12,638 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2024:14405-1 1 CVE
buildah-1.37.4-2.1 on GA media
These are all security issues fixed in the buildah-1.37.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 17, 2024 -
High max 8.2SUSE-SU-2024:0986-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…
first Mar 26, 2024 -
High max 7.5openSUSE-SU-2021:0471-1 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2020-25613: Fixed a potential HTTP Request Smuggling in WEBrick (bsc#1177125). - Enable optimizations also on ARM64 (bsc#1177222) This update was imported from the SUSE:SLE-15:Update update project.
first Mar 25, 2021 -
High max 7.8SUSE-SU-2023:4791-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765). - CVE-2023-6478: Fixed out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (bsc#121…
first Dec 13, 2023 -
High max 7.0SUSE-SU-2017:1092-1 1 CVE
Security update for minicom
This update for minicom fixes the following issue: This security issue was fixed: - CVE-2017-7467: Invalid cursor coordinates and scroll regions could lead to code execution (bsc#1033783).
first Apr 21, 2017 -
High max 8.8
Security update for MozillaFirefox, mozilla-nss
Mozilla Firefox is being updated to the current Firefox 38ESR branch (specifically the 38.2.0ESR release). Security issues fixed: - MFSA 2015-78 / CVE-2015-4495: Same origin violation and local file stealing via PDF reader - MFSA 2015-79 / CVE-2015-4473/CVE-2…
first Aug 25, 2015 -
High max 7.3openSUSE-SU-2025:14914-1 1 CVE
python311-joblib-1.4.2-2.1 on GA media
These are all security issues fixed in the python311-joblib-1.4.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 20, 2025 -
High max 7.5SUSE-SU-2023:3875-1 4 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501) * CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270) * CVE-2022-461…
first Sep 28, 2023 -
High max 7.8SUSE-SU-2024:4129-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#12…
first Dec 2, 2024 -
High max 8.1openSUSE-SU-2025:14858-1 1 CVE
python311-GitPython-3.1.44-1.1 on GA media
These are all security issues fixed in the python311-GitPython-3.1.44-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 6, 2025 -
High max 7.8SUSE-SU-2024:1886-1 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-4453: Fixed lack of proper validation of user-supplied data when parsing EXIF metadata (bsc#1224806)
first May 31, 2024 -
High max 8.8openSUSE-SU-2020:1497-1 2 CVEs
Security update for singularity
This update for singularity fixes the following issues: New version 3.6.3, addresses the following security issues: - CVE-2020-25039, boo#1176705 When a Singularity action command (run, shell, exec) is run with the fakeroot or user namespace option, Singulari…
first Sep 21, 2020 -
High max 8.6SUSE-SU-2024:1058-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2024-1753: Fixed full container escape at build time (bsc#1221677).
first Mar 28, 2024 -
High max 7.8SUSE-SU-2021:2057-1 4 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15)
This update for the Linux Kernel 4.12.14-150_72 fixes several issues. The following security issues were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads a…
first Jun 18, 2021 -
High max 8.2SUSE-SU-2019:1220-1 1 CVE
Security update for cf-cli
This update for cf-cli fixes the following issues: cf-cli was updated: to version 6.43.0 (bsc#1132242) Enhancements : - `cf curl` supports a new `--fail` flag (primarily for scripting purposes) which returns exit code `22` for server errors [story](https://ww…
first May 13, 2019 -
High max 7.5openSUSE-SU-2021:1759-1 1 CVE
Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2021-22885: Fixed possible information disclosure / unintended method execution in Action Pack (bsc#1185715).
first Jul 11, 2021 -
High max 7.5SUSE-SU-2025:3776-1 1 CVE
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2025-24294: resolv: insufficient checks on the length of a decompressed domain name when processing a DNS packet can lead to a denial of service due to excessive resource consumption (bsc#1246430).
first Oct 24, 2025 -
High max 7.5openSUSE-SU-2024:14462-1 1 CVE
pdns-recursor-5.1.2-1.1 on GA media
These are all security issues fixed in the pdns-recursor-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 5, 2024 -
High max 7.5openSUSE-SU-2020:2211-1 1 CVE
Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project.
first Dec 8, 2020 -
High max 8.3SUSE-SU-2024:1987-2 2 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - Update to version 1.14.4: - CVE-2024-3727: Fixed a vulnerability that allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, resource exhaustion, local path trave…
first Jun 11, 2024 -
High max 8.0openSUSE-SU-2024:11847-1 3 CVEs
ruby3.1-rubygem-puma-5.6.2-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-puma-5.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2022:0067-1 3 CVEs
Security update for libdxfrw, librecad
This update for libdxfrw, librecad fixes the following issues: - Update to version 1.0.1+git.20220109: * fixed ambiguous error for DRW_Dimension::parseDwg() * fixed enless while()-loop for pre 2004 versions * dwgReader::readDwgObjects() stop reading after 1st…
first Mar 2, 2022 -
High max 8.8SUSE-SU-2023:2287-1 2 CVEs
Security update for cups-filters, poppler, texlive
This update for cups-filters, poppler, texlive fixes the following issues: cups-filters: - CVE-2023-24805: Fixed a remote code execution in the beh backend (bsc#1211340). texlive: - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389). poppl…
first May 24, 2023 -
High max 7.8SUSE-SU-2025:4137-1 1 CVE
Security update for gimp
This update for gimp fixes the following issues: - CVE-2025-10934: Fixed XWD file parsing heap-based buffer overflow vulnerability (bsc#1252886)
first Nov 19, 2025 -
High max 7.5
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272)
first Nov 6, 2023 -
High max 8.7SUSE-SU-2024:0806-1 1 CVE
Security update for google-oauth-java-client
This update for google-oauth-java-client fixes the following issues: - CVE-2021-22573: Fixed token signature not verified (bsc#1199188).
first Mar 7, 2024 -
High max 8.1SUSE-SU-2022:3996-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119). - Update to version 2.0.16~git56.d15a0a7: - Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146). - Resolve …
first Nov 15, 2022 -
High max 7.8SUSE-SU-2023:3600-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and exe…
first Sep 21, 2023 -
High max 7.8SUSE-SU-2022:3001-1 1 CVE
Security update for json-c
This update for json-c fixes the following issues: - CVE-2020-12762: Fixed an integer overflow that could lead to memory corruption via a large JSON file (bsc#1171479). Non-security fixes: - Updated to version 0.12.1 (jsc#PED-1778).
first Sep 2, 2022 -
High max 8.8openSUSE-SU-2024:12287-1 5 CVEs
MozillaThunderbird-102.2.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2022:2344-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
first Jul 8, 2022 -
High max 7.8SUSE-SU-2023:0263-1 2 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_133 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#…
first Feb 6, 2023 -
High max 8.0SUSE-SU-2019:2829-1 2 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow in …
first Oct 30, 2019 -
High max 7.8SUSE-SU-2025:0758-1 1 CVE
Security update for libxkbfile
This update for libxkbfile fixes the following issues: - CVE-2025-26595: Fixed buffer overflow in XkbVModMaskText() (bsc#1237429).
first Feb 28, 2025 -
High max 8.2SUSE-SU-2023:4543-1 1 CVE
Security update for xerces-c
This update for xerces-c fixes the following issues: - CVE-2023-37536: Fixed an integer overflow that could have led to a out-of-bounds memory accesses (bsc#1216156).
first Nov 24, 2023 -
High max 7.5openSUSE-SU-2024:13788-1 1 CVE
ini4j-0.5.4-1.1 on GA media
These are all security issues fixed in the ini4j-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0SUSE-SU-2020:2498-1 6 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_113 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2019-16746: Fixed a buffer overflow in net/wireless/nl80211.c (bs…
first Sep 4, 2020 -
High max 7.5SUSE-SU-2020:1430-1 3 CVEs
Security update for dpdk
This update for dpdk to 17.11.7 fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477 bsc#1171930). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_…
first May 26, 2020 -
High max 7.5SUSE-SU-2015:1815-1 3 CVEs
Security update for python-Django
This update for python-Django fixes the following security issues: - Prevent Denial-of-service possibility by filling session store. (bsc#937522, CVE-2015-5143) - Prevent Header injection possibility. (bsc#937523, CVE-2015-5144) - A remote denial of service (…
first Oct 15, 2015 -
High max 7.8SUSE-SU-2021:0782-1 2 CVEs
Security update for crmsh
This update for crmsh fixes the following issues: - Update to version 4.3.0+20210219.5d1bf034: * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571) * Fix: bootstrap: setup authorized ssh acc…
first Mar 12, 2021