12,638 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2025:14830-1 3 CVEs
libxml2-2-2.13.6-1.1 on GA media
These are all security issues fixed in the libxml2-2-2.13.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 21, 2025 -
High max 8.8SUSE-SU-2025:0285-1 4 CVEs
Security update for go1.24
This update for go1.24 fixes the following issues: This update ships go1.24rc2 (bsc#1236217). - CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045) - CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046) - CVE-2025-2…
first Jan 29, 2025 -
High max 8.3SUSE-SU-2018:2594-1 2 CVEs
Security update for spice-gtk
This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
first Sep 3, 2018 -
High max 7.8SUSE-SU-2024:2005-1 3 CVEs
Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security Update 550.90.07: - CVE-2024-0090: Fixed out of bounds write (bsc#1223356). - CVE-2024-0092: Fixed incorrect exception handling (bsc#1223356). …
first Jun 12, 2024 -
High max 8.3openSUSE-SU-2024:14482-1 2 CVEs
govulncheck-vulndb-0.0.20241108T172500-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241108T172500-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …
first Nov 30, 2019 -
High max 7.5SUSE-SU-2025:1419-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2025-21605: Fixed an output buffer denial of service. (bsc#1241708)
first Apr 30, 2025 -
High max 7.0SUSE-SU-2018:2350-1 3 CVEs
Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_60 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data presen…
first Aug 16, 2018 -
High max 7.5SUSE-SU-2022:3979-1 1 CVE
Security update for python-Mako
This update for python-Mako fixes the following issues: - CVE-2022-40023: Fixed regular expression Denial of Service when using the Lexer class to parse (bsc#1203246).
first Nov 15, 2022 -
High max 7.5SUSE-SU-2020:0360-1 1 CVE
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues: - CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).
first Feb 7, 2020 -
High max 7.5openSUSE-SU-2024:10620-1 2 CVEs
apache-commons-fileupload-1.4-1.9 on GA media
These are all security issues fixed in the apache-commons-fileupload-1.4-1.9 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:3995-1 2 CVEs
Security update for jackson-databind
This update for jackson-databind fixes the following issues: Update to version 2.13.4.2: - CVE-2022-42003: Fixed missing check in primitive value deserializers to avoid deep wrapper array nesting wrt 'UNWRAP_SINGLE_VALUE_ARRAYS' (bsc#1204370). - CVE-2022-4200…
first Nov 15, 2022 -
High max 7.0SUSE-SU-2018:1660-1 1 CVE
Security update for pdns
This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-1046: Fix an issue with replaying a specially crafted PCAP file that can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution (bsc…
first Jun 12, 2018 -
High max 7.5openSUSE-SU-2024:0251-1 5 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-23969: Potential denial-of-service via Accept-Language headers (boo#1207565) - CVE-2024-38875: Potential denial-of-service attack via certain inputs with a very large number of brackets (boo…
first Aug 18, 2024 -
High max 8.2openSUSE-SU-2024:11753-1 2 CVEs
libmruby3-3.0.0-3.1 on GA media
These are all security issues fixed in the libmruby3-3.0.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2017:2726-1 3 CVEs
Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enfor…
first Oct 13, 2017 -
High max 7.0openSUSE-SU-2025:14638-1 2 CVEs
valkey-8.0.2-1.1 on GA media
These are all security issues fixed in the valkey-8.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 12, 2025 -
High max 7.8SUSE-SU-2022:2535-1 1 CVE
Security update for git
This update for git fixes the following issues: - CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431). - Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)
first Jul 22, 2022 -
High max 8.1SUSE-SU-2022:2331-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2022-24903: fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061)
first Jul 7, 2022 -
High max 7.8SUSE-SU-2025:02636-1 6 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vul…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2023:3377-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed …
first Aug 22, 2023 -
High max 7.5openSUSE-SU-2024:14398-1 1 CVE
xmlgraphics-fop-2.10-1.1 on GA media
These are all security issues fixed in the xmlgraphics-fop-2.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 13, 2024 -
High max 8.8openSUSE-SU-2024:0254-2 23 CVEs
Security update for chromium, gn, rust-bindgen
This update for chromium, gn, rust-bindgen fixes the following issues: - Chromium 127.0.6533.119 (boo#1228941) * CVE-2024-7532: Out of bounds memory access in ANGLE * CVE-2024-7533: Use after free in Sharing * CVE-2024-7550: Type Confusion in V8 * CVE-2024-75…
first Aug 18, 2024 -
High max 7.5SUSE-SU-2023:2861-1 9 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to version 16.20.1: - CVE-2023-30581: Fixed mainModule.__proto__ Bypass Experimental Policy Mechanism (bsc#1212574). - CVE-2023-30585: Fixed privilege escalation via Malicious Registry Key manipulati…
first Jul 17, 2023 -
High max 8.3SUSE-SU-2018:2709-1 2 CVEs
Security update for spice-gtk
This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295) Other bugs fixed: - Add setu…
first Sep 13, 2018 -
High max 7.1SUSE-SU-2017:2908-1 30 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system ca…
first Oct 30, 2017 -
High max 8.8openSUSE-SU-2024:12437-1 5 CVEs
kernel-devel-6.0.3-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0851-1 1 CVE
Security update for xmlgraphics-batik
This update for xmlgraphics-batik fixes the following issues: - CVE-2019-17566: Fixed a SSRF which might have allowed the underlying server to make arbitrary GET requests (bsc#1172961). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Jun 22, 2020 -
High max 7.8SUSE-SU-2018:3029-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)
This update for the Linux Kernel 4.4.82-6_6 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to a d…
first Oct 5, 2018 -
High max 8.8SUSE-SU-2017:1582-1 2 CVEs
Security update for Salt
This update for salt provides version 2016.11.4 and brings various fixes and improvements: - Adding a salt-minion watchdog for RHEL6 and SLES11 systems (sysV) to restart salt-minion in case of crashes during upgrade. - Fix format error. (bsc#1043111) - Fix ow…
first Jun 16, 2017 -
High max 7.5SUSE-SU-2022:2046-1 1 CVE
Security update for rubygem-sinatra
This update for rubygem-sinatra fixes the following issues: - CVE-2022-29970: Fixed possible path traversal outside of public_dir when serving static files (bsc#1199138).
first Jun 11, 2022 -
High max 7.8SUSE-SU-2025:4143-1 5 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - CVE-2025-61662: F…
first Nov 20, 2025 -
High max 7.8SUSE-SU-2024:0251-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) - CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
first Jan 26, 2024 -
High max 7.5SUSE-SU-2021:1009-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947). - CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) - CVE-2021-25329: Complete f…
first Apr 1, 2021 -
High max 8.3openSUSE-SU-2024:11093-1 3 CVEs
nim-1.2.12-1.7 on GA media
These are all security issues fixed in the nim-1.2.12-1.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:4245-1 2 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (b…
first Oct 30, 2023 -
High max 7.5openSUSE-SU-2020:1910-1 1 CVE
Security update for zeromq
This update for zeromq fixes the following issues: - CVE-2020-15166: Fixed the possibility of unauthenticated clients causing a denial-of-service (bsc#1176116). - Fixed a heap overflow when receiving malformed ZMTP v1 packets (bsc#1176256) - Fixed a memory le…
first Nov 14, 2020 -
High max 8.8SUSE-SU-2016:3209-1 4 CVEs
Security update for zlib
This update for zlib fixes the following issues: * Incompatible declarations for external linkage function deflate (bnc#1003577) * CVE-2016-9842: Undefined Left Shift of Negative Number (bnc#1003580) * CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithm…
first Dec 21, 2016 -
High max 7.5SUSE-SU-2019:2502-1 5 CVEs
Security update for bind
This update for bind fixes the following issues: Security issues fixed: - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069). - CVE-2019-6471: Fixed a reachable assert in dis…
first Oct 1, 2019 -
High max 7.8openSUSE-SU-2024:14094-1 1 CVE
python310-yt-dlp-2024.07.01-1.1 on GA media
These are all security issues fixed in the python310-yt-dlp-2024.07.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 3, 2024