5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2021:1408-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: * Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 (bsc#1183403)
first Apr 28, 2021 -
Critical max 9.1SUSE-SU-2022:2302-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_str…
first Jul 6, 2022 -
Critical max 9.8SUSE-SU-2025:1118-1 4 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075) - CVE-2025-27832: Fixed compression buffer overflow in NPDL devi…
first Apr 2, 2025 -
Critical max 9.1SUSE-SU-2024:1636-1 2 CVEs
Security update for tpm2.0-tools
This update for tpm2.0-tools fixes the following issues: - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2_checkquote (bsc#1223687). - CVE-2024-29039: Fixed pcr selection value to be compared with the attest (bsc#1223689).
first May 14, 2024 -
Critical max 9.8openSUSE-SU-2024:12983-1 1 CVE
openssh-9.3p1-1.1 on GA media
These are all security issues fixed in the openssh-9.3p1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#…
first Nov 6, 2020 -
Critical max 9.8openSUSE-SU-2024:0303-1 1 CVE
Security update for htmldoc
This update for htmldoc fixes the following issues: - CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022].
first Sep 16, 2024 -
Critical max 9.8openSUSE-SU-2020:0357-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897) - Fix unit tests failures in test_batch_async tests - Batch Async: Handle exceptions, properly unregister and close instance…
first Mar 18, 2020 -
Critical max 9.1SUSE-RU-2017:0174-1 1 CVE
Recommended update for SUSE Manager Client Tools
This update fixes the following issues: osad: - Fix logfile option for osa-dispatcher. (bsc#980752) salt: - Update to 2015.8.12 - Add pre-require to salt for minions. - Do not restart salt-minion in salt package. - Add try-restart to sys-v init scripts. - Add…
first Jan 17, 2017 -
Critical max 10.0openSUSE-SU-2024:14059-1 8 CVEs
singularity-ce-4.1.3-1.1 on GA media
These are all security issues fixed in the singularity-ce-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 20, 2024 -
Critical max 10.0SUSE-SU-2023:4848-1 5 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-…
first Dec 14, 2023 -
Critical max 9.4SUSE-SU-2023:3445-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103)
first Aug 28, 2023 -
Critical max 10.0openSUSE-SU-2024:14186-1 1 CVE
libreoffice-24.2.5.2-1.1 on GA media
These are all security issues fixed in the libreoffice-24.2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2024 -
Critical max 9.8openSUSE-SU-2024:11016-1 18 CVEs
libxml2-2-2.9.12-1.2 on GA media
These are all security issues fixed in the libxml2-2-2.9.12-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:0803-1 1 CVE
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047). The following non-security bugs were fixed: - Fixed passing health check does not recover worker from its error st…
first Mar 20, 2023 -
Critical max 10.0
Security update for storm
This update for storm fixes the following issues: - Remove JndiLookup from log4j 2.x jars during build to prevent 'log4shell' code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228) - Remove JMSAppender from log4j 1.2.x jars during build to prevent attacks…
first Dec 15, 2021 -
Critical max 9.2SUSE-SU-2025:0622-1 4 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOp…
first Feb 21, 2025 -
Critical max 9.3SUSE-SU-2025:02388-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extende…
first Jul 18, 2025 -
Critical max 9.1SUSE-SU-2022:2352-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919). - CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
first Jul 11, 2022 -
Critical max 9.8openSUSE-SU-2024:13980-1 16 CVEs
MozillaFirefox-126.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-126.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:2940-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were pre…
first Jul 23, 2023 -
Critical max 9.8openSUSE-SU-2023:0019-1 7 CVEs
Security update for libheimdal
This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes…
first Jan 16, 2023 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability (bsc#1239547).
first Mar 24, 2025 -
Critical max 9.8SUSE-SU-2024:3842-1 26 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 31, 2024 -
Critical max 9.8SUSE-SU-2024:0976-1 47 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise SLE12SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free (bsc#1220409). - CVE-2020-36777: Fixed a memory leak in dvb_media_dev…
first Mar 22, 2024 -
Critical max 9.3SUSE-SU-2023:4384-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). - CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). - CVE-2023-46724: Fix validation of certificate…
first Nov 8, 2023 -
Critical max 9.8SUSE-SU-2024:2923-1 26 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-41069: ASoC: topology: Fix route mem…
first Aug 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11286-1 20 CVEs
python39-3.9.7-2.1 on GA media
These are all security issues fixed in the python39-3.9.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2023:2915-1 3 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update to version 9.5.5: * CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694) * Bug fixes: * Auth: Show invite button if disable login form is set to false. * Azure: Fix…
first Jul 20, 2023 -
Critical max 9.6
chromedriver-107.0.5304.121-1.1 on GA media
These are all security issues fixed in the chromedriver-107.0.5304.121-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0openSUSE-SU-2023:0080-1 1 CVE
Security update for squirrel
This update for squirrel fixes the following issues: - CVE-2021-41556: fix out-of-bounds read issue (boo#1201974)
first Mar 23, 2023 -
Critical max 9.8SUSE-SU-2023:1582-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209). - CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210). - CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211). …
first Mar 27, 2023 -
Critical max 9.8SUSE-SU-2025:01932-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2025-21680: pktgen: Avoid out-of-bounds access in ge…
first Jun 13, 2025 -
Critical max 9.8openSUSE-SU-2024:10994-1 3 CVEs
libsoup-2_4-1-2.72.0-2.5 on GA media
These are all security issues fixed in the libsoup-2_4-1-2.72.0-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:2895-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743) - CVE-2021-47580: scsi: scsi_debug: Fix type in m…
first Aug 13, 2024 -
Critical max 9.8SUSE-SU-2025:3761-1 378 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2022-50233: Bluetooth:…
first Oct 23, 2025 -
Critical max 9.8openSUSE-SU-2021:0664-1 1 CVE
Security update for gsoap
This update for gsoap fixes the following issues: - CVE-2020-13576: Fixed a remote code execution via specially crafted SOAP request inside the WS-Addressing plugin (boo#1182098) This update was imported from the openSUSE:Leap:15.2:Update update project.
first May 4, 2021 -
Critical max 10.0SUSE-SU-2024:3561-1 162 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52752: smb: client: fix use-af…
first Oct 9, 2024 -
Critical max 10.0openSUSE-SU-2024:13167-1 11 CVEs
ruby3.2-rubygem-rack-3.0.7-1.2 on GA media
These are all security issues fixed in the ruby3.2-rubygem-rack-3.0.7-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:14903-1 5 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25…
first Mar 4, 2022