12,602 results · Clear filters · Feed
-
High max 8.8SUSE-RU-2022:1391-1 4 CVEs
Recommended update for salt
This update for salt fixes the following issues: - Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil (bsc#1197533) - Prevent data pollution between actions processed at the same time (bsc#1197637) - Fix salt-ssh opts…
first Apr 25, 2022 -
High max 7.5SUSE-SU-2016:2468-1 10 CVEs
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined…
first Oct 6, 2016 -
High max 7.8SUSE-SU-2024:4217-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1…
first Dec 5, 2024 -
High max 7.8SUSE-SU-2021:0870-1 3 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_116 fixes several issues. The following security issues were fixed: - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). …
first Mar 17, 2021 -
High max 7.8openSUSE-SU-2020:0142-1 2 CVEs
Security update for shadowsocks-libev
This update for shadowsocks-libev fixes the following issues: - Update version to 3.3.3 * Refine the handling of suspicious connections. * Fix exploitable denial-of-service vulnerability exists in the UDPRelay functionality (boo#1158251, CVE-2019-5163) * Fix …
first Jan 29, 2020 -
High max 7.5SUSE-SU-2023:2982-1 6 CVEs
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797). - CVE-2023-32763: F…
first Jul 26, 2023 -
High max 8.0
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_117 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…
first Dec 11, 2019 -
High max 7.1openSUSE-SU-2024:13657-1 1 CVE
libopenvswitch-3_1-0-3.1.0-18.1 on GA media
These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-18.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.6SUSE-SU-2019:2706-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference, caused by a malicious USB device in the flexcop_usb_probe function in the…
first Oct 17, 2019 -
High max 7.0SUSE-SU-2020:14375-1 3 CVEs
Security update for tomcat6
This update for tomcat6 fixes the following issues: CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persistence If an attacker was able to control the contents and name of a file on a server configured to use the PersistenceManager…
first May 22, 2020 -
High max 7.4openSUSE-SU-2024:12892-1 7 CVEs
java-17-openjdk-17.0.7.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:3182-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3609: Fixed an use-after-free vulnerability in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bou…
first Aug 3, 2023 -
High max 7.0SUSE-SU-2018:3158-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger …
first Oct 16, 2018 -
High max 8.0SUSE-SU-2018:1641-1 4 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP3)
This update for the Linux Kernel 4.4.82-6_9 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in the…
first Jun 11, 2018 -
High max 7.1SUSE-SU-2025:4533-1 4 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: - CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159) - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed p…
first Dec 29, 2025 -
High max 7.5SUSE-SU-2022:2899-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 11 (bsc#1202427): - CVE-2022-34169: Fixed an integer truncation issue in the Xalan Java XSLT library that occurred when processing malicious stylesheets…
first Aug 25, 2022 -
High max 7.5SUSE-SU-2021:0932-1 5 CVEs
Security update for nghttp2
This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358). - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of s…
first Mar 24, 2021 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254…
first Feb 10, 2022 -
High max 8.8SUSE-SU-2023:3954-1 4 CVEs
Security update for libeconf
This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078). - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-ove…
first Oct 3, 2023 -
High max 7.5SUSE-SU-2024:0644-1 6 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to 18.19.1: (security updates) * CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992). * CVE-2024-22019: http: Reading unprocessed HTTP request with unboun…
first Feb 28, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…
first Aug 3, 2021 -
High max 8.8SUSE-SU-2025:1088-1 2 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228578). - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
first Apr 1, 2025 -
High max 8.8openSUSE-SU-2021:3472-1 1 CVE
Security update for flatpak
This update for flatpak fixes the following issues: - Update to version 1.10.5: - CVE-2021-41133: Fixed a bug that could lead to sandbox bypass via recent VFS-manipulating syscalls. (bsc#1191507)
first Oct 20, 2021 -
High max 7.5SUSE-SU-2022:4635-1 1 CVE
Security update for conmon
This update for conmon fixes the following issues: conmon was updated to version 2.1.5: * don't leak syslog_identifier * logging: do not read more that the buf size * logging: fix error handling * Makefile: Fix install for FreeBSD * signal: Track changes to g…
first Dec 29, 2022 -
High max 7.8SUSE-SU-2022:4515-1 6 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_134 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…
first Dec 16, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).…
first Feb 14, 2024 -
High max 8.8SUSE-SU-2023:0683-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).
first Mar 9, 2023 -
High max 7.5SUSE-SU-2024:4137-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2024-52804: Fixed a denial of service caused by quadratic performance of cookie parsing (bsc#1233668)
first Dec 2, 2024 -
High max 8.8openSUSE-SU-2024:12713-1 13 CVEs
MozillaThunderbird-102.8.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4openSUSE-SU-2024:13110-1 5 CVEs
java-1_8_0-openj9-1.8.0.372-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.372-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2SUSE-SU-2024:1305-1 2 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2024-27983: Fixed failed assertion in node::http2::Http2Session::~Http2Session() that could lead to HTTP/2 server crash (bsc#1222244) - CVE-2024-27982: Fixed HTTP Request Smuggling via Content Length …
first Apr 16, 2024 -
High max 7.5SUSE-SU-2022:4166-1 10 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - CVE-2022-21626: An unauthenticated attacker with network access via HTTPS can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204471). - CVE-2022-21618: An unauthenticated attacke…
first Nov 22, 2022 -
High max 7.5openSUSE-SU-2024:13840-1 1 CVE
kubernetes1.28-apiserver-1.28.8-1.1 on GA media
These are all security issues fixed in the kubernetes1.28-apiserver-1.28.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:11526-1 4 CVEs
libpainter0-0.9.15-2.2 on GA media
These are all security issues fixed in the libpainter0-0.9.15-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2SUSE-SU-2022:0847-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21708: Fixed a memory corruption issue when processing integers from an untrusted source (bsc#1196252).
first Mar 15, 2022 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: - Update to 106.0.4998.19 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-113887 Translations for O106 - The update to chromium 120.0.6099.130 fixes following issues: CVE-2023-7024 - Update to …
first Jan 1, 2024 -
High max 7.8openSUSE-SU-2021:0073-1 1 CVE
Security update for crmsh
This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Jan 16, 2021 -
High max 7.5openSUSE-SU-2024:13971-1 1 CVE
libxml2-2-2.12.7-1.1 on GA media
These are all security issues fixed in the libxml2-2-2.12.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0openSUSE-SU-2022:0731-1 12 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.5.15 (bsc#1196016): * 10.5.15: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.5.14: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659,…
first Mar 4, 2022 -
High max 7.8SUSE-SU-2024:1287-1 10 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.1.0111, fixes the following security problems - CVE-2023-48231: Use-After-Free in win_close() (bsc#1217316). - CVE-2023-48232: Floating point Exception in adjust_plines_for_skipcol() (bsc#12…
first Apr 15, 2024