12,638 results · Clear filters · Feed
-
High max 7.5openSUSE-SU-2024:14108-1 1 CVE
kbfs-6.3.1-2.1 on GA media
These are all security issues fixed in the kbfs-6.3.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 5, 2024 -
High max 8.8SUSE-SU-2022:4283-1 5 CVEs
Security update for webkit2gtk3
Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user inte…
first Nov 29, 2022 -
High max 7.5SUSE-SU-2020:1983-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Tomcat was updated to 9.0.36 See changelog at - CVE-2020-11996: Fixed an issue which by sending a specially crafted sequence of HTTP/2 requests could have triggered high CPU usage for several seconds making p…
first Jul 21, 2020 -
High max 8.1openSUSE-SU-2025:14807-1 1 CVE
postgresql15-15.11-1.1 on GA media
These are all security issues fixed in the postgresql15-15.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 13, 2025 -
High max 7.5openSUSE-SU-2024:12008-1 1 CVE
trivy-0.26.0-1.1 on GA media
These are all security issues fixed in the trivy-0.26.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4326-1 4 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network sche…
first Oct 31, 2023 -
High max 7.5SUSE-SU-2023:0868-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessa…
first Mar 22, 2023 -
High max 8.5
Security update for git
This update for git fixes the following issues: - CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk (bsc#1245938) - CVE-2025-46835: Fixed arbitrary writable file creation when cloning untrusted repository in Git GUI (bsc#1245942) -…
first Aug 29, 2025 -
High max 7.8SUSE-SU-2022:1189-1 2 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_106 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user pr…
first Apr 13, 2022 -
High max 8.8openSUSE-SU-2024:14383-1 2 CVEs
chromedriver-129.0.6668.89-1.2 on GA media
These are all security issues fixed in the chromedriver-129.0.6668.89-1.2 package on the GA media of openSUSE Tumbleweed.
first Oct 4, 2024 -
High max 7.1openSUSE-SU-2024:12483-1 1 CVE
sudo-1.9.12-3.1 on GA media
These are all security issues fixed in the sudo-1.9.12-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2025:0735-1 12 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.6 (bsc#1236946, bsc#1234851): - CVE-2025-24143: A maliciously crafted webpage may be able to fingerprint the user. - CVE-2025-24150: Copying a URL from Web Inspector may lead to co…
first Feb 26, 2025 -
High max 7.5SUSE-SU-2022:0856-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).
first Mar 15, 2022 -
High max 8.8SUSE-SU-2024:2106-1 2 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). - CVE-2024-35242: Fixed command injection via specially crafted branch n…
first Jun 20, 2024 -
High max 7.5openSUSE-SU-2022:10242-1 1 CVE
Security update for python-slixmpp
This update for python-slixmpp fixes the following issues: - CVE-2022-45197: Fixed certificate hostname validation (boo#1205433)
first Dec 10, 2022 -
High max 8.8SUSE-SU-2022:4148-1 1 CVE
Security update for pixman
This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033).
first Nov 21, 2022 -
High max 7.8SUSE-SU-2025:0262-1 11 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix su…
first Jan 27, 2025 -
High max 8.0openSUSE-SU-2024:12900-1 3 CVEs
ruby3.2-rubygem-puma-6.0.0-2.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-puma-6.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2024:1598-2 1 CVE
Security update for less
This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)
first May 10, 2024 -
High max 7.5openSUSE-SU-2024:12480-1 2 CVEs
python310-cryptography-vectors-38.0.3-1.1 on GA media
These are all security issues fixed in the python310-cryptography-vectors-38.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0openSUSE-SU-2020:1090-1 31 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006): - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds re…
first Jul 26, 2020 -
High max 8.1
Security update for go1.21
This update introduces go1.21, including fixes for the following issues: - go1.21.3 (released 2023-10-10) includes a security fix to the net/http package. Refs boo#1212475 go1.21 release tracking CVE-2023-39325 CVE-2023-44487 * go#63427 go#63417 boo#1216109 s…
first Nov 9, 2023 -
High max 7.8SUSE-SU-2023:1982-1 2 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_126 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim(…
first Apr 25, 2023 -
High max 7.5SUSE-SU-2025:1008-1 1 CVE
Security update for python-gunicorn
This update for python-gunicorn fixes the following issues: - CVE-2024-6827: Fixed improper validation of the 'Transfer-Encoding' header value can allow for HTTP request smuggling attacks (bsc#1239830)
first Mar 25, 2025 -
High max 7.5SUSE-SU-2024:1971-1 3 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2024-34088: Fixed null pointer via get_edge() function can trigger a denial of service (bsc#1223786). - CVE-2024-31951: Fixed buffer overflow in ospf_te_parse_ext_link (bsc#1222528). - CVE-2024-31950: Fixe…
first Jun 10, 2024 -
High max 7.8openSUSE-SU-2022:0184-1 1 CVE
Security update for json-c
This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
first Jan 25, 2022 -
High max 8.1openSUSE-SU-2024:14149-1 2 CVEs
python310-mysql-connector-python-8.2.0-1.5 on GA media
These are all security issues fixed in the python310-mysql-connector-python-8.2.0-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.1openSUSE-SU-2024:10420-1 1 CVE
bsh2-2.0.0.b6-2.7 on GA media
These are all security issues fixed in the bsh2-2.0.0.b6-2.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:12869-1 3 CVEs
nodejs-electron-22.3.6-1.1 on GA media
These are all security issues fixed in the nodejs-electron-22.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:10874-1 5 CVEs
java-16-openjdk-16.0.2.0-2.1 on GA media
These are all security issues fixed in the java-16-openjdk-16.0.2.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7openSUSE-SU-2024:14519-1 3 CVEs
govulncheck-vulndb-0.0.20241121T195252-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241121T195252-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 23, 2024 -
High max 7.5SUSE-SU-2025:01850-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) - CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) - CVE-2025-1713: F…
first Jun 10, 2025 -
High max 7.8SUSE-SU-2024:0622-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escala…
first Feb 26, 2024 -
High max 7.0SUSE-SU-2018:2355-1 3 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_57 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 7.5SUSE-SU-2023:2123-1 1 CVE
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2023-28450: Fixed default maximum size for EDNS.0 UDP packets (bsc#1209358).
first May 8, 2023 -
High max 7.4SUSE-SU-2024:3552-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2024-4216: Fixed XSS in /settings/store endpoint (bsc#1223868)
first Oct 8, 2024 -
High max 7.5SUSE-SU-2025:3784-1 4 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: - CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-express…
first Oct 24, 2025 -
High max 8.2
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privile…
first May 17, 2023 -
High max 7.5openSUSE-SU-2021:0239-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345) This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Feb 5, 2021 -
High max 8.8
element-desktop-1.11.43-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.43-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024