6,771 results · Clear filters · Feed
-
Medium max 6.3SUSE-SU-2021:1162-1 1 CVE
Security update for rubygem-actionpack-4_2
This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2019-16782: Possible Information Leak / Session Hijack Vulnerability in Rack (bsc#1159548)
first Apr 13, 2021 -
Medium max 6.5openSUSE-SU-2019:0065-1 11 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of service (NULL pointer de…
first Mar 23, 2019 -
Medium max 6.3SUSE-SU-2021:3206-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488). - CVE-2019-3874:…
first Sep 23, 2021 -
Medium max 6.5
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254)…
first Feb 10, 2022 -
Medium max 5.5SUSE-SU-2022:3889-1 15 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: Updated to version 0.27.5 (jsc#PED-1393): - CVE-2017-1000128: Fixed stack out of bounds read in JPEG2000 parser (bsc#1068871). - CVE-2019-13108: Fixed integer overflow PngImage:readMetadata (bsc#1142675). - CV…
first Nov 7, 2022 -
Medium max 6.5SUSE-SU-2023:3665-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2023-29469: Fixed not deterministic hashing of empty dict strings (bsc#1210412). - CVE-2023-28484: Fixed NULL dereference in xmlSchemaFixupComplexType (bsc#1210411). - CVE-2023-39615: Fixed crafted xml…
first Sep 18, 2023 -
Medium max 5.5SUSE-SU-2021:3835-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.5.13: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).
first Dec 1, 2021 -
Medium max 6.8SUSE-SU-2021:3771-1 11 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version OpenJDK 8u312 (October 2021 CPU): - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in …
first Nov 23, 2021 -
Medium max 5.9SUSE-SU-2021:3352-1 5 CVEs
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2021-32785: format string bug via hiredis (bsc#1188638) - CVE-2021-32786: open redirect in logout functionality (bsc#1188639) - CVE-2021-32791: Hardcoded static IV and AAD with a reuse…
first Oct 12, 2021 -
Medium max 6.7SUSE-SU-2021:2366-1 1 CVE
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_61 fixes one issue. The following security issue was fixed: - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unpriv…
first Jul 15, 2021 -
Medium max 6.7SUSE-SU-2021:2377-1 3 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_9 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed. (…
first Jul 16, 2021 -
Medium max 6.2SUSE-SU-2020:1581-1 2 CVEs
Security update for texlive
This update for texlive fixes the following issues: Security issues fixed: - CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740). - CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910). - Fixed an issue where pstopdf was crashing…
first Jun 9, 2020 -
Medium max 4.3SUSE-SU-2020:14516-1 1 CVE
Security update for php53
This update for php53 fixes the following issues: - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
first Oct 14, 2020 -
Medium max 6.1SUSE-SU-2021:0099-1 1 CVE
Security update for openstack-dashboard, release-notes-suse-openstack-cloud
This update for openstack-dashboard, release-notes-suse-openstack-cloud fixes the following issues: - Fix open redirect (OSSA-2020-008, CVE-2020-29565) - Fix horizon-nodejs jobs. - Add workaround for secure boot issue when shim package is updated. (bsc#117995…
first Jan 12, 2021 -
Medium max 6.5SUSE-SU-2020:3723-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2020-26137: Fixed a CRLF injection via HTTP request method (bsc#1177120).
first Dec 9, 2020 -
Medium max 5.8SUSE-SU-2020:0962-1 1 CVE
Security update for ceph
This update for ceph fixes the following issues: - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).
first Apr 8, 2020 -
Medium max 6.4SUSE-SU-2020:14461-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421).
first Aug 25, 2020 -
Medium max 4.4SUSE-SU-2020:2829-1 2 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-…
first Oct 2, 2020 -
Medium max 5.5SUSE-SU-2020:3081-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2…
first Oct 29, 2020 -
Medium max 5.6SUSE-SU-2020:1568-1 4 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: nodejs10 was updated to version 10.21.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unr…
first Jun 9, 2020 -
Medium max 5.1SUSE-SU-2020:3272-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race cond…
first Nov 10, 2020 -
Medium max 5.3SUSE-SU-2019:0961-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346).
first Apr 16, 2019 -
Medium max 5.0SUSE-SU-2019:1606-2 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)
first Aug 21, 2019 -
Medium max 4.8SUSE-SU-2019:1459-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issues: Security issue fixed: - CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493).
first Jun 11, 2019 -
Medium max 6.3SUSE-SU-2019:0527-1 1 CVE
Security update for gdm
This update for gdm fixes the following issues: Security issue fixed: - CVE-2019-3825: Fixed a lock screen bypass when timed login was enabled (bsc#1124628). Other issues fixed: - GLX applications do not work well when the proprietary nvidia driver is used wi…
first Mar 1, 2019 -
Medium max 5.9SUSE-SU-2020:0376-1 1 CVE
Security update for docker-runc
This update for docker-runc fixes the following issues: - CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452).
first Feb 7, 2020 -
Medium max 6.5SUSE-SU-2020:1085-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 RT kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_h…
first Apr 23, 2020 -
Medium max 5.9SUSE-SU-2020:0496-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA (bsc#1162388). Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388). - CVE-2…
first Feb 26, 2020 -
Medium max 4.0SUSE-SU-2020:0079-2 1 CVE
Security update for libzypp
This update for libzypp fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).
first Sep 16, 2020 -
Medium max 5.5SUSE-SU-2020:2106-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead t…
first Aug 3, 2020 -
Medium max 6.1SUSE-SU-2019:2748-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-16056: Fixed a parser issue in the email module (bsc#1149955). - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
first Oct 23, 2019 -
Medium max 5.4SUSE-SU-2019:3319-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108). - CVE-2019-148…
first Dec 17, 2019 -
Medium max 5.8SUSE-SU-2019:2935-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666).
first Nov 8, 2019 -
Medium max 6.5SUSE-SU-2019:2871-1 9 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox: Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixed a use-after-free when…
first Oct 31, 2019 -
Medium max 6.5SUSE-SU-2019:2986-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode on…
first Nov 15, 2019 -
Medium max 6.5SUSE-SU-2019:14217-1 2 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 …
first Nov 13, 2019 -
Medium max 4.8SUSE-SU-2019:2243-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140118). - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-…
first Aug 28, 2019 -
Medium max 5.3SUSE-SU-2019:2868-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code can return filenames containing path separators …
first Oct 30, 2019 -
Medium max 5.3SUSE-SU-2019:2866-1 3 CVEs
Security update for samba
This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code could have returned filename…
first Oct 30, 2019 -
Medium max 4.2SUSE-SU-2019:0767-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 12 SP4 Azure kernel was updated to fix various issues. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-2019-9213:…
first Mar 27, 2019