12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2024:2479-1 4 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854). -…
first Jul 15, 2024 -
High max 7.8SUSE-SU-2023:4790-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765). - CVE-2023-6478: Fixed out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (bsc#121…
first Dec 13, 2023 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bs…
first Jan 16, 2024 -
High max 7.5SUSE-SU-2022:2145-1 5 CVEs
Security update for SUSE Manager Server 4.1
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?system…
first Jun 20, 2022 -
High max 8.8SUSE-SU-2025:0833-2 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033). - CVE-2024-53135: KVM: VMX: Bury Intel …
first Mar 11, 2025 -
High max 7.5openSUSE-SU-2024:14366-1 1 CVE
libopenssl-3-devel-3.1.4-14.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.1.4-14.1 package on the GA media of openSUSE Tumbleweed.
first Sep 25, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets…
first Mar 19, 2025 -
High max 8.8SUSE-SU-2021:1523-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408). - CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410). - CVE-2021…
first May 5, 2021 -
High max 7.5SUSE-SU-2021:3877-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the pas…
first Dec 2, 2021 -
High max 7.5SUSE-SU-2024:2393-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security fixes: - CVE-2024-39894: Fixed timing attacks against echo-off password entry (bsc#1227318). Other fixes: - Add obsoletes for openssh-server-config-rootlogin (bsc#1227350). - Add #include <stdlib.h>…
first Jul 10, 2024 -
High max 7.5SUSE-SU-2021:0042-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issue: - CVE-2020-17527: Fixed a HTTP/2 request header mix-up (bsc#1179602).
first Jan 7, 2021 -
High max 8.0SUSE-SU-2018:1636-1 3 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP3)
This update for the Linux Kernel 4.4.120-94_17 fixes several issues. The following security issues were fixed: - CVE-2018-8897: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandle…
first Jun 11, 2018 -
High max 7.5SUSE-SU-2025:4245-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)
first Nov 26, 2025 -
High max 7.1SUSE-SU-2023:2044-1 1 CVE
Security update for dmidecode
This update for dmidecode fixes the following issues: - CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).
first Apr 26, 2023 -
High max 7.5openSUSE-SU-2024:11172-1 4 CVEs
finch-2.14.7-1.1 on GA media
These are all security issues fixed in the finch-2.14.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:03182-1 4 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_167 fixes several issues. The following security issues were fixed: - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2025-38000: sch_hfsc: Fix qle…
first Sep 11, 2025 -
High max 7.3SUSE-SU-2025:02207-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
first Jul 2, 2025 -
High max 7.5openSUSE-SU-2024:10741-1 5 CVEs
etcd-3.4.16-3.1 on GA media
These are all security issues fixed in the etcd-3.4.16-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2SUSE-SU-2023:2274-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054). - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-…
first May 23, 2023 -
High max 8.8
php7-7.4.24-1.1 on GA media
These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:4161-1 4 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (…
first Dec 4, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 4, 2021 -
High max 7.8SUSE-SU-2025:1214-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes one issue. The following security issue was fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218).
first Apr 11, 2025 -
High max 7.8
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…
first Mar 19, 2025 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).
first Oct 21, 2016 -
High max 7.5openSUSE-SU-2024:14172-1 1 CVE
ruby3.3-rubygem-minitar-0.9-1.17 on GA media
These are all security issues fixed in the ruby3.3-rubygem-minitar-0.9-1.17 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 7.5openSUSE-SU-2020:2008-1 1 CVE
Security update for rclone
This update for rclone fixes the following issues: rclone was updated to version 1.53.3: * Bug Fixes - Fix incorrect use of math/rand instead of crypto/rand CVE-2020-28924 boo#1179005 (Nick Craig-Wood) - Check https://github.com/rclone/passwordcheck for a too…
first Nov 24, 2020 -
High max 8.8SUSE-SU-2019:2872-1 51 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox to 68.2.0 ESR fixes the following issues: Mozilla Firefox was updated to version 68.2.0 ESR (bsc#1154738). Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixe…
first Oct 31, 2019 -
High max 8.6openSUSE-SU-2024:12374-1 4 CVEs
element-desktop-1.11.8-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:3287-1 7 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Updated to jdk-11.0.20+8 (July 2023 CPU): - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473). - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474). -…
first Aug 11, 2023 -
High max 7.5SUSE-SU-2023:3800-1 9 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712) - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880) - CVE-2023-0330: Fixed a stac…
first Sep 27, 2023 -
High max 7.5SUSE-SU-2019:2099-1 1 CVE
Security update for nodejs10
This update for nodejs10 to version 10.16.0 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Update to new upstream LTS version …
first Aug 9, 2019 -
High max 7.5openSUSE-SU-2024:12637-1 2 CVEs
golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-node_exporter-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:2237-1 2 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_115 fixes several issues. The following security issues were fixed: - CVE-2022-1116: Fixed an integer overflow vulnerability in io_uring that allows local attacker to cause memory corruption and escalate privi…
first Jul 1, 2022 -
High max 7.5
tomcat-9.0.82-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.82-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2019:2514-1 3 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559) - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured chann…
first Oct 2, 2019 -
High max 7.5SUSE-SU-2021:3561-1 2 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: cobbler: - Fixed modify_setting test to complete successfully hub-xmlrpc-api: - Use rpm systemd macro to restart service in replace of systemctl patterns-suse-manager: - Virtualization-host-formula was renamed to virtua…
first Oct 27, 2021 -
High max 7.1SUSE-SU-2019:1595-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).
first Jun 21, 2019 -
High max 7.8SUSE-SU-2025:02469-1 1 CVE
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_161 fixes one issue. The following security issue was fixed: - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648).
first Jul 22, 2025 -
High max 7.8SUSE-SU-2022:4072-1 32 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28748: Fixed a leak of kernel memory over the network by ax88179_178a devices (bsc#1196018). - CVE-2022-1882: Fixe…
first Nov 18, 2022