12,638 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2023:0512-1 1 CVE
Security update for libraw
This update for libraw fixes the following issues: - CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).
first Feb 24, 2023 -
High max 7.5SUSE-SU-2024:2881-1 1 CVE
Security update for python-gunicorn
This update for python-gunicorn fixes the following issues: - CVE-2024-1135: Fixed HTTP Request Smuggling due to improperly validate Transfer-Encoding headers (bsc#1222950)
first Aug 12, 2024 -
High max 7.8openSUSE-SU-2024:11379-1 3 CVEs
libshadowsocks-libev2-3.3.5-1.9 on GA media
These are all security issues fixed in the libshadowsocks-libev2-3.3.5-1.9 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:0136-1 2 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 16, 2025 -
High max 8.8SUSE-SU-2018:1319-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 (bsc#1092548) Security issues fixed: - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicio…
first May 16, 2018 -
High max 8.8openSUSE-SU-2024:14511-1 8 CVEs
chromedriver-131.0.6778.69-1.1 on GA media
These are all security issues fixed in the chromedriver-131.0.6778.69-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 20, 2024 -
High max 8.0SUSE-SU-2022:3229-1 40 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to version 9.0 with patch level 0313: - CVE-2022-2183: Fixed out-of-bounds read through get_lisp_indent() (bsc#1200902). - CVE-2022-2182: Fixed heap-based buffer overflow through parse_cmd_address() (bsc…
first Sep 9, 2022 -
High max 7.0openSUSE-SU-2019:0261-1 1 CVE
Security update for gvfs
This update for gvfs fixes the following issues: Security vulnerability fixed: - CVE-2019-3827: Fixed an issue whereby an unprivileged user was not prompted to give a password when acessing root owned files. (bsc#1125084) This update was imported from the SUS…
first Mar 23, 2019 -
High max 7.5openSUSE-SU-2021:2892-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 (jsc#SLE-19970): Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled…
first Aug 31, 2021 -
High max 7.8SUSE-SU-2023:3844-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_142 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…
first Sep 27, 2023 -
High max 7.5SUSE-SU-2025:3753-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Ignored invalid date when processing cookies to prevent out-of-bounds read (bsc#1250562).
first Oct 23, 2025 -
High max 7.5SUSE-SU-2023:2210-1 1 CVE
Security update for rekor
This update for rekor fixes the following issues: Updated to version 1.1.1 (jsc#SLE-23476): Functional Enhancements - Refactor Trillian client with exported methods (#1454) - Switch to official redis-go client (#1459) - Remove replace in go.mod (#1444) - Add …
first May 16, 2023 -
High max 7.5SUSE-SU-2018:3975-1 7 CVEs
Security update for kvm
This update for kvm fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the ne…
first Dec 4, 2018 -
High max 7.5SUSE-SU-2024:0605-1 8 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 20: [bsc#1219843] Security fixes: - CVE-2023-33850: Fixed information disclosure vulnerability due to the consumed GSKit library (bsc#1219843). - CVE-2024…
first Feb 23, 2024 -
High max 7.8SUSE-SU-2022:2166-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
first Jun 23, 2022 -
High max 8.4openSUSE-SU-2021:0977-1 21 CVEs
Security update for virtualbox
This update for virtualbox fixes the following issues: - Update vboxdrv.sh per boo#1186361 Version bump to 6.1.22 (released April 29 2021 by Oracle) - This is a maintenance release. The following items were fixed and/or added: - VMM: Improved performance of 6…
first Oct 9, 2021 -
High max 8.8SUSE-SU-2025:1120-1 1 CVE
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes one issue. The following security issue was fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228578).
first Apr 2, 2025 -
High max 7.7SUSE-SU-2023:0514-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367). - CVE-2023-0567: Fixed v…
first Feb 24, 2023 -
High max 7.5SUSE-SU-2022:4622-1 3 CVEs
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abina…
first Dec 27, 2022 -
High max 7.5openSUSE-SU-2024:10748-1 5 CVEs
expat-2.4.1-1.2 on GA media
These are all security issues fixed in the expat-2.4.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:4044-1 1 CVE
Security update for python-cryptography, python-cryptography-vectors
This update for python-cryptography, python-cryptography-vectors fixes the following issues: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version - Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352) - update to…
first Nov 17, 2022 -
High max 8.8SUSE-SU-2022:3440-1 6 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477): - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages. - CVE-2022-40960: Fixed data-race when parsing…
first Sep 27, 2022 -
High max 9.8SUSE-SU-2025:03464-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2025-9230 incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250232).
first Oct 7, 2025 -
High max 7.5SUSE-SU-2023:0306-1 3 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-430…
first Feb 7, 2023 -
High max 7.5SUSE-SU-2019:1866-1 3 CVEs
Security update for tomcat
This update for tomcat to version 9.0.21 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fi…
first Jul 17, 2019 -
High max 7.8SUSE-SU-2022:1242-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_77 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user pri…
first Apr 15, 2022 -
High max 8.8openSUSE-SU-2020:0079-1 14 CVEs
Security update for glusterfs
This update for glusterfs fixes the following issues: glusterfs was update to release 3.12.15: * Fixed a number of bugs and security issues: - CVE-2018-1088, CVE-2018-1112 [boo#1090084], CVE-2018-10904 [boo#1107018], CVE-2018-10907 [boo#1107019], CVE-2018-109…
first Jan 19, 2020 -
High max 7.5SUSE-SU-2018:2715-1 1 CVE
Security update for curl
This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code (bsc#1106019) This non-security issue was fixed: - Fixed erroneous debug message when paired with OpenSS…
first Sep 14, 2018 -
High max 7.1SUSE-SU-2024:0525-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: Update to version 0.9.8 (jsc#PED-7719): * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209) * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126) * Fix CVE-2023-6…
first Feb 19, 2024 -
High max 7.5SUSE-SU-2022:0133-1 1 CVE
Security update for openstack-monasca-agent, spark, spark-kit, zookeeper
This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues: - CVE-2021-4104: Remove JMSAppender from log4j jars (bsc#1193662)
first Jan 20, 2022 -
High max 7.2SUSE-SU-2019:2613-1 1 CVE
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_101 fixes one issue. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptor…
first Oct 8, 2019 -
High max 8.3SUSE-SU-2024:1987-1 2 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - Update to version 1.14.4: - CVE-2024-3727: Fixed a vulnerability that allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, resource exhaustion, local path trave…
first Jun 11, 2024 -
High max 7.8SUSE-SU-2022:0255-1 8 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15)
This update for the Linux Kernel 4.12.14-150_66 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where…
first Feb 1, 2022 -
High max 8.5
Security update for xstream
This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…
first Oct 20, 2021 -
High max 7.8SUSE-SU-2024:1351-2 1 CVE
Security update for graphviz
This update for graphviz fixes the following issues: - CVE-2023-46045: Fixed out-of-bounds read via a crafted config6a file (bsc#1219491)
first Sep 3, 2024 -
High max 7.3SUSE-SU-2022:3751-1 2 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1661440542.6cbe0da * Use standard susemanager.conf * Move image services to dracut-saltboot package * Use salt bundle golang-github-lusitaniae-apache_exporter: - Update to upstre…
first Oct 26, 2022 -
High max 7.5openSUSE-SU-2022:0499-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-21712: Fixed secret exposure in cross-origin redirects by properly removing sensitive headers when redirecting to a different origin (bsc#1195667).
first Feb 18, 2022 -
High max 8.8openSUSE-SU-2024:13413-1 3 CVEs
postgresql15-15.5-1.1 on GA media
These are all security issues fixed in the postgresql15-15.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:13160-1 1 CVE
ruby3.2-rubygem-json_pure-2.6.3-1.3 on GA media
These are all security issues fixed in the ruby3.2-rubygem-json_pure-2.6.3-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:0720-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441).
first Mar 4, 2022