12,602 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:01908-1 3 CVEs
Security update for the Linux Kernel (Live Patch 66 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_250 fixes several issues. The following security issues were fixed: - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238…
first Jun 11, 2025 -
High max 7.7SUSE-SU-2019:14230-1 1 CVE
Security update for mailman
This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root (bsc#1154328).
first Nov 25, 2019 -
High max 7.5SUSE-SU-2024:1591-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain (bsc#1223979).
first May 10, 2024 -
High max 8.1SUSE-SU-2022:2333-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
first Jul 8, 2022 -
High max 7.5SUSE-SU-2019:3056-1 5 CVEs
Security update for strongswan
This update for strongswan fixes the following issues: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket…
first Nov 25, 2019 -
High max 7.4openSUSE-SU-2024:14563-1 1 CVE
pam-1.7.0-2.1 on GA media
These are all security issues fixed in the pam-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 8, 2024 -
High max 8.1openSUSE-SU-2025:15001-1 1 CVE
forgejo-10.0.3-2.1 on GA media
These are all security issues fixed in the forgejo-10.0.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2025 -
High max 7.5SUSE-SU-2023:1775-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283).
first Apr 5, 2023 -
High max 7.5openSUSE-SU-2024:12810-1 3 CVEs
kubernetes1.25-apiserver-1.25.7-1.1 on GA media
These are all security issues fixed in the kubernetes1.25-apiserver-1.25.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2025:14852-1 10 CVEs
firefox-esr-128.8.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 4, 2025 -
High max 7.5openSUSE-SU-2021:1468-1 1 CVE
Security update for rubygem-activerecord-5_1
This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169). This update was imported from the SUSE:SLE-15:Update update project.
first Nov 12, 2021 -
High max 7.5SUSE-SU-2025:02329-1 2 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.23 - CVE-2025-46727: Fixed Unbounded-Parameter DoS in Rack:QueryParser. (bsc#1242893) - CVE-2025-32441: Fixed a bug where simultaneous rack requests can restore a deleted rack sessio…
first Jul 16, 2025 -
High max 8.6openSUSE-SU-2024:14049-1 8 CVEs
MozillaThunderbird-115.12.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2024 -
High max 7.5openSUSE-SU-2021:1031-1 1 CVE
Security update for jdom2
This update for jdom2 fixes the following issues: - CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446) This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Jul 13, 2021 -
High max 7.3openSUSE-SU-2024:14377-1 1 CVE
xen-4.19.0_04-1.1 on GA media
These are all security issues fixed in the xen-4.19.0_04-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 1, 2024 -
High max 7.5openSUSE-SU-2021:1490-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of servic…
first Nov 19, 2021 -
High max 7.5openSUSE-SU-2022:10126-1 2 CVEs
Security update for mupdf
This update for mupdf fixes the following issues: mupdf was updated to 1.20.3: * return error, not success when unable to lock native device resource. * Bug 705620: Start journal operation instead of pushing local xref. * Ensure AndroidDrawDevice is destroyed…
first Sep 17, 2022 -
High max 7.5SUSE-SU-2021:2890-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 (jsc#SLE-19970): Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled…
first Aug 31, 2021 -
High max 7.8SUSE-SU-2026:0313-1 2 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-14422: Fixed RCE vulnerability due to PNM file parsing integer overflow (bsc#1255293) - CVE-2025-14425: Fixed RCE vulnerability due to JP2 file parsing heap-based buffer overflow (bsc#1255296)
first Jan 28, 2026 -
High max 8.8SUSE-SU-2022:3480-1 3 CVEs
Security update for buildah
This update for buildah fixes the following issues: - Updated to version 1.26.0: - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities (bsc#1197870). - CVE-2021-20206: Fixed an issue i…
first Sep 30, 2022 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…
first Dec 14, 2023 -
High max 7.8
Security update for ghostscript
This update for ghostscript fixes the following security vulnerabilities: - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) - CVE-2016-9601: An integer overflow in the bundle…
first May 24, 2017 -
High max 7.5SUSE-SU-2025:1510-1 14 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) - CVE-2025-32051: F…
first May 7, 2025 -
High max 7.5
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - Updated to version 9.4.53.v20231009: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - CVE-2023-36478: Fixed an integer overflow in the HTTP/2 HPACK…
first Oct 26, 2023 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …
first Jan 26, 2021 -
High max 8.8SUSE-SU-2023:4440-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278) - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
first Nov 14, 2023 -
High max 7.4SUSE-SU-2025:02170-1 1 CVE
Security update for yelp
This update for yelp fixes the following issues: - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).
first Jun 30, 2025 -
High max 8.6SUSE-SU-2025:0065-1 7 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed a stack-buffer overflow in vorbis_handle_identification_packet. (bsc#1234415) - CVE-2024-47835: Fixed a NULL-pointer dereference in LRC subtitle parser. (bsc#1234450) -…
first Jan 10, 2025 -
High max 7.5SUSE-SU-2023:4189-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163) - CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853)
first Oct 25, 2023 -
High max 7.5SUSE-SU-2022:0734-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-21712: Fixed secret exposure in cross-origin redirects (bsc#1195667, GHSA-92x2-jw7w-xvvx) from
first Mar 4, 2022 -
High max 8.2SUSE-SU-2024:2109-1 3 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-52628: Fixed 4-byte s…
first Jun 21, 2024 -
High max 7.3openSUSE-SU-2024:11195-1 5 CVEs
libprocps8-3.3.17-5.2 on GA media
These are all security issues fixed in the libprocps8-3.3.17-5.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:3672-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-30640: Escape parameters in JNDI Realm queries (bsc#1188279). - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients (bsc#1188278). - CVE-2021-41079: Fixed a denial of servic…
first Nov 16, 2021 -
High max 8.1openSUSE-SU-2023:0232-1 1 CVE
Security update for python-mitmproxy
This update for python-mitmproxy fixes the following issues: - CVE-2021-39214: Fixed HTTP smuggling attacks (boo#1190603)
first Aug 20, 2023 -
High max 7.5SUSE-SU-2021:0115-1 1 CVE
Security update for rubygem-archive-tar-minitar
This update for rubygem-archive-tar-minitar fixes one security issue: - CVE-2016-10173: Archives with files containing '..' in the extracted filename could have been used to overwrite arbitrary files (bsc#1021740).
first Jan 13, 2021 -
High max 8.0SUSE-SU-2019:1581-1 5 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15)
This update for the Linux Kernel 4.12.14-25_22 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while con…
first Jun 20, 2019 -
High max 8.8SUSE-SU-2022:2154-1 1 CVE
Security update for salt
This update for salt fixes the following issues: - CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could lead to authentication bypass when using PAM (bsc#1200566)
first Jun 22, 2022 -
High max 7.3SUSE-SU-2018:2380-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read dat…
first Aug 16, 2018 -
High max 7.5SUSE-SU-2025:3997-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.17+10 (October 2025 CPU): - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#12…
first Nov 7, 2025 -
High max 8.6SUSE-SU-2020:2914-1 12 CVEs
Security update for bind
This update for bind fixes the following issues: BIND was upgraded to version 9.16.6: Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the …
first Oct 13, 2020