5,613 results · Clear filters · Feed
-
Critical max 9.8
Security update for unrar
This update for unrar fixes the following issues: - CVE-2022-30333: Fixed directory traversal issue that allowed writing to non-designated paths (bsc#1199349).
first May 19, 2022 -
Critical max 9.8SUSE-SU-2022:3272-1 28 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.2.0esr ESR: * Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 (bsc#1202645) * CVE-2022-38472 (bmo#1769155) Address bar spoofing via XSLT …
first Sep 14, 2022 -
Critical max 10.0openSUSE-SU-2024:14269-1 1 CVE
bubblewrap-0.10.0-1.1 on GA media
These are all security issues fixed in the bubblewrap-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 16, 2024 -
Critical max 9.8SUSE-SU-2024:3859-1 7 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 31, 2024 -
Critical max 9.2SUSE-SU-2025:1026-1 6 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664) - CV…
first Mar 26, 2025 -
Critical max 9.8SUSE-SU-2024:3816-1 5 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_179 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debu…
first Oct 30, 2024 -
Critical max 9.8openSUSE-SU-2024:12477-1 10 CVEs
OpenImageIO-2.4.5.0-1.1 on GA media
These are all security issues fixed in the OpenImageIO-2.4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:2062-1 11 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 91.9.1 MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation (bmo#1770137). - CVE-2022-1529: Untrusted input used in Java…
first Jun 13, 2022 -
Critical max 9.2SUSE-SU-2025:0623-1 4 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOp…
first Feb 21, 2025 -
Critical max 9.8SUSE-SU-2024:3157-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 128.2.0 ESR (bsc#1229821) - CVE-2024-8381: Type confusion when looking up a property name in a 'with' block - CVE-2024-8382: Internal event interfaces were…
first Sep 6, 2024 -
Critical max 10.0SUSE-SU-2024:2052-1 1 CVE
Security update for libaom
This update for libaom fixes the following issues: - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
first Jun 18, 2024 -
Critical max 9.8SUSE-SU-2025:3760-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Move NSS DB password hash away from SHA-1. Update to NSS 3.112.2: * Prevent leaks during pkcs12 decoding. * SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates Update…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2024:3938-1 14 CVEs
Security update for go1.22-openssl
This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 (jsc#SLE-18320) - Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. * Update to Go 1.22.7 (#2…
first Nov 7, 2024 -
Critical max 9.8SUSE-SU-2024:1319-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.10.0 ESR (MSFA 2024-19) (bsc#1222535): - CVE-2024-3852: GetBoundName in the JIT returned the wrong object - CVE-2024-3854: Out-of-bounds-read after mis-o…
first Apr 16, 2024 -
Critical max 9.0openSUSE-SU-2024:14458-1 9 CVEs
govulncheck-vulndb-0.0.20241104T154416-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241104T154416-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 4, 2024 -
Critical max 9.8openSUSE-SU-2025:0145-1 4 CVEs
Security update for chromium
This update for chromium fixes the following issues: - Chromium 136.0.7103.48 (stable release 2025-04-29) (boo#1242153) * CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11 * CVE-2025-4050: Out of bounds memory access in DevTools…
first May 6, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736). - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sy…
first Mar 11, 2025 -
Critical max 9.4SUSE-SU-2025:02047-1 5 CVEs
Security update for python310
This update for python310 fixes the following issues: python310 was updated from version 3.10.16 to 3.10.18: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273) * CVE-2024-12718, C…
first Jun 20, 2025 -
Critical max 10.0SUSE-SU-2023:4345-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve loc…
first Nov 2, 2023 -
Critical max 9.8SUSE-SU-2018:0807-1 9 CVEs
Security update for memcached
This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS (bsc#817781). - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458). - CVE-2013-7239: SASL authentication allows wrong cr…
first Mar 26, 2018 -
Critical max 10.0SUSE-SU-2023:4775-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 13, 2023 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927). - CVE-2024-49925: fbdev: efifb: Register sysfs groups thro…
first Dec 19, 2024 -
Critical max 9.8openSUSE-SU-2024:11570-1 7 CVEs
MozillaFirefox-93.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-93.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2024:2277-1 5 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion. (bsc#1224168) - CVE-2024-32004: Fixed arbitrary code execution during local c…
first Jul 2, 2024 -
Critical max 9.1openSUSE-SU-2024:11514-1 1 CVE
wp-cli-2.5.0-1.2 on GA media
These are all security issues fixed in the wp-cli-2.5.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:2365-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865). - CVE-2021-47311: net: qcom…
first Jul 9, 2024 -
Critical max 9.8
Security update for java-1_7_0-ibm
This IBM Java 1.7.0 SR9 FP40 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (…
first May 20, 2016 -
Critical max 9.8SUSE-SU-2024:4295-1 1 CVE
Security update for socat
This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh (bsc#1225462)
first Dec 11, 2024 -
Critical max 9.8SUSE-SU-2016:2650-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2016-4658: Use after free via namespace node in XPointer ranges (bsc#1005544).
first Oct 26, 2016 -
Critical max 9.8SUSE-SU-2020:1570-1 42 CVEs
Security update for ruby2.1
This update for ruby2.1 fixes the following issues: Security issues fixed: - CVE-2015-9096: Fixed an SMTP command injection via CRLFsequences in a RCPT TO or MAIL FROM command (bsc#1043983). - CVE-2016-7798: Fixed an IV Reuse in GCM Mode (bsc#1055265). - CVE-…
first Jun 9, 2020 -
Critical max 9.1SUSE-SU-2022:2425-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 18, 2022 -
Critical max 9.8openSUSE-SU-2024:12991-1 4 CVEs
MozillaFirefox-114.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-114.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4
teleport-14.1.1-1.1 on GA media
These are all security issues fixed in the teleport-14.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:1459-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-0778: Fixed a infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). - CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247). - CVE-2021-44907: Fix…
first Apr 28, 2022 -
Critical max 9.3SUSE-SU-2020:0642-1 3 CVEs
Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, keepalived, openstack-barbican, openstack-ceilometer, openstack-cinder, openstack-dashboard, openstack-dashboard-theme-SUSE, openstack-designate, openstack-heat, openstack-horizon-plugin-designate-ui, openstack-horizon-plugin-ir
This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-db, ardana-horizon, ardana-input-model, ardana-monasca, ardana-mq, ardana-nova, ardana-octavia, ardana-osconfig, ardana-tempest, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, cro…
first Mar 11, 2020 -
Critical max 9.8SUSE-SU-2022:0199-1 14 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in…
first Jan 26, 2022 -
Critical max 9.8SUSE-SU-2023:2473-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).
first Jun 8, 2023 -
Critical max 9.8SUSE-SU-2024:2190-1 557 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506) - CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223959…
first Jun 25, 2024 -
Critical max 10.0SUSE-SU-2025:03500-1 4 CVEs
Security update for redis7
This update for redis7 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995]…
first Oct 8, 2025 -
Critical max 10.0openSUSE-SU-2024:14446-1 1 CVE
docker-stable-24.0.9_ce-1.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2024