5,613 results · Clear filters · Feed
-
Critical max 10.0openSUSE-SU-2023:0329-1 10 CVEs
Security update for sox
This update for sox fixes the following issues: - Apply various fix patches taken from Debian package; it fixes also other entries (CVE-2022-31650 boo#1212060 CVE-2023-34318 boo#1212062 CVE-2023-34432 boo#1212063) - Fix floating point exception in src/voc.c (…
first Oct 26, 2023 -
Critical max 9.8SUSE-SU-2019:2674-1 28 CVEs
Security update for tcpdump
This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-20…
first Oct 15, 2019 -
Critical max 9.8SUSE-SU-2024:3656-1 11 CVEs
Security update for etcd
This update for etcd fixes the following issues: Update to version 3.5.12: Security fixes: - CVE-2018-16873: Fixed remote command execution in cmd/go (bsc#1118897) - CVE-2018-16874: Fixed directory traversal in cmd/go (bsc#1118898) - CVE-2018-16875: Fixed CPU…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2022:14878-1 8 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).…
first Jan 25, 2022 -
Critical max 9.8SUSE-SU-2022:2313-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 91.11.0 ESR (MFSA 2022-25) (bsc#1200793): - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381) - CVE-2022-31744: C…
first Jul 6, 2022 -
Critical max 9.8openSUSE-SU-2024:0370-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: Update to 3.3.7 * Security: Fix issue that allowed anyone to connect to the API as admin (CVE-2024-47533, boo#1231332) * bind - Fix bug that prevents cname entries from being generated successfully * Fix bui…
first Nov 21, 2024 -
Critical max 9.8SUSE-SU-2022:0704-1 5 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite …
first Mar 3, 2022 -
Critical max 10.0SUSE-SU-2024:2901-1 177 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-42096: x86: stop playing stack…
first Aug 14, 2024 -
Critical max 9.8openSUSE-SU-2023:0005-1 13 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2022-41323: Fixed potential denial-of-service vulnerability in internationalized URLs (boo#1203793) - CVE-2022-36359: Fixed a potential reflected file download vulnerability in FileResponse (boo#…
first Jan 3, 2023 -
Critical max 9.1openSUSE-SU-2024:10643-1 8 CVEs
avahi-0.8-7.2 on GA media
These are all security issues fixed in the avahi-0.8-7.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2020:0490-1 1 CVE
Security update for ppp
This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).
first Feb 26, 2020 -
Critical max 9.1openSUSE-SU-2024:12370-1 3 CVEs
corepack16-16.17.1-1.1 on GA media
These are all security issues fixed in the corepack16-16.17.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2019:2344-1 28 CVEs
Security update for tcpdump
This update for tcpdump fixes the following issues: - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print and lookup_emem (bsc#1068716 bsc#1153098). - CVE-2018-10103: Fixed a mishandling of the printing of SMB data (bsc#1153098). - CVE-20…
first Oct 20, 2019 -
Critical max 9.8SUSE-SU-2024:3039-1 8 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2022:0569-1 5 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first Feb 24, 2022 -
Critical max 9.4openSUSE-SU-2024:13867-1 4 CVEs
php8-8.3.6-1.1 on GA media
These are all security issues fixed in the php8-8.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2020:0607-1 2 CVEs
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Version update to 1.60: * CVE-2018-1000613: Use of Externally-ControlledInput to Select Classes or Code (boo#1100694) * Release notes: http://www.bouncycastle.org/releasenotes.html Version update to 1.5…
first May 3, 2020 -
Critical max 9.1openSUSE-SU-2025:14978-1 1 CVE
govulncheck-vulndb-0.0.20250408T210408-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250408T210408-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 9, 2025 -
Critical max 10.0SUSE-SU-2023:4766-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-202…
first Dec 13, 2023 -
Critical max 9.8SUSE-SU-2021:14650-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix for multiple for security issues (CVE-2020-28243) (CVE-2020-28972) (CVE-2…
first Feb 26, 2021 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list (bsc#1220927). - CVE-2024-49925: fbdev: efifb: Register …
first Dec 13, 2024 -
Critical max 9.4SUSE-SU-2024:2851-1 11 CVEs
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_52 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 8, 2024 -
Critical max 9.8SUSE-SU-2024:3089-1 10 CVEs
Security update for go1.21-openssl
This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improper 100-continue handling (bsc#1227314) - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973) - CVE…
first Sep 3, 2024 -
Critical max 9.4SUSE-SU-2024:2843-1 7 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 8, 2024 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 9.8openSUSE-SU-2024:10586-1 9 CVEs
mercurial-5.9.1-2.1 on GA media
These are all security issues fixed in the mercurial-5.9.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1643-1 201 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2020-36312: Fixed an issue in virt/k…
first May 14, 2024 -
Critical max 9.8openSUSE-SU-2024:12829-1 6 CVEs
nodejs-electron-22.3.4-1.2 on GA media
These are all security issues fixed in the nodejs-electron-22.3.4-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6SUSE-SU-2022:0565-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have byp…
first Feb 24, 2022 -
Critical max 9.8SUSE-SU-2025:0114-1 27 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 15, 2025 -
Critical max 9.8openSUSE-SU-2024:10972-1 9 CVEs
libpng16-16-1.6.37-3.3 on GA media
These are all security issues fixed in the libpng16-16-1.6.37-3.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2020:0053-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).
first Jan 9, 2020 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#117…
first Nov 6, 2020 -
Critical max 9.8openSUSE-SU-2024:0093-1 1 CVE
Security update for minidlna
This update for minidlna fixes the following issues: Update to 1.3.3 (boo#1222007): - Fixed HTTP chunk length parsing. (CVE-2023-33476) - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling.
first Mar 28, 2024 -
Critical max 9.1SUSE-SU-2022:2551-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 26, 2022 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Nov 2, 2021 -
Critical max 9.8openSUSE-SU-2024:12563-1 1 CVE
python310-3.10.9-1.1 on GA media
These are all security issues fixed in the python310-3.10.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:2354-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919). - CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
first Jul 11, 2022 -
Critical max 9.9openSUSE-SU-2020:1346-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token …
first Sep 5, 2020 -
Critical max 9.8SUSE-SU-2025:0058-1 4 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.98 - Fixed CVEs: + CVE-2024-54677: DoS in examples web application (bsc#1234664) + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation (bsc#1234663) + CVE-2024-52317: Request/respo…
first Feb 5, 2025