12,638 results · Clear filters · Feed
-
High max 8.8SUSE-SU-2025:1119-1 3 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2022-49025: net/mlx5e: Fix use-after-free when reverting termination table (bsc#1233023). - CVE-2024-41062: Sync sock recv cb and relea…
first Apr 2, 2025 -
High max 8.6SUSE-SU-2024:2598-1 1 CVE
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)
first Jul 23, 2024 -
High max 7.5SUSE-SU-2023:2318-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-28709: Mended an incomplete fix for CVE-2023-24998 (bsc#1211608).
first May 30, 2023 -
High max 7.5SUSE-SU-2021:3477-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
first Oct 20, 2021 -
High max 7.5SUSE-SU-2025:0346-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 (bsc#1236518)
first Feb 3, 2025 -
High max 8.5openSUSE-SU-2024:11071-1 3 CVEs
mysql-connector-java-8.0.25-2.2 on GA media
These are all security issues fixed in the mysql-connector-java-8.0.25-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2023:3559-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed …
first Sep 8, 2023 -
High max 8.1SUSE-SU-2025:0614-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 21, 2025 -
High max 7.3SUSE-SU-2019:0718-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: Security issue fixed: - CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dS…
first Mar 22, 2019 -
High max 7.8SUSE-SU-2023:4261-1 3 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (b…
first Oct 30, 2023 -
High max 8.6SUSE-SU-2024:2610-1 1 CVE
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)
first Jul 27, 2024 -
High max 8.8SUSE-SU-2025:03019-2 3 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.19: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…
first Oct 13, 2025 -
High max 7.5SUSE-SU-2025:4287-1 3 CVEs
Security update for java-25-openjdk
This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.1+8 (October 2025 CPU) * Security fixes: + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate handling + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance P…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2025:02399-1 4 CVEs
Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_188 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2024-57893: ALSA: seq: oss: Fix races at p…
first Jul 21, 2025 -
High max 7.8SUSE-SU-2025:4265-1 3 CVEs
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…
first Nov 26, 2025 -
High max 7.5SUSE-SU-2024:1541-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453) - CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984) - CVE-2024-31142: Fixed incorrect logic fo…
first May 7, 2024 -
High max 7.5SUSE-SU-2024:0732-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading u…
first Feb 29, 2024 -
High max 8.0
Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_194 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2021-47511: ALSA: pcm: oss: fix negative…
first Feb 24, 2025 -
High max 8.8openSUSE-SU-2024:0320-1 4 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 129.0.6668.70 (stable released 2024-09-24) (boo#1230964) * CVE-2024-9120: Use after free in Dawn * CVE-2024-9121: Inappropriate implementation in V8 * CVE-2024-9122: Type Confusion in V8 * CVE-2024…
first Sep 30, 2024 -
High max 7.8SUSE-SU-2023:3785-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user ac…
first Sep 26, 2023 -
High max 7.8SUSE-SU-2025:03109-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 9, 2025 -
High max 7.1SUSE-SU-2023:2613-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
first Jun 22, 2023 -
High max 8.6openSUSE-SU-2023:0137-1 2 CVEs
Security update for guile1, lilypond
This update for guile1, lilypond fixes the following issues: guile1: - Add service file to download release from git excluding the directory with commercial non free files. - Update to version 2.2.6 to enable lilypond to be updated to 2.24.1 to fix boo#121050…
first Jun 27, 2023 -
High max 7.5
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
first Aug 30, 2021 -
High max 7.5SUSE-SU-2025:02097-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).
first Jun 25, 2025 -
High max 7.8SUSE-SU-2022:4513-1 7 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_126 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…
first Dec 16, 2022 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2022-32893: Fixed several crashes and rendering issues (bsc#1202807). - Fixed WebKitGTK not allow to be used from non-main threads (bsc#1202169).
first Sep 23, 2022 -
High max 7.8SUSE-SU-2022:0029-1 1 CVE
Security update for python-Babel
This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal leading to loading arbitrary locale files on disk and executing arbitrary code (bsc#1185768).
first Jan 5, 2022 -
High max 7.8SUSE-SU-2018:2860-1 4 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 12 SP2)
This update for the Linux Kernel 4.4.114-92_64 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to …
first Sep 25, 2018 -
High max 7.7openSUSE-SU-2020:0015-1 1 CVE
Security update for trousers
This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651). This update…
first Jan 13, 2020 -
High max 7.8SUSE-SU-2024:4230-1 2 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
High max 7.5SUSE-SU-2018:3249-1 2 CVEs
Security update for haproxy
This update for haproxy to version 1.8.14 fixes the following issues: These security issues were fixed: - CVE-2018-14645: A flaw was discovered in the HPACK decoder what caused an out-of-bounds read in hpack_valid_idx() that resulted in a remote crash and den…
first Oct 19, 2018 -
High max 8.2SUSE-SU-2025:1286-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-31492: Fixed a bug where OIDCProviderAuthRequestMethod POSTs can leak protected data. (bsc#1240893)
first Apr 15, 2025 -
High max 8.2SUSE-SU-2024:1438-2 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-3447: Fixed heap buffer overflow in sdhci_write_dataport() (bsc#1222845) - CVE-2023-6683: Fixed NULL pointer dereference in qemu_clipboard_request() (bsc#1218889) - CVE-2024-3446: Fixed DMA reentranc…
first Apr 25, 2024 -
High max 8.8
Security update for bash
This update for bash fixes the following issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables (bsc#1001299) - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command exec…
first Nov 22, 2016 -
High max 7.4SUSE-SU-2024:2628-1 5 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Updated to version 17.0.12+7 (July 2024 CPU): - CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046). - CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#122804…
first Jul 30, 2024 -
High max 8.2openSUSE-SU-2019:2120-1 6 CVEs
Security update for nginx
This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (b…
first Sep 10, 2019 -
High max 7.7SUSE-SU-2019:3076-1 1 CVE
Security update for mailman
This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a local privilege escalation from wwwrun to root (bsc#1154328).
first Nov 26, 2019 -
High max 7.5SUSE-SU-2025:01953-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled (bsc#1242015).
first Jun 13, 2025 -
High max 7.5openSUSE-SU-2024:10670-1 31 CVEs
cacti-1.2.18-1.2 on GA media
These are all security issues fixed in the cacti-1.2.18-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024