12,638 results · Clear filters · Feed
-
High max 7.0SUSE-SU-2024:0989-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…
first Mar 25, 2024 -
High max 7.5SUSE-SU-2022:3896-1 1 CVE
Security update for conmon
This update for conmon fixes the following issues: conmon was updated to 2.1.3: * Stop using g_unix_signal_add() to avoid threads * Rename CLI optionlog-size-global-max to log-global-size-max Update to version 2.1.2: * add log-global-size-max option to limit …
first Nov 8, 2022 -
High max 7.5SUSE-SU-2025:1566-1 1 CVE
Security update for valkey
This update for valkey fixes the following issues: - CVE-2025-21605: Fixed output buffer denial of service (bsc#1241708)
first May 16, 2025 -
High max 7.8SUSE-SU-2023:0289-1 1 CVE
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).
first Feb 7, 2023 -
High max 7.1openSUSE-SU-2019:1750-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832). This update was imported from the SUSE…
first Jul 20, 2019 -
High max 7.8SUSE-SU-2024:3885-1 1 CVE
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes one issue. The following security issue was fixed: - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
first Nov 4, 2024 -
High max 7.5SUSE-SU-2023:4140-1 2 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to l…
first Oct 20, 2023 -
High max 8.1SUSE-SU-2023:4017-1 1 CVE
Security update for go1.21
This update for go1.21 fixes the following issues: - Updated to version 1.21.2 (bsc#1212475): - CVE-2023-39323: Fixed an arbitrary execution issue during build time due to path directive bypass (bsc#1215985).
first Oct 9, 2023 -
High max 7.5openSUSE-SU-2021:2293-1 1 CVE
Security update for jdom2
This update for jdom2 fixes the following issues: - CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)
first Jul 12, 2021 -
High max 8.3SUSE-SU-2020:1685-1 11 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: java-1_8_0-ibm was updated to Java 8.0 Service Refresh 6 Fix Pack 10 (bsc#1172277,bsc#1169511,bsc#1160968) - CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a …
first Jun 19, 2020 -
High max 8.8SUSE-SU-2023:2782-1 31 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-35828: Fixed a use-after-free flaw inside renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#121…
first Jul 4, 2023 -
High max 7.5openSUSE-SU-2023:0018-1 3 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: Updated to 1.1.2 which fixed CVE-2022-39237 * CVE-2022-39237: The sif dependency included in Apptainer before this release does not verify that the hash algorithm(s) used are cryptographically secure when …
first Jan 15, 2023 -
High max 7.8SUSE-SU-2023:4415-1 1 CVE
Security update for clamav
This update for clamav fixes the following issues: - Updated to version 0.103.11: - CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625).
first Nov 10, 2023 -
High max 8.8
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security fixes: - Mozilla Thunderbird 115.2.2 (MFSA 2023-40, bsc#1215245) - CVE-2023-4863: Fixed heap buffer overflow in libwebp (bmo#1852649). - Mozilla Thunderbird 115.2 (MFSA 2023-38, bsc#12146…
first Sep 18, 2023 -
High max 7.8SUSE-SU-2023:2344-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791). - CVE-2023-34153: Fixed a command injection issue when encoding or decoding VIDEO files (bsc#1211792).
first Jun 1, 2023 -
High max 7.5openSUSE-SU-2024:0048-1 3 CVEs
Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: Update to 4.8.6: * fixes case when crafted DNSSEC records in a zone can lead to a denial of service in Recursor https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html (boo…
first Feb 14, 2024 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 …
first Feb 13, 2023 -
High max 7.4SUSE-SU-2017:2704-1 3 CVEs
Security update for samba
This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enfor…
first Oct 11, 2017 -
High max 7.5openSUSE-SU-2020:2249-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FT…
first Dec 14, 2020 -
High max 7.8SUSE-SU-2025:02138-1 2 CVEs
Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_188 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2022-49545: ALSA: usb-audio: Cancel pen…
first Jun 26, 2025 -
High max 8.8openSUSE-SU-2024:12652-1 9 CVEs
MozillaThunderbird-102.7.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 9.8SUSE-SU-2024:2020-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
first Jun 13, 2024 -
High max 7.0SUSE-SU-2022:0818-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: Security issues fixed: - CVE-2022-23181: Make calculation of session storage location more robust (bsc#1195255) - Remove log4j (bsc#1196137)
first Mar 14, 2022 -
High max 8.2SUSE-SU-2024:1023-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…
first Mar 28, 2024 -
High max 8.2SUSE-SU-2021:1963-1 10 CVEs
Security update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store
This update for crowbar-openstack, grafana, kibana, monasca-installer, python-Django, python-py, rubygem-activerecord-session_store contains the following fixes: Security fixes included in this update: crowbar-openstack: - CVE-2016-8611: Added rate limiting f…
first Jun 11, 2021 -
High max 7.5SUSE-SU-2022:0130-1 1 CVE
Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-operator-container fixes the following issues: - CVE-2021-43565: Fixes a vulnerability in the golang.org/x/crypto/ssh package which …
first Jan 19, 2022 -
High max 7.5openSUSE-SU-2019:0170-1 4 CVEs
Security update for runc
This update for runc fixes the following issues: Security vulnerabilities addressed: - CVE-2019-5736: Effectively copying /proc/self/exe during re-exec to avoid write attacks to the host runc binary, which could lead to a container breakout (bsc#1121967) - CV…
first Feb 13, 2019 -
High max 8.6openSUSE-SU-2024:13754-1 1 CVE
crun-1.14.4-1.1 on GA media
These are all security issues fixed in the crun-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:01978-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49178: Unproce…
first Jun 17, 2025 -
High max 8.1openSUSE-SU-2024:14214-1 5 CVEs
corepack20-20.15.1-1.1 on GA media
These are all security issues fixed in the corepack20-20.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 22, 2024 -
High max 7.5openSUSE-SU-2024:14352-1 1 CVE
python39-3.9.20-2.1 on GA media
These are all security issues fixed in the python39-3.9.20-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 19, 2024 -
High max 8.8SUSE-SU-2022:1051-1 4 CVEs
Security update for salt
This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#11…
first Mar 30, 2022 -
High max 8.8SUSE-FU-2022:2135-1 4 CVEs
Feature update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Make sure SaltCacheLoader use correct fileclient (bsc#1199149) - Fix the regression caused by the patch removing strict requirement for OpenSSL 1.1.1 leading to read/write issues with ssl module for …
first Jun 20, 2022 -
High max 7.5SUSE-SU-2022:1023-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).
first Mar 29, 2022 -
High max 8.0SUSE-SU-2021:0176-1 3 CVEs
Security update for xstream
This update for xstream fixes the following issues: xstream was updated to version 1.4.15. - CVE-2020-26217: Fixed a remote code execution due to insecure XML deserialization when relying on blocklists (bsc#1180994). - CVE-2020-26258: Fixed a server-side requ…
first Jan 20, 2021 -
High max 8.1openSUSE-SU-2023:0304-1 2 CVEs
Security update for exim
This update for exim fixes the following issues: - CVE-2023-42117: Fixes Improper Neutralization of Special Elements Remote Code Execution Vulnerability (boo#1215787) - CVE-2023-42119: Fixes dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability (boo#1…
first Oct 18, 2023 -
High max 8.8openSUSE-SU-2024:12916-1 2 CVEs
system-user-velociraptor-1.0.0-2.1 on GA media
These are all security issues fixed in the system-user-velociraptor-1.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.2openSUSE-SU-2020:1769-1 1 CVE
Security update for singularity
This update for singularity fixes the following issues: Update to new version 3.6.4: - CVE-2020-15229: Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create files on the host filesys…
first Oct 29, 2020 -
High max 7.7SUSE-SU-2022:3898-1 1 CVE
Security update for sendmail
This update for sendmail fixes the following issues: - CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
first Nov 8, 2022 -
High max 7.5SUSE-SU-2025:3783-1 4 CVEs
Security update for afterburn
This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: - CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-express…
first Oct 24, 2025