12,638 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2024:12466-1 1 CVE
jhead-3.06.0.1-2.1 on GA media
These are all security issues fixed in the jhead-3.06.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4SUSE-SU-2024:3079-1 1 CVE
Security update for libqt5-qt3d
This update for libqt5-qt3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204) Other fixes: - Check for a nullptr returned from the shader manager - Fill image with transparency by …
first Sep 2, 2024 -
High max 7.8SUSE-SU-2022:4360-1 1 CVE
Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2022-45188: Fixed heap-based buffer overflow in afp_getappl() (bsc#1205393).
first Dec 8, 2022 -
High max 7.8SUSE-SU-2024:3942-1 4 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-46951: Fixed arbitrary code execution via unchecked 'Implementation' pointer in 'Pattern' color space (bsc#1232265). - CVE-2024-46953: Fixed integer overflow when parsing the page format resul…
first Nov 7, 2024 -
High max 8.2openSUSE-SU-2020:1814-1 1 CVE
Security update for singularity
This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesys…
first Nov 1, 2020 -
High max 7.5SUSE-SU-2022:1654-1 2 CVEs
Security update for documentation-suse-openstack-cloud, kibana, openstack-keystone, openstack-monasca-notification
This update for documentation-suse-openstack-cloud, kibana, openstack-keystone, openstack-monasca-notification fixes the following issues: - CVE-2021-22141: Fixed URL redirection flaw (bsc#1186868). - CVE-2021-38155: Fixed information disclosure during accoun…
first May 12, 2022 -
High max 7.5openSUSE-SU-2024:13356-1 8 CVEs
MozillaThunderbird-115.4.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2019:2237-1 6 CVEs
Security update for apache2
This update for apache2 fixes the following issues: Security issues fixed: - CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1145575). - CVE-2019-10081: Fixed mod_http2 that is vulnerable to memory …
first Aug 28, 2019 -
High max 7.5openSUSE-SU-2024:14073-1 1 CVE
ruby3.3-rubygem-http-cookie-1.0.6-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-http-cookie-1.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
High max 8.4SUSE-SU-2022:2102-1 45 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955). - CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770). - CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167). - CVE-2021…
first Jun 16, 2022 -
High max 8.4SUSE-SU-2024:2067-1 1 CVE
Security update for xdg-desktop-portal
This update for xdg-desktop-portal fixes the following issues: - CVE-2024-32462: Fix arbitrary code execution outside bwrap sandbox by checking that the first commandline item doesn't start with whitespaces or a hyphen. (bsc#1223110)
first Jun 18, 2024 -
High max 8.1SUSE-SU-2024:1895-1 4 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423) - CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424) - CVE-2024-33600: Do not…
first Jun 3, 2024 -
High max 7.8SUSE-SU-2025:01907-1 4 CVEs
Security update for the Linux Kernel (Live Patch 65 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_247 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 pac…
first Jun 11, 2025 -
High max 8.3SUSE-SU-2024:2090-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - Update to version 4.9.5 - CVE-2024-3727: Fixed a flaw that allowed attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path travers…
first Jun 19, 2024 -
High max 8.8SUSE-SU-2018:3657-1 6 CVEs
Security update for SDL_image
This update for SDL_image fixes the following issues: - CVE-2017-14442: A specially crafted BMP image could have caused a stack overflow for an attacker that can display a specially crafted image (bsc#1084304). - CVE-2017-14450: A specially crafted GIF image …
first Nov 7, 2018 -
High max 7.8SUSE-SU-2024:0428-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_97 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 8, 2024 -
High max 7.5SUSE-SU-2022:2143-1 4 CVEs
Recommended update for SUSE Manager 4.1.15 Release Notes
This update for SUSE Manager 4.1.15 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.1.15 * Salt has been upgraded to 3004 version * Grafana has been upgraded to 8.3.5 * Postgres exporter has been upgraded to 0.10.…
first Jun 20, 2022 -
High max 8.8openSUSE-SU-2022:0770-1 3 CVEs
Security update for buildah
This update for buildah fixes the following issues: buildah was updated to version 1.23.1: Update to version 1.22.3: * Update dependencies * Post-branch commit * Accept repositories on login/logout Update to version 1.22.0: * c/image, c/storage, c/common vend…
first Mar 9, 2022 -
High max 8.4SUSE-SU-2025:01610-1 3 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-43882: Fixed ToCToU betwe…
first May 21, 2025 -
High max 7.3SUSE-SU-2018:2042-1 5 CVEs
Security update for procps
This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting …
first Jul 23, 2018 -
High max 7.5openSUSE-SU-2021:3489-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
first Oct 20, 2021 -
High max 7.5SUSE-SU-2025:1014-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339).
first Mar 25, 2025 -
High max 7.0openSUSE-SU-2024:12782-1 1 CVE
hotspot-1.4.1-1.1 on GA media
These are all security issues fixed in the hotspot-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:0851-1 1 CVE
Security update for python-py
This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Jun 7, 2021 -
High max 7.8SUSE-SU-2024:0156-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with uni…
first Jan 18, 2024 -
High max 7.5SUSE-SU-2022:2991-1 1 CVE
Security update for libtirpc
This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed an uncontrolled file descriptor consumption, which could be exploited by remote attackers to prevent applications using the library from accepting new connections (bsc#1201680). Non-…
first Sep 1, 2022 -
High max 8.3SUSE-SU-2020:1684-1 11 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: java-1_8_0-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1172277,bsc#1169511,bsc#1160968) - CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a …
first Jun 19, 2020 -
High max 7.4openSUSE-SU-2024:14580-1 1 CVE
liboqs-devel-0.12.0-1.1 on GA media
These are all security issues fixed in the liboqs-devel-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 13, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).
first Feb 25, 2025 -
High max 8.0SUSE-SU-2024:0550-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.2: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).
first Feb 20, 2024 -
High max 8.1SUSE-SU-2022:1817-1 1 CVE
Security update for rsyslog
This update for rsyslog fixes the following issues: - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061).
first May 23, 2022 -
High max 7.8SUSE-SU-2025:01958-1 3 CVEs
Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_198 fixes several issues. The following security issues were fixed: - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc…
first Jun 13, 2025 -
High max 7.4SUSE-SU-2024:2578-1 5 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Updated to version 21.0.4+7 (July 2024 CPU): - CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046). - CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#1228047…
first Jul 22, 2024 -
High max 7.5SUSE-SU-2022:4397-1 2 CVEs
Security update for go1.19
This update for go1.19 fixes the following issues: Update to version 1.19.4, includes the following security fixes: - CVE-2022-41717: net/http: limit canonical header cache by bytes, not entries (bsc#1206135). - CVE-2022-41720: os, net/http: avoid escapes fro…
first Dec 9, 2022 -
High max 7.5SUSE-SU-2022:3305-1 1 CVE
Security update for libtirpc
This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680).
first Sep 19, 2022 -
High max 7.8openSUSE-SU-2022:0901-1 5 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2022-26125, CVE-2022-26126: Fixed buffer overflows in unpack_tlv_router_cap() (bsc#1196505, bsc#1196506). - CVE-2022-26127: Fixed heap buffer overflow in babel_packet_examin() (bsc#1196503). - CVE-2022-261…
first Mar 18, 2022 -
High max 7.5SUSE-SU-2024:0574-1 6 CVEs
Security update for bind
This update for bind fixes the following issues: Update to release 9.16.48: - CVE-2023-50387: Fixed a denial-of-service caused by DNS messages containing a lot of DNSSEC signatures (bsc#1219823). - CVE-2023-50868: Fixed a denial-of-service caused by NSEC3 clo…
first Feb 21, 2024 -
High max 7.1SUSE-SU-2023:2508-1 1 CVE
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-2977: Fixed out of bounds read in pkcs15 cardos_have_verifyrc_package() (bsc#1211894).
first Jun 14, 2023 -
High max 7.5SUSE-SU-2022:2137-1 1 CVE
Security update for golang-github-prometheus-node_exporter
This update for golang-github-prometheus-node_exporter fixes the following issues: - CVE-2022-21698: Update vendor tarball with prometheus/client_golang 1.11.1 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239) - Update to 1.3.0 * [CHANGE] Add path label to rapl col…
first Jun 20, 2022 -
High max 7.1SUSE-SU-2022:3705-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2022-31197: Fixed SQL injection vulnerability (bsc#1202170).
first Oct 24, 2022