested in boo#1187416 - Version 1.10.22 * Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-…
first Sep 21, 2021 -
High max 7.4SUSE-SU-2025:1519-1 8 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750) - CVE-2025-32050: Fixed Integer overflow in append_param_quoted (bsc#1240752) - CVE-2025-32052: …
first May 9, 2025 -
High max 8.3SUSE-SU-2018:2563-1 2 CVEs
Security update for spice
This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
first Aug 30, 2018 -
High max 7.4openSUSE-SU-2024:14262-1 3 CVEs
java-11-openj9-11.0.24.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.24.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2024 -
High max 7.8openSUSE-SU-2024:12143-1 1 CVE
python-2.7.18-22.1 on GA media
These are all security issues fixed in the python-2.7.18-22.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.3
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fi…
first Jul 27, 2021 -
High max 7.5
ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0openSUSE-SU-2021:3838-1 3 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS str…
first Dec 1, 2021 -
High max 7.8openSUSE-SU-2020:0336-1 35 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14615: Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics ma…
first Mar 13, 2020 -
High max 7.5SUSE-SU-2017:1738-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection co…
first Jun 29, 2017 -
High max 7.8SUSE-SU-2023:3648-1 5 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_63 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…
first Sep 18, 2023 -
High max 7.7SUSE-SU-2020:1335-1 5 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#11714…
first May 19, 2020 -
High max 7.8SUSE-SU-2025:03184-1 5 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_164 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class…
first Sep 11, 2025 -
High max 7.5openSUSE-SU-2021:1455-1 15 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u312 build 07 with OpenJ9 0.29.0 virtual machine including Oracle July 2021 and October 2021 CPU changes - CVE-2021-2161: Fixed incorrect handling of partially quoted arguments i…
first Nov 5, 2021 -
High max 8.5
xstream-1.4.18-1.1 on GA media
These are all security issues fixed in the xstream-1.4.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2024:0228-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA 2024-02) (bsc#1218955): - CVE-2024-0741: Out of bounds write in ANGLE - CVE-2024-0742: Failure to update user input timestamp - CVE-2024-07…
first Jan 25, 2024 -
High max 7.5openSUSE-SU-2024:11921-1 1 CVE
rage-encryption-0.7.1+0-2.1 on GA media
These are all security issues fixed in the rage-encryption-0.7.1+0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2023:4666-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).
first Dec 6, 2023 -
High max 7.8openSUSE-SU-2024:14234-1 1 CVE
klp-build-0~20240731.edfe0bf-1.1 on GA media
These are all security issues fixed in the klp-build-0~20240731.edfe0bf-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2024 -
High max 7.5SUSE-SU-2022:0860-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: Security issue fixed: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). Non-security issues fixed: - Fix PAC pointer authentication in ARM. (bsc#1195856) …
first Mar 15, 2022