5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:3144-1 18 CVEs
Security update for hdf5, netcdf, trilinos
This update for hdf5, netcdf, trilinos fixes the following issues: hdf5 was updated from version 1.10.8 to 1.10.11: - Security issues fixed: * CVE-2019-8396: Fixed problems with malformed HDF5 files where content does not match expected size. (bsc#1125882) * …
first Sep 5, 2024 -
Critical max 9.4SUSE-SU-2024:2369-1 4 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE…
first Apr 24, 2020 -
Critical max 10.0SUSE-SU-2024:3551-1 162 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52752: smb: client: fix …
first Oct 8, 2024 -
Critical max 10.0SUSE-SU-2023:4849-1 4 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-…
first Dec 14, 2023 -
Critical max 9.8SUSE-SU-2025:02173-1 180 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245). - CVE-2024-53168: net: make sock_i…
first Jun 30, 2025 -
Critical max 9.1openSUSE-SU-2024:14590-1 1 CVE
traefik-3.2.3-1.1 on GA media
These are all security issues fixed in the traefik-3.2.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 16, 2024 -
Critical max 9.9SUSE-SU-2020:2442-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token …
first Sep 2, 2020 -
Critical max 9.8SUSE-SU-2024:1609-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32039: Fixed an out-of-bounds write with variables of type uint32 (bsc#1223293) - CVE-2024-32040: Fixed a integer underflow when using the 'NSC' codec (bsc#1223294) - CVE-2024-32041: Fixed an out-…
first May 10, 2024 -
Critical max 9.8SUSE-SU-2020:3360-1 29 CVEs
Security update for tcpdump
This update for tcpdump fixes the following issues: - CVE-2020-8037: Fixed an issue where PPP decapsulator did not allocate the right buffer size (bsc#1178466). The previous update of tcpdump already fixed variuous Buffer overflow/overread vulnerabilities [bs…
first Nov 17, 2020 -
Critical max 9.8openSUSE-SU-2024:0203-1 1 CVE
Security update for znc
This update for znc fixes the following issues: Update to 1.9.1 (boo#1227393, CVE-2024-39844) * This is a security release to fix CVE-2024-39844: remote code execution vulnerability in modtcl. To mitigate this for existing installations, simply unload the mod…
first Jul 17, 2024 -
Critical max 9.8SUSE-SU-2024:4131-1 105 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-49925: fbdev: efifb: Re…
first Dec 2, 2024 -
Critical max 9.8SUSE-SU-2024:3249-1 62 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2022-48919: Fix double free ra…
first Sep 16, 2024 -
Critical max 10.0SUSE-SU-2023:4822-1 5 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_60 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-…
first Dec 13, 2023 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE…
first Apr 28, 2020 -
Critical max 9.8openSUSE-SU-2024:13635-1 11 CVEs
python3-onionshare-2.6-4.1 on GA media
These are all security issues fixed in the python3-onionshare-2.6-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2024:11128-1 10 CVEs
openvpn-2.5.3-1.2 on GA media
These are all security issues fixed in the openvpn-2.5.3-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3652-1 17 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.4SUSE-SU-2024:2559-1 5 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock…
first Jul 18, 2024 -
Critical max 9.1openSUSE-SU-2024:14241-1 1 CVE
libxml2-2-2.12.9-1.1 on GA media
These are all security issues fixed in the libxml2-2-2.12.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 6, 2024 -
Critical max 9.8openSUSE-SU-2025:14861-1 15 CVEs
MozillaFirefox-136.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-136.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 7, 2025 -
Critical max 9.8SUSE-SU-2020:1194-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: Security issues fixed: - CVE-2016-2533: Fixed an integer overflow in the ImagingResampleHorizontal function (bsc#967970). - CVE-2016-4009: Fixed a buffer overflow in the PCD decoder (bsc#975500).
first May 6, 2020 -
Critical max 9.8SUSE-SU-2018:4217-1 1 CVE
Security update for netatalk
This update for netatalk fixes the following issues: Security issue fixed: - CVE-2018-1160 Fixed a missing bounds check in the handling of the DSI OPEN SESSION request, which allowed an unauthenticated to overwrite memory with data of their choice leading to …
first Dec 21, 2018 -
Critical max 9.1SUSE-SU-2018:3430-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2018-17983: Fix an out-of-bounds read during parsing of a malformed manifest entry (bsc#1110899).
first Oct 25, 2018 -
Critical max 9.3openSUSE-SU-2021:1275-1 4 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291 - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-202…
first Sep 16, 2021 -
Critical max 9.8
Security update for tomcat6
This update for tomcat6 fixes the following issues: - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
first Mar 27, 2020 -
Critical max 9.8SUSE-SU-2018:2699-1 4 CVEs
Security update for tomcat
This update for tomcat to 8.0.53 fixes the following issues: Security issue fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial of Servi…
first Sep 13, 2018 -
Critical max 9.8openSUSE-SU-2022:0226-1 3 CVEs
Security update for log4j12
This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#119…
first Jan 28, 2022 -
Critical max 9.8openSUSE-SU-2024:14513-1 10 CVEs
govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241119T173509-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 20, 2024 -
Critical max 9.6
nodejs-electron-13.5.0-1.1 on GA media
These are all security issues fixed in the nodejs-electron-13.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:10685-1 55 CVEs
clamav-0.103.3-1.4 on GA media
These are all security issues fixed in the clamav-0.103.3-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:2416-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 15, 2022 -
Critical max 9.8SUSE-SU-2024:1983-1 199 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223948…
first Jun 11, 2024 -
Critical max 9.8openSUSE-SU-2025:14622-1 2 CVEs
tomcat-9.0.98-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.98-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 7, 2025 -
Critical max 9.8SUSE-SU-2024:2384-1 68 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865). - CVE-2021-47311: net: q…
first Jul 10, 2024 -
Critical max 10.0
Security update for storm-kit
This update for storm-kit fixes the following issues: - Remove JndiLookup from log4j 2.x jars during build to prevent 'log4shell' code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228) - Remove JMSAppender from log4j 1.2.x jars during build to prevent att…
first Dec 15, 2021 -
Critical max 9.8SUSE-SU-2024:2207-1 9 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (…
first Jun 25, 2024 -
Critical max 9.1SUSE-SU-2022:3835-1 2 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2022-35256: Fixed incorrect parsing of header fields (bsc#1203832). - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325).
first Nov 1, 2022 -
Critical max 9.3openSUSE-SU-2024:11292-1 3 CVEs
qutebrowser-2.3.1-2.1 on GA media
These are all security issues fixed in the qutebrowser-2.3.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3openSUSE-SU-2024:13541-1 1 CVE
deepin-compressor-5.12.13-2.1 on GA media
These are all security issues fixed in the deepin-compressor-5.12.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024