12,638 results · Clear filters · Feed
-
High max 7.4SUSE-SU-2021:2852-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following security issue: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service…
first Aug 27, 2021 -
High max 7.5SUSE-SU-2021:3806-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened …
first Nov 25, 2021 -
High max 7.5openSUSE-SU-2021:0357-1 3 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: New upstream LTS version 12.21.0: - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) - CVE-2021…
first Feb 27, 2021 -
High max 8.4SUSE-SU-2024:3920-1 2 CVEs
Security update for libgsf
This update for libgsf fixes the following issues: - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283).
first Nov 6, 2024 -
High max 7.8SUSE-SU-2021:1951-1 1 CVE
Security update for salt
This update for salt fixes the following issues: - Check if dpkgnotify is executable (bsc#1186674) - Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028…
first Jun 10, 2021 -
High max 7.5SUSE-SU-2023:3060-1 4 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service …
first Jul 31, 2023 -
High max 7.4SUSE-SU-2021:2967-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).
first Sep 7, 2021 -
High max 7.8SUSE-SU-2024:0155-1 2 CVEs
Security update for suse-module-tools
This update for suse-module-tools fixes the following issues: Updated to version 15.2.19: - Added a symlink for /boot/.vmlinuz.hmac (bsc#1217775). Updated to version 15.2.18: - CVE-2023-23559: Blacklisted RNDIS modules (bsc#1205767, jsc#PED-5731). - CVE-2023-…
first Jan 18, 2024 -
High max 7.3openSUSE-SU-2024:13972-1 1 CVE
nodejs-electron-29.4.0-1.1 on GA media
These are all security issues fixed in the nodejs-electron-29.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:13681-1 1 CVE
php-composer2-2.7.1-1.1 on GA media
These are all security issues fixed in the php-composer2-2.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2019:2069-1 18 CVEs
Security update for the Linux Kernel for Azure
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in create_qp_common, mlx5_ib_create_qp_resp was never initialized, resulting …
first Aug 6, 2019 -
High max 7.5openSUSE-SU-2024:14561-1 1 CVE
python310-pytest-html-4.1.1-4.1 on GA media
These are all security issues fixed in the python310-pytest-html-4.1.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024 -
High max 7.5openSUSE-SU-2019:0328-1 1 CVE
Security update for libcomps
This update for libcomps fixes the following issue: Security issue fixed: - CVE-2019-3817: Fixed a use-after-free vulnerability in comps_objmradix.c:comps_objmrtree_unite() function where could allow to application crash or code execution (bsc#1122841). This …
first Mar 15, 2019 -
High max 7.5SUSE-SU-2019:2181-1 1 CVE
Security update for nodejs6
This update for nodejs6 fixes the following issues: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290).
first Aug 19, 2019 -
High max 7.8SUSE-SU-2022:2761-1 2 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues. The following security issues were fixed: - CVE-2022-1116: Fixed a integer overflow vulnerability in io_uring which allowed a local attacker to cause memory corruption and escalate pri…
first Aug 10, 2022 -
High max 7.8SUSE-SU-2022:0184-1 1 CVE
Security update for json-c
This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)
first Jan 25, 2022 -
High max 7.5SUSE-SU-2025:03268-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer (bsc#1249191). - CVE-2025-10148: predictable websocket mask can lead t…
first Sep 18, 2025 -
High max 8.8SUSE-SU-2023:3226-1 2 CVEs
Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks (bsc#1213750). - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks (bsc#1213751).
first Aug 8, 2023 -
High max 8.1SUSE-SU-2025:01660-1 4 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.1. Security fixes: - MFSA 2025-34 (bsc#1243216) * CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird. * CVE-2025-3877: Unsolicited File Do…
first May 22, 2025 -
High max 7.3SUSE-SU-2018:3286-1 2 CVEs
Security update for rpm
This update for rpm fixes the following issues: These security issues were fixed: - CVE-2017-7500: rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbi…
first Oct 22, 2018 -
High max 7.5SUSE-SU-2025:03006-1 1 CVE
Security update for tomcat10
This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.44: - CVE-2025-48989: Fixed 'MadeYouReset' DoS in HTTP/2 due to client triggered stream reset (bsc#1243895) Other fixes: - Catalina + Fix: Fix bloom filter population for archive inde…
first Aug 28, 2025 -
High max 7.8SUSE-SU-2024:4240-1 2 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-43861: Fix memory leak for not ip packets …
first Dec 6, 2024 -
High max 8.8SUSE-SU-2025:1402-1 2 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-56650: netfilter: x_tables: fix LED ID che…
first Apr 29, 2025 -
High max 7.8SUSE-SU-2021:1891-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform…
first Jun 8, 2021 -
High max 7.8SUSE-SU-2025:02271-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-5601: Dissection engine crash (bsc#1244081).
first Jul 10, 2025 -
High max 8.4SUSE-SU-2022:0736-2 14 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004). - CVE-2021-3796: Fixed use-after-free in nv_replace() in normal.c (bsc#1190570). - CVE-2021-3872: Fixed heap-based buffer overflow in win_redr_sta…
first Apr 19, 2022 -
High max 7.3SUSE-SU-2018:2073-1 1 CVE
Security update for rpm
This update for rpm fixes the following issues: This security vulnerability was fixed: - CVE-2017-7500: Fixed symlink attacks during RPM installation (bsc#943457)
first Jul 26, 2018 -
High max 8.8openSUSE-SU-2024:13410-1 3 CVEs
postgresql14-14.10-1.1 on GA media
These are all security issues fixed in the postgresql14-14.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4SUSE-SU-2025:02968-1 7 CVEs
Security update for libqt4
This update for libqt4 fixes the following issues: - CVE-2021-45930: Fixed out-of-bounds write leading to DoS (bsc#1196654) - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm (bsc#1211298) - CVE-2023-32763: Fixed buffer overflow on …
first Aug 25, 2025 -
High max 8.4SUSE-SU-2024:1548-1 1 CVE
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2024-32462: Fixed arbitrary code execution outside sandbox via malicious app due to insufficient 'command' argument sanitization (bsc#1223110)
first May 7, 2024 -
High max 7.8SUSE-SU-2025:1092-1 1 CVE
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes one issue. The following security issue was fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)
first Apr 1, 2025 -
High max 8.8openSUSE-SU-2024:13859-1 1 CVE
nodejs-electron-28.3.0-1.1 on GA media
These are all security issues fixed in the nodejs-electron-28.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2021:1024-1 1 CVE
Security update for openscad
This update for openscad fixes the following issues: - CVE-2020-28600: A specially crafted STL file could lead to code execution via out-of-bounds write in import_stl.cc:import_stl() (bsc#1185975)
first Jul 11, 2021 -
High max 8.8openSUSE-SU-2024:12921-1 8 CVEs
MozillaThunderbird-102.11.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2024:0607-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.8.0 ESR (MFSA 2024-06) (bsc#1220048): - CVE-2024-1546: Out-of-bounds memory read in networking channels - CVE-2024-1547: Alert dialog could have been spo…
first Feb 23, 2024 -
High max 7.8SUSE-SU-2025:4269-1 2 CVEs
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-202…
first Nov 26, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …
first Feb 28, 2023 -
High max 7.3SUSE-SU-2022:4628-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
first Dec 28, 2022 -
High max 8.8openSUSE-SU-2020:1037-1 5 CVEs
Security update for singularity
This update for singularity fixes the following issues: - New version 3.6.0. This version introduces a new signature format for SIF images, and changes to the signing / verification code to address the following security problems: - CVE-2020-13845, boo#117415…
first Jul 23, 2020 -
High max 8.0SUSE-SU-2019:3233-1 2 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_121 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c (bsc#…
first Dec 10, 2019