5,613 results · Clear filters · Feed
-
Critical max 9.8
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 25, 2025 -
Critical max 9.8SUSE-SU-2025:01521-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.104 - CVE-2025-31650: invalid priority field values should be ignored (bsc#1242008) - CVE-2025-31651: Better handling of URLs with literal ';' and '?' (bsc#1242009) Full changelog: https:…
first May 29, 2025 -
Critical max 9.8SUSE-SU-2018:2608-1 3 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoin…
first Sep 4, 2018 -
Critical max 9.8SUSE-SU-2025:1450-1 7 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2025-22921: Clear array length when freeing it. (bsc#1237382) - CVE-2025-0518: Fix memory data leak when use sscanf(). (bsc#1236007) - CVE-2025-22919: Check for valid sample rate, to fix the invalid sam…
first May 5, 2025 -
Critical max 9.1openSUSE-SU-2024:10650-1 32 CVEs
bind-9.16.20-1.4 on GA media
These are all security issues fixed in the bind-9.16.20-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2024:13968-1 5 CVEs
git-2.45.1-1.1 on GA media
These are all security issues fixed in the git-2.45.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2022:0704-1 5 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite …
first Mar 3, 2022 -
Critical max 9.8SUSE-SU-2018:1850-1 1 CVE
Security update for python-paramiko
This update for python-paramiko to version 2.0.8 fixes the following issues: - CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did not properly check whether authentication is completed processing other requests. A customized SSH clie…
first Jun 29, 2018 -
Critical max 9.8SUSE-SU-2024:2722-1 15 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 2, 2024 -
Critical max 9.1openSUSE-SU-2025:14969-1 1 CVE
google-guest-agent-20250327.01-1.1 on GA media
These are all security issues fixed in the google-guest-agent-20250327.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2025 -
Critical max 9.8SUSE-SU-2024:3252-1 105 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579). - CVE-2024-35933: Fixed a build regression (bsc#1…
first Sep 16, 2024 -
Critical max 9.8SUSE-SU-2018:2550-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: Security issue fixed: - CVE-2018-10931: Forbid exposure of private methods in the API (bsc#1104287, bsc#1104189)
first Aug 29, 2018 -
Critical max 9.8SUSE-SU-2024:3805-1 6 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_88 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_oplo…
first Oct 30, 2024 -
Critical max 10.0SUSE-SU-2025:0980-1 6 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2025-27144: Fixed Denial of Service in Go JOSE's Parsing (bsc#1237679). - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content (bsc#1234794). - CVE-2024-45337…
first Mar 21, 2025 -
Critical max 9.2SUSE-SU-2025:0994-1 6 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664) - CV…
first Mar 24, 2025 -
Critical max 9.1SUSE-SU-2023:0073-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958).
first Jan 11, 2023 -
Critical max 9.8SUSE-SU-2019:2331-1 4 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via r…
first Sep 9, 2019 -
Critical max 9.8openSUSE-SU-2025:15819-1 12 CVEs
libruby4_0-4_0-4.0.0~preview2-1.1 on GA media
These are all security issues fixed in the libruby4_0-4_0-4.0.0~preview2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2025 -
Critical max 9.8openSUSE-SU-2024:12964-1 1 CVE
python310-3.10.11-1.1 on GA media
These are all security issues fixed in the python310-3.10.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:0605-1 1 CVE
Security update for ansible
This update for ansible fixes the following issues: - CVE-2017-7550: A flaw was found in the way Ansible passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. Th…
first Mar 5, 2018 -
Critical max 9.8openSUSE-SU-2024:14115-1 1 CVE
znc-1.9.1-1.1 on GA media
These are all security issues fixed in the znc-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 8, 2024 -
Critical max 9.8openSUSE-SU-2024:11657-1 3 CVEs
libruby2_7-2_7-2.7.5-1.1 on GA media
These are all security issues fixed in the libruby2_7-2_7-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:4515-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).
first Nov 21, 2023 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jul 11, 2021 -
Critical max 9.4SUSE-SU-2024:2338-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse_se…
first Jul 8, 2024 -
Critical max 9.8SUSE-SU-2025:3755-1 8 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_50 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2023:3379-1 3 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to LTS version 16.20.2. - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createR…
first Aug 22, 2023 -
Critical max 9.4SUSE-SU-2024:2480-1 2 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 15, 2024 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal red…
first Jul 22, 2024 -
Critical max 9.8openSUSE-SU-2024:11912-1 35 CVEs
ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:02538-1 94 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: check v…
first Jul 28, 2025 -
Critical max 9.8SUSE-SU-2023:3378-1 3 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to LTS version 18.17.1. - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createR…
first Aug 22, 2023 -
Critical max 9.8openSUSE-SU-2024:11766-1 1 CVE
python38-distributed-2022.1.0-1.1 on GA media
These are all security issues fixed in the python38-distributed-2022.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2023:4084-1 1 CVE
Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2022-22995: Fixed a flaw where combining primitives offered by SMB and AFP in their default configuration may allow an attacker to achieve arbitrary code execution. (bsc#1197576)
first Oct 16, 2023 -
Critical max 9.8SUSE-SU-2025:1365-1 1 CVE
Security update for mozjs60
This update for mozjs60 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).
first Apr 24, 2025 -
Critical max 9.9SUSE-SU-2018:0065-1 3 CVEs
Fixing security issues on OBS toolchain
This OBS toolchain update fixes the following issues: Package 'build': - CVE-2017-14804: Improve file name check extractbuild (bsc#1069904) - Fixed Dockerfile repository parsing Package 'obs-service-source_validator': - CVE-2017-9274: Don't use rpmbuild to ex…
first Jan 11, 2018 -
Critical max 9.1SUSE-RU-2022:4567-1 1 CVE
Recommended update for python-crcmod, python-cryptography, python-cryptography-vectors
This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symme…
first Dec 19, 2022 -
Critical max 9.8SUSE-SU-2023:1817-1 12 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 102.10.0 ESR (bsc#1210212) - CVE-2023-29531: Out-of-bound memory access in WebGL on macOS - CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass - CVE-2023-…
first Apr 11, 2023 -
Critical max 9.8SUSE-SU-2018:1736-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: The following security issue has been fixed: - CVE-2017-1000469: Escape shell parameters provided by the user for the reposync action. (bsc#1074594) Additionally, the following non-security issues have been …
first Jun 19, 2018 -
Critical max 9.8SUSE-SU-2024:1739-1 7 CVEs
Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_97 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 21, 2024