6,771 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2022:2288-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32206: HTTP compression denial of service (bsc#1200735) - CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)
first Jul 6, 2022 -
Medium max 4.7SUSE-SU-2023:2897-1 1 CVE
Security update for python-azure-core, python-azure-storage-blob
This update for python-azure-core, python-azure-storage-blob fixes the following issues: Security fixes: - CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088). Recommended fixes: - New upstream release version 1.23.1 to SLE 15 (bsc#119928…
first Jul 20, 2023 -
Medium max 5.5SUSE-SU-2022:3310-1 3 CVEs
Security update for tika-core
This update for tika-core fixes the following issues: - CVE-2022-33879: Incomplete fix and new regex DoS in StandardsExtractingContentHandler. (bsc#1201217) - CVE-2022-30973, CVE-2022-30126: Regular Expression Denial of Service in Standards Extractor. (bsc#11…
first Sep 19, 2022 -
Medium max 6.5SUSE-SU-2023:2086-1 1 CVE
Security update for shim
This update for shim fixes the following issues: - Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458) - Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX co…
first May 2, 2023 -
Medium max 5.3SUSE-SU-2023:0339-1 1 CVE
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_101 fixes one issue. The following security issue was fixed: - CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1205186).
first Feb 9, 2023 -
Medium max 6.5SUSE-SU-2022:4205-2 6 CVEs
Security update for net-snmp
This update for net-snmp fixes the following issues: Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203): - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-2…
first Dec 13, 2022 -
Medium max 6.5SUSE-SU-2022:4205-1 6 CVEs
Security update for net-snmp
This update for net-snmp fixes the following issues: Updated to version 5.9.3 (bsc#1201103, jsc#SLE-11203): - CVE-2022-24805: Fixed a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB that can cause an out-of-bounds memory access. - CVE-2022-2…
first Nov 23, 2022 -
Medium max 6.8SUSE-SU-2023:0139-1 1 CVE
Security update for python-certifi
This update for python-certifi fixes the following issues: - remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle certs (bsc#1206212 CVE-2022-23491) - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 - Add removeTrustCor.patch
first Jan 25, 2023 -
Medium max 6.8SUSE-SU-2023:0118-1 2 CVEs
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272). - Updated to version…
first Jan 20, 2023 -
Medium max 6.5SUSE-SU-2022:0542-1 1 CVE
Security update for xerces-j2
This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
first Feb 21, 2022 -
Medium max 5.9SUSE-SU-2023:2887-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). Bugfixes: - Fixed trust relationship failure (bsc#1213384).
first Jul 19, 2023 -
Medium max 5.5SUSE-SU-2022:1747-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. (bsc#1199423) Updated to Intel CPU Microcode 20220419 release. (bsc#1198717) - CVE-2022-21151: Processor optimization removal or modification of security-…
first May 19, 2022 -
Medium max 6.9SUSE-SU-2022:3584-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount rac…
first Oct 14, 2022 -
Medium max 6.7SUSE-SU-2022:2438-1 3 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_116 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege w…
first Jul 19, 2022 -
Medium max 6.7SUSE-SU-2022:2835-1 8 CVEs
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: Updated to version 2022.5.17 (bsc#1199978): - CVE-2022-30783: Fixed an issue where messages between NTFS-3G and the kernel could be intercepted when using libfuse-lite. - CVE-2022-30784: Fixed a me…
first Aug 17, 2022 -
Medium max 5.5SUSE-SU-2023:2134-1 1 CVE
Security update for python-ujson
This update for python-ujson fixes the following issues: - CVE-2021-45958: Fixed a stack-based buffer overflow in Buffer_AppendIndentUnchecked (bsc#1194261).
first May 9, 2023 -
Medium max 6.6SUSE-SU-2023:1860-1 1 CVE
Security update for wayland
This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
first Apr 14, 2023 -
Medium max 5.5SUSE-SU-2022:3116-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
first Sep 6, 2022 -
Medium max 5.5SUSE-SU-2022:3916-1 1 CVE
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issues: - CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
first Nov 8, 2022 -
Medium max 6.5SUSE-SU-2023:0878-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808). - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000). The …
first Mar 23, 2023 -
Medium max 5.3SUSE-SU-2021:2838-1 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - Update to version 9.4.43.v20210629 - CVE-2021-34429: URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. (bsc#118…
first Aug 25, 2021 -
Medium max 5.7SUSE-SU-2021:1490-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2021-3426: Fixed an information disclosure via pydoc (bsc#1183374).
first May 4, 2021 -
Medium max 5.5SUSE-SU-2022:0118-1 2 CVEs
Security update for python-numpy
This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…
first Jan 18, 2022 -
Medium max 4.3SUSE-SU-2021:1166-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348).
first Apr 13, 2021 -
Medium max 6.5SUSE-SU-2022:0181-1 10 CVEs
Security update for the Linux Kernel
The SUSE MicroOS 5.0 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4001: Fixed a race condition when the EBPF map is frozen. (bsc#1192990) - CVE-2021-4002: Added a missing TLB flush that cou…
first Jan 25, 2022 -
Medium max 6.5SUSE-SU-2022:3971-1 20 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2021-28689: Fixed speculative vulnerabilities with bare…
first Nov 14, 2022 -
Medium max 5.9SUSE-SU-2021:2939-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to 10.5.12 [bsc#1189320]: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
first Sep 3, 2021 -
Medium max 5.3SUSE-SU-2021:1809-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933). - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Fix for SFTP uploads when it re…
first May 31, 2021 -
Medium max 5.9SUSE-SU-2022:1315-1 1 CVE
Security update for netty
This update for netty fixes the following issues: - CVE-2021-21409: Fixed request smuggling via content-length header (bsc#1184203).
first Apr 22, 2022 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_49 fixes several issues. The following security issues were fixed: - CVE-2022-0516: Fixed KVM s390 return error on SIDA memop on normal guest (bsc#1195947). - CVE-2021-0920: Fixed a local privilege escalation …
first Mar 1, 2022 -
Medium max 5.5SUSE-SU-2022:0574-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …
first Feb 25, 2022 -
Medium max 5.3SUSE-SU-2023:3670-1 1 CVE
Security update for python-brotlipy
This update for python-brotlipy fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first Sep 19, 2023 -
Medium max 5.3SUSE-SU-2023:3669-1 1 CVE
Security update for python-brotlipy
This update for python-brotlipy fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first Sep 19, 2023 -
Medium max 5.7SUSE-SU-2025:0290-1 1 CVE
Security update for hplip
This update for hplip fixes the following issues: This update for hplip fixes the following security issues: - CVE-2020-6923: Fixed a memory buffer overflow in the HP Linux Imaging and Printing (HPLIP). (bsc#1234745) This update for hplip fixes the following …
first Jan 29, 2025 -
Medium max 5.0SUSE-SU-2021:2877-1 3 CVEs
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - CVE-2020-2875: Unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. (bsc#1173600) - CVE-2020-2934: Fixed a vulnerability which could cause a par…
first Aug 30, 2021 -
Medium max 5.3SUSE-SU-2021:0654-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have been called with untrusted user data (bsc#1181944).
first Feb 26, 2021 -
Medium max 6.5SUSE-SU-2022:0079-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-24504: Fixed an uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers that may have …
first Jan 14, 2022 -
Medium max 6.5SUSE-SU-2023:3983-1 5 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denia…
first Oct 5, 2023 -
Medium max 5.3SUSE-SU-2021:0670-1 2 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or …
first Mar 1, 2021 -
Medium max 6.5SUSE-SU-2022:2177-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019) - CVE-2019-19377: Fixed an user-after-free that could be tr…
first Jun 24, 2022