5,630 results · Clear filters · Feed
-
Critical max 9.8
Security update for python-CairoSVG, python-Pillow
This update for python-CairoSVG, python-Pillow fixes the following issues: Update to version 2.5.1. * Security fix: When processing SVG files, CairoSVG was using two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If …
first Aug 10, 2021 -
Critical max 9.3SUSE-SU-2025:02410-1 8 CVEs
Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_88 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe exte…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2020:0984-1 1 CVE
Security update for quartz
This update for quartz fixes the following issues: - CVE-2019-13990: Fixed XML External Entity attack in initDocumentParser (bsc#1143227).
first Apr 14, 2020 -
Critical max 9.8openSUSE-SU-2024:12078-1 1 CVE
cryptctl-2.4-1.1 on GA media
These are all security issues fixed in the cryptctl-2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:4078-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).
first Nov 27, 2024 -
Critical max 9.8SUSE-SU-2023:2970-1 2 CVEs
Security update for python-scipy
This update for python-scipy fixes the following issues: - CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062). - CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137).
first Jul 25, 2023 -
Critical max 9.6openSUSE-SU-2024:11837-1 12 CVEs
MozillaFirefox-97.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-97.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…
first Nov 4, 2020 -
Critical max 9.0openSUSE-SU-2024:12635-1 3 CVEs
apache2-2.4.55-1.1 on GA media
These are all security issues fixed in the apache2-2.4.55-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:3817-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690).
first Oct 31, 2022 -
Critical max 9.8SUSE-SU-2024:4348-1 1 CVE
Security update for socat
This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)
first Dec 17, 2024 -
Critical max 10.0SUSE-SU-2023:1713-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410). - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).
first Mar 31, 2023 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…
first Nov 23, 2020 -
Critical max 9.8openSUSE-SU-2022:10257-1 1 CVE
Security update for mbedtls
This update for mbedtls fixes the following issues: - CVE-2022-46393: Fixed potential heap buffer overread and overwrite in DTLS (boo#1206576).
first Dec 31, 2022 -
Critical max 9.8SUSE-SU-2025:02849-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2023-52923: netfilter: nf…
first Aug 18, 2025 -
Critical max 9.8openSUSE-SU-2024:12655-1 1 CVE
apr-devel-1.7.2-1.1 on GA media
These are all security issues fixed in the apr-devel-1.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:0715-1 5 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first Mar 4, 2022 -
Critical max 9.8SUSE-SU-2023:1658-1 2 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-27522: Fixed HTTP response splitting in mod_proxy_uwsgi (bsc#1209049). - CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047). The following non-security bugs …
first Mar 29, 2023 -
Critical max 9.9SUSE-SU-2025:01985-1 15 CVEs
Security update 4.3.15 for Multi-Linux Manager Server
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.15.2 * SUSE Manager 4.3 will transition to LTS after June 2025 * CVE Fixed CVE-2023-45288, CVE-2024-11741, CVE-2024-45337, CVE-2024-45339 CVE-2024-51744, CVE-2024-…
first Jun 18, 2025 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jun 23, 2021 -
Critical max 9.8SUSE-SU-2024:3797-1 4 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
Critical max 9.2openSUSE-SU-2025:14902-1 3 CVEs
rime-plum-1.0.3-1.1 on GA media
These are all security issues fixed in the rime-plum-1.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 17, 2025 -
Critical max 9.8openSUSE-SU-2024:0371-1 1 CVE
Security update for icinga2
This update for icinga2 fixes the following issues: Update to 2.13.10: - CVE-2024-49369: Fix TLS certificate validation bypass (bsc#1233310).
first Nov 21, 2024 -
Critical max 9.8openSUSE-SU-2024:12204-1 6 CVEs
libopenssl-3-devel-3.0.5-1.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3openSUSE-SU-2024:12024-1 2 CVEs
libmruby3_0_0-3.0.0-6.1 on GA media
These are all security issues fixed in the libmruby3_0_0-3.0.0-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2022:0068-1 1 CVE
Security update for shapelib
This update for shapelib fixes the following issues: - CVE-2022-0699: Fixed a Double-free vulnerability in contrib/shpsort.c
first Mar 2, 2022 -
Critical max 9.9SUSE-SU-2025:3799-1 34 CVEs
Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251023T162509 2025-10-23T16:25:09Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-3979 CVE-2025-59824 GHSA-hqrf-67pm-wgfq * GO-2…
first Oct 27, 2025 -
Critical max 9.8SUSE-SU-2016:1386-1 3 CVEs
Security update for openssh
This update for OpenSSH fixes three security issues. These security issues were fixed: - CVE-2016-3115: Sanitise input for xauth(1) (bsc#970632) - CVE-2016-1908: Prevent X11 SECURITY circumvention when forwarding X11 connections (bsc#962313) - CVE-2015-8325: …
first May 23, 2016 -
Critical max 9.8SUSE-SU-2024:1686-1 5 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_159 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound bug in…
first May 20, 2024 -
Critical max 9.1openSUSE-SU-2024:11684-1 1 CVE
libmruby3-3.0.0-2.1 on GA media
These are all security issues fixed in the libmruby3-3.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:0441-1 3 CVEs
Security update for glibc
glibc was updated to fix the following issues: Security issues fixed: - CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640) - CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768) - CVE-2022-23218: Fixed buffer overflow…
first Feb 16, 2022 -
Critical max 9.8openSUSE-SU-2019:1624-1 3 CVEs
Security update for aubio
This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults (CVE-2018-19800, boo#1137828, CVE-2018-19801, boo#1137822, CVE-2018-19802, boo#1137823): This update was imported from the openSUSE:Leap:15.0:Upda…
first Jun 25, 2019 -
Critical max 9.1SUSE-SU-2022:3614-1 2 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Updated to version 14.20.1: - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). - CVE-2022-35256: Fixed incorrect Parsing of Header Fields (bsc#1203832).
first Oct 18, 2022 -
Critical max 9.8openSUSE-SU-2019:2064-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593). This update was …
first Sep 4, 2019 -
Critical max 9.1SUSE-SU-2021:3291-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use __pthread_attr_copy in mq_notify (bsc#1186489). - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number (bsc#1187911).
first Dec 8, 2021 -
Critical max 9.8openSUSE-SU-2024:13370-1 1 CVE
etcd-for-k8s1.26-3.5.9-1.1 on GA media
These are all security issues fixed in the etcd-for-k8s1.26-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:4236-1 22 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets …
first Dec 6, 2024 -
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 9.8openSUSE-SU-2021:0470-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456). - CVE-2021-20231: Fixed a use after free issue which could have led to …
first Mar 25, 2021 -
Critical max 9.1SUSE-SU-2025:0197-1 7 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-32002: Fix recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion. (bsc#1224168) - CVE-2024-32004: Fixed arbitrary code execution during local c…
first Jan 21, 2025