5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2025:1287-1 1 CVE
Security update for mozjs52
This update for mozjs52 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).
first Apr 15, 2025 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595) This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Apr 30, 2020 -
Critical max 9.8openSUSE-SU-2024:10717-1 1 CVE
diffoscope-183-1.2 on GA media
These are all security issues fixed in the diffoscope-183-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:03480-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_5 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc au…
first Oct 7, 2025 -
Critical max 9.8openSUSE-SU-2024:10268-1 48 CVEs
apache2-2.4.23-4.1 on GA media
These are all security issues fixed in the apache2-2.4.23-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:0782-2 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). - CVE-2022-25236: Fixed an expat vulnerability by…
first Apr 30, 2024 -
Critical max 9.8SUSE-SU-2025:0374-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox to 128.7esr fixes the following issues: * MFSA 2025-09 * CVE-2025-1009 (bmo#1936613) Use-after-free in XSLT * CVE-2025-1010 (bmo#1936982) Use-after-free in Custom Highlight * CVE-2025-1011 (bmo#1936454) A bug in WebAssembly code…
first Feb 5, 2025 -
Critical max 9.8SUSE-SU-2017:2250-1 2 CVEs
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2017-1000115: path traversal via symlink could lead to unauthorized access (bsc#1053344) - CVE-2017-1000116: argument injection in SSH URLs could lead to client-side code execution (bsc#1052696)
first Aug 24, 2017 -
Critical max 9.8openSUSE-SU-2024:10724-1 2 CVEs
dom4j-1.6.1-33.6 on GA media
These are all security issues fixed in the dom4j-1.6.1-33.6 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3SUSE-SU-2022:4606-1 5 CVEs
Security update for helm
This update for helm fixes the following issues: Update to version 3.10.3: - CVE-2022-23524: Fixed a denial of service in the string value parsing (bsc#1206467). - CVE-2022-23525: Fixed a denial of service with the repository index file (bsc#1206469). - CVE-2…
first Dec 22, 2022 -
Critical max 9.8SUSE-SU-2021:2595-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-34552: Fixed a buffer overflow in Convert.c (bsc#1188574)
first Aug 3, 2021 -
Critical max 9.8SUSE-SU-2021:0428-1 2 CVEs
Security update for python36
This update for python36 fixes the following issues: - buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126, CVE-2021-3177). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their cor…
first Feb 10, 2021 -
Critical max 9.8SUSE-SU-2024:4242-1 25 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
Critical max 9.4SUSE-SU-2024:2473-1 5 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 12, 2024 -
Critical max 9.8openSUSE-SU-2020:1679-1 1 CVE
Security update for rubygem-activesupport-5_1
This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186) This update was imported from the SUSE:SLE-15:Update u…
first Oct 17, 2020 -
Critical max 9.8openSUSE-SU-2024:13071-1 6 CVEs
ctdb-4.18.5+git.313.c8e274c7852-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.5+git.313.c8e274c7852-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2025:1506-1 7 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird ESR 128.10 update (bsc#1241621): - CVE-2025-4082: WebGL shader attribute memory corruption in Thunderbird for macOS. - CVE-2025-4087: Unsafe attribute access during XPath parsi…
first May 7, 2025 -
Critical max 9.4SUSE-SU-2024:2822-1 7 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with dev-…
first Aug 8, 2024 -
Critical max 10.0
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…
first Jun 22, 2019 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…
first Nov 15, 2020 -
Critical max 9.8openSUSE-SU-2024:14142-1 1 CVE
python310-impacket-0.11.0-3.3 on GA media
These are all security issues fixed in the python310-impacket-0.11.0-3.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issues: - CVE-2021-44228: Fix a remote code execution vulnerability that existed in the LDAP JNDI parser. [bsc#1193611, CVE-2021-44228] This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Dec 13, 2021 -
Critical max 9.8SUSE-SU-2024:3700-1 13 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after fre…
first Oct 16, 2024 -
Critical max 9.8openSUSE-SU-2024:11786-1 9 CVEs
libruby3_1-3_1-3.1.0-1.1 on GA media
These are all security issues fixed in the libruby3_1-3_1-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2025:02297-1 7 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point out…
first Jul 11, 2025 -
Critical max 10.0
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:01840-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_im…
first Jun 9, 2025 -
Critical max 9.1SUSE-SU-2023:0476-1 4 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958). - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fi…
first Feb 22, 2023 -
Critical max 9.8
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 (MFSA 2024-51, bsc#1231413): - CVE-2024-9680: Use-after-free in Animation timeline Update to Mozilla Thunderbird 128.3 (MFSA 2024-49, bsc#1230979): - CVE-2024…
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2022:2106-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
first Jun 16, 2022 -
Critical max 9.8SUSE-SU-2024:2162-1 9 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi …
first Jun 21, 2024 -
Critical max 9.3SUSE-SU-2023:4727-1 1 CVE
Security update for catatonit, containerd, runc
This update of runc and containerd fixes the following issues: containerd: - Update to containerd v1.7.8. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.8 * CVE-2022-1996: Fixed CORS bypass in go-restful (bsc#1200528) catat…
first Dec 12, 2023 -
Critical max 9.8SUSE-SU-2022:2197-1 2 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jun 28, 2022 -
Critical max 9.9openSUSE-SU-2024:14447-1 44 CVEs
govulncheck-vulndb-0.0.20241030T212825-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241030T212825-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2024 -
Critical max 9.6openSUSE-SU-2024:11908-1 7 CVEs
MozillaFirefox-98.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-98.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2025:0056-1 8 CVEs
Security update for trivy
This update for trivy fixes the following issues: Update to version 0.58.2 ( boo#1234512, CVE-2024-45337, boo#1235265, CVE-2024-45338): * fix(misconf): allow null values only for tf variables [backport: release/v0.58] (#8238) * fix(suse): SUSE - update OSType…
first Feb 7, 2025 -
Critical max 9.1openSUSE-SU-2024:14403-1 1 CVE
python310-pytest-html-4.1.1-2.1 on GA media
These are all security issues fixed in the python310-pytest-html-4.1.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694). - CVE-2022-49033: btrfs: qg…
first Jan 24, 2025 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 10.0SUSE-SU-2024:1469-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267) - CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268) - CVE-2024-23653: Fixed i…
first Apr 29, 2024