12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2024:4142-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594). - CVE-2024-11596: ECMP dissector crash (bsc#1233593).
first Dec 2, 2024 -
High max 8.7SUSE-SU-2024:3747-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)
first Oct 22, 2024 -
High max 7.5SUSE-SU-2024:3081-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2023-31315: Fixed validation in a model specific register (MSR) that lead to modification of SMM configuration by malicious program with ring0 access (bsc#1229069)
first Sep 2, 2024 -
High max 7.5openSUSE-SU-2024:12722-1 1 CVE
epiphany-43.1-1.1 on GA media
These are all security issues fixed in the epiphany-43.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).
first Aug 31, 2023 -
High max 8.1openSUSE-SU-2024:12059-1 1 CVE
rsyslog-8.2204.1-1.1 on GA media
These are all security issues fixed in the rsyslog-8.2204.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0207-1 2 CVEs
Security update for wicked
This update for wicked fixes the following issues: - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020-7217: Fixed a memory leak in DHCP4 fsm when processing packets for other client ids (bsc#1160906). …
first Feb 11, 2020 -
High max 7.8
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…
first Mar 18, 2025 -
High max 7.8SUSE-SU-2023:1977-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_11 fixes several issues. The following security issues were fixed: - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).…
first Apr 25, 2023 -
High max 7.5openSUSE-SU-2020:0187-1 2 CVEs
Security update for ceph
This update for ceph fixes the following issues: - CVE-2020-1700: Fixed a denial of service against the RGW server via connection leakage (bsc#1161312). - CVE-2020-1699: Fixed a information disclosure by improper URL checking (bsc#1161074). This update was im…
first Feb 8, 2020 -
High max 7.5openSUSE-SU-2019:2051-1 6 CVEs
Security update for apache2
This update for apache2 fixes the following issues: Security issues fixed: - CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1145575). - CVE-2019-10081: Fixed mod_http2 that is vulnerable to memory …
first Sep 2, 2019 -
High max 8.8openSUSE-SU-2024:12429-1 6 CVEs
MozillaFirefox-106.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-106.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:0308-1 3 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4304:…
first Feb 7, 2023 -
High max 8.8
chromedriver-107.0.5304.87-1.1 on GA media
These are all security issues fixed in the chromedriver-107.0.5304.87-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2022:10146-1 6 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 106.0.5249.119 (boo#1204223): * CVE-2022-3445: Use after free in Skia * CVE-2022-3446: Heap buffer overflow in WebSQL * CVE-2022-3447: Inappropriate implementation in Custom Tabs * CVE-2022-3448: U…
first Oct 13, 2022 -
High max 7.8SUSE-SU-2022:4038-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_98 fixes several issues. The following security issues were fixed: - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of…
first Nov 16, 2022 -
High max 7.5openSUSE-SU-2025:15094-1 1 CVE
python311-cramjam-2.9.1-1.3 on GA media
These are all security issues fixed in the python311-cramjam-2.9.1-1.3 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
High max 8.8SUSE-SU-2022:3177-1 1 CVE
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Add support for gpgautoimport in zypperpkg module - Update Salt to work with Jinja >= and <= 3.1.0 (bsc#1198744) - Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372) …
first Sep 8, 2022 -
High max 7.5SUSE-SU-2024:3454-1 3 CVEs
Security update for kubernetes1.28
This update of kubernetes1.28 fixes the following issues: - rebuild the package with the current go 1.23 security release (bsc#1229122).
first Oct 2, 2024 -
High max 7.5SUSE-SU-2021:4111-1 1 CVE
Security update for log4j
This update for log4j fixes the following issue: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]
first Dec 17, 2021 -
High max 7.8SUSE-SU-2023:0229-1 2 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_129 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic …
first Feb 2, 2023 -
High max 7.8SUSE-SU-2020:0560-1 36 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: An issue was discovered in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attackers to…
first Mar 2, 2020 -
High max 7.4SUSE-SU-2021:2831-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following security issue: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attac…
first Aug 24, 2021 -
High max 7.8SUSE-SU-2023:3891-1 2 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_160 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in t…
first Sep 29, 2023 -
High max 7.3SUSE-SU-2017:3107-1 1 CVE
Security update for postgresql-init
This update for postgresql-init fixes the following issues: - CVE-2017-14798: A race condition in the init script could be used by attackers able to access the postgresql account to escalate their privileges to root (bsc#1062722)
first Nov 27, 2017 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox ESR 115.3.1 ESR was released to fix a security issue: - MFSA 2023-44 (bsc#1215814) * CVE-2023-5217: Fixed a heap buffer overflow in libvpx
first Oct 3, 2023 -
High max 7.2SUSE-SU-2025:0336-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2024-39917: Enforce no login screen if require_credentials is set (bsc#1227769)
first Feb 3, 2025 -
High max 7.5openSUSE-SU-2021:2618-1 3 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service. (bsc#1187977) - CVE-2020…
first Aug 5, 2021 -
High max 7.5SUSE-SU-2024:0812-1 5 CVEs
Security update for go1.22
This update for go1.22 fixes the following issues: - Upgrade go to version 1.22.1 - CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (bsc#1221000) - CVE-2023-45290: net/http: memory exhaustio…
first Mar 8, 2024 -
High max 8.8openSUSE-SU-2024:12818-1 3 CVEs
nodejs-electron-22.3.3-2.1 on GA media
These are all security issues fixed in the nodejs-electron-22.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:1059-1 6 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read (bsc#1187973) - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info (bsc#1187977) - CVE-2021-27290: Regular Expression Den…
first Jul 19, 2021 -
High max 8.7openSUSE-SU-2024:14541-1 6 CVEs
matrix-synapse-1.120.2-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.120.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 4, 2024 -
High max 7.5
ruby3.1-rubygem-actionmailbox-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-actionmailbox-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2025:02871-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_39 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…
first Aug 19, 2025 -
High max 7.8SUSE-SU-2024:3323-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907). - CVE-2020-26421: Fixed USB HID dissector crash (bsc#1179933).
first Sep 19, 2024 -
High max 7.8SUSE-SU-2024:1760-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 22, 2024 -
High max 7.8SUSE-SU-2023:0416-1 62 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-13695: Fixed fix acpi operand cache leak in nseval.c (bsc#1055710). - CVE-2018-7755: Fixed bypass of kernel securi…
first Feb 15, 2023 -
High max 8.8
nodejs-electron-31.7.2-1.1 on GA media
These are all security issues fixed in the nodejs-electron-31.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 25, 2024 -
High max 7.5SUSE-RU-2020:2915-1 3 CVEs
Recommended update for bind
This update for bind fixes the following issues: Bind was updated to version 9.11.22 Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the f…
first Oct 13, 2020 -
High max 7.5SUSE-SU-2022:4022-1 2 CVEs
Security update for ant
This update for ant fixes the following issues: - CVE-2020-1945: Fixed insecure temporary file vulnerability (bsc#1171696). - CVE-2020-11979: Fixed issue introduced with fix for CVE-2020-1945 (bsc#1177180).
first Nov 16, 2022