5,630 results · Clear filters · Feed
-
Critical max 9.4SUSE-SU-2024:2843-1 7 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 8, 2024 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 9.8openSUSE-SU-2024:10586-1 9 CVEs
mercurial-5.9.1-2.1 on GA media
These are all security issues fixed in the mercurial-5.9.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1643-1 201 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25160: Fixed out-of-bounds memory accesses in netlabel (bsc#1220394). - CVE-2020-36312: Fixed an issue in virt/k…
first May 14, 2024 -
Critical max 9.8openSUSE-SU-2024:12829-1 6 CVEs
nodejs-electron-22.3.4-1.2 on GA media
These are all security issues fixed in the nodejs-electron-22.3.4-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6SUSE-SU-2022:0565-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have byp…
first Feb 24, 2022 -
Critical max 9.8SUSE-SU-2025:0114-1 27 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 15, 2025 -
Critical max 9.8openSUSE-SU-2024:10972-1 9 CVEs
libpng16-16-1.6.37-3.3 on GA media
These are all security issues fixed in the libpng16-16-1.6.37-3.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2020:0053-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).
first Jan 9, 2020 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#117…
first Nov 6, 2020 -
Critical max 9.8openSUSE-SU-2024:0093-1 1 CVE
Security update for minidlna
This update for minidlna fixes the following issues: Update to 1.3.3 (boo#1222007): - Fixed HTTP chunk length parsing. (CVE-2023-33476) - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling.
first Mar 28, 2024 -
Critical max 9.1SUSE-SU-2022:2551-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 26, 2022 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Nov 2, 2021 -
Critical max 9.8openSUSE-SU-2024:12563-1 1 CVE
python310-3.10.9-1.1 on GA media
These are all security issues fixed in the python310-3.10.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:2354-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919). - CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
first Jul 11, 2022 -
Critical max 9.9openSUSE-SU-2020:1346-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token …
first Sep 5, 2020 -
Critical max 9.8SUSE-SU-2025:0058-1 4 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.98 - Fixed CVEs: + CVE-2024-54677: DoS in examples web application (bsc#1234664) + CVE-2024-50379: RCE due to TOCTOU issue in JSP compilation (bsc#1234663) + CVE-2024-52317: Request/respo…
first Feb 5, 2025 -
Critical max 9.8openSUSE-SU-2024:12625-1 2 CVEs
git-2.39.1-1.1 on GA media
These are all security issues fixed in the git-2.39.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:0053-1 5 CVEs
Security update for opera
This update for opera fixes the following issues: - Update to 107.0.5045.21 * CHR-9604 Update Chromium on desktop-stable-121-5045 to 121.0.6167.160 * DNA-114167 Crash at TopLevelStorageAccessPermissionContext:: DecidePermission(permissions::PermissionRequestD…
first Feb 19, 2024 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.6.5: - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server set…
first Oct 26, 2020 -
Critical max 9.8openSUSE-SU-2025:14944-1 1 CVE
rke2-1.31-1.31.7+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.31-1.31.7+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
Critical max 9.8openSUSE-SU-2024:0138-1 1 CVE
Security update for qt6-networkauth
This update for qt6-networkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782).
first May 24, 2024 -
Critical max 9.8
Security update for tomcat
Tomcat was updated to version 7.0.78, fixing various bugs and security issues. For full details see https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2016-0762: A realm timing attack in tomcat was fixed which could disclose …
first Jun 23, 2017 -
Critical max 9.8SUSE-SU-2024:1695-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 20, 2024 -
Critical max 9.6SUSE-SU-2022:0819-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-…
first Mar 14, 2022 -
Critical max 9.8SUSE-SU-2024:3806-1 20 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_i…
first Oct 30, 2024 -
Critical max 9.8openSUSE-SU-2024:14160-1 1 CVE
python310-reportlab-4.0.7-1.3 on GA media
These are all security issues fixed in the python310-reportlab-4.0.7-1.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.3SUSE-SU-2022:3333-1 3 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: The kubevirt stack was updated to version 0.54.0 Rel…
first Sep 22, 2022 -
Critical max 9.8SUSE-SU-2019:1846-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083).
first Jul 15, 2019 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). - CVE-2024-36348…
first Aug 25, 2025 -
Critical max 9.8SUSE-SU-2018:1601-1 2 CVEs
Security update for memcached
This update fixes the following issues: - CVE-2016-8705: Server update remote code execution (bsc#1007870). - CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).
first Jun 8, 2018 -
Critical max 9.8
Security update for java-1_7_0-openjdk
OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple…
first Jul 22, 2015 -
Critical max 9.8openSUSE-SU-2025:14713-1 4 CVEs
trivy-0.58.2-1.1 on GA media
These are all security issues fixed in the trivy-0.58.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 29, 2025 -
Critical max 9.8SUSE-SU-2024:1465-1 145 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-36780: Fixed a reference leak when pm_runtime_get_sync fails in i2c (bsc#1220556). - CVE-2020-36781: Fixed referenc…
first Apr 29, 2024 -
Critical max 10.0SUSE-SU-2025:01983-1 169 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47670: can: peak_usb: fix use after free bugs (bsc#1241407). - CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sy…
first Jun 17, 2025 -
Critical max 9.8SUSE-SU-2025:02142-1 7 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2024:2135-1 427 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-22099: Fixed a null-pointer-dereference in rfcomm_check_security (bsc#1219170). - CVE-2024-26764: Fixed IOCB_AIO…
first Jun 21, 2024 -
Critical max 9.1SUSE-FU-2023:2119-1 2 CVEs
Feature update for haproxy
This update for haproxy fixes the following issues: Update to version 2.0.31 (jsc#PED-3821): * BUG/CRITICAL: http: properly reject empty http header field names * CI: github: don't warn on deprecated openssl functions on windows * DOC: proxy-protocol: fix wro…
first May 5, 2023 -
Critical max 9.8SUSE-SU-2024:3003-1 28 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.1.0 ESR (MFSA 2024-35, bsc#1228648) - CVE-2024-7518: Fullscreen notification dialog can be obscured by document - CVE-2024-7519: Out of bounds memory acc…
first Aug 23, 2024 -
Critical max 9.8SUSE-SU-2018:2204-2 2 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097). - CVE-2017-2885: Fix chunk decoding buffer overrun that could be exploited against either clients or servers (bs…
first Jan 8, 2019