5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2022:3774-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383). - CVE-2022-35252: Fixed a potential injection of control characters into cookies (bsc#1202593).
first Oct 26, 2022 -
Critical max 9.1SUSE-SU-2023:0412-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132). - CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).
first Feb 14, 2023 -
Critical max 9.8SUSE-SU-2017:1443-1 2 CVEs
Security update for several openstack-components
This update for openstack-ceilometer, -cinder, -dashboard, -glance, -heat, -keystone, -manila, -magnum and -novaopenstack-keystone provides the latest code from OpenStack Newton. - nova: Add release note that legacy notification exception contexts appearing i…
first May 30, 2017 -
Critical max 10.0SUSE-SU-2023:4375-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local pri…
first Nov 6, 2023 -
Critical max 9.8openSUSE-SU-2024:11211-1 1 CVE
python-SQLAlchemy-doc-1.4.22-1.2 on GA media
These are all security issues fixed in the python-SQLAlchemy-doc-1.4.22-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560). - CVE-2022-48983: io_uring: Fix a null-…
first Dec 13, 2024 -
Critical max 9.1openSUSE-SU-2025:0024-1 1 CVE
Security update for qt6-webengine
This update for qt6-webengine fixes the following issues: - CVE-2024-40896: Fixed a XML external entity vulnerability related to libxml2 (boo#1234820)
first Jan 23, 2025 -
Critical max 9.8openSUSE-SU-2024:12712-1 11 CVEs
libruby3_2-3_2-3.2.1-1.1 on GA media
These are all security issues fixed in the libruby3_2-3_2-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:3750-1 2 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: cobbler: - Consider case of 'next_server' being a hostname during migration of Cobbler collections. - Fix problem with 'proxy_url_ext' setting being None type. - Fix settings migration schema to work while upgrading on …
first Oct 26, 2022 -
Critical max 9.8SUSE-SU-2021:0627-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-…
first Feb 26, 2021 -
Critical max 9.8openSUSE-SU-2024:12409-1 1 CVE
apache-commons-text-1.10.0-1.1 on GA media
These are all security issues fixed in the apache-commons-text-1.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:2144-1 3 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: inter-server-sync: - version 0.2.2 * Parameter --channel-with-children didn't export data (bsc#1199089) * Clean rhnchannelcloned table to rebuild hierarchy (bsc#1197400) - Version 0.2.1 * Correct sequence in use for tab…
first Jun 20, 2022 -
Critical max 10.0openSUSE-SU-2024:12611-1 1 CVE
squirrel-3.2-1.1 on GA media
These are all security issues fixed in the squirrel-3.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11425-1 161 CVEs
tcpdump-4.99.1-1.2 on GA media
These are all security issues fixed in the tcpdump-4.99.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1707-1 5 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 20, 2024 -
Critical max 9.8SUSE-SU-2018:3811-1 2 CVEs
Security update for SUSE Manager Server 3.1
This update includes the following new features: - Add support for postgresql 10 (fate#325659) This update fixes the following issues: py26-compat-salt: - Update Salt version to 2016.11.10 - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api …
first Nov 19, 2018 -
Critical max 9.0openSUSE-SU-2024:13856-1 2 CVEs
sngrep-1.8.1-1.1 on GA media
These are all security issues fixed in the sngrep-1.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12519-1 13 CVEs
MozillaThunderbird-102.5.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.0SUSE-SU-2023:0322-1 3 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#120725…
first Feb 8, 2023 -
Critical max 9.8openSUSE-SU-2025:14942-1 1 CVE
rke2-1.29-1.29.15+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.29-1.29.15+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
Critical max 9.8openSUSE-SU-2024:10532-1 15 CVEs
docker-1.12.3-4.1 on GA media
These are all security issues fixed in the docker-1.12.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:2855-1 8 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2021-22930, CVE-2021-22940: Fixed two memory corruption issues during HTTP/2 stream cancellation (bsc#1188917, bsc#1189368). - CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2021-22960, CVE-2021-…
first Aug 19, 2022 -
Critical max 9.3openSUSE-SU-2024:12252-1 1 CVE
helm-3.9.3-1.1 on GA media
These are all security issues fixed in the helm-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14137-1 1 CVE
python310-django-debug-toolbar-4.3-1.2 on GA media
These are all security issues fixed in the python310-django-debug-toolbar-4.3-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8openSUSE-SU-2024:11243-1 2 CVEs
python38-numpy-1.21.2-1.1 on GA media
These are all security issues fixed in the python38-numpy-1.21.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2023:2783-1 7 CVEs
Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websoc
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfr…
first Jul 4, 2023 -
Critical max 9.8SUSE-SU-2024:0784-1 4 CVEs
Security update for python39
This update for python39 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). - CVE-2023-40217: Fixed a ssl.SSLSocket TLS bypass…
first Mar 6, 2024 -
Critical max 9.8SUSE-SU-2024:4086-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.5.0 ESR, fixed various security fixes and other quality improvements, MFSA 2024-64 (bsc#1233695): * CVE-2024-11691: Memory corruption in Apple GPU drivers * CVE-20…
first Nov 28, 2024 -
Critical max 9.8SUSE-SU-2021:0251-1 2 CVEs
Security update for rubygem-nokogiri
This update for rubygem-nokogiri fixes the following issues: rubygem-nokogiri was updated to 1.8.5 (bsc#1156722). Security issues fixed: - CVE-2019-5477: Fixed a command injection vulnerability (bsc#1146578). - CVE-2020-26247: Fixed an XXE vulnerability in No…
first Feb 1, 2021 -
Critical max 9.8SUSE-SU-2020:0114-1 26 CVEs
Security update for python3
This update for python3 to version 3.6.10 fixes the following issues: - CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507). - CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955). - CVE…
first Jan 16, 2020 -
Critical max 9.8
cacti-1.2.23-1.1 on GA media
These are all security issues fixed in the cacti-1.2.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1685-1 6 CVEs
Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_30 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 20, 2024 -
Critical max 9.1SUSE-SU-2025:02260-1 5 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. (bsc#1244554) - CVE-2025-49796: Fixed type confusion which could lead to denial of service. (bsc#1244557) - CVE-2025-49795…
first Jul 9, 2025 -
Critical max 9.8openSUSE-SU-2019:2348-1 28 CVEs
Security update for tcpdump
This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-20…
first Oct 20, 2019 -
Critical max 9.8SUSE-SU-2024:2297-1 4 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-30203: Fixed denial of service via MIME contents (bsc#1222053). - CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments (bsc#1222052). - CVE-2024-30204: Fixed Org mode cons…
first Jul 4, 2024 -
Critical max 9.8SUSE-SU-2020:0054-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).
first Jan 9, 2020 -
Critical max 9.3openSUSE-SU-2021:1250-1 4 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291: - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-20…
first Sep 13, 2021 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.5 (bsc#1219604): - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113). - CVE-2024-23206: Fixed fingerprint…
first Feb 20, 2024 -
Critical max 10.0SUSE-SU-2024:4204-1 1 CVE
Security update for docker-stable
This update for docker-stable fixes the following issues: - CVE-2024-41110: Fixed Authz zero length regression (bsc#1228324). Bug fixes: - Allow users to disable SUSE secrets support by setting DOCKER_SUSE_SECRETS_ENABLE=0 in /etc/sysconfig/docker (bsc#123134…
first Dec 5, 2024 -
Critical max 9.8SUSE-SU-2024:3695-1 20 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after fre…
first Oct 16, 2024