5,613 results · Clear filters · Feed
-
Critical max 9.9openSUSE-SU-2023:0272-1 2 CVEs
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issues: - CVE-2023-27586: Don't allow fetching external files unless explicitly asked for. (boo#1209538) - Update to version 2.5.2 * Fix marker path scale - Update to version 2.5.1 (boo#1180648, CVE-2021-212…
first Sep 25, 2023 -
Critical max 9.8SUSE-SU-2022:1757-1 6 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970): - CVE-2022-29914: Fullscreen notification bypass using popups - CVE-2022-29909: Bypassing permission prompt in nested browsing …
first May 19, 2022 -
Critical max 9.8openSUSE-SU-2024:12089-1 17 CVEs
python311-3.11.0b1-1.1 on GA media
These are all security issues fixed in the python311-3.11.0b1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…
first Nov 25, 2020 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to …
first Sep 12, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339). - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of f…
first Mar 26, 2025 -
Critical max 9.8openSUSE-SU-2025:14662-1 12 CVEs
python311-Django-5.1.5-1.1 on GA media
These are all security issues fixed in the python311-Django-5.1.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 17, 2025 -
Critical max 9.8SUSE-SU-2025:0106-1 25 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 14, 2025 -
Critical max 9.8SUSE-SU-2015:0836-1 1 CVE
Security update for mercurial
Mercurial was updated to fix a command injection via sshpeer._validaterepo() (CVE-2014-9462, bnc#923070):
first Mar 20, 2015 -
Critical max 9.4SUSE-SU-2023:2916-1 3 CVEs
Security update for grafana
This update fixes the following issues: grafana: - Update to version 9.5.5: * CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694) * Bug fixes: * Auth: Show invite button if disable login form is set to false. * Azure: Fix…
first Jul 20, 2023 -
Critical max 9.1SUSE-SU-2021:0448-1 1 CVE
Security update for SUSE Manager Server 4.0
This update fixes the following issues: cpu-mitigations-formula: - Handle unsupported target systems gracefully (bsc#1179273) - add mitigations for Xen hypervisor nutch-core: - Fix XXE injection in DmozParser CVE-2021-23901 (bsc#1181356) smdba: - Do not remov…
first Feb 12, 2021 -
Critical max 9.8SUSE-SU-2024:3854-1 16 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 31, 2024 -
Critical max 9.1SUSE-SU-2024:2953-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-2511: Fixed a denial of service due to unbounded memory growth with session handling in TLSv1.3 (bsc#1222548) - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with …
first Aug 19, 2024 -
Critical max 9.8
Security update for kubernetes
This update introduces kubernetes version 1.14.1 and cri-o 1.17.1 to Leap 15.1.
first Apr 26, 2020 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal red…
first Jul 30, 2024 -
Critical max 9.9openSUSE-SU-2023:0260-1 2 CVEs
Security update for python-CairoSVG
This update for python-CairoSVG fixes the following issues: - CVE-2023-27586: Don't allow fetching external files unless explicitly asked for. (boo#1209538) - Update to version 2.5.2 * Fix marker path scale - Update to version 2.5.1 (boo#1180648, CVE-2021-212…
first Sep 25, 2023 -
Critical max 9.8SUSE-SU-2024:3710-1 9 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2019:14139-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083).
first Aug 6, 2019 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073). - CVE-2023-52888: media: mediatek: vcode…
first Aug 20, 2025 -
Critical max 9.8SUSE-SU-2021:3331-1 20 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#119133…
first Oct 11, 2021 -
Critical max 9.1SUSE-SU-2024:3019-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463)
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2023:3975-1 1 CVE
Security update for python-gevent
This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).
first Oct 5, 2023 -
Critical max 9.8SUSE-SU-2019:2373-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495). - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).
first Sep 12, 2019 -
Critical max 9.8SUSE-SU-2024:3433-1 3 CVEs
Security update for quagga
This update for quagga fixes the following issues: - CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866) - CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#122943…
first Sep 25, 2024 -
Critical max 9.3openSUSE-SU-2025:15779-1 20 CVEs
helm3-3.19.2-1.1 on GA media
These are all security issues fixed in the helm3-3.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2025 -
Critical max 9.8SUSE-SU-2022:0330-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640) - CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768) - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_c…
first Feb 4, 2022 -
Critical max 9.8SUSE-SU-2018:1757-1 2 CVEs
Security update for salt
This update for salt provides version 2018.3 and brings many fixes and improvements: - Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413) - Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt - Add 'other' attribute to …
first Jun 19, 2018 -
Critical max 9.8SUSE-SU-2025:1521-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.104 - CVE-2025-31650: invalid priority field values should be ignored (bsc#1242008) - CVE-2025-31651: Better handling of URLs with literal ';' and '?' (bsc#1242009) Full changelog: https:…
first May 9, 2025 -
Critical max 9.8openSUSE-SU-2019:1689-1 2 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: * Several issues with SYSTEM VERSIONING tables * Fixed json encode error in export * Fixed JavaScript events not activating on input (sql bookmark issue) * Show Designer…
first Jul 2, 2019 -
Critical max 9.8SUSE-SU-2024:3821-1 15 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debu…
first Oct 30, 2024 -
Critical max 9.0SUSE-SU-2024:0517-1 1 CVE
Security update for libaom
This update for libaom fixes the following issues: - CVE-2023-6879: Fixed a heap buffer overflow when increasing the video frame resolution (bsc#1218429).
first Feb 15, 2024 -
Critical max 9.4SUSE-SU-2023:3541-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103)
first Sep 5, 2023 -
Critical max 9.8SUSE-SU-2025:3798-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls (bsc#1251271, XSA-475) - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian …
first Oct 27, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768). - CVE-2022-49080: mm/mempolicy: fix mpol_n…
first Mar 14, 2025 -
Critical max 9.9openSUSE-SU-2025:14983-1 4 CVEs
pgadmin4-9.2-1.1 on GA media
These are all security issues fixed in the pgadmin4-9.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 10, 2025 -
Critical max 9.4SUSE-SU-2023:2594-1 2 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: release-notes-susemanager: - Update to 4.2.13 * Salt has been upgraded to 3006.0 * SUSE Linux Enterprise Server 15 SP5 Family support has been added * openSUSE Leap 15.5 support has been added * Automatic migration from…
first Jun 21, 2023 -
Critical max 9.6
chromedriver-94.0.4606.71-1.1 on GA media
These are all security issues fixed in the chromedriver-94.0.4606.71-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3SUSE-SU-2025:02412-1 10 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extend…
first Jul 21, 2025 -
Critical max 9.8openSUSE-SU-2024:13063-1 1 CVE
openssh-9.3p2-1.1 on GA media
These are all security issues fixed in the openssh-9.3p2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2025:02446-1 8 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has be…
first Jul 21, 2025