5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2019:2595-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c …
first Nov 30, 2019 -
Critical max 9.8SUSE-SU-2022:2182-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jun 24, 2022 -
Critical max 9.1SUSE-SU-2023:0419-1 7 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: This update ships nodejs18 (jsc#PED-2097) Update to NodejJS 18.13.0 LTS: * build: disable v8 snapshot compression by default * crypto: update root certificates * deps: update ICU to 72.1 * doc: + add doc-on…
first Feb 15, 2023 -
Critical max 9.8SUSE-SU-2025:0862-1 14 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2025-22921: Fixed segmentation violation in NULL pointer dereference via the component /libavcodec/jpeg2000dec.c (bsc#1237382). - CVE-2025-25473: Fixed memory leak in avformat_free_context() (bsc#1237…
first Mar 14, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2024:3587-1 132 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607). - CVE-2022-48911: kabi: ad…
first Oct 10, 2024 -
Critical max 10.0SUSE-SU-2025:1062-1 5 CVEs
Security update for docker, docker-stable
This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/cr…
first Mar 31, 2025 -
Critical max 9.8SUSE-SU-2018:0127-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2017-17458: In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked …
first Jan 17, 2018 -
Critical max 10.0SUSE-SU-2023:4863-1 4 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 14, 2023 -
Critical max 9.8SUSE-SU-2025:3701-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-43343: improved memory handling in web content processing to prevent process crash (bsc#1251975) - CVE-2025-43272: improved memory handling to prevent unexpected process crash (bsc#1250439) - …
first Oct 21, 2025 -
Critical max 9.4SUSE-SU-2024:3318-1 14 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF)…
first Sep 18, 2024 -
Critical max 9.8SUSE-SU-2024:0114-1 4 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (bsc#1218582) - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-bounds memory access (bs…
first Jan 16, 2024 -
Critical max 9.4SUSE-SU-2024:2407-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.15.21-150500_13_55 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 11, 2024 -
Critical max 10.0SUSE-SU-2024:3577-1 1 CVE
Security update for libreoffice
This update for libreofficefixes the following issues: libreoffice was updated to version 24.8.1.2 (jsc#PED-10362): - Release notes: * https://wiki.documentfoundation.org/Releases/24.8.0/RC1 and * https://wiki.documentfoundation.org/Releases/24.8.0/RC2 and * …
first Oct 10, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 re…
first Dec 19, 2024 -
Critical max 9.8
ruby3.1-rubygem-activesupport-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activesupport-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2025:03289-1 35 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250918T182144 2025-09-18T18:21:44Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3915 CVE-2025-5187 GHSA-4x4m-3c2p-qppc * GO-20…
first Sep 22, 2025 -
Critical max 9.8SUSE-SU-2024:1969-1 2 CVEs
Security update for go1.21
This update for go1.21 fixes the following issues: go1.21.11 release (bsc#1212475). - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973). - CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapp…
first Jun 10, 2024 -
Critical max 9.1SUSE-SU-2024:2931-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463)
first Aug 15, 2024 -
Critical max 9.8SUSE-SU-2022:0909-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768) - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_create (bsc#1194770) - CVE-2021-3999: Fixed getcwd to set errno …
first Mar 21, 2022 -
Critical max 9.8SUSE-SU-2023:2064-1 15 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 102.10.1 (MFSA 2023-15) (bsc#1210212): Security fixes: * CVE-2023-29531: Out-of-bound memory access in WebGL on macOS (bmo#1794292) * CVE-2023-29532: Mozilla Maintena…
first Apr 28, 2023 -
Critical max 9.1openSUSE-SU-2024:14111-1 2 CVEs
krb5-1.21.3-1.1 on GA media
These are all security issues fixed in the krb5-1.21.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2024 -
Critical max 9.1openSUSE-SU-2025:15013-1 1 CVE
gopass-1.15.16-1.1 on GA media
These are all security issues fixed in the gopass-1.15.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 22, 2025 -
Critical max 9.8SUSE-SU-2024:3793-1 29 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_opl…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2022:0832-1 4 CVEs
Security update for glibc
glibc was updated to fix the following issues: Security issues fixed: - CVE-2022-23219: Fixed Buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768) - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bsc#1194770) - CVE-2021-3999: Fixed getcwd…
first Mar 14, 2022 -
Critical max 9.8openSUSE-SU-2024:10667-1 3 CVEs
bzip2-1.0.8-3.2 on GA media
These are all security issues fixed in the bzip2-1.0.8-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2025:03507-1 4 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] …
first Oct 9, 2025 -
Critical max 9.8SUSE-SU-2024:3696-1 18 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after fre…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2022:4058-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270): - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen n…
first Nov 17, 2022 -
Critical max 9.8
tomcat10-10.1.14-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11386-1 1 CVE
jcl-over-slf4j-1.7.30-2.5 on GA media
These are all security issues fixed in the jcl-over-slf4j-1.7.30-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3216-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. (bsc#1229932) - CVE-2024-45491: integer overflow in dtdCopy. (bsc#1229931) - CVE-2024-45490: negative length for XML_ParseBuffer not rejected. (…
first Sep 12, 2024 -
Critical max 9.4SUSE-SU-2024:3363-1 8 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart…
first Sep 23, 2024 -
Critical max 9.8SUSE-SU-2020:3729-1 8 CVEs
Security update for clamav
This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459. * clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possi…
first Dec 9, 2020 -
Critical max 9.1openSUSE-SU-2024:14123-1 1 CVE
global-6.6.13-1.1 on GA media
These are all security issues fixed in the global-6.6.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8openSUSE-SU-2025:14665-1 6 CVEs
rsync-3.4.1-1.1 on GA media
These are all security issues fixed in the rsync-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 18, 2025 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454) - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688)
first Jan 20, 2022 -
Critical max 9.8SUSE-SU-2020:1383-1 1 CVE
Security update for dom4j
This update for dom4j fixes the following issues: - CVE-2020-10683: Fixed an XML External Entity vulnerability in default SAX parser (bsc#1169760).
first May 22, 2020 -
Critical max 9.2openSUSE-SU-2025:14738-1 2 CVEs
pam_pkcs11-0.6.13-1.1 on GA media
These are all security issues fixed in the pam_pkcs11-0.6.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2025 -
Critical max 9.1openSUSE-SU-2024:14356-1 1 CVE
system-user-zabbix-6.0.33-1.1 on GA media
These are all security issues fixed in the system-user-zabbix-6.0.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 20, 2024