12,602 results · Clear filters · Feed
-
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…
first Mar 8, 2022 -
High max 7.4SUSE-SU-2021:2829-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following security issue: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attac…
first Aug 24, 2021 -
High max 8.6SUSE-SU-2024:2890-1 3 CVEs
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: - CVE-2023-51714: Fixed an incorrect integer overflow check (bsc#1218413). - CVE-2024-39936: Fixed information leakage due to process HTTP2 communication before encrypted() can be responded to (bsc#122…
first Aug 13, 2024 -
High max 7.5SUSE-SU-2023:0311-1 4 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4450:…
first Feb 7, 2023 -
High max 7.4SUSE-SU-2019:2891-2 2 CVEs
Security update for python-ecdsa
This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient ch…
first Jul 8, 2020 -
High max 8.8SUSE-SU-2019:0481-1 1 CVE
Security update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql
This update for python-amqp, python-oslo.messaging, python-ovs, python-paramiko, python-psql2mysql fixes the following issues: Security issue fixed for python-paramiko: - CVE-2018-1000805: Fixed an authentication bypass (bnc#1111151). Non-security issues fixe…
first Feb 25, 2019 -
High max 7.5SUSE-SU-2023:3348-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: - Update to 14.9 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)
first Aug 17, 2023 -
High max 7.8SUSE-SU-2023:0231-1 1 CVE
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_105 fixes one issue. The following security issue was fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204167…
first Feb 2, 2023 -
High max 8.1SUSE-SU-2016:0699-1 1 CVE
Security update for bsh2
This update for bsh2 fixes the following issue: - CVE-2016-2510: An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted source. Plea…
first Mar 9, 2016 -
High max 7.6SUSE-SU-2021:1885-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - CVE-2021-30465: Fixed a symlink-exchange attack (bsc#1185405).
first Jun 8, 2021 -
High max 8.1SUSE-SU-2022:2583-1 1 CVE
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: - CVE-2022-2385: Fixed AccessKeyID validation bypass (bsc#1201395).
first Jul 29, 2022 -
High max 7.8SUSE-SU-2023:3894-1 4 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#…
first Sep 29, 2023 -
High max 7.8SUSE-SU-2024:3788-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565).
first Oct 30, 2024 -
High max 7.8SUSE-SU-2024:0252-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) - CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
first Jan 26, 2024 -
High max 7.5SUSE-SU-2024:0209-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Security fixes: - CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing. (bsc#1217649) Other fixes: - Streamline how patches are handled in the spec file of the package
first Jan 24, 2024 -
High max 8.6SUSE-SU-2022:3596-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677). - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).
first Oct 17, 2022 -
High max 8.8
libvpx-devel-1.13.0-2.1 on GA media
These are all security issues fixed in the libvpx-devel-1.13.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:14320-1 2 CVEs
containerd-1.7.21-1.1 on GA media
These are all security issues fixed in the containerd-1.7.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 6, 2024 -
High max 7.8SUSE-SU-2024:2776-1 3 CVEs
Security update for dri3proto, presentproto, wayland-protocols, xwayland
This update for dri3proto, presentproto, wayland-protocols, xwayland fixes the following issues: Changes in presentproto: * update to version 1.4 (patch generated from xorgproto-2024.1 sources) Changes in wayland-protocols: - Update to version 1.36: * xdg-dia…
first Aug 6, 2024 -
High max 7.0SUSE-SU-2018:2348-1 2 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_88 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 7.8SUSE-SU-2023:1621-1 2 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…
first Mar 28, 2023 -
High max 7.8SUSE-SU-2024:0727-1 3 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalat…
first Feb 29, 2024 -
High max 8.0SUSE-SU-2022:4574-1 36 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial of s…
first Dec 19, 2022 -
High max 7.2openSUSE-SU-2024:12930-1 2 CVEs
postgresql12-12.15-1.1 on GA media
These are all security issues fixed in the postgresql12-12.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:2291-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). - Update to 3.10.5: - Core and Builtins - gh-93418: Fixed an assert where an f-string has an equal sign '=' following an expre…
first Jul 6, 2022 -
High max 7.8openSUSE-SU-2024:12649-1 1 CVE
binwalk-2.3.3-2.1 on GA media
These are all security issues fixed in the binwalk-2.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:1852-1 4 CVEs
Security update for aubio
This update for aubio fixes the following issues: - CVE-2019-1010224: Fixed a denial of service (boo#1142435). This update was imported from the openSUSE:Leap:15.0:Update update project.
first Aug 13, 2019 -
High max 8.1SUSE-SU-2023:0345-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: cobbler: - Improve Cobbler performance with item cache and threadpool (bsc#1205489) - Skip collections that are inconsistent instead of crashing (bsc#1205749) - Add new 'cobbler-tests-containers' subpackage which contai…
first Feb 10, 2023 -
High max 8.6SUSE-SU-2025:4109-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
first Nov 14, 2025 -
High max 7.1openSUSE-SU-2020:1922-1 4 CVEs
Security update for python-waitress
This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2…
first Nov 14, 2020 -
High max 7.3SUSE-SU-2025:1164-1 1 CVE
Security update for giflib
This update for giflib fixes the following issues: - CVE-2025-31344: Fixed a buffer overflow in function DumpScreen2RGB (bsc#1240416)
first Apr 8, 2025 -
High max 7.8
Security update for flash-player
Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 (boo#984695): * APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4…
first Jun 17, 2016 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox 60.7.1esr was released to address MFSA 2019-18 (boo#1138614) * CVE-2019-11707: Fixed a type confusion in Array.pop
first Jun 23, 2019 -
High max 7.8
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…
first Apr 22, 2024 -
High max 7.8SUSE-SU-2024:2453-1 3 CVEs
Security update for libX11
This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684). - CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685). - CVE-2023…
first Jul 12, 2024 -
High max 8.8SUSE-SU-2023:4651-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 (bsc#1217210): - CVE-2023-41983: Processing web content may lead to a denial-of-service. - CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already pr…
first Dec 6, 2023 -
High max 8.8SUSE-SU-2022:1050-1 4 CVEs
Security update for SUSE Manager 4.2.5.1 Release Notes
This update for SUSE Manager 4.2.5.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.5.1 * CVEs fixed CVE-2022-22934, CVE-2022-22935, CVE-2022-22936, CVE-2022-22941 * Bugs mentioned bsc#1197417
first Mar 30, 2022 -
High max 8.8openSUSE-SU-2024:12920-1 12 CVEs
MozillaFirefox-113.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-113.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.3SUSE-SU-2018:2450-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5391: A remote attacker even with relatively low bandwidth could have caused lots of CPU usage by triggering the…
first Aug 20, 2018 -
High max 8.8openSUSE-SU-2019:1212-1 1 CVE
Security update for dovecot23
This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation (bsc#1130116). This update was imported from the SUSE:SLE-15:Update …
first Apr 16, 2019