12,602 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2022:2948-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol (bsc#1194704). - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol (bsc#1193227).
first Aug 31, 2022 -
High max 7.0openSUSE-SU-2021:1535-1 3 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS str…
first Dec 6, 2021 -
High max 7.5openSUSE-SU-2024:11156-1 16 CVEs
pdns-4.5.1-1.5 on GA media
These are all security issues fixed in the pdns-4.5.1-1.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8openSUSE-SU-2024:13809-1 1 CVE
libwireshark17-4.2.4-1.1 on GA media
These are all security issues fixed in the libwireshark17-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2021:0310-1 2 CVEs
Security update for buildah, libcontainers-common, podman
This update for buildah, libcontainers-common, podman fixes the following issues: Changes in libcontainers-common: - Update common to 0.33.0 - Update image to 5.9.0 - Update podman to 2.2.1 - Update storage to 1.24.5 - Switch to seccomp profile provided by co…
first Feb 19, 2021 -
High max 7.8SUSE-SU-2023:1983-1 3 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_126 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() …
first Apr 25, 2023 -
High max 7.8SUSE-SU-2024:1990-1 3 CVEs
Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security Update 550.90.07: - CVE-2024-0090: Fixed out of bounds write (bsc#1223356). - CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356). …
first Jun 11, 2024 -
High max 8.2SUSE-SU-2026:0071-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Security fixes: - CVE-2025-14177: getimagesize() function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode (bsc#1255710). - CVE-2025-14178: heap buffer overflow …
first Jan 8, 2026 -
High max 7.5SUSE-SU-2020:3597-1 1 CVE
Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)
first Dec 2, 2020 -
High max 7.5openSUSE-SU-2024:12207-1 3 CVEs
java-11-openjdk-11.0.16.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:14232-1 1 CVE
golang-github-prometheus-prometheus-2.53.0-3.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.53.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2024 -
High max 7.8SUSE-SU-2025:0426-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delt…
first Feb 11, 2025 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalatio…
first Aug 3, 2021 -
High max 7.1openSUSE-SU-2024:12994-1 8 CVEs
kernel-devel-6.3.7-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.3.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0openSUSE-SU-2021:2555-1 1 CVE
Security update for git
This update for git fixes the following issues: Update from version 2.26.2 to version 2.31.1 (jsc#SLE-18152) Security fixes: - CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capab…
first Jul 29, 2021 -
High max 8.3SUSE-SU-2020:1569-1 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version jdk8u252 fixes the following issues: - CVE-2020-2754: Forward references to Nashorn (bsc#1169511) - CVE-2020-2755: Improve Nashorn matching (bsc#1169511) - CVE-2020-2756: Better mapping of serial ENUMs (bsc#116951…
first Jun 9, 2020 -
High max 7.5SUSE-RU-2025:02092-1 3 CVEs
Recommended update for podman
This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)
first Jun 24, 2025 -
High max 7.5SUSE-SU-2025:1508-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2025-2704: Fixed remote DoS due to possible ASSERT() on OpenVPN servers using --tls-crypt-v2 (bsc#1240392)
first May 7, 2025 -
High max 7.5
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
first Oct 25, 2023 -
High max 7.8SUSE-SU-2023:4135-1 2 CVEs
Security update for suse-module-tools
This update for suse-module-tools fixes the following issues: - Updated to version 15.4.18: - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335). - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#P…
first Oct 19, 2023 -
High max 8.5SUSE-SU-2023:3029-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: - CVE-2023-29450: Fixed unauthorized file system access in JS preprocessing (bsc#1213307).
first Jul 31, 2023 -
High max 7.4SUSE-SU-2024:2260-1 2 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2024-4216: Fixed XSS in /settings/store endpoint (bsc#1223868). - CVE-2024-4215: Fixed multi-factor authentication bypass (bsc#1223867).
first Jul 2, 2024 -
High max 7.8SUSE-SU-2025:02718-1 5 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archive_read_format_rar_seek_data() function (bsc#1244272) - CVE-2025-5915: Fixed heap buffer over read in copy_from_lzss_window() at a…
first Aug 6, 2025 -
High max 7.0openSUSE-SU-2024:14124-1 1 CVE
gettext-its-gtk3-3.24.43-1.1 on GA media
These are all security issues fixed in the gettext-its-gtk3-3.24.43-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0266: Fixed a use-after-free bug led by a missing lock in ALSA. (bsc#1207134) - CVE-2022-47929: Fixed a NULL point…
first Jan 26, 2023 -
High max 7.0openSUSE-SU-2020:0803-1 1 CVE
Security update for rubygem-bundler
This update for rubygem-bundler fixes the following issue: - CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution (bsc#1143436). This update was imported from the SUSE:SLE-15:Update update project.
first Jun 12, 2020 -
High max 7.8SUSE-SU-2023:4174-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI pa…
first Oct 24, 2023 -
High max 7.5openSUSE-SU-2021:2327-1 6 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read (bsc#1187973) - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info (bsc#1187977) - CVE-2021-27290: Regular Expression Den…
first Jul 14, 2021 -
High max 8.8SUSE-SU-2024:0352-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 6, 2024 -
High max 7.8SUSE-SU-2021:1210-1 33 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation whe…
first Apr 15, 2021 -
High max 8.8SUSE-SU-2025:1139-1 3 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2022-49025: net/mlx5e: Fix use-after-free when reverting termination table (bsc#1233023). - CVE-2024-41062: Sync sock recv cb and relea…
first Apr 3, 2025 -
High max 7.5SUSE-SU-2022:14941-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2021-3448: Fixed a potential DNS cache poisoning issue due to a constant outgoing port being used when for certain use cases of the --server option (bsc#1183709). - CVE-2022-0934: Fixed an invalid memo…
first Apr 21, 2022 -
High max 7.8SUSE-SU-2024:3165-1 11 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: wireshark was updated from version 3.6.23 to version 4.2.6 (jsc#PED-8517): - Security issues fixed with this update: * CVE-2024-0207: HTTP3 dissector crash (bsc#1218503) * CVE-2024-0210: Zigbee TLV dissect…
first Sep 9, 2024 -
High max 8.0SUSE-SU-2018:1642-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)
This update for the Linux Kernel 4.4.82-6_6 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in the…
first Jun 11, 2018 -
High max 7.5SUSE-SU-2020:3551-1 10 CVEs
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes: * adds ECDSA keys and host key support when using OpenSSL * adds ED25519 key and host key support when using OpenSSL 1.1…
first Nov 27, 2020 -
High max 7.5SUSE-SU-2022:3072-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a …
first Sep 5, 2022 -
High max 7.5openSUSE-SU-2025:14744-1 1 CVE
flannel-0.26.4-1.1 on GA media
These are all security issues fixed in the flannel-0.26.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 8, 2025 -
High max 7.8SUSE-SU-2021:3945-1 1 CVE
Security update for python-Babel
This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768).
first Dec 6, 2021 -
High max 7.0SUSE-SU-2020:1582-2 1 CVE
Security update for rubygem-bundler
This update for rubygem-bundler fixes the following issue: - CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution (bsc#1143436).
first Jul 15, 2020 -
High max 7.5openSUSE-SU-2021:1995-1 1 CVE
Security update for xstream
This update for xstream fixes the following issues: Upgrade to 1.4.17 - CVE-2021-29505: Fixed potential code execution when unmarshalling with XStream instances using an uninitialized security framework (bsc#1186651)
first Jul 11, 2021