5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2022:3231-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - CVE-2020-14343: Fixed a arbitrary code execution when processing untrusted YAML files through the full_load method or with the FullLoader loader. This Fixes an incomplete solution for CVE-2020-1747 (…
first Sep 9, 2022 -
Critical max 9.8SUSE-SU-2025:1288-1 1 CVE
Security update for mozjs52
This update for mozjs52 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).
first Apr 15, 2025 -
Critical max 9.8openSUSE-SU-2019:1495-1 1 CVE
Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root
This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues: - CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524) This update was imported from the SUSE:SLE-15:Update update …
first Jun 3, 2019 -
Critical max 9.3SUSE-SU-2025:02413-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_23 fixes several issues. The following security issues were fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac:…
first Jul 21, 2025 -
Critical max 9.8openSUSE-SU-2021:0450-1 1 CVE
Security update for froxlor
This update for froxlor fixes the following issues: - Upstream upgrade to version 0.10.23 (boo#846355) - Upstream upgrade to version 0.10.22 (boo#846355) - BuildRequire cron as this contains now the cron directories - Use %license for COPYING file instead of …
first Mar 19, 2021 -
Critical max 9.8openSUSE-SU-2019:2078-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593). This update was …
first Sep 6, 2019 -
Critical max 9.1SUSE-SU-2025:02454-1 7 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_185 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has be…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2024:4207-1 20 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 5, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to …
first Sep 12, 2022 -
Critical max 9.8SUSE-SU-2024:3015-1 8 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). - CVE-2024-27398: Fixed use-after-free bugs caused …
first Aug 27, 2024 -
Critical max 9.8openSUSE-SU-2024:11041-1 11 CVEs
matrix-synapse-1.43.0-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.43.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2023:4871-1 3 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_106 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 14, 2023 -
Critical max 9.8openSUSE-SU-2025:14762-1 3 CVEs
python312-mitmproxy-11.1.2-1.1 on GA media
These are all security issues fixed in the python312-mitmproxy-11.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 10, 2025 -
Critical max 10.0SUSE-SU-2023:4835-1 1 CVE
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_166 fixes one issue. The following security issue was fixed: - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as safe, resulting in arbi…
first Dec 14, 2023 -
Critical max 9.8SUSE-SU-2023:4109-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - Updated to version 23.3.4.19 (jsc#PED-6209): - CVE-2022-37026: Complete a previous insufficient fix for an authentication bypass (bsc#1205318).
first Oct 18, 2023 -
Critical max 9.8SUSE-SU-2023:3409-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)
first Aug 23, 2023 -
Critical max 9.8openSUSE-SU-2024:14106-1 1 CVE
agama-web-ui-9+52-1.1 on GA media
These are all security issues fixed in the agama-web-ui-9+52-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 5, 2024 -
Critical max 9.3openSUSE-SU-2021:1255-1 4 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291 - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-202…
first Sep 14, 2021 -
Critical max 9.8SUSE-SU-2023:2228-1 10 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231). - CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232). - CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233). - CVE-2023-27533: Fi…
first May 17, 2023 -
Critical max 9.8SUSE-SU-2024:1679-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 17, 2024 -
Critical max 10.0openSUSE-SU-2024:13726-1 16 CVEs
ruby3.3-rubygem-rack-3.0.9.1-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-rack-3.0.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12696-1 2 CVEs
clamav-0.103.8-1.1 on GA media
These are all security issues fixed in the clamav-0.103.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3697-1 19 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.4SUSE-SU-2024:2410-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 11, 2024 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: Version update from 8.3.10 to 8.5.13 (jsc#PED-2145): - Security fixes: * CVE-2022-36062: (bsc#1203596) * CVE-2022-35957: (bsc#1203597) * CVE-2022-31107: (bsc#1201539) * CVE-2022-31097: (bsc#1201535) * CVE-20…
first Dec 13, 2022 -
Critical max 9.8
tomcat-9.0.36-8.4 on GA media
These are all security issues fixed in the tomcat-9.0.36-8.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1646-1 187 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2021-46904: Fixed NULL pointer derefere…
first May 14, 2024 -
Critical max 9.1SUSE-SU-2024:2154-1 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)
first Jun 21, 2024 -
Critical max 9.8SUSE-SU-2016:2555-1 5 CVEs
Security update for openssh-openssl1
This update for openssh-openssl1 fixes the following issues: Security issues fixed: - CVE-2016-6210: Prevent user enumeration through the timing of password processing (bsc#989363) - CVE-2016-6515: limit accepted password length (prevents possible DoS) (bsc#9…
first Oct 17, 2016 -
Critical max 9.8SUSE-SU-2024:3030-1 2 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_130 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2020:14292-1 1 CVE
Security update for ppp
This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).
first Feb 25, 2020 -
Critical max 9.8SUSE-SU-2024:3984-1 282 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797). - CVE-2024-4103…
first Nov 13, 2024 -
Critical max 9.8SUSE-SU-2018:0973-1 8 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Security issues fixed: - CVE-2018-7537: Fixed catastrophic backtracking in django.utils.text.Truncator. (bsc#1083305) - CVE-2018-7536: Fixed catastrophic backtracking in urlize and urlizetrunc template…
first Apr 18, 2018 -
Critical max 9.1SUSE-SU-2024:2989-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138, bsc#1227227)
first Aug 20, 2024 -
Critical max 9.8
Security update for salt
This update for salt contains the following fixes: - Fix for TypeError in Tornado importer (bsc#1174165) - Require python3-distro only for TW (bsc#1173072) - Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/…
first Jul 21, 2020 -
Critical max 9.8openSUSE-SU-2020:1677-1 1 CVE
Security update for rubygem-activesupport-5_1
This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186) This update was imported from the SUSE:SLE-15:Update u…
first Oct 16, 2020 -
Critical max 9.8
Security update for exim
This update for exim fixes the following issues: Exim was updated to exim-4.94.2 security update (boo#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID f…
first May 20, 2021 -
Critical max 9.8SUSE-SU-2021:0626-1 10 CVEs
Security update for py26-compat-salt
This update for py26-compat-salt fixes the following issues: - Allow extra_filerefs as sanitized kwargs for SSH client - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144) (CVE-2021-25281) (…
first Feb 26, 2021 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2022:0844-2 1 CVE
Security update for expat
This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
first Apr 19, 2022