5,613 results · Clear filters · Feed
-
Critical max 9.8
Security update for tomcat
This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed …
first Mar 5, 2020 -
Critical max 9.8SUSE-SU-2019:2013-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083).
first Jul 29, 2019 -
Critical max 9.1SUSE-SU-2021:1938-1 14 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2020-35655: Fixed a buffer over-read when decoding crafted SGI RLE image files (bsc#1180832). - CVE-2021-25293: Fixed an out-of-bounds read in SGIRleDecode.c (bsc#1183102). - CVE-2021-25290: Fixe…
first Jun 10, 2021 -
Critical max 9.8SUSE-SU-2024:4254-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: Security issues fixed: - CVE-2024-52533: Fix a single byte buffer overflow in set_connect_msg() (bsc#1233282). Non-security issue fixed: - Fix error when uninstalling packages (bsc#1231463).
first Dec 6, 2024 -
Critical max 9.8openSUSE-SU-2024:13165-1 41 CVEs
ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media
These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2019:1861-1 2 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: * Several issues with SYSTEM VERSIONING tables * Fixed json encode error in export * Fixed JavaScript events not activating on input (sql bookmark issue) * Show Designer…
first Aug 13, 2019 -
Critical max 9.8SUSE-SU-2024:3899-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.4.0 ESR (bsc#1231879): - CVE-2024-10458: Permission leak via embed or object elements - CVE-2024-10459: Use-after-free in layout with accessibility - CVE-2024-1046…
first Nov 4, 2024 -
Critical max 10.0SUSE-SU-2023:1714-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410). - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411). Update to version 1.10.8: - If an…
first Mar 31, 2023 -
Critical max 10.0SUSE-SU-2025:0226-1 4 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2024-29018: Fixed external DNS request handling from 'internal' networks that could have led to data exfiltration (bsc#1234089). - CVE-2024-23650: Fixed possibile BuildKit daemon crash via malici…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2022:2947-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
first Aug 31, 2022 -
Critical max 9.8openSUSE-SU-2024:14525-1 1 CVE
tomcat-9.0.97-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.97-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 25, 2024 -
Critical max 9.8openSUSE-SU-2024:0304-1 1 CVE
Security update for htmldoc
This update for htmldoc fixes the following issues: - CVE-2024-45508: Fixed an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node [boo#1230022].
first Sep 16, 2024 -
Critical max 9.1openSUSE-SU-2025:14633-1 1 CVE
grafana-11.3.0-4.1 on GA media
These are all security issues fixed in the grafana-11.3.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jan 12, 2025 -
Critical max 9.8SUSE-SU-2023:0748-1 5 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). Update to 3.10.10: - Add provides for readline and sqlite3 to t…
first Mar 15, 2023 -
Critical max 9.8SUSE-SU-2018:2898-2 3 CVEs
Security update for smt, yast2-smt
This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues: These security issues were fixed in SMT: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read (bsc#1103809). -…
first Oct 18, 2018 -
Critical max 9.8SUSE-SU-2024:2360-1 147 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010). - CVE-2021-47191: Fix out-of-bound read in resp_readcap1…
first Jul 9, 2024 -
Critical max 9.8openSUSE-SU-2024:14582-1 1 CVE
socat-1.8.0.2-1.1 on GA media
These are all security issues fixed in the socat-1.8.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 13, 2024 -
Critical max 9.3SUSE-SU-2020:2970-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Avoid stale capabilit…
first Oct 20, 2020 -
Critical max 9.8SUSE-SU-2019:13951-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Security issue fixed: - CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208). With this update we decrease the possibility of allowing remote attackers…
first Feb 12, 2019 -
Critical max 9.8SUSE-SU-2025:0097-1 13 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-af…
first Jan 14, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-45828: i3c: mipi-i3c-…
first Feb 11, 2025 -
Critical max 10.0SUSE-SU-2024:0586-2 3 CVEs
Security update for docker
This update for docker fixes the following issues: Vendor latest buildkit v0.11 including bugfixes for the following: * CVE-2024-23653: BuildKit API doesn't validate entitlement on container creation (bsc#1219438). * CVE-2024-23652: Fixed arbitrary deletion o…
first Apr 4, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix for CVE-2020-25592 (bsc#1178319), CVE-2020-16846, (bsc#1178361), and CVE-2020-17490 (bsc#1178362).
first Nov 5, 2020 -
Critical max 9.8openSUSE-SU-2019:1618-1 3 CVEs
Security update for aubio
This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults (CVE-2018-19800, boo#1137828, CVE-2018-19801, boo#1137822, CVE-2018-19802, boo#1137823):
first Jun 24, 2019 -
Critical max 9.8SUSE-SU-2023:2957-1 2 CVEs
Security update for python39
This update for python39 fixes the following issues: Update to 3.9.17: - urllib.parse.urlsplit() now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329 (bsc#1208471). - Fixed a s…
first Jul 25, 2023 -
Critical max 9.3openSUSE-SU-2024:10714-1 1 CVE
dex-oidc-2.28.1-1.3 on GA media
These are all security issues fixed in the dex-oidc-2.28.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 (boo#1138872): * CVE-2019-11707: Type confusion in Array.pop * CVE-2019-11708: sandbox escape using Prompt:Open Mozilla Thunderbird was upd…
first Jun 28, 2019 -
Critical max 9.8SUSE-SU-2024:3554-1 3 CVEs
Security update for mozjs78
This update for mozjs78 fixes the following issues: - CVE-2024-45490: Fixed negative len for XML_ParseBuffer in embedded expat (bnc#1230036) - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat (bnc#1230037) - CVE-2024-45492: Fixed integer ov…
first Oct 9, 2024 -
Critical max 9.8openSUSE-SU-2024:12214-1 4 CVEs
curl-7.84.0-1.1 on GA media
These are all security issues fixed in the curl-7.84.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12910-1 21 CVEs
python312-3.12.0a7-1.1 on GA media
These are all security issues fixed in the python312-3.12.0a7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11283-1 17 CVEs
python310-3.10.0rc1-4.2 on GA media
These are all security issues fixed in the python310-3.10.0rc1-4.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3986-1 268 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797). - CVE-2024-41031: …
first Nov 13, 2024 -
Critical max 9.8openSUSE-SU-2025:14623-1 2 CVEs
tomcat10-10.1.34-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.34-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 7, 2025 -
Critical max 9.8SUSE-SU-2025:1336-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content (bsc#1240962) - CVE-2025-24208: permissions issue may lead to a c…
first Apr 17, 2025 -
Critical max 9.8SUSE-SU-2024:3225-1 51 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2022-48919: Fix double free…
first Sep 12, 2024 -
Critical max 9.8
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560). - CVE-2022-48879: efi: fix NULL-deref in i…
first Dec 17, 2024 -
Critical max 9.8SUSE-SU-2025:1331-1 7 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.1 - CVE-2024-54551: improper memory handling may lead to a denial-of-service when processing certain web content (bsc#1240962) - CVE-2025-24208: permissions issue may lead to a c…
first Apr 16, 2025 -
Critical max 9.8SUSE-SU-2023:0799-1 2 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-27522: Fixed HTTP response splitting in mod_proxy_uwsgi (bsc#1209049). - CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047). The following non-security bugs …
first Mar 17, 2023 -
Critical max 9.8SUSE-SU-2024:3538-1 3 CVEs
Security update for mozjs115
This update for mozjs115 fixes the following issues: - CVE-2024-45490: Fixed negative len for XML_ParseBuffer in embedded expat (bnc#1230036) - CVE-2024-45491: Fixed integer overflow in dtdCopy in embedded expat (bnc#1230037) - CVE-2024-45492: Fixed integer o…
first Oct 7, 2024