12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2023:0715-1 5 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodejs…
first Mar 13, 2023 -
High max 7.3openSUSE-SU-2019:2223-1 7 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: Security issues fixed: - CVE-2019-3835: Fixed an unauthorized file system access caused by an available superexec operator. (bsc#1129180) - CVE-2019-3839: Fixed an unauthorized file system access caused …
first Sep 30, 2019 -
High max 7.5SUSE-SU-2021:3992-1 4 CVEs
Security update for the Linux RT Kernel
The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened …
first Dec 10, 2021 -
High max 8.0SUSE-SU-2021:0756-1 1 CVE
Security update for git
This update for git fixes the following issues: - On case-insensitive filesystems, with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code durin…
first Mar 9, 2021 -
High max 7.8SUSE-SU-2024:0351-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_59 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 6, 2024 -
High max 7.5
Security update for php74-pear
This update for php74-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
first Sep 9, 2021 -
High max 8.8SUSE-SU-2024:3170-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 16.4 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 9, 2024 -
High max 8.1SUSE-SU-2023:0373-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.4 * SUSE Liberty Linux 9 support as client * SUSE Linux Enterprise Micro support as client * Indications for systems requiring reboot or with a scheduled reboot * …
first Feb 10, 2023 -
High max 7.8SUSE-SU-2023:4208-1 1 CVE
Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_162 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440).
first Oct 26, 2023 -
High max 7.8SUSE-SU-2023:2043-1 3 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and inform…
first Apr 26, 2023 -
High max 9.8SUSE-SU-2024:2035-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
first Jun 17, 2024 -
High max 7.5SUSE-SU-2024:1874-1 1 CVE
Security update for Java
This update for Java fixes thefollowing issues: apiguardian was updated to vesion 1.1.2: - Added LICENSE/NOTICE to the generated jar - Allow @API to be declared at the package level - Explain usage of Status.DEPRECATED - Include OSGi metadata in manifest asse…
first May 31, 2024 -
High max 7.8SUSE-SU-2024:4210-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata bloc…
first Dec 5, 2024 -
High max 7.1SUSE-SU-2022:2717-1 1 CVE
Security update for ncurses
This update for ncurses fixes the following issues: - CVE-2022-29458: Fixed segfaulting out-of-bounds read in convert_strings in tinfo/read_entry.c (bsc#1198627).
first Aug 9, 2022 -
High max 7.3openSUSE-SU-2019:2534-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275). This update was imported from the SUSE:…
first Nov 20, 2019 -
High max 7.1openSUSE-SU-2024:14389-1 1 CVE
liboath-devel-2.6.11.12-1.1 on GA media
These are all security issues fixed in the liboath-devel-2.6.11.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2024 -
High max 8.8openSUSE-SU-2024:14350-1 1 CVE
postgresql14-14.13-1.1 on GA media
These are all security issues fixed in the postgresql14-14.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 19, 2024 -
High max 8.2SUSE-SU-2023:2146-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1872:Fixed a use after free vulnerability in the io_uring subsystem, which could lead to local privilege escalatio…
first May 9, 2023 -
High max 7.5SUSE-SU-2024:2994-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460, bsc#1228574) - CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461, bsc#1228575)
first Aug 21, 2024 -
High max 8.8SUSE-SU-2021:14729-1 9 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2021-3537: NULL pointer dereference in valid.c:xmlValidBuildAContentModel (bsc#1185698) - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408). …
first May 19, 2021 -
High max 7.5openSUSE-SU-2024:10204-1 5 CVEs
libsnmp30-32bit-5.7.3-8.4 on GA media
These are all security issues fixed in the libsnmp30-32bit-5.7.3-8.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2022:0108-1 12 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods…
first Jan 18, 2022 -
High max 7.5SUSE-SU-2024:3214-1 3 CVEs
Security update for go1.23
This update for go1.23 fixes the following issues: - Update go v1.23.1 - CVE-2024-34155: Fixed stack exhaustion in all Parse* functions. (bsc#1230252) - CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode. (bsc#1230253) - CVE-2024-34158: Fixed stack exha…
first Sep 12, 2024 -
High max 7.5openSUSE-SU-2024:13075-1 7 CVEs
java-11-openjdk-11.0.20.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:1273-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes one issue. The following security issue was fixed: - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).
first Apr 12, 2024 -
High max 7.5SUSE-SU-2022:3061-1 2 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_34 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's…
first Sep 6, 2022 -
High max 7.5SUSE-SU-2019:2260-1 8 CVEs
Security update for nodejs8
This update for nodejs8 to version 8.16.1 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial …
first Sep 2, 2019 -
High max 7.8SUSE-SU-2023:4032-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensi…
first Oct 10, 2023 -
High max 7.5openSUSE-SU-2024:12081-1 4 CVEs
bind-9.18.2-1.1 on GA media
These are all security issues fixed in the bind-9.18.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2019:2067-1 1 CVE
Security update for osc
This update for osc to version 0.165.4 fixes the following issues: Security issue fixed: - CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack (bsc#1142518). Non-security issues fixed: - support different token operati…
first Aug 6, 2019 -
High max 7.8SUSE-SU-2023:1981-1 1 CVE
Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_150 fixes one issue. The following security issue was fixed: - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
first Apr 25, 2023 -
High max 7.5openSUSE-SU-2024:12864-1 1 CVE
wasm-pack-0.11.0~0-2.1 on GA media
These are all security issues fixed in the wasm-pack-0.11.0~0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:4333-1 1 CVE
Security update for gegl
This update for gegl fixes the following issues: - CVE-2025-10921: Fixed HDR file parsing heap-based buffer overflow that can lead to remote code execution. (bsc#1250496)
first Dec 9, 2025 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_23 fixes several issues. The following security issues were fixed: - CVE-2023-0386: Fixed privileges escalation for low-privileged users in the OverlayFS subsystem (bsc#1210499). - CVE-2023-2162: Fixed an use…
first Jun 5, 2023 -
High max 7.8SUSE-RU-2021:2780-1 1 CVE
Recommended update for cpio
This update for cpio fixes the following issues: - A regression in the previous update could lead to crashes (bsc#1189465)
first Aug 19, 2021 -
High max 7.8SUSE-SU-2025:02031-1 1 CVE
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).
first Jun 20, 2025 -
High max 7.8SUSE-SU-2024:3856-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_61 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-40954: net: do not leave a dangling sk poin…
first Oct 31, 2024 -
High max 7.5openSUSE-SU-2021:0688-1 1 CVE
Security update for syncthing
This update for syncthing fixes the following issues: Update to 1.15.0/1.15.1 * This release fixes a vulnerability where Syncthing and the relay server can crash due to malformed relay protocol messages (CVE-2021-21404); see GHSA-x462-89pf-6r5h. (boo#1184428)…
first May 8, 2021 -
High max 7.5SUSE-SU-2023:4059-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) - CVE-2023-42669: Fixed a bug in 'rpcecho' development server which allows Denial of Service via sleep() …
first Oct 12, 2023 -
High max 8.8SUSE-SU-2019:3381-1 48 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19767: Fixed ext4_expand_extra_isize mishandles, as demonstrated by use-after-free errors in __ext4_expand_extra_isize…
first Dec 23, 2019