12,602 results · Clear filters · Feed
-
High max 8.6SUSE-SU-2025:0775-1 9 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641) - CVE-2024-9676: github.com/containers/storage: Fixed symlink traversal vulnerability in the containers/…
first Mar 4, 2025 -
High max 8.0SUSE-SU-2021:0757-1 1 CVE
Security update for git
This update for git fixes the following issues: - On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code durin…
first Mar 9, 2021 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A validation issue was addressed with improved input sanitization. - CVE-2022-22590: A use after free issue was addressed with improved memory ma…
first Mar 3, 2022 -
High max 8.8openSUSE-SU-2024:14361-1 1 CVE
libecpg6-17~rc1-1.1 on GA media
These are all security issues fixed in the libecpg6-17~rc1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 23, 2024 -
High max 8.8SUSE-SU-2024:0592-1 1 CVE
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2024-24821: Fixed potential arbitrary code execution when Composer is invoked within a directory with tampered files (bsc#1219757).
first Feb 22, 2024 -
High max 7.8SUSE-SU-2023:3311-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inform…
first Aug 14, 2023 -
High max 7.5SUSE-SU-2021:3634-1 1 CVE
Security update for rubygem-activerecord-5_1
This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169).
first Nov 9, 2021 -
High max 7.8openSUSE-SU-2021:2177-1 1 CVE
Security update for arpwatch
This update for arpwatch fixes the following issues: - CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).
first Jul 11, 2021 -
High max 7.3SUSE-SU-2023:1902-1 3 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana version update from 8.5.20 to 8.5.22: - Security issues fixed: * CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645) * CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821) * CVE-…
first Apr 19, 2023 -
High max 8.0SUSE-SU-2024:0522-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.14: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).
first Feb 16, 2024 -
High max 7.8
Security update for perl-Spreadsheet-ParseExcel
This update for perl-Spreadsheet-ParseExcel fixes the following issues: - CVE-2023-7101: Fixed a command injection issue when parsing an untrusted spreadsheet (bsc#1218414).
first Jan 18, 2024 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 (bsc#1215814) * CVE-2023-5217: Fixed heap buffer overflow in libvpx
first Oct 3, 2023 -
High max 7.5SUSE-SU-2019:2358-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).
first Sep 11, 2019 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Update to 89.0.4389.72 (boo#1182358, boo#1182960): - CVE-2021-21159: Heap buffer overflow in TabStrip. - CVE-2021-21160: Heap buffer overflow in WebAudio. - CVE-2021-21161: Heap buffer overflow in TabStrip.…
first Mar 8, 2021 -
High max 7.5openSUSE-SU-2021:0772-1 2 CVEs
Security update for python-httplib2
This update for python-httplib2 contains the following fixes: Security fixes included in this update: - CVE-2021-21240: Fixed a regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed an issue where an attacker could c…
first May 23, 2021 -
High max 7.4SUSE-SU-2023:4230-1 2 CVEs
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-34058: Fixed a SAML token signature bypass issue (bsc#1216432). - CVE-2023-34059: Fixed a privilege escalation issue through vmware-user-suid-wrapper (bsc#1216433).
first Oct 27, 2023 -
High max 8.8openSUSE-SU-2023:0045-1 10 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 110.0.5481.77 (boo#1208029): * CVE-2023-0696: Type Confusion in V8 * CVE-2023-0697: Inappropriate implementation in Full screen mode * CVE-2023-0698: Out of bounds read in WebRTC * CVE-2023-0699: U…
first Feb 13, 2023 -
High max 8.1SUSE-SU-2024:1626-1 2 CVEs
Security update for python-pyOpenSSL
This update for python-pyOpenSSL fixes the following issues: - CVE-2018-1000807: Fixed a use-after-free in X509 object handling (bsc#1111635) - CVE-2018-1000808: Fixed a use-after-free in PKCS #12 Store (bsc#1111634)
first May 13, 2024 -
High max 7.1SUSE-SU-2023:4661-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).
first Dec 6, 2023 -
High max 8.3SUSE-SU-2024:2880-1 2 CVEs
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2024-41671: Fixed an information disclosure due to HTTP requests processed out-of-order (bsc#1228549) - CVE-2024-41810: Fixed reflected XSS via HTML injection in redirect response (bsc#1228552)
first Aug 12, 2024 -
High max 7.5SUSE-SU-2023:3796-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).
first Sep 26, 2023 -
High max 7.1openSUSE-SU-2024:12240-1 1 CVE
cosign-1.10.1-1.1 on GA media
These are all security issues fixed in the cosign-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2023:2110-1 7 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU) Security fixes: - CVE-2023-21930: Fixed AES support (bsc#1210628). - CVE-2023-21937: Fixed String platform support (bsc#1210631). - CVE-2023-21938:…
first May 5, 2023 -
High max 8.8SUSE-SU-2023:0112-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 102.7.0 ESR (bsc#1207119): - CVE-2022-46871: Updated an out of date library (libusrsctp) which contained several vulnerabilities. - CVE-2023-23598: Fixed an arbitrary file read fr…
first Jan 20, 2023 -
High max 8.0openSUSE-SU-2025:15011-1 1 CVE
epiphany-48.1-1.1 on GA media
These are all security issues fixed in the epiphany-48.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation (bsc#1255497). - CVE-2025-43501: pro…
first Dec 26, 2025 -
High max 7.8SUSE-SU-2022:2248-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
first Jul 4, 2022 -
High max 8.3SUSE-SU-2025:0421-1 9 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise messages. (bsc#1218879) - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID o…
first Feb 11, 2025 -
High max 8.8openSUSE-SU-2025:14715-1 24 CVEs
dovecot24-2.4.0-1.1 on GA media
These are all security issues fixed in the dovecot24-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 30, 2025 -
High max 7.8SUSE-SU-2025:03497-1 1 CVE
Security update for the Linux Kernel (Live Patch 69 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_261 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).
first Oct 8, 2025 -
High max 8.8SUSE-SU-2025:0853-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033). - CVE-2024-53135: KVM: VMX: Bury Int…
first Mar 13, 2025 -
High max 7.5openSUSE-SU-2024:10693-1 9 CVEs
containerd-1.4.8-2.2 on GA media
These are all security issues fixed in the containerd-1.4.8-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…
first Dec 14, 2023 -
High max 8.3SUSE-SU-2020:2861-1 7 CVEs
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk fixes the following issues: - java-1_7_0-openjdk was updated to 2.6.23 (July 2020 CPU, bsc#1174157) - JDK-8028431, CVE-2020-14579: NullPointerException in - DerValue.equals(DerValue) - JDK-8028591, CVE-2020-14578: NegativeAr…
first Oct 5, 2020 -
High max 7.3SUSE-SU-2025:02224-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
first Jul 4, 2025 -
High max 7.5SUSE-SU-2022:0040-1 1 CVE
Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container fixes the following issues: - CVE-2021-43565: Fixes a vulnerability in the golang.org/x/crypto/ssh package which …
first Jan 10, 2022 -
High max 7.5SUSE-SU-2015:1556-1 1 CVE
Security update for net-snmp
The following issues have been fixed within this update: * fix btrfs output inside HOST-RESOURCES-MIB::hrStorageDescr. (bsc#909479) * fix an incompletely initialized vulnerability within the snmp_pdu_parse() function of snmp_api.c. (bsc#940188, CVE-2015-5621)…
first Aug 21, 2015 -
High max 7.8SUSE-SU-2024:0240-1 1 CVE
Security update for jasper
This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder (bsc#1218802).
first Jan 26, 2024 -
High max 7.5openSUSE-SU-2024:13708-1 1 CVE
helm-3.14.2-1.1 on GA media
These are all security issues fixed in the helm-3.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2024:1578-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100)
first May 9, 2024