5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2024:14322-1 3 CVEs
expat-2.6.3-1.1 on GA media
These are all security issues fixed in the expat-2.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 6, 2024 -
Critical max 9.8SUSE-SU-2024:3567-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2022-48911: kabi: add __nf_queue_get_ref…
first Oct 9, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED w…
first Apr 9, 2025 -
Critical max 9.8openSUSE-SU-2023:0009-1 1 CVE
Security update for rubygem-activerecord-5.2
This update for rubygem-activerecord-5.2 fixes the following issues: - CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record (boo#1201465).
first Jan 11, 2023 -
Critical max 9.8SUSE-SU-2025:03007-1 6 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Updated to Mozilla Thunderbird 140.2 MFSA 2025-72 (bsc#1248162): * CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component * CVE-2025-9180: Same-origin policy bypass…
first Aug 28, 2025 -
Critical max 9.8SUSE-SU-2025:0156-1 6 CVEs
Security update for rsync
This update for rsync fixes the following issues: - CVE-2024-12084: heap buffer overflow in checksum parsing. (bsc#1234100) - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. (bsc#1234101) - CVE-2024-12086: leak …
first Jan 17, 2025 -
Critical max 10.0SUSE-SU-2024:4319-1 3 CVEs
Security update for docker
This update for docker fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/buildx/r…
first Dec 13, 2024 -
Critical max 9.8openSUSE-SU-2025:14943-1 1 CVE
rke2-1.30-1.30.11+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.30-1.30.11+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
Critical max 9.8SUSE-SU-2024:2631-1 5 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed integer overflow in `freerdp_bitmap_planar_context_reset` that could lead to heap-buffer overflow (bsc#1219049) - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Co…
first Jul 30, 2024 -
Critical max 10.0
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_c…
first Jun 24, 2019 -
Critical max 9.8SUSE-SU-2024:3822-1 9 CVEs
Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debu…
first Oct 30, 2024 -
Critical max 9.1openSUSE-SU-2024:13504-1 14 CVEs
freerdp-2.11.2-3.1 on GA media
These are all security issues fixed in the freerdp-2.11.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14174-1 44 CVEs
ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media
These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2024:3634-1 1 CVE
Security update for keepalived
This update for keepalived fixes the following issues: - CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2025:03614-1 183 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968). - CVE-2022-50242: drivers: net…
first Oct 16, 2025 -
Critical max 9.8openSUSE-SU-2024:11793-1 2 CVEs
expat-2.4.4-1.1 on GA media
These are all security issues fixed in the expat-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2020:1806-1 5 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.7 (boo#1177842): * Fix two factor authentication that was broken in 4.9.6 * Fix incompatibilities with older PHP versions Update to 4.9.6: - Fixed XSS relating to the transfo…
first Nov 1, 2020 -
Critical max 9.8SUSE-SU-2026:0173-1 10 CVEs
Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.88 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: ne…
first Jan 19, 2026 -
Critical max 9.8SUSE-SU-2024:4285-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed denial-of-service in django.utils.html.strip_tags() (bsc#1234232) - CVE-2024-53908: Fixed SQL injection in HasKey(lhs, rhs) on Oracle (bsc#1234231)
first Dec 11, 2024 -
Critical max 9.8SUSE-SU-2024:0224-1 2 CVEs
Security update for apache-parent, apache-sshd
This update for apache-parent, apache-sshd fixes the following issues: apache-parent was updated from version 28 to 31: - Version 31: * New Features: + Added maven-checkstyle-plugin to pluginManagement * Improvements: + Set minimalMavenBuildVersion to 3.6.3 -…
first Jan 25, 2024 -
Critical max 9.8SUSE-SU-2024:3592-1 130 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607). - CVE-2022-48911: kabi: add _…
first Oct 10, 2024 -
Critical max 9.1SUSE-SU-2025:01886-1 1 CVE
Security update for perl-YAML-LibYAML
This update for perl-YAML-LibYAML fixes the following issues: - CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified (bsc#1243902)
first Jun 11, 2025 -
Critical max 9.8openSUSE-SU-2022:0713-1 5 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25…
first Mar 4, 2022 -
Critical max 9.8SUSE-SU-2019:2004-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083).
first Jul 29, 2019 -
Critical max 9.8SUSE-SU-2024:4082-1 101 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fr…
first Nov 27, 2024 -
Critical max 9.8SUSE-SU-2022:0354-1 4 CVEs
Security update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thresh, openstack-monasca-thresh-kit, spark, spark-kit, storm, storm-kit, venv-openstack-monasca, zookeeper, zookeeper-kit
This update for elasticsearch, elasticsearch-kit, kafka, kafka-kit, logstash, openstack-monasca-agent, openstack-monasca-persister-java, openstack-monasca-persister-java-kit, openstack-monasca-thresh, openstack-monasca-thresh-kit, spark, spark-kit, storm, sto…
first Feb 9, 2022 -
Critical max 10.0openSUSE-SU-2019:0058-1 2 CVEs
Security update for live555
This update fixes two security issues in live555: - CVE-2018-4013: Remote code execution vulnerability (bsc#1114779) - CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers (boo#1121892) This library is statical…
first Mar 23, 2019 -
Critical max 9.8
Security update for java-1_7_1-ibm
This IBM Java 1.7.1 SR3 FP40 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (…
first May 13, 2016 -
Critical max 9.8openSUSE-SU-2021:0046-1 6 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: - Add cobbler-tests subpackage for unit testing for openSUSE/SLE - Adds LoadModule definitions for openSUSE/SLE - Switch to new refactored auth module. - use systemctl to restart cobblerd on logfile rotation…
first Jan 11, 2021 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2023:0316-1 1 CVE
Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2022-43634: Fixed heap-based Buffer Overflow in dsi_writeinit (bsc#1207974).
first Feb 8, 2023 -
Critical max 9.8openSUSE-SU-2024:14109-1 28 CVEs
python313-3.13.0~b3-1.1 on GA media
These are all security issues fixed in the python313-3.13.0~b3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 5, 2024 -
Critical max 9.8SUSE-SU-2022:1888-1 1 CVE
Security update for helm-mirror
This update for helm-mirror fixes the following issues: - Updated to version 0.3.1: - CVE-2019-18658: Fixed a potential symbolic link issue in helm that could be used to leak sensitive files (bsc#1156646).
first May 31, 2022 -
Critical max 9.8SUSE-SU-2024:1466-1 149 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. NOTE: This update has been retracted due to a bug in the BHI CPU sidechannel mitigation, which led to incorrect selection of other CPU mitigations. The following secu…
first Apr 29, 2024 -
Critical max 9.3openSUSE-SU-2024:11008-1 21 CVEs
libvirt-7.7.0-2.1 on GA media
These are all security issues fixed in the libvirt-7.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2025:15029-1 1 CVE
kyverno-1.14.0-1.1 on GA media
These are all security issues fixed in the kyverno-1.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2025 -
Critical max 9.8SUSE-SU-2023:4948-1 2 CVEs
Security update for zbar
This update for zbar fixes the following issues: - CVE-2023-40889: Fixed heap-based buffer overflow in the qr_reader_match_centers function (bsc#1214770). - CVE-2023-40890: Fixed stack-based buffer overflow in the lookup_sequence function (bsc#1214771).
first Dec 21, 2023 -
Critical max 9.8SUSE-SU-2025:0391-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox to 128.7esr fixes the following issues: * MFSA 2025-09 * CVE-2025-1009 (bmo#1936613) Use-after-free in XSLT * CVE-2025-1010 (bmo#1936982) Use-after-free in Custom Highlight * CVE-2025-1011 (bmo#1936454) A bug in WebAssembly code…
first Feb 10, 2025 -
Critical max 9.8SUSE-SU-2022:14884-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054). - CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
first Feb 9, 2022 -
Critical max 9.8openSUSE-SU-2024:14089-1 2 CVEs
python310-PyYAML-6.0.1-4.1 on GA media
These are all security issues fixed in the python310-PyYAML-6.0.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Jul 2, 2024