6,767 results · Clear filters · Feed
-
Medium max 4.4SUSE-SU-2025:0803-1 1 CVE
Security update for go1.23
This update for go1.23 fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy, golang.org/x/net/http/httpproxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238572) Other fixes: - Updated go version to go1.23.7 (bsc#1229122): * go#71985 go#71984…
first Mar 6, 2025 -
Medium max 5.5SUSE-SU-2023:0578-1 2 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_76 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics w…
first Feb 28, 2023 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_141 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
first Mar 2, 2022 -
Medium max 6.2SUSE-SU-2023:1857-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in Prometheus Exporter Toolkit (bsc#1208049).
first Apr 14, 2023 -
Medium max 5.5openSUSE-SU-2021:0846-1 1 CVE
Security update for umoci
This update for umoci fixes the following issues: Update to v0.4.7 (bsc#1184147). - CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147). This update was imported from the SUSE:SLE-15:Update update project.
first Jun 7, 2021 -
Medium max 5.5openSUSE-SU-2024:12643-1 1 CVE
libtiff-devel-32bit-4.5.0-2.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:12174-1 6 CVEs
libsnmp40-32bit-5.9.2-1.1 on GA media
These are all security issues fixed in the libsnmp40-32bit-5.9.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2023:3661-1 1 CVE
Security update for gcc12
This update for gcc12 fixes the following issues: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
first Sep 18, 2023 -
Medium max 4.3openSUSE-SU-2024:11408-1 2 CVEs
libipa_hbac-devel-2.5.2-1.4 on GA media
These are all security issues fixed in the libipa_hbac-devel-2.5.2-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.0SUSE-SU-2025:1339-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-32364: Fixed a floating point exception. (bsc#1240880) - CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881)
first Apr 17, 2025 -
Medium max 5.6SUSE-SU-2018:2344-2 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to…
first Oct 18, 2018 -
Medium max 5.3openSUSE-SU-2024:12756-1 1 CVE
java-1_8_0-openj9-1.8.0.362-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.362-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2023:0519-1 1 CVE
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_131 fixes one issue. The following security issue was fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
first Feb 24, 2023 -
Medium max 6.3openSUSE-SU-2023:0096-1 1 CVE
Security update for liferea
liferea was updated to version 1.14.1: + Fix CVE-2023-1350 - Remote code execution on feed enrichment (boo#1209190). Update to version 1.14.0: + New 'Reader mode' preference that allows stripping all web content + Implement support for Webkits Intelligent Tra…
first Apr 27, 2023 -
Medium max 5.9openSUSE-SU-2021:0476-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the security issue: * CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extensi…
first Mar 25, 2021 -
Medium max 5.0openSUSE-SU-2021:2637-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035). - CVE-2021-21705: Fixed SSRF bypass in FILTER_VALIDATE_URL (bsc#1188037).
first Aug 6, 2021 -
Medium max 6.0SUSE-SU-2024:3785-1 3 CVEs
Security update for pcp
This update for pcp fixes the following issues: pcp was updated from version 5.2.5 to version 6.2.0 (jsc#PED-8192, jsc#PED-8389): - Security issues fixed: * CVE-2024-45770: Fixed a symlink attack that allows escalating from the pcp to the root user (bsc#12305…
first Oct 30, 2024 -
Medium max 4.4SUSE-SU-2023:0631-1 2 CVEs
security update for mariadb
This update for mariadb fixes the following issues: - CVE-2022-38791: Fixed deadlock in compress_write in extra/mariabackup/ds_compress.cc (bsc#1202863). Version update from 10.4.26 to 10.4.28 (fixes CVE-2022-38791 and CVE-2022-38791). - Update to 10.4.28: * …
first Mar 6, 2023 -
Medium max 5.1SUSE-SU-2021:0097-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-20934: Fixed a use-after-free in show_numa_stats() because NUMA fault statistics were inappropriately freed,…
first Jan 12, 2021 -
Medium max 6.5SUSE-SU-2019:0499-1 3 CVEs
Security update for ceph
This update for ceph fixes the following issues: Security issues fixed: - CVE-2018-14662: mon: limit caps allowed to access the config store (bsc#1111177) - CVE-2018-16846: rgw: enforce bounds on max-keys/max-uploads/max-parts (bsc#1114710) - CVE-2018-16889: …
first Feb 26, 2019 -
Medium max 5.9SUSE-SU-2021:1314-1 2 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.11+9 (April 2021 CPU) * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055) * CVE-2021-2161: Fixed incorrect handling of par…
first Apr 26, 2021 -
Medium max 5.1openSUSE-SU-2020:2193-1 7 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-29371: An issue was discovered in romfs_dev_read in fs/romfs/storage.c where uninitialized memory leaks to userspace, aka CI…
first Dec 7, 2020 -
Medium max 6.9SUSE-SU-2025:1456-1 3 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020) - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) Other fix…
first May 7, 2025 -
Medium max 5.5SUSE-SU-2018:1762-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3665: Prevent disclosure of FPU registers (including XMM and AVX registers) between processes. These registers…
first Jun 20, 2018 -
Medium max 4.6SUSE-SU-2023:4873-1 2 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2023-42822: Fixed unchecked access to font glyph info (bsc#1215803). - CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).
first Dec 14, 2023 -
Medium max 6.5SUSE-SU-2022:3341-1 2 CVEs
Security update for dpdk
This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903). - CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).
first Sep 23, 2022 -
Medium max 5.3SUSE-SU-2023:4518-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 21, 2023 -
Medium max 4.3SUSE-SU-2025:4148-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-59798: Fixed stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. (bsc#1250353) - CVE-2025-59799: Fixed stack-based buffer overflow in pdfmark_coerce_dest in devices/vec…
first Nov 20, 2025 -
Medium max 6.5SUSE-SU-2022:0477-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequenc…
first Feb 17, 2022 -
Medium max 5.3SUSE-SU-2022:0151-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25219: Fixed flaw that allowed abusing lame cache to severely degrade resolver performance (bsc#1192146).
first Jan 21, 2022 -
Medium max 6.4openSUSE-SU-2020:0494-1 2 CVEs
Security update for ceph
This update for ceph fixes the following issues: - CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403) - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484). This update was imported from the SUSE:SLE-15-SP1:Update up…
first Apr 10, 2020 -
Medium max 6.1openSUSE-SU-2025:15030-1 3 CVEs
opentofu-1.9.1-1.1 on GA media
These are all security issues fixed in the opentofu-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2025 -
Medium max 5.9openSUSE-SU-2024:14598-1 3 CVEs
docker-stable-24.0.9_ce-6.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-6.1 package on the GA media of openSUSE Tumbleweed.
first Dec 18, 2024 -
Medium max 5.3openSUSE-SU-2024:14050-1 1 CVE
forgejo-7.0.4-1.1 on GA media
These are all security issues fixed in the forgejo-7.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2024 -
Medium max 5.1openSUSE-SU-2020:0880-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035). This update was imported from the SUSE:SLE-15:Update update project.
first Jun 27, 2020 -
Medium max 5.9SUSE-SU-2023:3017-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). Bugfixes: - Fixed trust relationship failure (bsc#1213384).
first Jul 28, 2023 -
Medium max 6.2openSUSE-SU-2024:13690-1 1 CVE
libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2022:3805-1 3 CVEs
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42…
first Oct 27, 2022 -
Medium max 6.1openSUSE-SU-2020:0935-1 16 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19462: relay_open in kernel/relay.c allowed local users to cause a denial of service (such as relay blockage) by triggering …
first Jul 16, 2020 -
Medium max 5.4SUSE-SU-2025:0006-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template (bsc#1234808) - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method (bsc#123…
first Jan 2, 2025