12,638 results · Clear filters · Feed
-
High max 7.8SUSE-SU-2020:1663-1 55 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores …
first Jun 18, 2020 -
High max 7.8SUSE-SU-2022:3370-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root (bsc#1199695).…
first Sep 24, 2022 -
High max 7.2SUSE-SU-2022:4151-1 2 CVEs
Security update for cni-plugins
This update for cni-plugins fixes the following issues: - CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
first Nov 21, 2022 -
High max 7.8SUSE-SU-2023:3924-1 3 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-4273: Fixed a flaw in the exFAT d…
first Oct 1, 2023 -
High max 7.5SUSE-SU-2020:0035-1 1 CVE
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issue fixed: - CVE-2019-16884: Fixed incomplete patch for LSM bypass via malicious Docker image that mount over a /proc directory (bsc#115230…
first Jan 8, 2020 -
High max 8.8SUSE-SU-2022:2278-1 1 CVE
Security update for salt
This update for salt fixes the following issues: - CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could by used to bypass authentication when using PAM (bsc#1200566)
first Jul 6, 2022 -
High max 7.5SUSE-SU-2022:2949-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Updated to Java 8.0 Service Refresh 7 Fix Pack 11 (bsc#1202427): - CVE-2022-34169: Fixed an integer truncation issue in the Xalan Java XSLT library that occurred when processing malicious stylesheet…
first Aug 31, 2022 -
High max 7.8SUSE-SU-2024:1907-1 2 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2020-22021: Fixed a buffer overflow vulnerability in filter_edges() (bsc#1186586) - CVE-2023-51794: Fixed a heap buffer overflow in libavfilter. (bsc#1223437)
first Jun 3, 2024 -
High max 7.8openSUSE-SU-2024:12646-1 1 CVE
tmux-3.3a-2.1 on GA media
These are all security issues fixed in the tmux-3.3a-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2021:2952-1 3 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.12+7 - CVE-2021-2369: Fixed JAR file handling problem containing multiple MANIFEST.MF files. (bsc#1188565) - CVE-2021-2388: Fixed a flaw inside the Hotspot component performed ra…
first Sep 3, 2021 -
High max 7.8SUSE-SU-2021:2686-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: It was possible to trigger Remote code execution due to a integer overflow (CVE-2021-38185, bsc#1189206)
first Aug 14, 2021 -
High max 8.8openSUSE-SU-2024:0378-1 1 CVE
Security update for chromium
This update for chromium fixes the following issues: - Chromium 131.0.6778.85 (stable released 2024-11-19) (boo#1233534) * CVE-2024-11395: Type Confusion in V8
first Nov 25, 2024 -
High max 8.8openSUSE-SU-2024:14314-1 3 CVEs
klp-build-0~20240902.c95cc9e-1.1 on GA media
These are all security issues fixed in the klp-build-0~20240902.c95cc9e-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 5, 2024 -
High max 7.5SUSE-SU-2018:0457-1 6 CVEs
Security update for quagga
This update for quagga fixes the following issues: - The Quagga BGP daemon contained a bug in the AS_PATH size calculation that could have been exploited to facilitate a remote denial-of-service attack via specially crafted BGP UPDATE messages. [CVE-2017-1622…
first Feb 16, 2018 -
High max 8.1SUSE-SU-2022:2292-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21707: Fixed a special character breaks path in xml parsing. (bsc#1193041) - CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645) - CVE-2022-31626: Fixed buffer over…
first Jul 6, 2022 -
High max 8.4
GraphicsMagick-1.3.25-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:13202-1 16 CVEs
MozillaThunderbird-115.2.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2024:12426-1 1 CVE
starboard-0.15.11-1.1 on GA media
These are all security issues fixed in the starboard-0.15.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:3842-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).
first Sep 27, 2023 -
High max 7.8SUSE-SU-2020:3204-1 5 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-120 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privil…
first Nov 6, 2020 -
High max 7.0SUSE-SU-2018:2349-1 2 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 12)
This update for the Linux Kernel 3.12.61-52_122 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …
first Aug 16, 2018 -
High max 7.5openSUSE-SU-2024:12316-1 1 CVE
glibc-2.36-3.1 on GA media
These are all security issues fixed in the glibc-2.36-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:1325-1 19 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 74.0.3729.108 boo#1133313: * CVE-2019-5805: Use after free in PDFium * CVE-2019-5806: Integer overflow in Angle * CVE-2019-5807: Memory corruption in V8 * CVE-2019-5808: Use after fr…
first May 4, 2019 -
High max 7.8SUSE-SU-2025:02451-1 3 CVEs
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_153 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2025-21772: partitions: mac: fix handling…
first Jul 21, 2025 -
High max 7.8SUSE-SU-2023:3988-1 24 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of…
first Oct 5, 2023 -
High max 8.0SUSE-SU-2018:1548-1 4 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP2)
This update for the Linux Kernel 4.4.90-92_45 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…
first Jun 5, 2018 -
High max 8.2openSUSE-SU-2021:2662-1 5 CVEs
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call (bsc#1183803) - Update to version 7.5.7: * Updated relref to 'Configuring exemplars' section (#34240) (…
first Aug 12, 2021 -
High max 8.2openSUSE-SU-2022:0712-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: Update to flatpak 1.10.7: - CVE-2022-21682: Introduce new option --nofilesystem=host:reset to support flatpak-builder 1.2.2 (bsc#1194611). - CVE-2021-43860: A malicious repository could hav sent invalid appl…
first Mar 4, 2022 -
High max 7.5SUSE-SU-2016:2470-1 7 CVEs
Security update for nodejs4
This update brings the new upstream nodejs LTS version 4.6.0, fixing bugs and security issues: * Nodejs embedded openssl version update + upgrade to 1.0.2j (CVE-2016-6304, CVE-2016-2183, CVE-2016-2178, CVE-2016-6306, CVE-2016-7052) + remove support for dynami…
first Oct 6, 2016 -
High max 7.5SUSE-SU-2025:4156-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)
first Nov 21, 2025 -
High max 7.5SUSE-SU-2024:3871-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262) - CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups (DHEATATTACK) (bsc#1230698)
first Nov 1, 2024 -
High max 8.0SUSE-SU-2025:02070-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds ac…
first Jun 23, 2025 -
High max 8.8SUSE-SU-2023:3235-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. (bsc#1213126)
first Aug 8, 2023 -
High max 7.9
Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_60 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-bound…
first Mar 28, 2023 -
High max 7.5SUSE-SU-2020:3016-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)
first Oct 23, 2020 -
High max 7.5openSUSE-SU-2020:2189-1 1 CVE
Security update for python
This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project.
first Dec 7, 2020 -
High max 7.5openSUSE-SU-2024:10723-1 1 CVE
docker-distribution-registry-2.7.1-7.2 on GA media
These are all security issues fixed in the docker-distribution-registry-2.7.1-7.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2025:0737-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.20: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).
first Feb 28, 2025 -
High max 7.0SUSE-SU-2018:4086-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: Security issue fixed: - CVE-2018-16847: Fixed an out of bounds r/w buffer access in cmb operations (bsc#1114529). Non-security issue fixed: - Fixed serial console issue in SLES 12 SP2 that triggered a qemu-kvm …
first Dec 12, 2018 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 6, 2021