5,613 results · Clear filters · Feed
-
Critical max 10.0SUSE-SU-2023:4867-1 2 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 14, 2023 -
Critical max 9.8SUSE-SU-2025:02069-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acces…
first Jun 23, 2025 -
Critical max 9.1openSUSE-SU-2024:0274-1 10 CVEs
Security update for cacti, cacti-spine
This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240) * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229) * CVE-2024-31…
first Sep 2, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap b…
first Oct 23, 2020 -
Critical max 9.8SUSE-SU-2019:2091-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong se…
first Aug 23, 2019 -
Critical max 9.8SUSE-SU-2024:3635-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2025:0955-1 71 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672). - CVE-2024-40980: drop_monitor: replace spin_l…
first Mar 19, 2025 -
Critical max 9.8SUSE-SU-2024:3027-1 1 CVE
Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_194 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202).
first Aug 27, 2024 -
Critical max 9.1openSUSE-SU-2024:13166-1 5 CVEs
ruby3.2-rubygem-puma-5-5.6.5-1.7 on GA media
These are all security issues fixed in the ruby3.2-rubygem-puma-5-5.6.5-1.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0openSUSE-SU-2024:12119-1 8 CVEs
ruby3.1-rubygem-rack-2.2.3.1-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-rack-2.2.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:4216-1 25 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 5, 2024 -
Critical max 9.8SUSE-SU-2025:01966-1 178 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245). - CVE-2024-53168: net: make soc…
first Jun 16, 2025 -
Critical max 9.1SUSE-SU-2022:2415-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 15, 2022 -
Critical max 9.8SUSE-SU-2022:2846-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
first Aug 18, 2022 -
Critical max 10.0SUSE-SU-2024:0587-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: Vendor latest buildkit v0.11 including bugfixes for the following: * CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438). * CVE-2024-23652: Fixed arbitrary deletion o…
first Feb 22, 2024 -
Critical max 9.8SUSE-SU-2024:4214-1 30 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 5, 2024 -
Critical max 9.8openSUSE-SU-2024:14386-1 1 CVE
rusty_v8-0.106.0-1.1 on GA media
These are all security issues fixed in the rusty_v8-0.106.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 7, 2024 -
Critical max 9.8openSUSE-SU-2024:13117-1 7 CVEs
corepack20-20.5.1-1.1 on GA media
These are all security issues fixed in the corepack20-20.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:1265-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content (bsc#1240962) - CVE-2025-24208: permissions issue may lead to a c…
first Apr 15, 2025 -
Critical max 9.8SUSE-SU-2022:0226-1 3 CVEs
Security update for log4j12
This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#119…
first Jan 28, 2022 -
Critical max 9.8SUSE-SU-2023:2579-1 16 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Version update from 8.5.22 to 9.5.1 (jsc#PED-3694): * Security fixes: - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip (bsc#1209645) - CVE-2023-1387: grafana: JWT URL-login flow le…
first Jun 21, 2023 -
Critical max 9.8openSUSE-SU-2021:4150-1 33 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to version 91.4 MFSA 2021-54 (bsc#1193485) - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured…
first Dec 22, 2021 -
Critical max 9.8openSUSE-SU-2024:12150-1 3 CVEs
python39-3.9.13-2.1 on GA media
These are all security issues fixed in the python39-3.9.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:2257-1 6 CVEs
Security update for python-Django
This update for python-Django to version 1.11.23 fixes the following issues: - CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' (bsc#1142880). - CVE-2019-14233: Fixed a denial of service in strip_tags() (bsc#1142882). - CVE-2019-1423…
first Sep 2, 2019 -
Critical max 9.8SUSE-SU-2024:3628-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free in li…
first Oct 15, 2024 -
Critical max 10.0SUSE-SU-2015:2108-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-8104: Prevent guest to host DoS caused by infinite loop in microcode via #DB exception (bsc#954404). - CVE-…
first Nov 26, 2015 -
Critical max 9.8SUSE-SU-2015:1073-1 4 CVEs
Security update for java-1_7_0-ibm
This update fixes the following security issues: - Version bump to 7.1-3.0 release bnc#930365 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 - Fix removeing links before update-alternatives run. bnc#931702 - Fix bnc#912434, javaws/plugin stuff should…
first Jun 12, 2015 -
Critical max 9.9openSUSE-SU-2024:13843-1 2 CVEs
pgadmin4-8.5-1.1 on GA media
These are all security issues fixed in the pgadmin4-8.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to …
first Sep 15, 2022 -
Critical max 9.8SUSE-SU-2022:2845-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
first Aug 18, 2022 -
Critical max 9.8SUSE-SU-2024:3643-1 5 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes (LOG4J2-3198, LOG4J2-3201, LOG4J2-3208,…
first Dec 16, 2021 -
Critical max 9.8SUSE-SU-2025:1066-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_11 fixes one issue. The following security issue was fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916).
first Mar 31, 2025 -
Critical max 9.8SUSE-SU-2022:3997-1 8 CVEs
Security update for php7
This update for php7 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long par…
first Nov 15, 2022 -
Critical max 9.8SUSE-SU-2024:1692-1 4 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_186 fixes several issues. The following security issues were fixed: - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2023-52502: Fixed a race condition in n…
first May 20, 2024 -
Critical max 9.8openSUSE-SU-2025:15002-1 1 CVE
libmozjs-115-0-115.15.0-5.1 on GA media
These are all security issues fixed in the libmozjs-115-0-115.15.0-5.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2025 -
Critical max 9.8SUSE-SU-2024:3639-1 14 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 15, 2024 -
Critical max 9.4SUSE-SU-2025:02048-1 5 CVEs
Security update for python312
This update for python312 fixes the following issues: python312 was updated from version 3.12.9 to 3.12.11: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273) * CVE-2024-12718, CV…
first Jun 20, 2025 -
Critical max 9.8SUSE-SU-2024:2816-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-42005: Fixed SQL injection in QuerySet.values() and values_list() (bsc#1228629) - CVE-2024-41989: Fixed Memory exhaustion in django.utils.numberformat.floatformat() (bsc#1228630) - CVE-2024-…
first Aug 7, 2024 -
Critical max 9.1SUSE-SU-2025:1053-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages (bsc#1235147).
first Mar 28, 2025