12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2022:0854-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
first Mar 15, 2022 -
High max 8.8SUSE-SU-2019:14100-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wit…
first Jun 21, 2019 -
High max 7.8
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1227371). - CVE-2024-53104: media: uvcvideo: Skip parsing fra…
first Feb 24, 2025 -
High max 7.5SUSE-SU-2018:3282-1 2 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Wireshark was updated to 2.4.10 (bsc#1111647). Following security issues were fixed: - CVE-2018-18227: MS-WSP dissector crash (wnpa-sec-2018-47) - CVE-2018-12086: OpcUA dissector crash (wnpa-sec-2018-50) F…
first Oct 22, 2018 -
High max 8.8SUSE-SU-2022:2524-1 3 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 (bsc#1201221): - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupt…
first Jul 22, 2022 -
High max 7.2SUSE-SU-2020:3614-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: - CVE-2020-16125: Fixed a privilege escalation (bsc#1178150).
first Dec 3, 2020 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to exec…
first Nov 2, 2023 -
High max 7.5openSUSE-SU-2019:1111-1 2 CVEs
Security update for openwsman
This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection()…
first Apr 2, 2019 -
High max 7.5SUSE-SU-2020:1943-1 2 CVEs
Security update for xrdp
This update for xrdp provides the following fix: - CVE-2020-4044: xrdp-sesman can be crashed remotely over port 3350 (bsc#1173580). - Fixed an issue where xrdp-sesman could not restart (bsc#1155952). - Fixed an issue where xrdp could not start due to an error…
first Jul 17, 2020 -
High max 7.8SUSE-SU-2024:4206-1 4 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 5, 2024 -
High max 7.5SUSE-SU-2021:1190-1 3 CVEs
Security update for clamav
This update for clamav fixes the following issues: - CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532) - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533) - CVE-2021-1405: Fix for mail parser NULL-dereference…
first Apr 14, 2021 -
High max 7.5SUSE-SU-2023:4551-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230) * Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338) * CVE-2023-5721: Que…
first Nov 24, 2023 -
High max 7.5SUSE-SU-2023:0735-1 5 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: - Improvements to go1.x packaging spec: * On Tumbleweed bootstrap with current default gcc13 and gccgo118 * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap using go1.x package (%bcond_without gc…
first Mar 14, 2023 -
High max 7.5openSUSE-SU-2021:0911-1 1 CVE
Security update for xstream
This update for xstream fixes the following issues: Upgrade to 1.4.17 - CVE-2021-29505: Fixed potential code execution when unmarshalling with XStream instances using an uninitialized security framework (bsc#1186651) This update was imported from the SUSE:SLE…
first Jun 24, 2021 -
High max 7.5SUSE-SU-2019:3176-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: - CVE-2019-15961: Fixed a denial of service which might occur when scanning a specially crafted email file as (bsc#1157763).
first Dec 5, 2019 -
High max 8.8SUSE-SU-2023:3247-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR audio buffers. (bsc#1213751) - CVE-2023-38104: Fixed an integer overflow when calculation audio packet size . (bs…
first Aug 8, 2023 -
High max 7.5
Security update for kubernetes1.28
This update for kubernetes1.28 fixes the following issues: Update kubernetes to version 1.28.13: - CVE-2024-24786: Fixed infinite loop in protojson.Unmarshal in golang-protobuf (bsc#1229867) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid…
first Sep 3, 2024 -
High max 7.5SUSE-SU-2024:2944-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2023-31315: Fixed validation in a model specific register (MSR) that lead to modification of SMM configuration by malicious program with ring0 access (bsc#1229069)
first Aug 16, 2024 -
High max 7.3SUSE-SU-2025:02208-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).
first Jul 2, 2025 -
High max 7.4SUSE-SU-2024:3140-1 6 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: - Update to OpenJDK 8u422 build 05 with OpenJ9 0.46.0 virtual machine - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052) - CVE-2024-21145: Fixed an out-of-bound…
first Sep 4, 2024 -
High max 7.5SUSE-SU-2024:3106-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks (bsc#1229465) Other fixes: - FIPS: Deny SHA-1 signature verification in FIPS provider (bsc#1221365). - FIPS: RSA keygen PCT requirements. - FIP…
first Sep 3, 2024 -
High max 7.5openSUSE-SU-2024:13894-1 1 CVE
ffmpeg-4-4.4.4-7.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.4-7.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7SUSE-SU-2020:0429-1 6 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: nodejs12 was updated to version 12.15.0. Security issues fixed: - CVE-2019-15604: Fixed a remotely triggerable assertion in the TLS server via a crafted certificate string (CVE-2019-15604, bsc#1163104). - C…
first Feb 20, 2020 -
High max 8.3SUSE-SU-2023:4932-1 2 CVEs
Security update for libreoffice
This update for libreoffice fixes the following issues: - CVE-2023-6186: Fixed link targets allow arbitrary script execution (bsc#1217578). - CVE-2023-6185: Fixed Improper input validation enabling arbitrary Gstreamer pipeline injection (bsc#1217577).
first Dec 20, 2023 -
High max 7.5openSUSE-SU-2024:12368-1 1 CVE
libunbound8-1.16.3-1.1 on GA media
These are all security issues fixed in the libunbound8-1.16.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1openSUSE-SU-2020:0409-1 1 CVE
Security update for python-mysql-connector-python
This update for python-mysql-connector-python fixes the following issues: python-mysql-connector-python was updated to 8.0.19 (boo#1122204 - CVE-2019-2435): - WL#13531: Remove xplugin namespace - WL#13372: DNS SRV support - WL#12738: Specify TLS ciphers to be…
first Mar 29, 2020 -
High max 7.3SUSE-SU-2023:1903-1 3 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana version update from 8.5.20 to 8.5.22: - Security issues fixed: * CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645) * CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821) * CVE-…
first Apr 19, 2023 -
High max 7.9openSUSE-SU-2025:14946-1 1 CVE
libmodsecurity3-3.0.14-1.1 on GA media
These are all security issues fixed in the libmodsecurity3-3.0.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 31, 2025 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out”…
first Aug 15, 2022 -
High max 7.8SUSE-SU-2023:2830-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/discon…
first Jul 14, 2023 -
High max 7.5openSUSE-SU-2024:13841-1 1 CVE
kubernetes1.29-apiserver-1.29.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:0111-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 102.7.0 ESR (bsc#1207119): - CVE-2022-46871: Updated an out of date library (libusrsctp) which contained several vulnerabilities. - CVE-2023-23598: Fixed an arbitrary file read fr…
first Jan 20, 2023 -
High max 7.9
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_112 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-1078: Fixed a heap out-of-boun…
first Mar 27, 2023 -
High max 7.0SUSE-SU-2023:0009-1 1 CVE
Security update for saphanabootstrap-formula
This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 * revert changes to spec file to re-enable SLES RPM builds * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990) - Versi…
first Jan 2, 2023 -
High max 7.5SUSE-SU-2025:02261-1 3 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: - Fixed refactor CGI servlet to access resources via WebResources (bsc#1243815). - Fixed limits the total number of parts in a multi-part request and limits the size of the headers provided with each part (…
first Jul 9, 2025 -
High max 8.6SUSE-SU-2024:1550-1 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
first May 7, 2024 -
High max 8.8SUSE-SU-2025:01746-1 9 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.48.2. Security issues fixed: - CVE-2025-31205: lack of checks may lead to cross-origin data exfiltration through a malicious website (bsc#1243282). - CVE-2025-31204: improper memory h…
first May 29, 2025 -
High max 7.2SUSE-SU-2019:2600-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP3)
This update for the Linux Kernel 4.4.178-94_91 fixes several issues. The following security issues were fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer desc…
first Oct 8, 2019 -
High max 7.8SUSE-SU-2025:02707-1 1 CVE
Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_211 fixes one issue. The following security issue was fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
first Aug 5, 2025 -
High max 7.8SUSE-SU-2023:3748-1 2 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_173 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-3812: Fixed an out-of-bounds…
first Sep 25, 2023