5,630 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2020:2929-1 1 CVE
Security update for rubygem-activesupport-4_2
This update for rubygem-activesupport-4_2 fixes the following issues: - CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186)
first Oct 15, 2020 -
Critical max 10.0
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…
first Jun 24, 2019 -
Critical max 9.8SUSE-SU-2023:4048-1 1 CVE
Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2019-19450: Fixed an issue which allowed remote code execution via start_unichar in paraparser.py evaluating untrusted user input. (bsc#1215560)
first Oct 11, 2023 -
Critical max 9.8SUSE-SU-2019:14246-1 118 CVEs
Security update for Mozilla Firefox
This update contains the Mozilla Firefox ESR 68.2 release. Mozilla Firefox was updated to ESR 68.2 release: * Enterprise: New administrative policies were added. More information and templates are available at the Policy Templates page. * Various security fix…
first Jan 17, 2020 -
Critical max 9.8
MozillaFirefox-118.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-118.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:14881-1 3 CVEs
Security update for log4j
This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844) - CVE-2022-23305: Fixed SQL injection when application is configured to use JD…
first Jan 26, 2022 -
Critical max 9.3openSUSE-SU-2020:0996-1 3 CVEs
Security update for google-compute-engine
This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-20…
first Jul 18, 2020 -
Critical max 9.8SUSE-SU-2024:0925-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863) - CVE-2021-47076: Fixed a bug by returni…
first Mar 18, 2024 -
Critical max 9.1SUSE-SU-2024:2174-2 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)
first Jun 24, 2024 -
Critical max 9.8SUSE-SU-2022:4068-1 18 CVEs
Security update for php74
This update for php74 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long pa…
first Nov 18, 2022 -
Critical max 9.8SUSE-SU-2024:4235-1 27 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets …
first Dec 6, 2024 -
Critical max 9.8SUSE-SU-2024:4180-1 18 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 4, 2024 -
Critical max 9.8SUSE-SU-2024:3383-1 394 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-43911: wifi: mac80211: fix NULL dereference at band check in starting tx ba session (bsc#1229827). - CVE-2024-43899: d…
first Sep 23, 2024 -
Critical max 9.8SUSE-SU-2021:0935-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456). - CVE-2021-20231: Fixed a use after free issue which could have led to …
first Mar 24, 2021 -
Critical max 9.8SUSE-SU-2023:2578-1 15 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: bind: - Provide bind dependencies and solve installation issues on SUSE Linux Enterprise Micro - There are no source changes dracut-saltboot: - Update to version 0.1.1681904360.84ef141 * Load network configuration even …
first Jun 21, 2023 -
Critical max 9.8SUSE-SU-2024:1673-1 12 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - Fixed ImagePath.Path array handling (bsc#1194552, CVE-2022-22815, bsc#1194551, CVE-2022-22816) - Use snprintf instead of sprintf (bsc#1188574, CVE-2021-34552) - Fix Memory DOS in Icns, Ico and Blp Im…
first May 17, 2024 -
Critical max 10.0openSUSE-SU-2024:12974-1 11 CVEs
ruby3.2-rubygem-rack-2.2-2.2.7-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-rack-2.2-2.2.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:2013-2 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083).
first Jul 29, 2019 -
Critical max 9.6
Security update for chromium, gn
This update for chromium, gn fixes the following issues: chromium was updated to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implemen…
first Nov 5, 2020 -
Critical max 9.8SUSE-SU-2018:0129-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2017-17458: In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked …
first Jan 17, 2018 -
Critical max 9.1openSUSE-SU-2024:12199-1 2 CVEs
corepack16-16.16.0-1.1 on GA media
These are all security issues fixed in the corepack16-16.16.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:1791-1 4 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: Update to version 1.20.3: * CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation (bsc#1210127) * CVE-2023-24536: security: net/http, net/textproto, mime/multip…
first Apr 6, 2023 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: 'compose_attachments' context added to M…
first Dec 7, 2020 -
Critical max 9.4SUSE-SU-2024:2326-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…
first Jul 8, 2024 -
Critical max 9.8openSUSE-SU-2025:14849-1 1 CVE
ffmpeg-4-4.4.5-5.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.5-5.1 package on the GA media of openSUSE Tumbleweed.
first Mar 2, 2025 -
Critical max 9.8SUSE-SU-2024:4218-1 34 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 5, 2024 -
Critical max 9.4SUSE-SU-2024:2368-1 4 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.0SUSE-SU-2024:2366-1 1 CVE
Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2024-3596: Fixed chosen-prefix collision attack against MD5 (bsc#1223414).
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2023:2945-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were pre…
first Jul 24, 2023 -
Critical max 9.8openSUSE-SU-2024:10589-1 16 CVEs
rmt-server-2.6.13-1.1 on GA media
These are all security issues fixed in the rmt-server-2.6.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1835-1 4 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32658: Fixed out-of-bounds read in Interleaved RLE Bitmap Codec (bsc#1223353). - CVE-2024-32659: Fixed out-of-bounds read if `((nWidth == 0) and (nHeight == 0))` (bsc#1223346) - CVE-2024-32660: Fi…
first May 29, 2024 -
Critical max 9.1openSUSE-SU-2024:12592-1 5 CVEs
ruby3.1-rubygem-puma-5-5.6.5-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-puma-5-5.6.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:1340-1 1 CVE
Security update for mozjs52
This update for mozjs52 fixes the following issues: - CVE-2024-56431: Fixed a negative shift in huffdec.c (bsc#1234837).
first Apr 17, 2025 -
Critical max 9.8SUSE-SU-2023:4516-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).
first Nov 21, 2023 -
Critical max 9.1SUSE-SU-2025:0278-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-5594: Fixed wrong handling of null bytes and invalid characters in control messages (bsc#1235147)
first Jan 28, 2025 -
Critical max 9.8SUSE-SU-2024:2293-1 1 CVE
Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).
first Jul 3, 2024 -
Critical max 9.8SUSE-SU-2022:4274-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
first Nov 29, 2022 -
Critical max 9.1SUSE-SU-2023:0413-1 2 CVEs
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser (bsc#1208132). - CVE-2023-0056: Fixed denial of service via crash in http_wait_for_response() (bsc#1207181).
first Feb 14, 2023 -
Critical max 9.8SUSE-SU-2022:0214-1 3 CVEs
Security update for log4j
This update for log4j fixes the following issues: - CVE-2022-23307: Fixed deserialization flaw in the chainsaw component of log4j leading to malicious code execution. (bsc#1194844) - CVE-2022-23305: Fixed SQL injection when application is configured to use JD…
first Jan 27, 2022