5,630 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2024:14220-1 2 CVEs
libopenssl-3-devel-3.1.4-11.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.1.4-11.1 package on the GA media of openSUSE Tumbleweed.
first Jul 26, 2024 -
Critical max 9.0SUSE-SU-2024:2359-1 1 CVE
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2024-3596: Fixed chosen-prefix collision attack against MD5 (bsc#1223414).
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2019:2462-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532)
first Sep 25, 2019 -
Critical max 9.8
Security update for exim
This update for exim fixes the following issues: Exim was updated to exim-4.94.2 security update (boo#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID f…
first May 7, 2021 -
Critical max 9.8SUSE-SU-2023:2509-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).
first Jun 14, 2023 -
Critical max 10.0SUSE-SU-2025:03612-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).
first Oct 16, 2025 -
Critical max 9.1SUSE-SU-2017:2831-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2017-1000254: FTP PWD response parser out of bounds read (bsc#1061876) - CVE-2017-1000257: IMAP FETCH response out of bounds read (bsc#1063824) Bugs fixed: - Fixed error 'error:1408…
first Oct 23, 2017 -
Critical max 9.1SUSE-SU-2023:0408-1 7 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: This update ships nodejs18 (jsc#PED-2097) Update to NodejJS 18.13.0 LTS: * build: disable v8 snapshot compression by default * crypto: update root certificates * deps: update ICU to 72.1 * doc: + add doc-on…
first Feb 14, 2023 -
Critical max 9.8SUSE-SU-2019:1232-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an error (bsc#1132160).
first May 14, 2019 -
Critical max 9.8SUSE-SU-2025:1195-1 62 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when…
first Apr 10, 2025 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 26, 2020 -
Critical max 9.8SUSE-SU-2024:4250-1 19 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_191 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
Critical max 9.1openSUSE-SU-2024:12142-1 8 CVEs
apache2-2.4.54-1.1 on GA media
These are all security issues fixed in the apache2-2.4.54-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14571-1 1 CVE
docker-stable-24.0.9_ce-4.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-4.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2024 -
Critical max 9.8SUSE-SU-2020:0911-1 1 CVE
Security update for libpng12
This update for libpng12 fixes the following issues: Security issue fixed: - CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks (bsc#1141493).
first Apr 3, 2020 -
Critical max 9.8openSUSE-SU-2024:14069-1 4 CVEs
ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
Critical max 9.1openSUSE-SU-2024:13819-1 2 CVEs
python310-cryptography-42.0.5-1.1 on GA media
These are all security issues fixed in the python310-cryptography-42.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.0openSUSE-SU-2024:12332-1 1 CVE
ffmpeg-5-5.1.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-5-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:2671-1 6 CVEs
Security update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3, rubygem-chef, rubygem-easy_diff, sleshammer
This update for crowbar-core, crowbar-openstack, grafana, novnc, openstack-keystone, openstack-neutron, openstack-neutron-lbaas, openstack-nova, openstack-tempest, python-pysaml2, python-urllib3, rubygem-chef, rubygem-easy_diff, sleshammer fixes the following…
first Oct 15, 2019 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2021-47261: Fix initializing CQ fragments bu…
first Mar 18, 2025 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE…
first May 13, 2020 -
Critical max 9.8SUSE-SU-2016:2388-1 5 CVEs
Security update for openssh
This update for OpenSSH fixes the following issues: - Prevent user enumeration through the timing of password processing. (bsc#989363, CVE-2016-6210) - Allow lowering the DH groups parameter limit in server as well as when GSSAPI key exchange is used. (bsc#94…
first Sep 26, 2016 -
Critical max 9.8openSUSE-SU-2024:10099-1 4 CVEs
git-2.11.0-1.1 on GA media
These are all security issues fixed in the git-2.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 25, 2020 -
Critical max 9.8SUSE-SU-2024:3780-1 12 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug…
first Oct 29, 2024 -
Critical max 9.0SUSE-SU-2024:2361-1 1 CVE
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2024-3596: Fixed chosen-prefix collision attack against MD5 (bsc#1223414).
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2024:3815-1 27 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_i…
first Oct 30, 2024 -
Critical max 9.1SUSE-SU-2023:0411-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132). - Fixed an issue where sensitive data might leak to the backend.
first Feb 14, 2023 -
Critical max 9.8openSUSE-SU-2024:11267-1 1 CVE
python36-rope-0.19.0-1.3 on GA media
These are all security issues fixed in the python36-rope-0.19.0-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2025:0094-1 3 CVEs
Security update for gitea-tea
This update for gitea-tea fixes the following issues: - gitea-te: update newer dependencies to fix security issues (boo#1235367 boo#1239493 boo#1234598)
first Mar 20, 2025 -
Critical max 9.1openSUSE-SU-2024:12376-1 3 CVEs
corepack18-18.10.0-1.1 on GA media
These are all security issues fixed in the corepack18-18.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:1537-1 2 CVEs
Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.40 - CVE-2025-31650: invalid priority field values should be ignored (bsc#1242008) - CVE-2025-31651: Better handling of URLs with literal ';' and '?' (bsc#1242009) Full changelog: http…
first May 13, 2025 -
Critical max 9.1SUSE-SU-2021:1940-1 9 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-25290: Fixed a negative-offset memcpy with an invalid size in TiffDecode.c (bsc#1183105). - CVE-2021-27922,CVE-2021-27923: Fixed improper reported size of a contained image (bsc#1183108,bsc#…
first Jun 10, 2021 -
Critical max 9.8SUSE-SU-2024:1641-1 90 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705). - CVE-2024-27043: Fixed a use-after-free in…
first May 14, 2024 -
Critical max 9.3SUSE-SU-2020:1934-1 3 CVEs
Security update for google-compute-engine
This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-20…
first Jul 15, 2020 -
Critical max 9.8openSUSE-SU-2024:14077-1 1 CVE
helmfile-0.166.0-1.1 on GA media
These are all security issues fixed in the helmfile-0.166.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 27, 2024 -
Critical max 9.8SUSE-SU-2025:02886-1 3 CVEs
Security update for lua51-luajit
This update for lua51-luajit fixes the following issues: - CVE-2024-25176: Fixed stack-buffer-overflow in lj_strfmt_wfnum in lj_strfmt_num.c (bsc#1246077) - CVE-2024-25177: Fixed unsinking of IR_FSTORE for NULL metatable (bsc#1246078) - CVE-2024-25178: Fixed …
first Aug 19, 2025 -
Critical max 9.3openSUSE-SU-2020:1777-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Avoid stale capabilit…
first Oct 30, 2020 -
Critical max 9.8SUSE-SU-2024:4246-1 12 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
Critical max 9.3SUSE-SU-2020:3039-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Adjust max memlock on…
first Oct 27, 2020