5,613 results · Clear filters · Feed
-
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…
first Jan 25, 2022 -
Critical max 9.3SUSE-SU-2020:3038-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - libxl: Fixed lock manager l…
first Oct 27, 2020 -
Critical max 9.6openSUSE-SU-2025:15014-1 1 CVE
govulncheck-vulndb-0.0.20250422T152923-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250422T152923-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2025 -
Critical max 9.8SUSE-SU-2024:2893-1 22 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-41069: ASoC: topology: Fix route …
first Aug 13, 2024 -
Critical max 9.8SUSE-SU-2023:3272-1 2 CVEs
Security update for python-scipy
This update for python-scipy fixes the following issues: - CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062). - CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137).
first Aug 11, 2023 -
Critical max 9.8
python36-Pillow-8.3.2-1.2 on GA media
These are all security issues fixed in the python36-Pillow-8.3.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:4009-1 1 CVE
Security update for python-gevent
This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).
first Oct 9, 2023 -
Critical max 9.8
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2024:4360-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/r…
first Dec 17, 2024 -
Critical max 9.8openSUSE-SU-2025:15126-1 2 CVEs
ruby3.4-rubygem-rubyzip-2.3.2-1.17 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rubyzip-2.3.2-1.17 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Critical max 9.8
exim-4.94.2-4.2 on GA media
These are all security issues fixed in the exim-4.94.2-4.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:0769-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: Following security issues were fixed: - CVE-2018-1000120: A buffer overflow exists in the FTP URL handling that allowed an attacker to cause a denial of service or possible code execution (bsc#1084521). - CVE-2…
first Mar 22, 2018 -
Critical max 9.8SUSE-SU-2024:3838-1 7 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 30, 2024 -
Critical max 9.0openSUSE-SU-2024:13924-1 1 CVE
nodejs-electron-29.3.2~20240430g19f0abd6-1.1 on GA media
These are all security issues fixed in the nodejs-electron-29.3.2~20240430g19f0abd6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:13900-1 6 CVEs
freerdp-3.5.1-1.1 on GA media
These are all security issues fixed in the freerdp-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:14937-1 1 CVE
Security update for openvpn-openssl1
This update for openvpn-openssl1 fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
first Apr 6, 2022 -
Critical max 9.8SUSE-SU-2024:1709-1 5 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_169 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound b…
first May 21, 2024 -
Critical max 9.1SUSE-SU-2021:14822-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489) - CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911)
first Oct 4, 2021 -
Critical max 9.0openSUSE-SU-2020:1604-1 2 CVEs
Security update for zabbix
This update for zabbix fixes the following issues: Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget (boo#1174253).
first Oct 4, 2020 -
Critical max 9.8SUSE-SU-2015:1161-1 13 CVEs
Security update for java-1_6_0-ibm
IBM Java 1.6.0 was updated to SR16-FP4 fixing security issues and bugs. Tabulated information can be found on: [http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_May_2015](http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Up…
first Jun 17, 2015 -
Critical max 9.8openSUSE-SU-2022:0214-1 3 CVEs
Security update for log4j
This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844) - CVE-2022-23305: Fixed SQL injection when application is configured to use JD…
first Jan 27, 2022 -
Critical max 9.8SUSE-SU-2025:03008-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 (bsc#1248162) * CVE-2025-9179 (bmo#1979527): Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180 (bmo#19…
first Aug 28, 2025 -
Critical max 9.8openSUSE-SU-2019:1399-1 1 CVE
Security update for jakarta-commons-fileupload
This update for jakarta-commons-fileupload fixes the following issue: Security issue fixed: - CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829). This update was imported from the SUSE:SLE-15:Update update project.
first May 15, 2019 -
Critical max 9.0SUSE-SU-2024:2367-1 1 CVE
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2024-3596: Fixed chosen-prefix collision attack against MD5 (bsc#1223414).
first Jul 9, 2024 -
Critical max 9.8openSUSE-SU-2024:0382-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: Update to 3.3.7: * Security: Fix issue that allowed anyone to connect to the API as admin (CVE-2024-47533, boo#1231332) * bind - Fix bug that prevents cname entries from being generated successfully * Fix bu…
first Nov 28, 2024 -
Critical max 9.8SUSE-SU-2019:2374-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
first Sep 12, 2019 -
Critical max 9.8SUSE-SU-2019:2300-1 4 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via r…
first Sep 5, 2019 -
Critical max 9.8SUSE-SU-2024:3109-1 8 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698): - Fix web process cache suspend/resume when sandbox is enabled. - Fix accelerated images dissapearing after scrolling. - Fix video flickeri…
first Sep 3, 2024 -
Critical max 9.8SUSE-SU-2022:3103-1 1 CVE
Security update for python-bottle
This update for python-bottle fixes the following issues: - CVE-2022-31799: Fixed an error mishandling issue that could lead to remote denial of service (bsc#1200286).
first Sep 6, 2022 -
Critical max 9.3openSUSE-SU-2025:14970-1 6 CVEs
govulncheck-vulndb-0.0.20250402T160203-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250402T160203-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2025 -
Critical max 9.8SUSE-SU-2019:3066-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c …
first Nov 26, 2019 -
Critical max 9.8openSUSE-SU-2024:14332-1 1 CVE
keepalived-2.3.1+git59.b6681f98-1.1 on GA media
These are all security issues fixed in the keepalived-2.3.1+git59.b6681f98-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 11, 2024 -
Critical max 9.8SUSE-SU-2021:0628-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-…
first Feb 26, 2021 -
Critical max 9.6SUSE-SU-2022:0821-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-…
first Mar 14, 2022 -
Critical max 9.8SUSE-SU-2019:1973-1 2 CVEs
Security update for rmt-server
This update for rmt-server to version 2.3.1 fixes the following issues: - Fix mirroring logic when errors are encountered (bsc#1140492) - Refactor RMT::Mirror to download metadata/licenses in parallel - Check repo metadata GPG signatures during mirroring (bsc…
first Jul 25, 2019 -
Critical max 9.8SUSE-SU-2024:3043-1 14 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when…
first Apr 14, 2025 -
Critical max 9.3openSUSE-SU-2023:0423-1 1 CVE
Security update for deepin-compressor
This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal (boo#1218428)
first Dec 30, 2023 -
Critical max 9.8SUSE-SU-2024:3796-1 21 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2025:03476-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_29 fixes several issues. The following security issues were fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3…
first Oct 7, 2025