5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2022:4085-1 17 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Fixed various security issues (MFSA 2022-49, bsc#1205270): * CVE-2022-45403 (bmo#1762078) Service Workers might have learned size of cross-origin media files * CVE-2022-45404 (bmo#1790815) Fulls…
first Nov 18, 2022 -
Critical max 9.8SUSE-SU-2018:0844-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2018-7750: Fixed transport.py in the SSH server implementation of Paramiko that does not properly check whether authentication is completed before processing other requests (bsc#1085276).
first Mar 29, 2018 -
Critical max 9.8openSUSE-SU-2024:13597-1 6 CVEs
xorg-x11-server-21.1.11-1.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2017:3381-1 2 CVEs
Security update for Salt
This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master …
first Dec 20, 2017 -
Critical max 9.9SUSE-SU-2025:01991-1 8 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 (jsc#PED-12918): - Security issues fixed: * CVE-2025-4123: Fix cross-site scripting vulnerability (bsc#1243714). * CVE-2025-22872: Bump golang.org/x/net/htm…
first Jun 18, 2025 -
Critical max 9.8SUSE-SU-2024:1751-1 6 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption in…
first May 22, 2024 -
Critical max 9.8
Security update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma
This update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma fixes the following issues: Security fixes…
first Sep 22, 2022 -
Critical max 9.6SUSE-SU-2022:0906-1 5 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 (bsc#1196900): - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a po…
first Mar 21, 2022 -
Critical max 9.4SUSE-SU-2024:3349-1 4 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-27398: Fixed use-after-free bugs caused by sc…
first Sep 19, 2024 -
Critical max 9.6
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914). This update was imported from the SUSE:SLE-15:Update update project.
first Oct 25, 2020 -
Critical max 10.0openSUSE-SU-2024:0231-1 2 CVEs
Security update for python-notebook
This update for python-notebook fixes the following issues: - Update to 5.7.11 * sanitizer fix CVE-2021-32798 (boo#1227583) - Update to 5.7.10 * no upstream changelog - Update to 5.7.9 * Update JQuery dependency to version 3.4.1 to fix security vulnerability …
first Aug 2, 2024 -
Critical max 9.3openSUSE-SU-2022:10094-1 3 CVEs
Security update for trivy
This update for trivy fixes the following issues: Update to version 0.30.4: * fix: remove the first arg when running as a plugin (#2595) * fix: k8s controlplaner scanning (#2593) * fix(vuln): GitLab report template (#2578) Update to version 0.30.3: * fix(serv…
first Aug 20, 2022 -
Critical max 9.8SUSE-SU-2024:1870-1 193 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2020-36312: Fixed an issue in virt/kvm/kvm…
first May 30, 2024 -
Critical max 9.8SUSE-SU-2024:1490-1 183 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466). - CVE-2021-46926: Fixed bug when detecting c…
first May 3, 2024 -
Critical max 9.8SUSE-SU-2023:0031-2 1 CVE
Security update for libksba
This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser (bsc#1206579).
first Feb 10, 2023 -
Critical max 9.8SUSE-SU-2024:4123-1 30 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024 -
Critical max 9.8SUSE-SU-2022:4281-1 4 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125) The foll…
first Nov 29, 2022 -
Critical max 9.8openSUSE-SU-2024:13884-1 9 CVEs
MozillaThunderbird-115.10.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.0openSUSE-SU-2024:0106-1 2 CVEs
Security update for sngrep
This update for sngrep fixes the following issues: - Update to version 1.8.1 * Fix CVE-2024-3119: sngrep: buffer overflow due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. * Fix CVE-2024-3120: sngrep: stack-buffer overflow due to inadequate b…
first Apr 10, 2024 -
Critical max 9.8SUSE-RU-2021:0632-1 10 CVEs
Recommended update for SUSE Manager 4.0.12.1 Release Notes
This update for SUSE Manager 4.0.12.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Revision 4.0.12.1 - Bugs mentioned bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, …
first Feb 26, 2021 -
Critical max 9.8SUSE-SU-2022:2181-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jun 24, 2022 -
Critical max 9.8openSUSE-SU-2025:15038-1 1 CVE
cyradm-3.8.4-2.1 on GA media
These are all security issues fixed in the cyradm-3.8.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 29, 2025 -
Critical max 9.4SUSE-SU-2024:2825-1 10 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes wit…
first Aug 8, 2024 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). - CVE-2024-36348, C…
first Aug 18, 2025 -
Critical max 9.8SUSE-SU-2024:1454-1 114 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556). - CVE-2020-36782: Fixed a reference…
first Apr 26, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110). - CVE-2022-50116: tty: n_gsm: fix de…
first Sep 19, 2025 -
Critical max 9.8SUSE-SU-2018:3011-1 4 CVEs
Security update for tomcat
This update for tomcat to version 9.0.10 fixes the following issues: Security issues fixed: - CVE-2018-1336: An improper handing of overflow in the UTF-8 decoder with supplementary characters could have lead to an infinite loop in the decoder causing a Denial…
first Nov 28, 2018 -
Critical max 9.0SUSE-SU-2025:1084-1 1 CVE
Security update for corosync
This update for corosync fixes the following issues: - CVE-2025-30472: Fixed stack buffer overflow from 'orf_token_endian_convert' (bsc#1239987)
first Apr 1, 2025 -
Critical max 9.1SUSE-SU-2025:02565-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-42516: Fixed HTTP response splitting. (bsc#1246477) - CVE-2024-43204: Fixed a SSRF when mod_proxy is loaded that allows an attacker to send outbound proxy requests to a URL controlled by them. (bs…
first Jul 31, 2025 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Fix for TypeError in Tornado importer (bsc#1174165) - Require python3-distro only for TW (bsc#1173072) - Various virt backports from 3000.2 - Avoid traceback on debug logging for swarm module (bsc#1172075) - Add…
first Jul 21, 2020 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resc…
first Oct 23, 2025 -
Critical max 9.8openSUSE-SU-2024:0372-1 1 CVE
Security update for icinga2
This update for icinga2 fixes the following issues: Update to 2.13.10: - CVE-2024-49369: Fix TLS certificate validation bypass (bsc#1233310).
first Nov 21, 2024 -
Critical max 10.0SUSE-SU-2025:03499-1 4 CVEs
Security update for valkey
This update for valkey to version 8.0.6 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code executi…
first Oct 8, 2025 -
Critical max 9.6SUSE-SU-2022:0696-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have byp…
first Mar 3, 2022 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547).
first Mar 21, 2025 -
Critical max 9.8openSUSE-SU-2024:14565-1 2 CVEs
python310-Django4-4.2.17-1.1 on GA media
These are all security issues fixed in the python310-Django4-4.2.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 9, 2024 -
Critical max 9.8
libvlc5-3.0.19-1.1 on GA media
These are all security issues fixed in the libvlc5-3.0.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-36387: Fixed DoS by null pointer in websocket over HTTP/2 (bsc#1227272) - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use expl…
first Jul 23, 2024 -
Critical max 10.0SUSE-SU-2023:4358-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked …
first Nov 3, 2023 -
Critical max 9.8openSUSE-SU-2024:12880-1 1 CVE
ruby3.2-rubygem-activestorage-7.0-7.0.4.3-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-activestorage-7.0-7.0.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024