5,630 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2025:1141-1 1 CVE
Security update for go1.23
This update for go1.23 fixes the following issues: - Update to go1.23.8 - CVE-2025-22871: Fix an issue with request smuggling through invalid chunked data. (bsc#1240550)
first Apr 4, 2025 -
Critical max 9.8SUSE-SU-2024:2929-1 194 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-41069: ASoC: topology: Fix route mem…
first Aug 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12977-1 1 CVE
python38-3.8.16-7.1 on GA media
These are all security issues fixed in the python38-3.8.16-7.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:2339-2 1 CVE
Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496).
first Sep 12, 2019 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.5 (bsc#1219604): - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113). - CVE-2024-23206: Fixed fingerprint…
first Feb 15, 2024 -
Critical max 9.8SUSE-SU-2021:0631-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow extra_filerefs as sanitized kwargs for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-2824…
first Feb 26, 2021 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…
first May 4, 2021 -
Critical max 9.8SUSE-SU-2024:2011-1 308 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c…
first Jun 12, 2024 -
Critical max 9.8SUSE-SU-2024:2184-1 198 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46933: Fixed possible underflow in ffs_data_clear() (bsc#1220487). - CVE-2021-46955: Fixed an out-of-bounds read with …
first Jun 24, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35863: smb: client: fix potential UAF in is_valid_oplock_break() (bsc#1224763). - CVE-2024-53104: media: uvcvideo: Ski…
first Feb 20, 2025 -
Critical max 9.4SUSE-SU-2024:2488-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the …
first Jul 15, 2024 -
Critical max 9.1SUSE-RU-2017:0169-1 1 CVE
Recommended update for Salt
This update for Salt fixes one security issue and several non-security issues. The following security issue has been fixed: - Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639) The following non-security issues ha…
first Jan 17, 2017 -
Critical max 9.3
roundcubemail-1.6.8-1.1 on GA media
These are all security issues fixed in the roundcubemail-1.6.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 7, 2024 -
Critical max 9.8SUSE-SU-2023:1855-1 12 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 102.10.0 ESR (bsc#1210212) - CVE-2023-29531: Out-of-bound memory access in WebGL on macOS - CVE-2023-29532: Mozilla Maintenance Service Write-lock bypass - CVE-2023-…
first Apr 14, 2023 -
Critical max 9.8openSUSE-SU-2024:13623-1 12 CVEs
libruby3_3-3_3-3.3.0-1.2 on GA media
These are all security issues fixed in the libruby3_3-3_3-3.3.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:0784-1 44 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26708: mptcp: fastopen and PM-trigger subflow shutdown can race (bsc#1222672). - CVE-2024-44974…
first Mar 5, 2025 -
Critical max 9.8SUSE-SU-2019:1955-1 2 CVEs
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083). - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
first Jul 23, 2019 -
Critical max 9.4SUSE-SU-2024:2821-1 12 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with dev-…
first Aug 8, 2024 -
Critical max 9.8SUSE-SU-2024:1642-1 48 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976). - CVE-2021-47113: Abort btrfs rename_exchange if w…
first May 14, 2024 -
Critical max 9.8SUSE-SU-2024:4100-1 120 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security) The following security bugs were fixed: - CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (…
first Nov 28, 2024 -
Critical max 9.8openSUSE-SU-2020:0630-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first May 8, 2020 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 105.0.5195.102 (boo#1203102): * CVE-2022-3075: Insufficient data validation in Mojo Chromium 105.0.5195.52 (boo#1202964): * CVE-2022-3038: Use after free in Network Service * CVE-2022-3039: Use aft…
first Sep 12, 2022 -
Critical max 9.8SUSE-SU-2024:1673-2 12 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - Fixed ImagePath.Path array handling (bsc#1194552, CVE-2022-22815, bsc#1194551, CVE-2022-22816) - Use snprintf instead of sprintf (bsc#1188574, CVE-2021-34552) - Fix Memory DOS in Icns, Ico and Blp Im…
first Jun 13, 2024 -
Critical max 9.1openSUSE-SU-2024:13191-1 4 CVEs
frr-8.4-5.1 on GA media
These are all security issues fixed in the frr-8.4-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.8SUSE-SU-2017:2251-1 2 CVEs
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2017-1000115: path traversal via symlink could lead to unauthorized access (bsc#1053344) - CVE-2017-1000116: argument injection in SSH URLs could lead to client-side code execution (bsc#1052696)
first Aug 24, 2017 -
Critical max 9.8SUSE-SU-2024:3898-1 10 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.4.0 ESR (bsc#1231879): - CVE-2024-10458: Permission leak via embed or object elements - CVE-2024-10459: Use-after-free in layout with accessibility - CVE-2024-1046…
first Nov 4, 2024 -
Critical max 9.8openSUSE-SU-2025:14723-1 1 CVE
google-osconfig-agent-20250115.01-1.1 on GA media
These are all security issues fixed in the google-osconfig-agent-20250115.01-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 3, 2025 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Update to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController() - DNA-98278 Translations for O85 - DNA-98320 [Mac] Unab…
first Apr 8, 2022 -
Critical max 10.0
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2024 -
Critical max 10.0SUSE-SU-2023:4802-1 2 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_157 fixes several issues. The following security issues were fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privileg…
first Dec 13, 2023 -
Critical max 9.8openSUSE-SU-2024:13907-1 15 CVEs
MozillaFirefox-125.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-125.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2023:4776-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 13, 2023 -
Critical max 9.8openSUSE-SU-2024:12461-1 1 CVE
python38-3.8.15-3.1 on GA media
These are all security issues fixed in the python38-3.8.15-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2025:14937-1 30 CVEs
govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250327T184518-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
Critical max 9.8SUSE-SU-2024:3251-1 105 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35965: Fix not validating setsockopt user input (bsc#1224579). - CVE-2024-35933: Fixed build regression (bsc#1224640).…
first Sep 16, 2024 -
Critical max 9.1
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2017-14051: scsi/qla2xxx: Fix an integer overflow in sysfs code. (bsc#1056588) - CVE-2024-53146: NFSD: Prevent a potential …
first Jan 17, 2025 -
Critical max 9.8SUSE-SU-2024:3641-1 4 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_178 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 15, 2024 -
Critical max 9.1SUSE-SU-2018:3162-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020).
first Oct 16, 2018 -
Critical max 9.8SUSE-SU-2018:1751-1 2 CVEs
Security update for SUSE Manager Server 3.1
This update provides the following fixes and improvements for SUSE Manager Server 3.1: The following new package has been added: py26-compat-salt: This package provides compatibility with Python 2.6 for salt. This update includes the following new features: (…
first Jun 19, 2018