5,630 results · Clear filters · Feed
-
Critical max 9.0SUSE-SU-2023:0185-1 3 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#120725…
first Jan 27, 2023 -
Critical max 9.3SUSE-SU-2020:1121-1 15 CVEs
Security update for git
This update for git fixes the following issues: Security issues fixed: * CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacte…
first Apr 28, 2020 -
Critical max 9.8SUSE-SU-2019:2334-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2016-2533: Fixed a buffer overflow in the PCD decoding (bsc#967970). - CVE-2016-4009: Fixed an interger overflow in ImagingResampleHorizontal() (bsc#975500).
first Sep 9, 2019 -
Critical max 9.6
chromedriver-119.0.6045.199-1.1 on GA media
These are all security issues fixed in the chromedriver-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.3SUSE-SU-2020:2969-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - libxl: Fixed lock manager l…
first Oct 20, 2020 -
Critical max 9.1openSUSE-SU-2024:13721-1 5 CVEs
ruby3.3-rubygem-puma-5-5.6.8-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-puma-5-5.6.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3591-1 71 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316). - CVE-2022-48788: …
first Oct 10, 2024 -
Critical max 9.6
Security update for nodejs-electron
This update for nodejs-electron fixes the following issues: - Fix webpack-4 with OpenSSL 3.0 Update to version 16.0.9 * https://github.com/electron/electron/releases/tag/v16.0.9 Update to version 16.0.8 * https://github.com/electron/electron/releases/tag/v16.…
first Mar 3, 2022 -
Critical max 9.8SUSE-SU-2025:0091-1 20 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1226337). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occ…
first Jan 14, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857). - CVE-2021-47223: net: bridge: fix vlan t…
first Feb 17, 2025 -
Critical max 9.8SUSE-SU-2025:3748-1 9 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.8SUSE-SU-2019:0448-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Security issue fixed: - CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208). With this update we decrease the possibility of allowing remote attackers…
first Feb 20, 2019 -
Critical max 9.8SUSE-SU-2024:0782-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2023-27043: Fixed incorrect e-mqil parsing (bsc#1210638). - CVE-2022-25236: Fixed an expat vulnerability by…
first Mar 6, 2024 -
Critical max 10.0SUSE-SU-2016:2074-1 48 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP2 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2016-4486: Fixed 4 byte information leak in net/core/rtnetlink.c (bsc#978822). - CVE-2016-3134: The netfilter subsyste…
first Aug 15, 2016 -
Critical max 9.8openSUSE-SU-2019:2599-1 1 CVE
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.2: * CVE-2019-18622: SQL injection in Designer feature (boo#1157614) * Fixes for 'Failed to set session cookie' error * Advisor with MySQL 8.0.3 and newer * Fix PHP deprecati…
first Dec 1, 2019 -
Critical max 9.8SUSE-SU-2025:02851-1 28 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2023-52923: netfilter:…
first Aug 18, 2025 -
Critical max 9.1SUSE-SU-2024:2909-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138)
first Aug 14, 2024 -
Critical max 9.8openSUSE-SU-2024:12367-1 2 CVEs
libQt5Bootstrap-devel-static-32bit-5.15.6+kde177-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.6+kde177-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?system…
first Jun 20, 2022 -
Critical max 10.0SUSE-SU-2025:03540-1 53 CVEs
Security update for docker-stable
This update for docker-stable fixes the following issues: - Include historical changelog data from before the docker-stable fork. The initial changelog entry did technically provide all the necessary information, but our CVE tracking tools do not understand h…
first Oct 10, 2025 -
Critical max 10.0SUSE-SU-2024:0773-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).
first Mar 5, 2024 -
Critical max 9.8SUSE-SU-2023:0056-2 1 CVE
Security update for libksba
This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser (bsc#1206579).
first Feb 15, 2023 -
Critical max 9.8SUSE-SU-2024:1437-1 9 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 115.10.1 Security fixes (MFSA 2024-20) (bsc#1222535): - CVE-2024-3852: GetBoundName in the JIT returned the wrong object (bmo#1883542) - CVE-2024-3854: Out-of-bounds-…
first Apr 25, 2024 -
Critical max 9.8openSUSE-SU-2024:10886-1 2 CVEs
kafka-source-2.1.0-3.6 on GA media
These are all security issues fixed in the kafka-source-2.1.0-3.6 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: - Update to 105.0.4970.34 * DNA-112796 [Import] Import bookmarks and history don't work * DNA-113147 Add strength setting for Lucid Mode * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable sp…
first Dec 11, 2023 -
Critical max 9.8SUSE-SU-2024:4234-1 31 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets …
first Dec 6, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826)…
first Oct 10, 2024 -
Critical max 9.4SUSE-SU-2024:3348-1 9 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF)…
first Sep 19, 2024 -
Critical max 9.8SUSE-SU-2024:4106-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - Update to Tomcat 9.0.97 * Fixed CVEs: + CVE-2024-52316: If the Jakarta Authentication fails with an exception, set a 500 status (bsc#1233434) * Catalina + Add: Add support for the new Servlet API method Htt…
first Nov 28, 2024 -
Critical max 9.8openSUSE-SU-2022:1029-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
first Mar 29, 2022 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
first Apr 29, 2020 -
Critical max 9.8SUSE-SU-2025:3770-1 3 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-150700_53_11 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.6
freetype2-devel-2.11.0-1.2 on GA media
These are all security issues fixed in the freetype2-devel-2.11.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2025:01885-1 1 CVE
Security update for perl-YAML-LibYAML
This update for perl-YAML-LibYAML fixes the following issues: - CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified (bsc#1243902)
first Jun 11, 2025 -
Critical max 9.8SUSE-SU-2024:3182-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2024-45492: Detect integer overflow in function nextScaffoldPart. (bsc#1229932) - CVE-2024-45491: Detect integer overflow in dtdCopy. (bsc#1229931) - CVE-2024-45490: Reject negative len for XML_ParseBuff…
first Sep 9, 2024 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…
first Jan 20, 2022 -
Critical max 9.8SUSE-SU-2025:0110-1 16 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid …
first Jan 14, 2025 -
Critical max 10.0SUSE-SU-2024:0771-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).
first Mar 5, 2024 -
Critical max 9.8SUSE-SU-2018:1996-1 3 CVEs
Security update for mercurial
This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13346: Fix mpatch_apply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data (bsc#1100354). - CVE-2018-133…
first Jul 19, 2018