6,771 results · Clear filters · Feed
-
Medium max 6.7SUSE-SU-2023:4388-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoi…
first Nov 9, 2023 -
Medium max 5.3SUSE-SU-2023:2843-1 1 CVE
Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2023-33201: Fixed an issue with the X509LDAPCertStoreSpi where a specially crafted certificate subject could be used to try and extract extra information out of an LDAP server (bsc#1212508).
first Jul 17, 2023 -
Medium max 5.9SUSE-SU-2023:3394-1 1 CVE
Security update for postfix
This update for postfix fixes the following issues: - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196). - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning…
first Aug 23, 2023 -
Medium max 6.5SUSE-SU-2024:1105-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-28746: Register file data sampling. (bsc#1221332) - CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334)
first Apr 3, 2024 -
Medium max 4.0SUSE-SU-2023:3229-1 1 CVE
Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2023-28362: Fixed possible XSS via User Supplied Values to redirect_to (bsc#1213312).
first Aug 8, 2023 -
Medium max 6.5SUSE-SU-2023:2544-1 2 CVEs
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin (bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy imposed by the ServiceAcco…
first Jun 19, 2023 -
Medium max 6.4SUSE-SU-2023:2609-1 1 CVE
Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p17: * Fix some regressions of 4.2.8p16 Update to 4.2.8p16: * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date * [Sec 3807], bsc#1210390, CVE-2023-26555: praecis_parse() in th…
first Jun 22, 2023 -
Medium max 6.2SUSE-SU-2023:1827-1 2 CVEs
Security update for containerd
This update for containerd fixes the following issues: Update to containerd v1.6.19: Security fixes: - CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423). - CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).
first Apr 13, 2023 -
Medium max 4.2SUSE-SU-2023:0606-1 1 CVE
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487).
first Mar 3, 2023 -
Medium max 5.5SUSE-SU-2023:2429-1 1 CVE
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_63 fixes one issue. The following security issue was fixed: - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
first Jun 6, 2023 -
Medium max 5.5SUSE-SU-2023:2385-1 1 CVE
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_145 fixes one issue. The following security issue was fixed: - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
first Jun 6, 2023 -
Medium max 5.3SUSE-SU-2023:1909-1 1 CVE
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2023-22742: Fixed SSH keys verification failure (bsc#1207364).
first Apr 19, 2023 -
Medium max 5.3SUSE-SU-2023:4572-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: - CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) - CVE-2023-22067: Fixed IO…
first Nov 27, 2023 -
Medium max 5.3SUSE-SU-2023:2241-1 1 CVE
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - CVE-2023-21971: Fixed a crash in MySQL Connectors that could be triggered by an authenticated remote user (bsc#1211247). - Ship protobuf 3.9.2 compatible generated files to support older distr…
first May 18, 2023 -
Medium max 5.3SUSE-SU-2023:0720-1 2 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Updated to version jdk8u362 (icedtea-3.26.0): - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#120724…
first Mar 14, 2023 -
Medium max 5.3SUSE-SU-2023:3866-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache director…
first Sep 28, 2023 -
Medium max 6.7SUSE-SU-2023:3046-1 2 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw…
first Jul 31, 2023 -
Medium max 5.5SUSE-SU-2023:1994-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).
first Apr 25, 2023 -
Medium max 6.5SUSE-SU-2023:3712-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: Updated to version 10.4.31: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404).
first Sep 20, 2023 -
Medium max 6.2SUSE-SU-2023:0460-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047).
first Feb 20, 2023 -
Medium max 5.9SUSE-SU-2022:4633-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).
first Dec 28, 2022 -
Medium max 5.9SUSE-SU-2023:3096-1 2 CVEs
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use …
first Aug 1, 2023 -
Medium max 5.9SUSE-SU-2023:2634-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#…
first Jun 26, 2023 -
Medium max 5.9SUSE-SU-2023:0581-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).
first Feb 28, 2023 -
Medium max 6.5SUSE-SU-2022:3804-1 3 CVEs
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42…
first Oct 27, 2022 -
Medium max 4.7SUSE-SU-2023:0451-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2022-41946: Fixed a local information disclosure issue due to improper handling of temporary files (bsc#1206921).
first Feb 20, 2023 -
Medium max 4.7SUSE-SU-2023:0104-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2022-41946: Fixed a local information disclosure issue due to improper handling of temporary files (bsc#1206921).
first Jan 19, 2023 -
Medium max 6.5SUSE-SU-2023:3446-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling'. (bsc#1214083, XSA-435) - CVE-2023-…
first Aug 28, 2023 -
Medium max 6.5SUSE-SU-2023:3395-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling'. (bsc#1214083, XSA-435) - CVE-2023-…
first Aug 23, 2023 -
Medium max 4.8SUSE-SU-2022:4293-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39318: Fixed division by zero in urbdrc (bsc#1205563). - CVE-2022-39319: Fixed missing input buffer length check in urbdrc (bsc#1205564).
first Nov 29, 2022 -
Medium max 4.3SUSE-SU-2022:4194-1 1 CVE
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2022-3964: Fixed out of bounds read in update_block_in_prev_frame() (bsc#1205388).
first Nov 23, 2022 -
Medium max 5.9SUSE-SU-2022:3984-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by `/parallel` command line switch. (bsc#1204258) - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. (bsc#1204257)
first Nov 15, 2022 -
Medium max 4.8SUSE-SU-2022:3451-1 2 CVEs
Security update for rust1.62
This update for rust1.62 fixes the following issues: - CVE-2022-36113: Fixed symlink hijack vulnerability (bsc#1203433). - CVE-2022-36114: Fixed zip bomb vulnerability (bsc#1203431).
first Sep 28, 2022 -
Medium max 5.5SUSE-SU-2023:0562-1 2 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_98 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics w…
first Feb 28, 2023 -
Medium max 5.5SUSE-SU-2023:0553-1 2 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_71 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics w…
first Feb 27, 2023 -
Medium max 5.5SUSE-SU-2023:0528-1 1 CVE
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_108 fixes one issue. The following security issue was fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
first Feb 27, 2023 -
Medium max 5.5SUSE-SU-2023:0525-1 1 CVE
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_139 fixes one issue. The following security issue was fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
first Feb 24, 2023 -
Medium max 5.5SUSE-SU-2022:3850-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 2, 2022 -
Medium max 4.3SUSE-SU-2022:2651-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
first Aug 3, 2022 -
Medium max 4.3SUSE-SU-2022:2598-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bsc#1201496).
first Jul 29, 2022