5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2024:14260-1 14 CVEs
MozillaFirefox-129.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-129.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2024 -
Critical max 9.8SUSE-SU-2025:1057-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228578).
first Mar 28, 2025 -
Critical max 9.8openSUSE-SU-2024:14328-1 3 CVEs
x3270-4.3-4.1 on GA media
These are all security issues fixed in the x3270-4.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2024 -
Critical max 9.8SUSE-SU-2021:0355-1 2 CVEs
Security update for python
This update for python fixes the following issues: - buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126, CVE-2021-3177). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their corre…
first Feb 9, 2021 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952). - CVE-2021-47089: kfence: fix memory leak when cat …
first Aug 16, 2024 -
Critical max 9.1SUSE-SU-2021:0696-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).
first Mar 3, 2021 -
Critical max 9.8SUSE-SU-2025:01982-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611). - CVE-2022-49110: netfilter: conntrack: …
first Jun 17, 2025 -
Critical max 9.8SUSE-SU-2024:2010-1 186 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2021-47378: Destroy cm id before destroy qp to avoid use afte…
first Jun 12, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resc…
first Oct 22, 2025 -
Critical max 10.0SUSE-SU-2023:4820-1 3 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_127 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 13, 2023 -
Critical max 9.8openSUSE-SU-2022:0038-1 4 CVEs
Security update for kafka
This update for kafka, kafka-kit fixes following issues: - Remove JDBCAppender, JMSSink, chainsaw from log4j jars during build to prevent bsc#1194842, CVE-2022-23302, bsc#1194843, CVE-2022-23305, bsc#1194844, CVE-2022-23307 - Rebuild with kafka-kit change to …
first Feb 16, 2022 -
Critical max 9.8SUSE-SU-2025:0146-1 22 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 16, 2025 -
Critical max 9.8openSUSE-SU-2024:12159-1 1 CVE
libopenssl-1_1-devel-1.1.1p-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1p-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3SUSE-SU-2025:02783-1 1 CVE
Security update for icinga2
This update for icinga2 fixes the following issues: - CVE-2025-48057: A certificate incorrectly treated as valid can allow an attacker to impersonate a trusted node (bsc#1243747).
first Aug 13, 2025 -
Critical max 9.8openSUSE-SU-2025:15119-1 2 CVEs
ruby3.4-rubygem-kramdown-2.4.0-1.15 on GA media
These are all security issues fixed in the ruby3.4-rubygem-kramdown-2.4.0-1.15 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 9, 2022 -
Critical max 9.8openSUSE-SU-2024:12979-1 1 CVE
cockpit-agama-2.1+0-1.1 on GA media
These are all security issues fixed in the cockpit-agama-2.1+0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14291-1 1 CVE
perl-App-cpanminus-1.7047-2.1 on GA media
These are all security issues fixed in the perl-App-cpanminus-1.7047-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2024:1742-1 5 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound b…
first May 22, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keywor…
first Nov 4, 2020 -
Critical max 9.8SUSE-SU-2025:1194-1 249 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867). - CVE-2022-49051: net: usb: aqc111: Fix out-of-…
first Apr 10, 2025 -
Critical max 9.1openSUSE-SU-2025:15101-1 1 CVE
python311-py7zr-0.20.8-2.6 on GA media
These are all security issues fixed in the python311-py7zr-0.20.8-2.6 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Critical max 9.9openSUSE-SU-2025:14624-1 13 CVEs
govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250108T191942-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 9, 2025 -
Critical max 9.1openSUSE-SU-2024:14592-1 1 CVE
git-bug-0.8.0+git.1733745604.d499b6e-1.1 on GA media
These are all security issues fixed in the git-bug-0.8.0+git.1733745604.d499b6e-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 17, 2024 -
Critical max 9.8openSUSE-SU-2024:13123-1 1 CVE
glibc-2.38-1.1 on GA media
These are all security issues fixed in the glibc-2.38-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:3771-1 8 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2021:2137-1 1 CVE
Security update for cryptctl
This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move r…
first Jun 23, 2021 -
Critical max 9.8SUSE-SU-2021:2554-1 16 CVEs
Security update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-eventlet, python-py, python-pysaml2, python-six, python-xmlschema
This update for ardana-cobbler, cassandra, cassandra-kit, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-heat-templates, openstack-monasca-installer, openstack-nova, python-Django, python-elementpath, python-ev…
first Jul 28, 2021 -
Critical max 9.8
Security update for java-1_7_1-ibm
This IBM Java 1.7.1 SR3 FP40 relese fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (b…
first May 13, 2016 -
Critical max 9.8SUSE-RU-2020:2161-1 24 CVEs
Security update for ansible1, ardana-ansible, ardana-cobbler, ardana-glance, ardana-input-model, ardana-logging, ardana-manila, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-openstack, grafana, kibana, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-designate, openstack-heat-templates, openstack-ironic, openstack-keystone, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-neutron, o
This update for ansible1, ardana-ansible, ardana-cobbler, ardana-glance, ardana-input-model, ardana-logging, ardana-manila, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-openstack, grafana, kibana, openstack-…
first Aug 6, 2020 -
Critical max 10.0SUSE-SU-2024:0586-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: Vendor latest buildkit v0.11 including bugfixes for the following: * CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438). * CVE-2024-23652: Fixed arbitrary deletion o…
first Feb 22, 2024 -
Critical max 9.8SUSE-SU-2020:0324-1 1 CVE
Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370).
first Feb 5, 2020 -
Critical max 9.8SUSE-SU-2025:3768-1 9 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 24, 2025 -
Critical max 9.8openSUSE-SU-2024:14238-1 1 CVE
libneatvnc0-0.8.1-1.1 on GA media
These are all security issues fixed in the libneatvnc0-0.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 2, 2024 -
Critical max 9.4SUSE-SU-2024:3336-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF)…
first Sep 19, 2024 -
Critical max 9.8openSUSE-SU-2019:2131-1 4 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via r…
first Sep 14, 2019 -
Critical max 9.9openSUSE-SU-2024:14431-1 2 CVEs
grafana-11.3.0-1.1 on GA media
These are all security issues fixed in the grafana-11.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 28, 2024 -
Critical max 10.0SUSE-SU-2023:4833-1 2 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_139 fixes several issues. The following security issues were fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privileg…
first Dec 14, 2023 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 10, 2022 -
Critical max 9.8SUSE-SU-2022:3281-1 23 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Updated to Mozilla Thunderbird 102.2.2: - CVE-2022-3033: Fixed leaking of sensitive information when composing a response to an HTML email with a META refresh tag (bsc#1203007). - CVE-2022-3032: F…
first Sep 15, 2022