12,638 results · Clear filters · Feed
-
High max 7.1SUSE-SU-2025:0817-1 2 CVEs
Security update for u-boot
This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287).
first Mar 10, 2025 -
High max 7.4openSUSE-SU-2024:11869-1 1 CVE
ruby3.1-rubygem-actionpack-6.0-6.0.4.6-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-actionpack-6.0-6.0.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2022:1808-1 2 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation - CVE-2022-1529: Untrusted input used in JavaScript obj…
first May 23, 2022 -
High max 8.8openSUSE-SU-2024:10446-1 10 CVEs
tomcat-8.0.36-3.3 on GA media
These are all security issues fixed in the tomcat-8.0.36-3.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:3912-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2022-43680: Fixed use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate (bsc#1204708).
first Nov 8, 2022 -
High max 8.8SUSE-SU-2023:0466-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Updated to version 102.8.0 ESR (bsc#1208144): - CVE-2023-25728: Fixed content security policy leak in violation reports using iframes. - CVE-2023-25730: Fixed screen hijack via browser fullscreen mode…
first Feb 21, 2023 -
High max 7.8SUSE-SU-2021:1890-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform…
first Jun 8, 2021 -
High max 8.0SUSE-SU-2024:2818-1 2 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_165 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with dev-…
first Aug 8, 2024 -
High max 7.5SUSE-SU-2020:0059-1 9 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: Update to LTS release 12.13.0 (jsc#SLE-8947). Security issues fixed: - CVE-2019-9511: Fixed the HTTP/2 implementation that was vulnerable to window size manipulations (bsc#1146091). - CVE-2019-9512: Fixed t…
first Jan 9, 2020 -
High max 7.5SUSE-SU-2017:3390-1 1 CVE
Security update for xstream
This update for xstream fixes the following issues: - CVE-2017-7957: XStream could cause a Denial of Service when unmarshalling void. (bsc#1070731)
first Dec 20, 2017 -
High max 7.5SUSE-SU-2019:3032-1 1 CVE
Security update for dpdk
This update for dpdk to version 17.11.7 fixes the following issues: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146).
first Nov 21, 2019 -
High max 7.5openSUSE-SU-2020:0038-1 3 CVEs
Security update for tomcat
This update for tomcat to version 9.0.30 fixes the following issues: Security issue fixed: - CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723). - CVE-2019-17563:…
first Jan 13, 2020 -
High max 7.5openSUSE-SU-2024:13171-1 1 CVE
ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 on GA media
These are all security issues fixed in the ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: - Update to 94.0.4606.38 - CHR-9133 Update chromium on desktop-stable-108-4606 to 108.0.5359.125 - DNA-103624 Create JS API to open Search tabs feature - DNA-104004 Improve welcome pop-up - DNA-104053 Right mo…
first Dec 31, 2022 -
High max 7.5openSUSE-SU-2021:1384-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373). This update was imported from the SUSE:SLE-15-SP2:Upda…
first Oct 18, 2021 -
High max 8.1openSUSE-SU-2024:0167-1 1 CVE
Security update for gdcm
This update for gdcm fixes the following issues: - CVE-2024-22373: Fixed out-of-bounds write vulnerability in JPEG2000Codec::DecodeByStreamsCommon (boo#1223398).
first Jun 18, 2024 -
High max 7.5SUSE-SU-2023:3167-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (bsc#1212742).
first Aug 2, 2023 -
High max 7.5
Security update for tomcat
This update for tomcat fixes the following issues: Tomcat was updated to version 9.0.82 (jsc#PED-6376, jsc#PED-6377): - Security issues fixed: * CVE-2023-41080: Avoid protocol relative redirects in FORM authentication. (bsc#1214666) * CVE-2023-44487: Fix HTTP…
first Oct 19, 2023 -
High max 7.8SUSE-SU-2025:3926-1 1 CVE
Security update for the Linux Kernel (Live Patch 72 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_272 fixes one issue. The following security issue was fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847).
first Nov 3, 2025 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_se…
first Mar 17, 2025 -
High max 7.0
Security update for Linux Kernel Live Patch 4 for SLE 12 SP1
This update for the Linux Kernel 3.12.57-60_35 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…
first Oct 25, 2016 -
High max 8.3openSUSE-SU-2025:14629-1 1 CVE
chromedriver-131.0.6778.264-1.1 on GA media
These are all security issues fixed in the chromedriver-131.0.6778.264-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 10, 2025 -
High max 7.5SUSE-SU-2023:4465-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894).
first Nov 16, 2023 -
High max 7.5SUSE-SU-2025:03587-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed issue in the mjson JSON decoder, that could have let to excessive resource consumption when processing numbers with large exponents (bsc#1250983).
first Oct 13, 2025 -
High max 7.5SUSE-SU-2022:3288-1 25 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of servi…
first Sep 16, 2022 -
High max 7.5SUSE-SU-2022:1433-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: Security fixes for golang-github-prometheus-prometheus: - CVE-2022-21698: Denial of Service through unbounded cardinality, and potential memory exhaustion, when handling requests …
first Apr 27, 2022 -
High max 7.8SUSE-SU-2025:02013-1 2 CVEs
Security update for pam
This update for pam fixes the following issues: - CVE-2025-6018: pam_env: Change the default to not read the user .pam_environment file (bsc#1243226). - CVE-2025-6020: pam_namespace: convert functions that may operate on a user-controlled path to operate on f…
first Jun 18, 2025 -
High max 7.5SUSE-SU-2024:0485-1 2 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: cobbler: - Build the appendline correctly for RHEL-family <= 9 (bsc#1216437) - Notify to 'systemd' when cobblerd startup is finished (bsc#1215982) - Enable ppc64(le) buildiso support (bsc#1214077) grafana-formula: - Ver…
first Feb 15, 2024 -
High max 7.5SUSE-SU-2021:2294-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - Upgrade to 6.0.14 - CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution (bsc#1186722) - Fix crash in UNLINK on a stream key with …
first Jul 12, 2021 -
High max 7.8openSUSE-SU-2024:12952-1 3 CVEs
hawk2-2.6.4+git.1682509819.1ff135ea-1.1 on GA media
These are all security issues fixed in the hawk2-2.6.4+git.1682509819.1ff135ea-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:1233-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.12+7 - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2388: Fixed a flaw inside the Hotspot component performed ra…
first Sep 7, 2021 -
High max 8.2openSUSE-SU-2024:11861-1 1 CVE
php7-7.4.28-1.1 on GA media
These are all security issues fixed in the php7-7.4.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update contains Chromium 70.0.3538.102 and fixes security issues and bugs. Vulnerabilities fixed in 70.0.3538.102: - CVE-2018-17478: Out of bounds memory access in V8 (boo#1115537) Vulnerabilities fixed in 70.0.3538.67 (bsc#1112111): - CVE-2018-17462: Sa…
first Nov 20, 2018 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via …
first Apr 27, 2019 -
High max 7.5openSUSE-SU-2019:1757-1 9 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: A device could be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.…
first Jul 20, 2019 -
High max 7.9openSUSE-SU-2019:1479-1 11 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-7191: In the tun subsystem dev_get_valid_name xwas not called before register_netdevice. This allowed local users to cause a…
first May 31, 2019 -
High max 7.5openSUSE-SU-2024:0253-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2022-45198: Fixed improper handling of highly compressed GIF data (boo#1205416)
first Aug 18, 2024 -
High max 7.1SUSE-SU-2025:0351-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619).
first Feb 4, 2025 -
High max 7.5SUSE-SU-2022:2723-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use…
first Aug 9, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_63 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…
first May 10, 2024