12,638 results · Clear filters · Feed
-
High max 8.8openSUSE-SU-2025:14834-1 7 CVEs
ffmpeg-7-7.1-3.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Feb 25, 2025 -
High max 8.8SUSE-SU-2024:3370-1 7 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind …
first Sep 23, 2024 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…
first Mar 9, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 29 for SLE 12)
This update for the Linux Kernel 3.12.61-52_106 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (…
first Oct 18, 2018 -
High max 7.5openSUSE-SU-2024:14283-1 2 CVEs
xen-4.19.0_02-1.1 on GA media
These are all security issues fixed in the xen-4.19.0_02-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2024 -
High max 7.5SUSE-SU-2022:4251-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2020-10735: Fixed possible DoS when converting text to int and vice versa (bsc#1203125). - CVE-2022-45061: Fixed possible DoS when IDNA decoding extremely long domain names (bsc#1205244).
first Nov 28, 2022 -
High max 7.8
Security update for apache2
This update for apache2 fixes the following issues: * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scrip…
first Apr 4, 2019 -
High max 8.6SUSE-SU-2024:0455-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) - CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)
first Feb 13, 2024 -
High max 7.8SUSE-SU-2024:0362-1 1 CVE
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_142 fixes one issue. The following security issue was fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).
first Feb 6, 2024 -
High max 7.8SUSE-SU-2023:3942-1 6 CVEs
Security update for vim
This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). - CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). - CVE-2023-4735: Fixed out of b…
first Oct 3, 2023 -
High max 7.8SUSE-SU-2024:3114-1 3 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2020-22027: Fixed heap-based Buffer Overflow vulnerability exits in deflate16 at libavfilter/vf_neighbor.c (bsc#1186607) - CVE-2021-38291: Fixed an assertion failure at src/libavutil/mathematics.c (bsc#…
first Sep 3, 2024 -
High max 7.5SUSE-SU-2019:0048-2 3 CVEs
Security update for helm-mirror
This update for helm-mirror to version 0.2.1 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote command execution (bsc#1118897) - CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path (bsc#111…
first Jul 4, 2019 -
High max 7.5openSUSE-SU-2024:14528-1 1 CVE
python310-tornado6-6.4.2-1.1 on GA media
These are all security issues fixed in the python310-tornado6-6.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 26, 2024 -
High max 7.5openSUSE-SU-2019:1237-1 2 CVEs
Security update for tar
This update for tar fixes the following issues: Security issues fixed: - CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496). - CVE-2018-20482: Fixed a denial of service …
first Apr 18, 2019 -
High max 7.8SUSE-SU-2024:0698-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escala…
first Feb 29, 2024 -
High max 7.8SUSE-SU-2023:3600-2 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and exe…
first Sep 21, 2023 -
High max 7.7SUSE-SU-2020:1791-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)
first Jun 26, 2020 -
High max 8.8SUSE-SU-2019:0876-1 1 CVE
Security update for dovecot23
This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation (bsc#1130116).
first Apr 4, 2019 -
High max 8.8SUSE-SU-2020:2526-1 10 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_18 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious AC…
first Sep 4, 2020 -
High max 7.5SUSE-SU-2021:1468-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed …
first May 4, 2021 -
High max 7.5openSUSE-SU-2020:2169-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project.
first Dec 5, 2020 -
High max 7.5openSUSE-SU-2025:14823-1 3 CVEs
dcmtk-3.6.9-2.1 on GA media
These are all security issues fixed in the dcmtk-3.6.9-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 20, 2025 -
High max 8.8SUSE-SU-2024:3060-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID removal (bsc#1225850). - CVE-2023-52772: Fixed use-after-free in unix_stream_rea…
first Aug 28, 2024 -
High max 8.6SUSE-SU-2024:2946-1 4 CVEs
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed a buffer overflow in QXmlStreamReader (QTBUG-91889, bsc#1214327). - CVE-2023-45935: Fixed NULL pointer dereference in QXcbConnection::initializeAllAtoms() due to anomalous behav…
first Aug 16, 2024 -
High max 8.2SUSE-SU-2024:2130-1 5 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-after-fre…
first Jun 21, 2024 -
High max 7.3openSUSE-SU-2022:10159-1 1 CVE
Security update for v4l2loopback
This update for v4l2loopback fixes the following issues: - Fix string format vulnerability (boo#1202156, CVE-2022-2652)
first Oct 20, 2022 -
High max 7.8openSUSE-SU-2024:13692-1 1 CVE
tomcat-9.0.85-3.1 on GA media
These are all security issues fixed in the tomcat-9.0.85-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2017:0606-1 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366)…
first Mar 6, 2017 -
High max 7.5SUSE-SU-2019:2012-1 2 CVEs
Security update for postgresql10
This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034). - CVE-2019-10130: Prevent row-level security policies from being bypassed via selec…
first Jul 29, 2019 -
High max 8.8SUSE-SU-2025:02854-1 4 CVEs
Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can c…
first Aug 18, 2025 -
High max 8.0SUSE-SU-2019:1668-1 4 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_107 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while…
first Jun 21, 2019 -
High max 7.8openSUSE-SU-2024:11585-1 1 CVE
php8-8.0.12-1.1 on GA media
These are all security issues fixed in the php8-8.0.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:4455-1 3 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that…
first Nov 16, 2023 -
High max 8.8SUSE-SU-2023:0160-1 11 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546). - Updated to version 4.15.13: - CVE-…
first Jan 26, 2023 -
High max 8.8openSUSE-SU-2024:12962-1 6 CVEs
ungoogled-chromium-113.0.5672.126-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.126-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2018:1847-1 2 CVEs
Security update for tomcat6
This update for tomcat6 fixes the following security issues: - : The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are …
first Jun 29, 2018 -
High max 7.7SUSE-SU-2025:0984-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-49737: Fixed Xorg crashing when client applications use easystroke for mouse gestures (bsc#1239750)
first Mar 21, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)
first Jun 17, 2024 -
High max 8.1SUSE-SU-2021:14632-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack [bsc#1182246, CVE-2020-8625]
first Feb 18, 2021 -
High max 7.8openSUSE-SU-2021:0843-1 12 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bo…
first Jun 6, 2021