5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:3834-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2025:01869-1 4 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-49855: nbd: fix race between timeout and…
first Jun 10, 2025 -
Critical max 9.8openSUSE-SU-2024:14219-1 2 CVEs
libopenssl-1_1-devel-1.1.1w-11.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1w-11.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2020-11651: Fixed the improper validation of method calls in salt-master, that could have allowed unauthenticated remote users to run arbitrary commands on salt minions (bsc#1170595…
first May 22, 2020 -
Critical max 9.8SUSE-RU-2020:2072-1 31 CVEs
Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper
This update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, pytho…
first Jul 29, 2020 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…
first Nov 16, 2020 -
Critical max 9.1SUSE-RU-2025:03081-1 1 CVE
Recommended update for perl-YAML-LibYAML
This update for perl-YAML-LibYAML fixes the following issues: - Updated to 0.904.0 - Dependency submission for the openQA stack
first Sep 5, 2025 -
Critical max 9.9openSUSE-SU-2024:11403-1 40 CVEs
squid-4.16-1.5 on GA media
These are all security issues fixed in the squid-4.16-1.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:2777-1 1 CVE
Security update for python-paramiko
This update for python-paramiko to version 1.18.5 fixes the following issues: This security issue was fixed: - CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did not properly check whether authentication is completed processing other…
first Sep 21, 2018 -
Critical max 9.8SUSE-SU-2023:0471-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (b…
first Feb 21, 2023 -
Critical max 9.6SUSE-SU-2022:0822-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-…
first Mar 14, 2022 -
Critical max 9.8SUSE-SU-2022:4462-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory …
first Dec 13, 2022 -
Critical max 9.4SUSE-SU-2024:2382-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 10, 2024 -
Critical max 9.8openSUSE-SU-2024:12753-1 19 CVEs
MozillaFirefox-110.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-110.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2017:2129-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup (bsc#1052916, CVE-2017-288…
first Aug 10, 2017 -
Critical max 9.8
libmozjs-128-0-128.3.1-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 12, 2024 -
Critical max 9.8openSUSE-SU-2021:1635-1 33 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to version 91.4 MFSA 2021-54 (bsc#1193485) - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured…
first Dec 29, 2021 -
Critical max 9.8SUSE-SU-2023:0865-1 5 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209). - CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210). - CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211). …
first Mar 21, 2023 -
Critical max 9.8SUSE-SU-2023:0031-1 1 CVE
Security update for libksba
This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser (bsc#1206579).
first Jan 5, 2023 -
Critical max 10.0
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…
first Jun 22, 2019 -
Critical max 9.8
bash-4.4-92.1 on GA media
These are all security issues fixed in the bash-4.4-92.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:02546-1 25 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.1 (MFSA 2025-63) (bsc#1246664): - CVE-2025-8027: JavaScript engine only wrote partial return value to stack (bmo#1968423) - CVE-2025-8028: Large branch table coul…
first Jul 30, 2025 -
Critical max 9.8SUSE-SU-2019:2180-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' (bsc#1142880). - CVE-2019-14233: Fixed a denial of service in strip_tags() (bsc#1142882). - CVE-2019-14234: Fixed an SQL inj…
first Aug 19, 2019 -
Critical max 9.8SUSE-SU-2024:3880-1 13 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#…
first Nov 4, 2024 -
Critical max 9.4SUSE-SU-2024:2448-1 8 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of th…
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2025:03628-1 326 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2022-49980: USB: gadget: …
first Oct 17, 2025 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.5 (bsc#1219604): - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113). - CVE-2024-23206: Fixed fingerprint…
first Feb 20, 2024 -
Critical max 9.8SUSE-SU-2018:2047-1 1 CVE
Security update for python-dulwich
This update for python-dulwich to version 0.18.5 fixes this security issue: - CVE-2017-16228: Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname (bsc#10…
first Jul 24, 2018 -
Critical max 9.8openSUSE-SU-2024:0222-1 1 CVE
Security update for python-nltk
This update for python-nltk fixes the following issues: - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage (boo#1227174).
first Jul 26, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-48742: rtnetli…
first Mar 11, 2025 -
Critical max 9.8SUSE-SU-2024:3851-1 25 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_i…
first Oct 31, 2024 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.1 ESR MFSA 2024-51 (bsc#1231413) - CVE-2024-9680: Use-after-free in Animation timeline (bmo#1923344) Also includes the following CVEs from MFSA 2024-47…
first Oct 11, 2024 -
Critical max 9.8SUSE-SU-2023:3455-1 7 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2023-23918: Fixed permissions policies bypass via process.mainModule (bsc#1208481). - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissi…
first Aug 28, 2023 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1665997480.587fa10 * Add dependencies on xz and gzip to support compressed images golang-github-boynux-squid_exporter: - Exclude s390 architecture - Enhanced to build on Enterpri…
first Dec 13, 2022 -
Critical max 9.8openSUSE-SU-2021:0632-1 1 CVE
Security update for gsoap
This update for gsoap fixes the following issues: - CVE-2020-13576: Fixed a remote code execution via specially crafted SOAP request inside the WS-Addressing plugin (boo#1182098)
first Apr 30, 2021 -
Critical max 9.0SUSE-SU-2023:0294-1 3 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#120725…
first Feb 7, 2023 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Oct 26, 2021 -
Critical max 9.8SUSE-SU-2024:2371-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.13.0 ESR (MFSA 2024-30, bsc#1226316): - CVE-2024-6600: Memory corruption in WebGL API - CVE-2024-6601: Race condition in permission assignment - CVE-2024…
first Jul 9, 2024 -
Critical max 9.6SUSE-SU-2025:4159-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.111: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) - CVE-2025-55754: Fixed improper neutralization of escape, meta, or control …
first Nov 21, 2025 -
Critical max 9.8SUSE-SU-2022:1397-1 2 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: c3p0: - Update to version c3p0 0.9.5.5 and mchange-commons-java 0.2.19 * Address CVE-2018-20433 * Address CVE-2019-5427 - XML-config parsing related attacks (bsc#1133198) * Properly implement the JDBC 4.1 abort method g…
first Apr 25, 2022