12,638 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2025:4306-1 2 CVEs
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-2025…
first Nov 28, 2025 -
High max 7.8SUSE-SU-2023:2537-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3566: Fixed race condition in the TCP Handler (bsc#1204405). - CVE-2022-45886: Fixed a .disconnect versus dvb…
first Jun 19, 2023 -
High max 7.5SUSE-SU-2019:2228-1 1 CVE
Security update for postgresql10
This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).
first Aug 28, 2019 -
High max 7.5SUSE-SU-2019:0657-1 1 CVE
Security update for python-Flask
This update for python-Flask to version 0.12.4 fixes the following issues: Security issue fixed: - CVE-2018-1000656: Fixed an improper input validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servic…
first Mar 20, 2019 -
High max 7.5openSUSE-SU-2024:13027-1 2 CVEs
grafana-10.0.1-2.1 on GA media
These are all security issues fixed in the grafana-10.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6openSUSE-SU-2024:12379-1 4 CVEs
MozillaThunderbird-102.3.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:1395-1 5 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-3750: Fixed DMA reentrancy issue that could lead to use-after-free (bsc#1190011) - CVE-2022-0216: Fixed use-after-free in lsi_do_msgout function in hw/scsi/lsi53c895a.c (bsc#1198038) - CVE-2023-0330:…
first Apr 23, 2024 -
High max 7.8openSUSE-SU-2024:13442-1 6 CVEs
xen-4.18.0_02-1.1 on GA media
These are all security issues fixed in the xen-4.18.0_02-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7openSUSE-SU-2024:12703-1 3 CVEs
libmruby3_1_0-3.1.0-1.1 on GA media
These are all security issues fixed in the libmruby3_1_0-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2025:02296-1 1 CVE
Security update for go1.23
This update for go1.23 fixes the following issues: - Update to version go1.23.11 - CVE-2025-4674: Fixed potential command execution in untrusted VCS repositories. (bsc#1246118)
first Jul 11, 2025 -
High max 7.8SUSE-SU-2025:3712-1 5 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_147 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…
first Oct 21, 2025 -
High max 7.8SUSE-SU-2024:4261-1 2 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_183 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 9, 2024 -
High max 7.5SUSE-SU-2024:2926-1 1 CVE
Security update for zziplib
This update for zziplib fixes the following issues: - CVE-2024-39134: Fixed a stack buffer overflow via the __zzip_fetch_disk_trailer() (bsc#1227178)
first Aug 15, 2024 -
High max 7.0
Security update for Linux Kernel Live Patch 7 for SLE 12 SP1
This update for the Linux Kernel 3.12.62-60_62 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…
first Oct 31, 2016 -
High max 8.8SUSE-SU-2024:4096-1 4 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323). - CVE-2024-10977: Make libpq discard error messages r…
first Nov 28, 2024 -
High max 7.5SUSE-SU-2019:0054-1 3 CVEs
Security update for systemd
This update for systemd fixes the following issues: * Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323): Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a loca…
first Jan 9, 2019 -
High max 7.8SUSE-SU-2018:2539-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-15572: The spectre_v2_select_mitigation function in arch/x86/kernel/cpu/bugs.c did not always fill RSB upon a context …
first Aug 28, 2018 -
High max 7.8SUSE-SU-2025:0132-1 3 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 15, 2025 -
High max 7.8SUSE-SU-2024:0411-1 2 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 7, 2024 -
High max 8.3openSUSE-SU-2025:14728-1 5 CVEs
govulncheck-vulndb-0.0.20250130T185858-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250130T185858-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 4, 2025 -
High max 7.5SUSE-SU-2023:1844-1 2 CVEs
Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: Update aws-nitro-enclaves-cli to version 1.2.2~git0.4ccc639: * CVE-2022-31394: Fixed DoS vulnerability in hyper crate (bsc#1208555). Update aws-nitro-enclaves-cli to version 1.2.0~git2.841ef94…
first Apr 14, 2023 -
High max 8.6SUSE-SU-2025:4108-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
first Nov 14, 2025 -
High max 8.7SUSE-SU-2024:3745-1 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2024-7254: Fixed stack overflow vulnerability in Protocol Buffer (bsc#1230778)
first Oct 22, 2024 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and…
first Mar 7, 2023 -
High max 8.6SUSE-SU-2025:02563-1 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.28+6 (July 2025 CPU): Security fixes: - CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to…
first Jul 31, 2025 -
High max 7.8SUSE-SU-2025:0084-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2024-43861: Fix memory leak …
first Jan 14, 2025 -
High max 7.8SUSE-SU-2025:4043-1 5 CVEs
Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.83 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched:…
first Nov 11, 2025 -
High max 8.1SUSE-SU-2025:0615-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.17: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 21, 2025 -
High max 8.8SUSE-SU-2023:0165-1 3 CVEs
Security update for libXpm
This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption t…
first Jan 26, 2023 -
High max 7.8SUSE-SU-2023:2501-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock i…
first Jun 13, 2023 -
High max 7.8SUSE-SU-2025:03419-1 4 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_53 fixes several issues. The following security issues were fixed: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req…
first Sep 28, 2025 -
High max 8.1SUSE-SU-2022:4334-1 1 CVE
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to version 102.5.1: - CVE-2022-45414: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote conte…
first Dec 6, 2022 -
High max 8.1SUSE-SU-2022:4255-1 1 CVE
Security update for nodejs14
This update for nodejs14 fixes the following issues: - Update to 14.21.1: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). - Update to 14.21.0: - src: add --openssl-shared-config option
first Nov 28, 2022 -
High max 7.5openSUSE-SU-2024:13015-1 2 CVEs
bind-9.18.16-1.1 on GA media
These are all security issues fixed in the bind-9.18.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:4169-1 2 CVEs
Security update for go1.16
This update for go1.16 fixes the following issues: Updated to upstream version 1.16.12 to include security fixes to the compiler, syscall, runtime, the net/http, net/http/httptest, and time packages (bsc#1182345) - CVE-2021-44717: syscall: don't close fd 0 on…
first Dec 23, 2021 -
High max 7.5SUSE-SU-2022:2530-1 5 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u332 - April 2022 CPU (icedtea-3.23.0) - CVE-2022-21426: Better XPath expression handling (bsc#1198672) - CVE-2022-21443: Improved Object Identification (bsc#1198675) - CVE-2…
first Jul 22, 2022 -
High max 8.8SUSE-SU-2024:3169-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 14.13 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 9, 2024 -
High max 8.0SUSE-SU-2024:2750-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 5, 2024 -
High max 8.8SUSE-SU-2017:1387-1 10 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: Version update to 7.1-4.5 bsc#1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: …
first May 23, 2017 -
High max 7.8SUSE-SU-2023:0288-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).
first Feb 7, 2023