5,630 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2022:3784-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2021-46848: Fixed off-by-one array size check that affects asn1_encode_simple_der (bsc#1204690)
first Oct 26, 2022 -
Critical max 9.8openSUSE-SU-2024:11762-1 8 CVEs
expat-2.4.3-1.1 on GA media
These are all security issues fixed in the expat-2.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:14044-1 1 CVE
Security update for jakarta-commons-fileupload
This update for jakarta-commons-fileupload fixes the following issue: Security issue fixed: - CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829).
first May 10, 2019 -
Critical max 9.8SUSE-SU-2024:3638-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2024:2092-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (…
first Jun 19, 2024 -
Critical max 9.6openSUSE-SU-2022:0821-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-…
first Mar 14, 2022 -
Critical max 9.8SUSE-SU-2024:3515-1 3 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2024-45492: integer overflow in function nextScaffoldPart. (bsc#1229932) - CVE-2024-45491: integer overflow in dtdCopy. (bsc#1229931) - CVE-2024-45490: negative length for XML_ParseBuffer not rejected. (…
first Oct 3, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). - CVE-2024-36904: tcp: Use refcount_inc…
first Jul 16, 2024 -
Critical max 9.8SUSE-SU-2021:0630-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-…
first Feb 26, 2021 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 27, 2020 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-2659…
first Jan 29, 2025 -
Critical max 9.8openSUSE-SU-2024:12038-1 2 CVEs
ruby3.1-rubygem-kramdown-2.4.0-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-kramdown-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073) - CVE-2024-3…
first Aug 29, 2025 -
Critical max 9.8SUSE-SU-2024:0855-1 50 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6270: Fixed a use-after-free bug in aoecmd_cfg_pkts (bsc#1218562). - CVE-2023-52559: Fixed a bug by avoiding…
first Mar 12, 2024 -
Critical max 9.8openSUSE-SU-2021:0237-1 2 CVEs
Security update for rubygem-nokogiri
This update for rubygem-nokogiri fixes the following issues: rubygem-nokogiri was updated to 1.8.5 (bsc#1156722). Security issues fixed: - CVE-2019-5477: Fixed a command injection vulnerability (bsc#1146578). - CVE-2020-26247: Fixed an XXE vulnerability in No…
first Feb 5, 2021 -
Critical max 9.8SUSE-SU-2024:3034-1 15 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024 -
Critical max 9.8
Security update for tomcat
This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed …
first Mar 15, 2020 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy …
first Apr 21, 2020 -
Critical max 9.8SUSE-SU-2024:2902-1 182 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-41069: ASoC: topology: Fix route …
first Aug 14, 2024 -
Critical max 9.8SUSE-SU-2020:3918-1 7 CVEs
Security update for clamav
This update for clamav fixes the following issues: clamav was updated to 0.103.0 to implement jsc#ECO-3010 and bsc#1118459. * clamd can now reload the signature database without blocking scanning. This multi-threaded database reload improvement was made possi…
first Dec 22, 2020 -
Critical max 9.8openSUSE-SU-2024:13688-1 1 CVE
buildkit-0.12.5-2.1 on GA media
These are all security issues fixed in the buildkit-0.12.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547).
first Mar 26, 2025 -
Critical max 9.8SUSE-SU-2017:3380-1 2 CVEs
Security update for Salt
This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master …
first Dec 20, 2017 -
Critical max 9.1SUSE-SU-2026:0297-1 22 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.6 (released 2026-01-15) (jsc#SLE-18320, bsc#1244485): Security fixes: - CVE-2025-4674 cmd/go: disable support for multiple vcs in one module (bsc#1246118). - CVE-2025-47906 os/e…
first Jan 26, 2026 -
Critical max 9.2SUSE-SU-2025:0712-1 2 CVEs
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when as…
first Feb 25, 2025 -
Critical max 10.0
proftpd-1.3.5b-2.5 on GA media
These are all security issues fixed in the proftpd-1.3.5b-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:10690-1 6 CVEs
cobbler-3.2.1.336+git.5639a3af-1.1 on GA media
These are all security issues fixed in the cobbler-3.2.1.336+git.5639a3af-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:13168-1 2 CVEs
ruby3.2-rubygem-rubyzip-2.3.2-1.11 on GA media
These are all security issues fixed in the ruby3.2-rubygem-rubyzip-2.3.2-1.11 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11284-1 39 CVEs
python36-3.6.15-1.1 on GA media
These are all security issues fixed in the python36-3.6.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3814-1 21 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
Critical max 9.3openSUSE-SU-2024:14485-1 1 CVE
jujutsu-0.23.0-1.1 on GA media
These are all security issues fixed in the jujutsu-0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 12, 2024 -
Critical max 9.8SUSE-SU-2022:1934-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341). - By default the --suppress-timestamps flag is not needed (bsc#1123557).
first Jun 3, 2022 -
Critical max 9.8SUSE-SU-2024:2567-1 1 CVE
Security update for emacs
This update for emacs fixes the following issues: - CVE-2024-39331: Fixed evaluation of arbitrary unsafe Elisp code in Org mode (bsc#1226957).
first Jul 19, 2024 -
Critical max 9.3openSUSE-SU-2024:13536-1 1 CVE
deepin-reader-5.10.23-2.1 on GA media
These are all security issues fixed in the deepin-reader-5.10.23-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2024:3771-1 10 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2024-38355: Fixed socket.io: unhandled 'error' event (bsc#1226967) - CVE-2024-38998: Fixed requirejs: prototype pollution via function config (bsc#1227248) - CVE-2024-38999: Fixed requirejs: prototype…
first Oct 29, 2024 -
Critical max 9.8SUSE-SU-2019:2335-1 6 CVEs
Security update for python-Django1
This update for python-Django1 to version 1.11.23 fixes the following issues: - CVE-2019-14232: Fixed a denial of service in 'django.utils.text.Truncator' (bsc#1142880). - CVE-2019-14233: Fixed a denial of service in strip_tags() (bsc#1142882). - CVE-2019-142…
first Sep 9, 2019 -
Critical max 9.8SUSE-SU-2024:3848-1 5 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_178 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 31, 2024 -
Critical max 9.1openSUSE-SU-2024:12686-1 1 CVE
haproxy-2.7.3+git0.1065b1000-1.1 on GA media
These are all security issues fixed in the haproxy-2.7.3+git0.1065b1000-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3799-1 6 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_oplo…
first Oct 30, 2024 -
Critical max 9.6openSUSE-SU-2025:14812-1 4 CVEs
chromedriver-133.0.6943.98-2.1 on GA media
These are all security issues fixed in the chromedriver-133.0.6943.98-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 15, 2025