5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:0121-1 4 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (bsc#1218582) - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory acc…
first Jan 16, 2024 -
Critical max 9.8openSUSE-SU-2025:14957-1 2 CVEs
libtheora-devel-1.2.0-1.1 on GA media
These are all security issues fixed in the libtheora-devel-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
Critical max 9.1openSUSE-SU-2024:12601-1 1 CVE
php8-8.1.14-1.1 on GA media
These are all security issues fixed in the php8-8.1.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2025:14707-1 1 CVE
openvpn-2.6.10-5.1 on GA media
These are all security issues fixed in the openvpn-2.6.10-5.1 package on the GA media of openSUSE Tumbleweed.
first Jan 28, 2025 -
Critical max 9.1SUSE-SU-2021:0669-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).
first Mar 1, 2021 -
Critical max 9.8
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency (bsc#976340). - CVE-2016-0687: Better byte behavior (bsc#976340). - CVE-2016-0695: Make DSA more fair …
first May 6, 2016 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…
first Feb 17, 2022 -
Critical max 9.8SUSE-SU-2018:2551-1 3 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoin…
first Aug 29, 2018 -
Critical max 9.3SUSE-SU-2025:02449-1 11 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extend…
first Jul 21, 2025 -
Critical max 9.8openSUSE-SU-2025:15753-1 45 CVEs
ansible-12-12.2.0-1.1 on GA media
These are all security issues fixed in the ansible-12-12.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 21, 2025 -
Critical max 9.1SUSE-SU-2022:2658-1 2 CVEs
Security update for keylime
This update for keylime fixes the following issues: Update to version 6.3.2, including fixes for: - CVE-2022-1053: Fixed Tenant and Verifier might not use the same registrar data (bsc#1199253). - CVE-2022-31250: Fixed %post scriplet allows for privilege escal…
first Aug 3, 2022 -
Critical max 9.8SUSE-SU-2024:3672-1 8 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after fre…
first Oct 16, 2024 -
Critical max 10.0SUSE-SU-2022:2526-1 2 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748) - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750) The following non-security bu…
first Jul 22, 2022 -
Critical max 9.8SUSE-SU-2024:3360-1 3 CVEs
Security update for container-suseconnect
This update for container-suseconnect rebuilds it against current go1.21.13.1. Security issues fixed: CVE-2024-24789, CVE-2024-24790, CVE-2024-24791
first Sep 22, 2024 -
Critical max 9.1openSUSE-SU-2025:15095-1 2 CVEs
python311-httptools-0.6.1-1.9 on GA media
These are all security issues fixed in the python311-httptools-0.6.1-1.9 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Critical max 9.8SUSE-SU-2024:2301-1 3 CVEs
Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2024-38439: Fixed a heap buffer overflow because of setting ibuf[PASSWDLEN] to \0 in FPLoginExt in login in etc/uams/uams_pam.c (bsc#1226430). - CVE-2024-38440: Fixed a heap buffer overflow because of…
first Jul 4, 2024 -
Critical max 9.8SUSE-SU-2024:3048-1 13 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2019:1221-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an error (bsc#1132160).
first May 13, 2019 -
Critical max 9.3SUSE-SU-2023:4381-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). - CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). - CVE-2023-46724: Fix validation of certificate…
first Nov 6, 2023 -
Critical max 9.6openSUSE-SU-2025:0059-1 4 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 133.0.6943.98 (boo#1237121): - CVE-2025-0995: Use after free in V8 - CVE-2025-0996: Inappropriate implementation in Browser UI - CVE-2025-0997: Use after free in Navigation - CVE-2025-0998: Out of …
first Feb 14, 2025 -
Critical max 9.8SUSE-SU-2022:2289-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793): - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381) - CVE-2022-31744: C…
first Jul 6, 2022 -
Critical max 9.8SUSE-SU-2021:2833-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520] - CVE-2021-3712: a bug in the code for printing certificate details could le…
first Aug 24, 2021 -
Critical max 9.8SUSE-SU-2024:0290-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2023-50447: Fixed arbitrary code execution via the environment parameter. (bsc#1219048) - CVE-2022-22817: Fixes evaluation of arbitrary expressions via PIL.ImageMath.eval. (bsc#1194521)
first Jan 31, 2024 -
Critical max 9.8SUSE-SU-2024:3426-1 7 CVEs
Security update for quagga
This update for quagga fixes the following issues: - CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866) - CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#122943…
first Sep 24, 2024 -
Critical max 10.0openSUSE-SU-2024:14229-1 1 CVE
docker-26.1.5_ce-1.1 on GA media
These are all security issues fixed in the docker-26.1.5_ce-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 112.0.5615.165 (boo#1210618): * CVE-2023-2133: Out of bounds memory access in Service Worker API * CVE-2023-2134: Out of bounds memory access in Service Worker API * CVE-2023-2135: Use after free i…
first Apr 24, 2023 -
Critical max 9.8SUSE-SU-2023:1573-1 2 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-27522: Fixed HTTP response splitting in mod_proxy_uwsgi (bsc#1209049). - CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047). The following non-security bugs …
first Mar 24, 2023 -
Critical max 9.6SUSE-SU-2022:0676-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have byp…
first Mar 2, 2022 -
Critical max 9.1openSUSE-SU-2025:15818-1 5 CVEs
pgadmin4-9.11-1.1 on GA media
These are all security issues fixed in the pgadmin4-9.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2025 -
Critical max 9.3SUSE-SU-2020:0311-1 2 CVEs
Security update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client
This update for crowbar-core, crowbar-openstack, openstack-neutron-fwaas, rubygem-crowbar-client contains the following fixes: Security fixes for rubygem-crowbar-client: - CVE-2018-17954: Fixed an issue where crowbar was leaking the secret admin passwords to …
first Feb 3, 2020 -
Critical max 9.1SUSE-SU-2022:3656-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Updated to version 16.17.1: - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). - CVE-2022-32215: Fixed incorrect Parsing of Multi-line Transfer-Encoding (bsc#1201327). - CVE-2022-35256: Fix…
first Oct 19, 2022 -
Critical max 9.8SUSE-SU-2024:4256-1 25 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
Critical max 9.8openSUSE-SU-2025:15009-1 1 CVE
libmozjs-128-0-128.9.0-2.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.9.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 17, 2025 -
Critical max 9.8SUSE-SU-2023:1797-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-28879: Fixed buffer Overflow in s_xBCPE_process (bsc#1210062).
first Apr 7, 2023 -
Critical max 10.0SUSE-SU-2023:4801-1 4 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 13, 2023 -
Critical max 9.8SUSE-RU-2020:0625-1 2 CVEs
Recommended update for Salt
This update fixes the following issues: salt: - RHEL/CentOS 8 uses platform-python instead of python3 - New configuration option for selection of grains in the minion start event. - Fix 'os_family' grain for Astra Linux Common Edition - Fix for salt-api NET A…
first Mar 10, 2020 -
Critical max 9.8openSUSE-SU-2024:12803-1 1 CVE
cockpit-d-installer-0.8.1~1-5.1 on GA media
These are all security issues fixed in the cockpit-d-installer-0.8.1~1-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3044-1 12 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2021:2104-1 2 CVEs
Security update for Salt
This update fixes the following issues: salt: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) - V…
first Jun 21, 2021 -
Critical max 9.8SUSE-SU-2022:2279-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793): - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381) - CVE-2022-31744: C…
first Jul 6, 2022