5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:1732-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption in…
first May 21, 2024 -
Critical max 9.3
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274). - CVE-2025-32463: Fixed a possible local privilege Escalation via chroot option (bsc#1245275).
first Jun 30, 2025 -
Critical max 9.1SUSE-SU-2018:1478-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2018-1000301: Fixed a buffer over-read caused by bad RTSP headers (bsc#1092098)
first May 30, 2018 -
Critical max 9.8openSUSE-SU-2024:12882-1 21 CVEs
MozillaFirefox-112.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-112.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2024:14602-1 1 CVE
tailscale-1.78.3-2.1 on GA media
These are all security issues fixed in the tailscale-1.78.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 18, 2024 -
Critical max 9.8openSUSE-SU-2024:12121-1 13 CVEs
MozillaFirefox-101.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-101.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:3772-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593). - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
first Oct 26, 2022 -
Critical max 9.8SUSE-SU-2020:0684-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: - Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897) - Fix unit tests failures in test_batch_async tests - Batch Async: Handle exceptions, properly unregister and close instance…
first Mar 13, 2020 -
Critical max 9.1openSUSE-SU-2024:0210-1 1 CVE
Security update for global
This update for global fixes the following issues: - CVE-2024-38448: htags may allow code execution via untrusted dbpath (boo#1226420)
first Jul 22, 2024 -
Critical max 9.8SUSE-SU-2019:14191-1 83 CVEs
Security update for tcpdump
This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2017-12995: Fixed an infinite loop in the DNS parser that allowed remote DoS (bsc#1057247). - CVE-2017-12893: Fixed a buffer over-read in the SMB/CIFS parser that allowed remote …
first Oct 15, 2019 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update from version 7.5.12 to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422) + Security: * Fixes XSS vulnerability in handling data sources (bsc#1195726, CVE-2022-21702) * Fixes cross-origin request forgery vul…
first Apr 25, 2022 -
Critical max 9.8SUSE-SU-2024:0947-1 1 CVE
Security update for python-uamqp
This update for python-uamqp fixes the following issues: - CVE-2024-27099: Fixed potential double-free in link_frame_received() (bsc#1220535). Bug fixes: - Fixed compatibility with OpenSSL 3.x (bsc#1217782)
first Mar 20, 2024 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Fix for TypeError in Tornado importer (bsc#1174165) - Require python3-distro only for TW (bsc#1173072) - Various virt backports from 3000.2 - Avoid traceback on debug logging for swarm module (bsc#1172075) - Add…
first Jul 21, 2020 -
Critical max 9.8SUSE-SU-2024:3701-1 9 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2017:1744-1 1 CVE
Security update for python-pycrypto
This update for python-pycrypto fixes the following issues: - CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew (bsc#1017420).
first Jun 30, 2017 -
Critical max 9.8openSUSE-SU-2024:10722-1 14 CVEs
docker-20.10.6_ce-2.1 on GA media
These are all security issues fixed in the docker-20.10.6_ce-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:0119-1 5 CVEs
Security update for tinyproxy
This update for tinyproxy fixes the following issues: - Update to release 1.11.2 * Fix potential use-after-free in header handling [CVE-2023-49606, boo#1223746] * Prevent junk from showing up in error page in invalid requests [CVE-2022-40468, CVE-2023-40533, …
first May 10, 2024 -
Critical max 9.8openSUSE-SU-2024:11249-1 2 CVEs
python-paramiko-doc-2.7.2-3.7 on GA media
These are all security issues fixed in the python-paramiko-doc-2.7.2-3.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2020:3309-1 53 CVEs
Security update for ansible, ardana-ansible, ardana-cinder, ardana-glance, ardana-mq, ardana-nova, ardana-osconfig, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-monasca-installer, openstack-neutron, openstack-nova, python-Django, python-Flask-Cors, python-Pillow, python-ardana-packager, python-keystoneclient, python-keystonemiddleware, python-kombu, python-straight-plugin, python-urllib3, release-notes-sus
This update for ansible, ardana-ansible, ardana-cinder, ardana-glance, ardana-mq, ardana-nova, ardana-osconfig, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-monasca-ins…
first Nov 12, 2020 -
Critical max 9.4SUSE-SU-2024:2472-1 9 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 12, 2024 -
Critical max 9.6
Security update for chromium
This update for Chromium fixes the following issue: Chromium 119.0.6045.199 (boo#1217616) * CVE-2023-6348: Type Confusion in Spellcheck * CVE-2023-6347: Use after free in Mojo * CVE-2023-6346: Use after free in WebAudio * CVE-2023-6350: Out of bounds memory a…
first Nov 30, 2023 -
Critical max 9.1SUSE-SU-2024:1854-1 5 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-32002: Fixed case confusion with recursive clones on case-insensitive filesystems that support symbolic links (bsc#1224168) - CVE-2024-32004: Fixed arbitrary code execution during local clones (bsc#12…
first May 30, 2024 -
Critical max 9.2openSUSE-SU-2025:14752-1 1 CVE
rime-schema-all-20230603+git.5fdd2d6-5.1 on GA media
These are all security issues fixed in the rime-schema-all-20230603+git.5fdd2d6-5.1 package on the GA media of openSUSE Tumbleweed.
first Feb 9, 2025 -
Critical max 9.1SUSE-SU-2022:2430-1 4 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 18, 2022 -
Critical max 9.8SUSE-SU-2025:0394-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-50379: Fixed remote code execution (RCE) due to TOCTOU issue in JSP compilation (bsc#1234663). - CVE-2024-54677: Fixed denial-of-service (DoS) attack in examples web application (bsc#1234664).
first Feb 10, 2025 -
Critical max 9.8openSUSE-SU-2024:14438-1 10 CVEs
MozillaThunderbird-128.4.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2021:0624-1 10 CVEs
Security update for py26-compat-salt
This update for py26-compat-salt fixes the following issues: - Allow extra_filerefs as sanitized kwargs for SSH client - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (…
first Feb 26, 2021 -
Critical max 9.8SUSE-SU-2022:3259-1 1 CVE
Security update for rubygem-kramdown
This update for rubygem-kramdown fixes the following issues: - CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297).
first Sep 12, 2022 -
Critical max 9.8openSUSE-SU-2024:11866-1 5 CVEs
expat-2.4.6-1.1 on GA media
These are all security issues fixed in the expat-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2021:3385-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911) - CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489)
first Oct 12, 2021 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jun 21, 2021 -
Critical max 9.8SUSE-SU-2021:0529-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3177: Fixed buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in thei…
first Feb 19, 2021 -
Critical max 9.8SUSE-SU-2019:2253-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
first Aug 29, 2019 -
Critical max 9.4SUSE-SU-2024:2530-1 4 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 16, 2024 -
Critical max 9.4SUSE-SU-2025:0525-1 6 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot was updated to version 0.1.1728559936.c16d4fb: - Added MAC based terminal naming option (jsc#SUMA-314) golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 (jsc#PED-11649): - Sec…
first Feb 14, 2025 -
Critical max 9.8SUSE-SU-2025:03539-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_p…
first Oct 10, 2025 -
Critical max 9.8SUSE-SU-2024:3666-1 6 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_…
first Oct 16, 2024 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2024:3566-1 90 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084). - CVE-2024-46770: ice: Add netif_device_attach/detach into…
first Oct 9, 2024 -
Critical max 9.8openSUSE-SU-2024:14286-1 1 CVE
frr-10.0.1-2.1 on GA media
These are all security issues fixed in the frr-10.0.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 23, 2024