12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2022:4257-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-43980: Fixed information disclosure due to concurrency issues in Http11Processor (bsc#1203868). - CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
first Nov 28, 2022 -
High max 7.7openSUSE-SU-2025:14931-1 4 CVEs
icingacli-2.12.4-1.1 on GA media
These are all security issues fixed in the icingacli-2.12.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2025 -
High max 8.5openSUSE-SU-2024:12487-1 2 CVEs
git-2.38.1-1.1 on GA media
These are all security issues fixed in the git-2.38.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:3905-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: Security fixes: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) Other fixes: - FIPS: AES GCM external IV implementation (bsc#1228618) - FIPS: Mark PBKDF2 and HKDF HMAC input keys with s…
first Nov 4, 2024 -
High max 7.5SUSE-SU-2023:0444-1 2 CVEs
Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2023-22795: Fixed ReDoS in Action Dispatch cache (bsc#1207451). - CVE-2023-22792: Fixed ReDoS in Action Dispatch cookies (bnc#1207455).
first Feb 17, 2023 -
High max 7.3SUSE-SU-2018:1836-1 5 CVEs
Security update for procps
This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting …
first Jun 28, 2018 -
High max 8.8openSUSE-SU-2017:2895-1 1 CVE
Security update for SDL2
This update for SDL2 fixes the following issues: - CVE-2017-2888: An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL. A specially crafted file can cause an integer overflow resulting in too little memory being allocate…
first Oct 27, 2017 -
High max 7.5SUSE-SU-2024:2534-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453) - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355).
first Jul 16, 2024 -
High max 7.0SUSE-SU-2019:0828-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE…
first Apr 1, 2019 -
High max 7.1openSUSE-SU-2020:1911-1 4 CVEs
Security update for python-waitress
This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2…
first Nov 14, 2020 -
High max 8.8SUSE-SU-2025:1252-1 2 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228714). - CVE-2024-56600: net: inet6: do not leave a dangling sk poin…
first Apr 14, 2025 -
High max 7.5SUSE-SU-2025:02028-1 2 CVEs
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues: - CVE-2025-47947: Fixed denial of service through sanitiseMatchedBytes (bsc#1243978). - CVE-2025-48866: Fixed denial of service via excessive number of arguments in sanitiseArg (bsc#1243976).
first Jun 19, 2025 -
High max 7.5SUSE-SU-2020:2047-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117)
first Jul 24, 2020 -
High max 8.2openSUSE-SU-2024:12796-1 2 CVEs
xstream-1.4.20-1.1 on GA media
These are all security issues fixed in the xstream-1.4.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:3384-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) - CVE-2024-7592: quadratic algorithm used when parsing cookies leads to excessive resource consumption. (bsc…
first Sep 23, 2024 -
High max 7.5openSUSE-SU-2020:1043-1 1 CVE
Security update for xmlgraphics-batik
This update for xmlgraphics-batik fixes the following issues: - CVE-2019-17566: Fixed a SSRF which might have allowed the underlying server to make arbitrary GET requests (bsc#1172961). This update was imported from the SUSE:SLE-15-SP1:Update update project. …
first Jul 23, 2020 -
High max 7.8SUSE-SU-2023:1971-1 3 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_102 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in med…
first Apr 24, 2023 -
High max 7.5openSUSE-SU-2025:14628-1 1 CVE
python311-slixmpp-1.8.6-1.1 on GA media
These are all security issues fixed in the python311-slixmpp-1.8.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 9, 2025 -
High max 7.4openSUSE-SU-2024:13679-1 3 CVEs
java-1_8_0-openj9-1.8.0.402-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.402-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2020:0204-1 2 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of s…
first Jan 22, 2020 -
High max 7.8SUSE-SU-2023:4292-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-5574: Fixed a privilege escalation issue that could be triggered via the Damage extension protocol (bsc#1216261). - CVE-2023-5380: Fixed a memory safety issue that could be triggered when …
first Oct 31, 2023 -
High max 8.8SUSE-SU-2022:2984-1 3 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.13.0 ESR (bsc#1202645): - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling. - CVE-2022-38473: Fixed an issue where cross-origin XSLT d…
first Sep 1, 2022 -
High max 8.1
Security update for MozillaFirefox
Mozilla Firefox was updated to 68.6.1esr to fix critical security issues: MFSA 2020-11 (boo#1168630) * CVE-2020-6819: Use-after-free while running the nsDocShell destructor * CVE-2020-6820: Use-after-free when handling a ReadableStream
first Apr 6, 2020 -
High max 7.8SUSE-SU-2022:2174-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). - Update to 3.9.13: - Core and Builtins - gh-92311: Fixed a bug where setting frame.f_lineno to jump over a list comprehension …
first Jun 24, 2022 -
High max 8.8SUSE-SU-2025:02922-1 2 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…
first Aug 19, 2025 -
High max 7.8SUSE-SU-2021:1889-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perf…
first Jun 8, 2021 -
High max 7.5openSUSE-SU-2021:1225-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 (jsc#SLE-19970): Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled…
first Sep 3, 2021 -
High max 7.8SUSE-SU-2024:3867-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-9632: Fixed heap-based buffer overflow privilege escalation in _XkbSetCompatMap (bsc#1231565).
first Nov 1, 2024 -
High max 8.8SUSE-SU-2021:3742-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_19 fixes several issues. The following security issues were fixed: - CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646). - CVE-2021-41864: Fixe…
first Nov 19, 2021 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: opera was updated to version 80.0.4170.16 Fixes: - CHR-8590 Update chromium on desktop-stable-94-4170 to 94.0.4606.61 - DNA-95347 Make InstallerStep::Run async - DNA-95420 First suggestion in address field is …
first Oct 15, 2021 -
High max 7.8SUSE-SU-2025:0173-1 1 CVE
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes one issue. The following security issue was fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712).
first Jan 17, 2025 -
High max 7.8SUSE-SU-2024:0695-1 1 CVE
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (bsc#1210619).
first Feb 29, 2024 -
High max 7.5SUSE-SU-2020:3599-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - Add wheel subpackage with the generated wheel for this package (bsc#1176262, CVE-2019-20916). - Make wheel a separate build run to avoid the setuptools/wheel build cycle.
first Dec 2, 2020 -
High max 7.5openSUSE-SU-2024:13836-1 2 CVEs
etcd-for-k8s1.29-3.5.12-1.1 on GA media
These are all security issues fixed in the etcd-for-k8s1.29-3.5.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2025:0618-1 1 CVE
Security update for postgresql17
This update for postgresql17 fixes the following issues: Upgrade to 17.4: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 21, 2025 -
High max 8.8SUSE-SU-2024:2208-1 5 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (…
first Jun 25, 2024 -
High max 7.7SUSE-SU-2020:0405-1 1 CVE
Security update for ipmitool
This update for ipmitool fixes the following security issue: - CVE-2020-5208: Fixed several buffer overflows (bsc#1163026).
first Feb 19, 2020 -
High max 8.7
Security update for php72
This update for php72 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).
first Nov 6, 2019 -
High max 7.5SUSE-SU-2024:1278-1 1 CVE
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes one issue. The following security issue was fixed: - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).
first Apr 12, 2024 -
High max 7.7SUSE-SU-2025:01704-2 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).
first Jun 5, 2025