5,630 results · Clear filters · Feed
-
Critical max 10.0SUSE-SU-2015:2306-1 10 CVEs
Security update for xen
This update fixes the following security issues: - bsc#956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc#956408 - CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159) xsa159.pa…
first Dec 18, 2015 -
Critical max 9.8openSUSE-SU-2024:14533-1 9 CVEs
MozillaThunderbird-128.5.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2024 -
Critical max 9.8
Security update for exim
This update for exim fixes the following issues: exim was updated to 4.94.2: security update (boo#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID file …
first May 20, 2021 -
Critical max 9.8SUSE-SU-2024:0109-1 4 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: Security fixes: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (bsc#1218582) - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-b…
first Jan 16, 2024 -
Critical max 9.8SUSE-SU-2022:1717-1 9 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first May 17, 2022 -
Critical max 9.3SUSE-SU-2020:0991-1 1 CVE
Security update for git
This update for git fixes the following issues: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host (bsc#1168930).
first Apr 14, 2020 -
Critical max 10.0SUSE-SU-2023:4862-1 3 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_109 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 14, 2023 -
Critical max 9.9SUSE-SU-2017:3253-1 3 CVEs
Fixing security issues on OBS toolchain
This OBS toolchain update fixes the following issues: Package 'build': - CVE-2010-4226: force use of bsdtar for VMs (bnc#665768) - CVE-2017-14804: Improve file name check extractbuild (bsc#1069904) - switch baselibs scheme for debuginfo packages from foo-debu…
first Dec 8, 2017 -
Critical max 9.8openSUSE-SU-2019:1906-1 1 CVE
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). This update was imported from the SUSE:SLE-15:Update update proje…
first Aug 15, 2019 -
Critical max 9.8SUSE-SU-2024:3195-1 393 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2023-52489: Fix race in accessing memory_section->usage (…
first Sep 10, 2024 -
Critical max 9.8
Security update for SUSE Manager 4.0
This security update for SUSE Manager 4.0 provides the following fixes: py26-compat-salt: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) sp…
first Nov 6, 2020 -
Critical max 9.8SUSE-SU-2022:2305-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32205: Set-Cookie denial of service (bsc#1200734) - CVE-2022-32206: HTTP compression denial of service (bsc#1200735) - CVE-2022-32207: Unpreserved file permissions (bsc#1200736) - CVE-2022-32208: FTP…
first Jul 6, 2022 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2024:1682-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 17, 2024 -
Critical max 9.8openSUSE-SU-2024:14554-1 1 CVE
oras-1.2.1-1.1 on GA media
These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024 -
Critical max 9.3openSUSE-SU-2024:14081-1 1 CVE
containerd-1.7.17-2.1 on GA media
These are all security issues fixed in the containerd-1.7.17-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 28, 2024 -
Critical max 9.8SUSE-SU-2022:1748-1 6 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970): - CVE-2022-29914: Fullscreen notification bypass using popups - CVE-2022-29909: Bypassing permission prompt in nested browsing …
first May 19, 2022 -
Critical max 9.8SUSE-SU-2017:0380-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: * CVE-2016-4658: use-after-free error could lead to crash [bsc#1005544] * Fix NULL dereference in xpointer.c when in recovery mode [bsc#1014873] * CVE-2016-9597: An XML document with many opening tags could …
first Feb 3, 2017 -
Critical max 9.8openSUSE-SU-2020:1675-1 2 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: - phpMyAdmin was updated to 4.9.6 * CVE-2020-26934: Fixed an XSS relating to the transformation feature (boo#1177561). * CVE-2020-26935: Fixed an SQL injection in SearchController (boo#1177562).
first Oct 16, 2020 -
Critical max 9.8openSUSE-SU-2024:14325-1 3 CVEs
MozillaThunderbird-115.15.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 9, 2024 -
Critical max 9.8SUSE-SU-2025:1064-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228578).
first Mar 31, 2025 -
Critical max 9.8SUSE-SU-2022:15034-1 3 CVEs
Security update for ruby
This update for ruby fixes the following issues: - CVE-2018-16395: Fixed an issue where two x509 certificates could be considered to be equal when this was not the case (bsc#1112530). - CVE-2021-32066: Fixed an issue where the IMAP client API would not report…
first Sep 6, 2022 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)
first Apr 29, 2020 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Do not strip if SUSE Linux Enterprise 15 SP3 - Exclude debug for Red Hat Enterprise Linux >= 8 - Build with Go >= 1.20 when the OS is not Red Hat Enterprise Linux golang-githu…
first Feb 15, 2024 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…
first Apr 29, 2021 -
Critical max 9.8SUSE-SU-2017:2130-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - A bug in the HTTP Chunked Encoding code has been fixed that could have been exploited by attackers to cause a stack-based buffer overflow in client or server code running libsoup (bsc#1052916, CVE-2017-288…
first Aug 10, 2017 -
Critical max 9.8openSUSE-SU-2024:12749-1 1 CVE
strongswan-5.9.10-1.1 on GA media
These are all security issues fixed in the strongswan-5.9.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:3400-1 3 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to LTS version 16.20.2. - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createR…
first Aug 23, 2023 -
Critical max 9.8openSUSE-SU-2019:2021-1 4 CVEs
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker: - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409). - CVE-2019-13509…
first Aug 29, 2019 -
Critical max 9.8openSUSE-SU-2024:0272-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: * CVE-2024-42005: Fixed potential SQL injection in QuerySet.values() and values_list() (boo#1228629) * CVE-2024-41989: Fixed memory exhaustion in django.utils.numberformat.floatformat() (boo#1228630) *…
first Aug 30, 2024 -
Critical max 9.8SUSE-SU-2024:2105-1 13 CVEs
Security update for hdf5
This update for hdf5 fixes the following issues: - Fix various security issues in hdf5 (bsc#1224158): CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610, CVE-2024-32614, CVE-2024-32619, CVE-2024-32620, CVE-2024-33873, CVE-2024-3387…
first Jun 20, 2024 -
Critical max 9.8openSUSE-SU-2024:10052-1 1 CVE
python-rope-0.10.2-2.2 on GA media
These are all security issues fixed in the python-rope-0.10.2-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
chromedriver-125.0.6422.60-1.1 on GA media
These are all security issues fixed in the chromedriver-125.0.6422.60-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2020:0056-1 3 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin to version 4.9.4 fixes the following issues: - CVE-2020-5504: SQL injection in user accounts page (boo#1160456).
first Jan 14, 2020 -
Critical max 9.8openSUSE-SU-2025:14951-1 1 CVE
aws-efs-utils-2.2.1-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
Critical max 9.8SUSE-SU-2019:1368-1 1 CVE
Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root
This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues: - CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524)
first May 28, 2019 -
Critical max 9.1SUSE-SU-2022:3875-1 1 CVE
Security update for xmlbeans
This update for xmlbeans fixes the following issues: - CVE-2021-23926: Fixed XML parsers not protecting from malicious XML input (bsc#1180915).
first Nov 4, 2022 -
Critical max 9.8openSUSE-SU-2019:1839-1 7 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Security issues fixed: - CVE-2019-11358: Fixed prototype pollution. - CVE-2019-12308: Fixed XSS in AdminURLFieldWidget (bsc#1136468) - CVE-2019-12781: Fixed incorrect HTTP detection with reverse-proxy …
first Aug 8, 2019 -
Critical max 9.8openSUSE-SU-2023:0082-1 7 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 111.0.5563.110 (boo#1209598) * CVE-2023-1528: Use after free in Passwords * CVE-2023-1529: Out of bounds memory access in WebHID * CVE-2023-1530: Use after free in PDF * CVE-2023-1531: Use after fr…
first Mar 27, 2023 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill to…
first Dec 13, 2024