5,630 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2017:2350-1 1 CVE
Security update for python-pycrypto
This update for python-pycrypto fixes the following issues: - CVE-2013-7459: Fixed a potential heap buffer overflow in ALGnew (bsc#1017420). python-paramiko was adjusted to work together with this python-pycrypto change. (bsc#1047666)
first Sep 5, 2017 -
Critical max 9.8SUSE-SU-2024:2183-1 130 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355). - CVE-2021-47500: Fixed trigger reference …
first Jun 24, 2024 -
Critical max 10.0openSUSE-SU-2023:0328-1 10 CVEs
Security update for sox
This update for sox fixes the following issues: - Apply various fix patches taken from Debian package; it fixes also other entries (CVE-2022-31650 boo#1212060 CVE-2023-34318 boo#1212062 CVE-2023-34432 boo#1212063) - Fix floating point exception in src/voc.c (…
first Oct 26, 2023 -
Critical max 9.1openSUSE-SU-2024:11126-1 29 CVEs
libopenssl-1_0_0-devel-1.0.2u-6.2 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_c…
first Jun 22, 2019 -
Critical max 9.8SUSE-SU-2022:4461-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 102.6.0 ESR (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory …
first Dec 13, 2022 -
Critical max 9.8SUSE-SU-2019:2350-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
first Sep 10, 2019 -
Critical max 9.8openSUSE-SU-2024:12684-1 1 CVE
python310-pywayland-0.4.15-1.1 on GA media
These are all security issues fixed in the python310-pywayland-0.4.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:0131-1 14 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 15, 2025 -
Critical max 9.8openSUSE-SU-2025:14645-1 3 CVEs
python311-Pillow-11.1.0-1.1 on GA media
These are all security issues fixed in the python311-Pillow-11.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 14, 2025 -
Critical max 9.8
Security Beta update for SUSE Manager Client Tools and Salt
This update fixes the following issues: ansible: - Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133) * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive info in traceback error message (in 2.9.27) * bsc#1188061 CVE-2021-3583 Templ…
first Jan 23, 2024 -
Critical max 9.8SUSE-SU-2019:1381-1 2 CVEs
Security update for rmt-server
This update for rmt-server to version 2.1.4 fixes the following issues: - Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222) - Mirror additional repos that were enabled during mirroring (bsc#1132690) - Make service IDs consistent across differe…
first May 30, 2019 -
Critical max 9.8SUSE-SU-2025:02531-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.1.0 ESR * MFSA-RESERVE-2025-1968423 (bmo#1968423) JavaScript engine only wrote partial return value to stack * MFSA-RESERVE-2025-1971581 (bmo#1971581) Large bran…
first Jul 28, 2025 -
Critical max 9.8SUSE-SU-2025:4132-1 462 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph:…
first Nov 18, 2025 -
Critical max 9.8SUSE-SU-2024:3632-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 15, 2024 -
Critical max 9.2SUSE-SU-2025:1025-1 6 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2024-11235: Fixed reference counting in php_request_shutdown causing Use-After-Free (bsc#1239666) - CVE-2025-1217: Fixed header parser of http stream wrapper not handling folded headers (bsc#1239664) - CV…
first Mar 26, 2025 -
Critical max 9.8SUSE-SU-2024:3706-1 5 CVEs
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 10.0SUSE-SU-2025:03127-1 1 CVE
Security update for python-deepdiff
This update for python-deepdiff fixes the following issues: - CVE-2025-58367: class pollution via the `Delta` class constructor can lead to denial-of-service and remote code execution (bsc#1249347).
first Sep 10, 2025 -
Critical max 9.8SUSE-SU-2018:1744-1 1 CVE
Security update for slf4j
This update for slf4j fixes the following issues: - CVE-2018-8088: Disallow EventData deserialization by default to avoid arbitrary code execution using serialized data (bsc#1085970)
first Jun 19, 2018 -
Critical max 9.1SUSE-SU-2024:2927-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463)
first Aug 15, 2024 -
Critical max 9.8SUSE-SU-2025:01853-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_14 fixes several issues. The following security issues were fixed: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900). - CVE-2025-21680: pktgen: Avoid out-of-bounds access in ge…
first Jun 10, 2025 -
Critical max 9.1SUSE-SU-2024:1807-1 5 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168). - CVE-2024-32004: Fixed arbitrary code execution during local…
first May 28, 2024 -
Critical max 9.8SUSE-SU-2023:1799-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-28879: Fixed buffer Overflow in s_xBCPE_process (bsc#1210062).
first Apr 7, 2023 -
Critical max 9.8SUSE-SU-2023:1792-1 4 CVEs
Security update for go1.19
This update for go1.19 fixes the following issues: Update to 1.19.8 * CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation (bsc#1210127) * CVE-2023-24536: security: net/http, net/textproto, mime/multipart: deni…
first Apr 6, 2023 -
Critical max 9.1SUSE-SU-2022:2491-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-32212: Fixed DNS rebinding in --inspect via invalid IP addresses (bsc#1201328). - CVE-2022-32213: Fixed HTTP request smuggling due to flawed parsing of Transfer-Encoding (bsc#1201325). - CVE-2022…
first Jul 21, 2022 -
Critical max 9.8SUSE-SU-2022:2811-1 2 CVEs
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2020-10108: Fixed an HTTP request smuggling issue (bsc#1166457). - CVE-2020-10109: Fixed an HTTP request smuggling issue (bsc#1166458).
first Aug 16, 2022 -
Critical max 9.8openSUSE-SU-2024:14536-1 45 CVEs
ansible-10-10.6.0-1.1 on GA media
These are all security issues fixed in the ansible-10-10.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 2, 2024 -
Critical max 9.8SUSE-SU-2024:2195-1 13 CVEs
Security update for hdf5
This update for hdf5 fixes the following issues: - Fix bsc#1224158 - this fixes: CVE-2024-29158, CVE-2024-29161, CVE-2024-29166, CVE-2024-32608, CVE-2024-32610, CVE-2024-32614, CVE-2024-32619, CVE-2024-32620, CVE-2024-33873, CVE-2024-33874, CVE-2024-33875 Add…
first Jun 25, 2024 -
Critical max 9.0SUSE-SU-2017:0569-1 2 CVEs
Security update for python-pysaml2
This update for python-pysaml2 fixes the following issues: - CVE-2016-10127 and CVE-2016-10149: XXE (XML external entity) issues were fixed in python-pysaml2, where external requests to other XML content could be made by parsing XML files using this SAML2 lib…
first Feb 27, 2017 -
Critical max 9.8SUSE-SU-2022:3773-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
first Oct 26, 2022 -
Critical max 9.8SUSE-SU-2022:0136-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in ble…
first Jan 20, 2022 -
Critical max 9.8openSUSE-SU-2024:0007-1 7 CVEs
Security update for exim
This update for exim fixes the following issues: exim was updated to 4.97.1 (boo#1218387, CVE-2023-51766): * Fixes for the smtp protocol smuggling (CVE-2023-51766) exim was updated to exim 4.96: * Move from using the pcre library to pcre2. * Constification wo…
first Jan 3, 2024 -
Critical max 9.1openSUSE-SU-2024:10092-1 4 CVEs
derby-10.11.1.1-3.2 on GA media
These are all security issues fixed in the derby-10.11.1.1-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:0847-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672). - CVE-2024-40980: drop_monitor: replace spi…
first Mar 12, 2025 -
Critical max 9.8openSUSE-SU-2024:14103-1 2 CVEs
python310-nltk-3.8.1-2.1 on GA media
These are all security issues fixed in the python310-nltk-3.8.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2024 -
Critical max 9.4SUSE-SU-2024:2725-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 2, 2024 -
Critical max 9.8SUSE-SU-2024:4226-1 22 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 6, 2024 -
Critical max 9.8SUSE-SU-2025:4057-1 462 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph: Fix t…
first Nov 11, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…
first Mar 18, 2025 -
Critical max 9.8SUSE-SU-2025:1076-1 1 CVE
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_33 fixes one issue. The following security issue was fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916).
first Mar 31, 2025