5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2021:3451-1 20 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Release 91.2.0 ESR: * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332): * CVE-2021-38496: Us…
first Oct 16, 2021 -
Critical max 9.8openSUSE-SU-2024:14020-1 2 CVEs
go1.22-1.22.4-1.1 on GA media
These are all security issues fixed in the go1.22-1.22.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
roundcubemail-1.4.11-1.3 on GA media
These are all security issues fixed in the roundcubemail-1.4.11-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:0124-1 24 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid …
first Jan 15, 2025 -
Critical max 9.8openSUSE-SU-2024:14358-1 9 CVEs
MozillaFirefox-130.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-130.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2024 -
Critical max 9.8SUSE-SU-2025:0202-1 18 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (bsc#1215304). - CVE-2024-53146: NFSD: Prevent a potential in…
first Jan 21, 2025 -
Critical max 9.8SUSE-SU-2023:2641-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).
first Jun 26, 2023 -
Critical max 9.3SUSE-SU-2025:02459-1 9 CVEs
Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe exte…
first Jul 22, 2025 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#…
first Nov 7, 2020 -
Critical max 9.8openSUSE-SU-2025:14727-1 9 CVEs
firefox-esr-128.7.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 4, 2025 -
Critical max 9.8SUSE-SU-2020:1901-1 23 CVEs
Security update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-dashboard, openstack-dashboard-theme-HPE, openstack-heat-templates, openstack-keystone, openstack-monasca-agent, openstack-monasca-installer, openstack-neutron, openstack-octavia-amphora-im
This update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-s…
first Jul 14, 2020 -
Critical max 9.1SUSE-SU-2017:1382-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2017-5647 Pipelined requests could lead to information disclosure (bsc#1033448) - CVE-2017-5648 Untrusted application could retain listener leading to information disclosure (bsc#1033447) - CVE-2016-874…
first May 23, 2017 -
Critical max 10.0SUSE-SU-2023:4841-1 5 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-…
first Dec 14, 2023 -
Critical max 9.8SUSE-SU-2018:2204-1 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097). - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers (bs…
first Aug 6, 2018 -
Critical max 9.1SUSE-SU-2024:2933-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng. (bsc#1226463) - Fixed C99…
first Aug 15, 2024 -
Critical max 9.8SUSE-SU-2026:0166-1 11 CVEs
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 19, 2026 -
Critical max 10.0SUSE-SU-2024:3576-1 1 CVE
Security update for libreoffice
This update for libreoffice fixes the following issues: libreoffice was updated to version 24.8.1.2 (jsc#PED-10362): - Release notes: * https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and * https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and *…
first Oct 10, 2024 -
Critical max 9.8openSUSE-SU-2024:10021-1 9 CVEs
memcached-1.4.33-1.1 on GA media
These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2016:0354-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 Realtime kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-8104: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (host OS pani…
first Feb 5, 2016 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736). - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sy…
first Mar 11, 2025 -
Critical max 10.0SUSE-SU-2025:1178-1 189 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-35910: tcp: prope…
first Apr 8, 2025 -
Critical max 9.8openSUSE-SU-2024:10879-1 1 CVE
jgraphx-3.9.2-1.9 on GA media
These are all security issues fixed in the jgraphx-3.9.2-1.9 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2023:3498-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103)
first Aug 31, 2023 -
Critical max 9.6
chromedriver-112.0.5615.165-1.1 on GA media
These are all security issues fixed in the chromedriver-112.0.5615.165-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:4460-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory …
first Dec 13, 2022 -
Critical max 9.8openSUSE-SU-2024:11017-1 8 CVEs
libxslt-devel-1.1.34-3.2 on GA media
These are all security issues fixed in the libxslt-devel-1.1.34-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6openSUSE-SU-2024:12494-1 6 CVEs
chromedriver-107.0.5304.110-1.1 on GA media
These are all security issues fixed in the chromedriver-107.0.5304.110-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14500-1 486 CVEs
kernel-devel-6.11.8-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.11.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 15, 2024 -
Critical max 9.8SUSE-SU-2024:2008-1 561 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47548: Fixed a possible array out-of=bounds (bsc#1225506) - CVE-2022-48689: Fixed data-race in lru_add_fn (bsc#1223…
first Jun 12, 2024 -
Critical max 9.8SUSE-SU-2024:3624-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 14, 2024 -
Critical max 9.8SUSE-SU-2018:3813-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Salt was updated to version 2016.11.10 and contains the following fixes: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remot…
first Nov 19, 2018 -
Critical max 9.8SUSE-SU-2024:3499-1 31 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002) - CVE-2024-44947: Initialize beyond-EOF page contents…
first Sep 30, 2024 -
Critical max 9.8SUSE-SU-2025:0834-1 71 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM (bsc#1186482). - CVE-2021-47634: ubi: Fix race condition…
first Mar 11, 2025 -
Critical max 9.8SUSE-SU-2025:02455-1 10 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has b…
first Jul 21, 2025 -
Critical max 9.4SUSE-SU-2025:02074-1 9 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to version 3.13.5. Security issues fixed: - CVE-2025-4517: arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-4516: use-after-…
first Jun 24, 2025 -
Critical max 9.1SUSE-SU-2022:3876-1 1 CVE
Security update for xmlbeans
This update for xmlbeans fixes the following issues: - CVE-2021-23926: Fixed XML parsers not protecting from malicious XML input (bsc#1180915).
first Nov 4, 2022 -
Critical max 9.4SUSE-SU-2023:2917-1 3 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update to version 9.5.5: * CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694) * Bug fixes: * Auth: Show invite button if disable login form is set to false. * Azure: Fix…
first Jul 20, 2023 -
Critical max 9.3SUSE-SU-2022:3321-1 3 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: Security issues fixed: - CVE-2022-1798: Fix arbitrar…
first Sep 20, 2022 -
Critical max 9.8openSUSE-SU-2024:0143-1 1 CVE
Security update for libqt5-qtnetworkauth
This update for libqt5-qtnetworkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782).
first May 27, 2024 -
Critical max 9.8SUSE-SU-2024:4124-1 25 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024