12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2016:1204-1 1 CVE
Security update for libxml2
This update for libxml2 fixes two security issues: - libxml2 limits the number of recursions an XML document can contain so to protect against the 'Billion Laughs' denial-of-service attack. Unfortunately, the underlying counter was not incremented properly in…
first May 3, 2016 -
High max 7.8SUSE-SU-2024:3617-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606). - CVE-2024-40902: jfs: xattr:…
first Oct 14, 2024 -
High max 7.5SUSE-SU-2023:4622-1 6 CVEs
Security update for libqt4
This update for libqt4 fixes the following issues: - CVE-2021-45930: Fix out of-bounds write when parsing path nodes (bsc#1196654). - CVE-2023-32573: Fix missing initialization of QSvgFont unitsPerEm (bsc#1211298). - CVE-2023-32763: Fix potential buffer when …
first Nov 30, 2023 -
High max 7.8SUSE-SU-2023:2735-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_21 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can …
first Jun 29, 2023 -
High max 7.8SUSE-SU-2024:0212-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) - CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
first Jan 24, 2024 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116 ). - CVE-2021-33909: Ex…
first Jul 21, 2021 -
High max 7.8SUSE-SU-2023:2721-1 3 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_33 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can …
first Jun 29, 2023 -
High max 8.3SUSE-SU-2020:1572-1 13 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 (April 2020 CPU, bsc#1169511). Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of servi…
first Jun 9, 2020 -
High max 7.5openSUSE-SU-2024:12687-1 4 CVEs
libopenssl-1_0_0-devel-1.0.2u-12.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-12.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:0236-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) - CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
first Jan 25, 2024 -
High max 7.8SUSE-SU-2020:0558-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensi…
first Mar 2, 2020 -
High max 8.8SUSE-SU-2018:2298-1 20 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox to the 52.9 ESR release fixes the following issues: These security issues were fixed: - Firefox ESR 52.9: - CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 (bsc#1098998). - CVE-2018-1…
first Aug 10, 2018 -
High max 8.2SUSE-SU-2024:1097-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_g…
first Apr 3, 2024 -
High max 7.5SUSE-SU-2022:14904-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).
first Mar 4, 2022 -
High max 7.8SUSE-SU-2025:1275-1 3 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238788). - CVE-2022-49564: crypto: qat - add param check for DH (bsc#1238790). …
first Apr 15, 2025 -
High max 7.5SUSE-SU-2024:1788-1 3 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-38709: Fixed faulty input validation inside the HTTP response splitting code (bsc#1222330). - CVE-2024-24795: Fixed handling of malicious HTTP splitting response headers in multiple modules (bsc#1…
first May 27, 2024 -
High max 8.3
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_72 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…
first Aug 2, 2021 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: - Opera was updated to version 75.0.3969.171 (boo#1184256) CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199, CVE-2021-21191, CVE-2021-21192, CVE-2021-21193
first Apr 22, 2021 -
High max 7.5openSUSE-SU-2019:1754-1 1 CVE
Security update for python-requests
This update for python-requests to version 2.20.1 fixes the following issues: Security issue fixed: - CVE-2018-18074: Fixed an information disclosure vulnerability of the HTTP Authorization header (bsc#1111622). This update was imported from the SUSE:SLE-15-S…
first Jul 20, 2019 -
High max 8.8openSUSE-SU-2024:13464-1 1 CVE
cmake-3.27.8-1.1 on GA media
These are all security issues fixed in the cmake-3.27.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2024:2275-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2024-6387: Fixed race condition in a signal handler (bsc#1226642)
first Jul 3, 2024 -
High max 7.8openSUSE-SU-2022:0016-1 1 CVE
Security update for watchman
This update for watchman fixes the following issues: - ship README.suse that explains how to use the template systemd units - add user writable bit for systemd service and socket files - properly handle state directory creation in /run/watchman/$USER-state. T…
first Jan 17, 2022 -
High max 7.5SUSE-SU-2024:2910-1 3 CVEs
Security update for 389-ds
This update for 389-ds fixes the following issues: Security issues fixed: - CVE-2024-3657: Fixed potential denial of service via specially crafted kerberos AS-REQ request (bsc#1225512) - CVE-2024-5953: Fixed a denial of service caused by malformed userPasswor…
first Aug 14, 2024 -
High max 8.8SUSE-SU-2026:0169-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.19 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-4020…
first Jan 19, 2026 -
High max 7.5SUSE-RU-2019:2677-1 1 CVE
Recommended update for e2fsprogs
This update for e2fsprogs fixes the following issues: Security issue fixed: - CVE-2019-5094: Fixed an arbitrary code execution via specially crafted ext4 file systems. (bsc#1152101) Non-security issue fixed: - libext2fs: Call fsync(2) to clear stale errors fo…
first Oct 15, 2019 -
High max 7.5openSUSE-SU-2024:12201-1 3 CVEs
java-13-openjdk-13.0.12.0-1.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2019:3308-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an arbitrary command execution (bsc#1158095).
first Dec 16, 2019 -
High max 7.8SUSE-SU-2024:1162-1 3 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2024-0450: Fixed 'quoted-overlap' in zipfile module is python310 (bsc#1221854) - CVE-2023-52425: Fixed denial of service caused by processing large tokens in expat module in python310 (bsc#1219559) -…
first Apr 8, 2024 -
High max 7.0SUSE-SU-2024:2633-1 1 CVE
Security update for gtk3
This update for gtk3 fixes the following issues: - CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)
first Jul 30, 2024 -
High max 7.1SUSE-SU-2024:0166-1 3 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache (bsc#1192760). - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#…
first Jan 19, 2024 -
High max 7.8SUSE-SU-2023:0022-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.10: - Add option to turn off system token support (bsc#1205089) - Update the `last_seen_at` column on zypper service refresh - Do not retry to import non-existing files in air-gapped m…
first Jan 3, 2023 -
High max 8.0openSUSE-SU-2024:13671-1 1 CVE
postgresql15-15.6-1.1 on GA media
These are all security issues fixed in the postgresql15-15.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0SUSE-SU-2024:2734-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 5, 2024 -
High max 7.5SUSE-SU-2021:4115-1 1 CVE
Security update for log4j
This update for log4j fixes the following issue: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]
first Dec 17, 2021 -
High max 7.5SUSE-SU-2016:1966-1 1 CVE
Security update for several openstack-components
This update provides the latest code from OpenStack Liberty for openstack-designate, -ironic, -neutron-vpnaas, -nova-docker, -sahara, -tempest and -trove. Additionally the following security issue has been fixed: openstack-ironic: - Mask password on agent loo…
first Aug 5, 2016 -
High max 7.1SUSE-SU-2023:4714-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).
first Dec 11, 2023 -
High max 7.5SUSE-SU-2024:2064-1 1 CVE
Security update for python-Authlib
This update for python-Authlib fixes the following issues: - Update to version 1.3.1 - CVE-2024-37568: Fixed algorithm confusion with asymmetric public keys. (bsc#1226138)
first Jun 18, 2024 -
High max 7.5SUSE-SU-2023:0518-1 1 CVE
Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-4_2 fixes the following issues: - CVE-2022-44566: Fixed a potential denial of service due to an inefficient comparison between integer and numeric values (bsc#1207450).
first Feb 24, 2023 -
High max 7.8openSUSE-SU-2020:1655-1 12 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25212: Fixed nfs getxattr kernel panic and memory overflow that could lead to crashes or privilege escalations (bsc#1176381)…
first Oct 11, 2020 -
High max 8.7SUSE-SU-2024:3719-1 1 CVE
Security update for python-starlette
This update for python-starlette fixes the following issues: - CVE-2024-47874: Fixed possible DoS via parts size in multipart/form-data requests (bsc#1231689)
first Oct 18, 2024