701 results · Clear filters · Feed
-
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…
first Nov 4, 2020 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…
first Nov 23, 2020 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jun 23, 2021 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 9.6
chromedriver-119.0.6045.199-1.1 on GA media
These are all security issues fixed in the chromedriver-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for nodejs-electron
This update for nodejs-electron fixes the following issues: - Fix webpack-4 with OpenSSL 3.0 Update to version 16.0.9 * https://github.com/electron/electron/releases/tag/v16.0.9 Update to version 16.0.8 * https://github.com/electron/electron/releases/tag/v16.…
first Mar 3, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857). - CVE-2021-47223: net: bridge: fix vlan t…
first Feb 17, 2025 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?system…
first Jun 20, 2022 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: - Update to 105.0.4970.34 * DNA-112796 [Import] Import bookmarks and history don't work * DNA-113147 Add strength setting for Lucid Mode * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable sp…
first Dec 11, 2023 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826)…
first Oct 10, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
first Apr 29, 2020 -
Critical max 9.6
freetype2-devel-2.11.0-1.2 on GA media
These are all security issues fixed in the freetype2-devel-2.11.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…
first Jan 20, 2022 -
Critical max 9.8
Security update for exim
This update for exim fixes the following issues: exim was updated to 4.94.2: security update (boo#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID file …
first May 20, 2021 -
Critical max 9.8
Security update for SUSE Manager 4.0
This security update for SUSE Manager 4.0 provides the following fixes: py26-compat-salt: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) sp…
first Nov 6, 2020 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
first Apr 29, 2020 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Do not strip if SUSE Linux Enterprise 15 SP3 - Exclude debug for Red Hat Enterprise Linux >= 8 - Build with Go >= 1.20 when the OS is not Red Hat Enterprise Linux golang-githu…
first Feb 15, 2024 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…
first Apr 29, 2021 -
Critical max 9.6
chromedriver-125.0.6422.60-1.1 on GA media
These are all security issues fixed in the chromedriver-125.0.6422.60-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill to…
first Dec 13, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 94.0.4606.54 (boo#1190765): * CVE-2021-37956: Use after free in Offline use * CVE-2021-37957: Use after free in WebGPU * CVE-2021-37958: Inappropriate implementation in Navigation * CVE-2021-37959:…
first Oct 11, 2021 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 20, 2020 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2021-47261: Fix initializing CQ fragments bu…
first Mar 19, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 25, 2025 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 93.0.4577.63 (boo#1190096): * CVE-2021-30606: Use after free in Blink * CVE-2021-30607: Use after free in Permissions * CVE-2021-30608: Use after free in Web Share * CVE-2021-30609: Use after free …
first Sep 22, 2021 -
Critical max 10.0
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…
first Jun 24, 2019 -
Critical max 9.8
MozillaFirefox-118.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-118.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for chromium, gn
This update for chromium, gn fixes the following issues: chromium was updated to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implemen…
first Nov 5, 2020 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: 'compose_attachments' context added to M…
first Dec 7, 2020 -
Critical max 9.8
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). - CVE-2024-36904: tcp: Use refcount_inc…
first Jul 16, 2024 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 27, 2020 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-2659…
first Jan 29, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073) - CVE-2024-3…
first Aug 29, 2025 -
Critical max 9.8
Security update for tomcat
This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed …
first Mar 15, 2020 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy …
first Apr 21, 2020 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547).
first Mar 26, 2025 -
Critical max 10.0
proftpd-1.3.5b-2.5 on GA media
These are all security issues fixed in the proftpd-1.3.5b-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024