12,638 results · Clear filters · Feed
-
High max 7.3SUSE-SU-2025:0857-1 1 CVE
Security update for build
This update for build fixes the following issues: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories (bnc#1230469) Other fixes: - Fixed behaviour when using '--shell' aka 'osc shell' option in a VM build. Startup is faster an…
first Mar 13, 2025 -
High max 7.8SUSE-SU-2023:3656-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial…
first Sep 18, 2023 -
High max 7.0SUSE-SU-2020:1582-1 1 CVE
Security update for rubygem-bundler
This update for rubygem-bundler fixes the following issue: - CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution (bsc#1143436).
first Jun 9, 2020 -
High max 7.5SUSE-SU-2025:02052-1 2 CVEs
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues: - CVE-2025-47947: Fixed denial of service through sanitiseMatchedBytes (bsc#1243978). - CVE-2025-48866: Fixed denial of service via excessive number of arguments in sanitiseArg (bsc#1243976).
first Jun 20, 2025 -
High max 7.4openSUSE-SU-2025:14821-1 1 CVE
ruby3.4-rubygem-grpc-1.70.1-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-grpc-1.70.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 18, 2025 -
High max 7.5SUSE-SU-2019:1215-1 1 CVE
Security update for python-Django1
This update for python-Django1 fixes the following issue: Security issue fixed: - CVE-2019-6975: Fixed memory exhaustion in django.utils.numberformat.format() (bsc#1124991).
first May 10, 2019 -
High max 8.2SUSE-SU-2026:0086-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: Security fixes: - CVE-2025-14177: getimagesize() function may leak uninitialized heap memory into the APPn segments when reading images in multi-chunk mode (bsc#1255710). - CVE-2025-14178: heap buffer overflow …
first Jan 9, 2026 -
High max 8.7SUSE-SU-2021:2746-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a …
first Aug 17, 2021 -
High max 8.1SUSE-SU-2022:4254-1 1 CVE
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
first Nov 28, 2022 -
High max 7.8SUSE-SU-2023:4058-1 18 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-39193: Fixed an out of bounds read…
first Oct 12, 2023 -
High max 7.8SUSE-SU-2021:0806-1 2 CVEs
Security update for crmsh
This update for crmsh fixes the following issues: - Update to version 4.3.0+20210219.5d1bf034: * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571) * Fix: bootstrap: setup authorized ssh acc…
first Mar 17, 2021 -
High max 7.5SUSE-SU-2024:1354-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2024-24476: Fixed a denial of service in ws_manuf_lookup_str() (bsc#1220181)
first Apr 19, 2024 -
High max 7.5openSUSE-SU-2021:0081-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issue: - CVE-2020-17527: Fixed a HTTP/2 request header mix-up (bsc#1179602). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Jan 16, 2021 -
High max 8.8SUSE-SU-2023:2233-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2023-24805: Fixed a remote code execution in the beh backend (bsc#1211340).
first May 17, 2023 -
High max 7.5SUSE-SU-2022:4463-1 2 CVEs
Security update for containerd
This update for containerd fixes the following issues: Update to containerd v1.6.12 including Docker v20.10.21-ce (bsc#1206065). Also includes the following fix: - CVE-2022-23471: host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - …
first Dec 13, 2022 -
High max 7.8SUSE-SU-2025:4305-1 6 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#125293…
first Nov 28, 2025 -
High max 8.8SUSE-SU-2024:2950-1 1 CVE
Security update for python36-setuptools
This update for python36-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)
first Aug 16, 2024 -
High max 7.5openSUSE-SU-2024:11830-1 3 CVEs
ruby3.1-rubygem-puma-4-4.3.10-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-puma-4-4.3.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6openSUSE-SU-2024:11554-1 1 CVE
velero-plugin-for-aws-1.3.0-1.1 on GA media
These are all security issues fixed in the velero-plugin-for-aws-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2025:0018-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: - CVE-2024-11614: Fixed Denial Of Service from malicious guest on hypervisors using DPDK Vhost library (bsc#1234718)
first Jan 6, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071): - CVE-2024-23252: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010) - CVE-2024-23254: Fixed a vulnerability where …
first Jun 7, 2024 -
High max 7.5SUSE-SU-2022:2108-1 2 CVEs
Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1
This update for rubygem-actionpack-5_1 and rubygem-activesupport-5_1 fixes the following issues: - CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication (bsc#1185780) - CVE-2022-23633: Fixed possible exposure of informatio…
first Jun 16, 2022 -
High max 7.8SUSE-SU-2024:2797-1 2 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-35950: drm/client: Fully protec…
first Aug 6, 2024 -
High max 8.8SUSE-SU-2021:1524-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2021-3518: Fixed a use after free in xinclude.c:xmlXIncludeDoProcess (bsc#1185408). - CVE-2021-3517: Fixed a heap based buffer overflow in entities.c:xmlEncodeEntitiesInternal (bsc#1185410). - CVE-2021…
first May 5, 2021 -
High max 8.3SUSE-SU-2025:0752-1 7 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Advertise messages. (bsc#1218879) - CVE-2023-45230: buffer overflow in the DHCPv6 client in edk2 via a long Server ID o…
first Feb 28, 2025 -
High max 8.2openSUSE-SU-2024:13436-1 1 CVE
gdb-13.2-3.1 on GA media
These are all security issues fixed in the gdb-13.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2019:2109-1 7 CVEs
Security update for SDL_image
This update for SDL_image fixes the following issues: Update SDL_Image to new snapshot 1.2.12+hg695. Security issues fixed: * TALOS-2019-0821 CVE-2019-5052: exploitable integer overflow vulnerability when loading a PCX file (boo#1140421) * TALOS-2019-0841 CVE…
first Sep 10, 2019 -
High max 7.8openSUSE-SU-2024:10279-1 4 CVEs
libblkid-devel-2.28.2-2.1 on GA media
These are all security issues fixed in the libblkid-devel-2.28.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2022:4007-1 21 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42…
first Nov 16, 2022 -
High max 7.7openSUSE-SU-2024:10727-1 8 CVEs
dpdk-19.11.8-2.7 on GA media
These are all security issues fixed in the dpdk-19.11.8-2.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4openSUSE-SU-2025:15003-1 1 CVE
perl-32bit-5.40.2-1.1 on GA media
These are all security issues fixed in the perl-32bit-5.40.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2025 -
High max 7.5openSUSE-SU-2023:0178-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742) - CVE-2023-24580: Fixed potential denial-of-service vulnerability in fi…
first Jul 13, 2023 -
High max 8.8SUSE-SU-2023:4361-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files (bsc#1215793).
first Nov 3, 2023 -
High max 7.5SUSE-SU-2025:01649-1 1 CVE
Security update for python-tornado6
This update for python-tornado6 fixes the following issues: - CVE-2025-47287: excessive logging when parsing malformed `multipart/form-data` can lead to a denial-of-service (bsc#1243268).
first May 22, 2025 -
High max 7.8SUSE-SU-2025:03186-1 10 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…
first Sep 12, 2025 -
High max 7.3SUSE-SU-2018:2451-2 5 CVEs
Security update for procps
This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting …
first Nov 26, 2018 -
High max 7.5SUSE-SU-2017:0607-3 3 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prev…
first Mar 6, 2017 -
High max 7.8SUSE-SU-2023:2714-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE…
first Jun 29, 2023 -
High max 8.3SUSE-SU-2020:1569-2 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version jdk8u252 fixes the following issues: - CVE-2020-2754: Forward references to Nashorn (bsc#1169511) - CVE-2020-2755: Improve Nashorn matching (bsc#1169511) - CVE-2020-2756: Better mapping of serial ENUMs (bsc#116951…
first Jul 14, 2020 -
High max 7.8SUSE-SU-2024:2585-1 3 CVEs
Security update for kernel-firmware-nvidia-gspx-G06
This update for kernel-firmware-nvidia-gspx-G06 fixes the following issues: Update to version 555.42.06 for CUDA. Security Update 550.90.07: - CVE-2024-0090: Fixed out of bounds write (bsc#1223356). - CVE-2024-0092: Fixed incorrect exception handling (bsc#122…
first Jul 22, 2024