5,630 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2023:0764-1 2 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2023-27522: Fixed HTTP response splitting in mod_proxy_uwsgi (bsc#1209049). - CVE-2023-25690: Fixed HTTP request splitting with mod_rewrite and mod_proxy (bsc#1209047). The following non-security bugs …
first Mar 16, 2023 -
Critical max 9.8SUSE-SU-2024:4075-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-52316: Fixed an authentication bypass when using Jakarta Authentication API (bsc#1233434).
first Nov 27, 2024 -
Critical max 9.8openSUSE-SU-2020:0507-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Apr 11, 2020 -
Critical max 9.8SUSE-SU-2022:0178-1 8 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).…
first Jan 25, 2022 -
Critical max 9.8openSUSE-SU-2024:14208-1 51 CVEs
python310-Django4-4.2.14-1.1 on GA media
These are all security issues fixed in the python310-Django4-4.2.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 19, 2024 -
Critical max 9.8SUSE-SU-2022:2179-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jun 24, 2022 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-44192: Fixed unexpected process crash due to processing maliciously crafted web content (bsc#1239863) - CVE-2024-54467: Fixed information disclosure via data cross-origin exfiltration due to a…
first Apr 7, 2025 -
Critical max 9.3openSUSE-SU-2022:10014-1 63 CVEs
Security update for tensorflow2
This update for tensorflow fixes the following issues: Update to TF2 2.6.0 which fixes multiple CVEs (boo#1189423). - Introduction of bazel6.3 and basel-skylib1.0.3 as build dependencies. The latter has been adapted to all a version in its package name (if %s…
first Jun 18, 2022 -
Critical max 9.8SUSE-SU-2019:1212-1 1 CVE
Security update for jakarta-commons-fileupload
This update for jakarta-commons-fileupload fixes the following issue: Security issue fixed: - CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829).
first May 10, 2019 -
Critical max 9.8openSUSE-SU-2024:14599-1 21 CVEs
govulncheck-vulndb-0.0.20241213T205935-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241213T205935-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 18, 2024 -
Critical max 9.8SUSE-SU-2023:2839-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-31047: Fixed a potential bypass of validation when uploading multiple files using one form field (bsc#1210866). - CVE-2023-36053: Fixed potential regular expression denial of service vulnera…
first Jul 14, 2023 -
Critical max 9.8SUSE-SU-2024:4302-1 1 CVE
Security update for socat
This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)
first Dec 12, 2024 -
Critical max 9.8SUSE-SU-2025:02848-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_an…
first Aug 18, 2025 -
Critical max 10.0openSUSE-SU-2024:14275-1 1 CVE
flatpak-1.15.10-1.1 on GA media
These are all security issues fixed in the flatpak-1.15.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2024 -
Critical max 9.8SUSE-SU-2021:2136-1 1 CVE
Security update for cryptctl
This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move r…
first Jun 23, 2021 -
Critical max 9.8openSUSE-SU-2024:14139-1 2 CVEs
python310-dulwich-0.21.7-1.3 on GA media
These are all security issues fixed in the python310-dulwich-0.21.7-1.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958. - CVE-2021-47432: lib/generic-radix-tree.c:…
first Jul 9, 2024 -
Critical max 9.1SUSE-SU-2025:1053-2 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-5594: Fixed handling of null bytes and invalid characters in control messages (bsc#1235147).
first Apr 1, 2025 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes (LOG4J2-3198, LOG4J2-3201, LOG4J2-3208,…
first Dec 20, 2021 -
Critical max 9.1SUSE-SU-2018:1327-1 1 CVE
Security update for curl
This update for curl fixes several issues: Security issues fixed: - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098) Non security issues fixed: - If the DEFAULT_SUSE cipher list is not available use the HIG…
first May 17, 2018 -
Critical max 9.8SUSE-SU-2024:3855-1 21 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 31, 2024 -
Critical max 9.8SUSE-SU-2025:0094-1 3 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_186 fixes several issues. The following security issues were fixed: - CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1226337). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occ…
first Jan 14, 2025 -
Critical max 9.8SUSE-SU-2024:3040-1 1 CVE
Security update for the Linux Kernel (Live Patch 47 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_173 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202).
first Aug 27, 2024 -
Critical max 9.8openSUSE-SU-2024:12447-1 4 CVEs
curl-7.86.0-1.1 on GA media
These are all security issues fixed in the curl-7.86.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2025:01965-1 171 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-46713: kabi fix for perf…
first Jun 16, 2025 -
Critical max 9.8SUSE-SU-2018:3862-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitr…
first Nov 22, 2018 -
Critical max 9.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.1 ESR MFSA 2024-51 (bsc#1231413) - CVE-2024-9680: Use-after-free in Animation timeline (bmo#1923344) Also includes the following CVEs from MFSA 2024-47…
first Oct 14, 2024 -
Critical max 9.4SUSE-SU-2024:2447-1 10 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of th…
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2025:3716-1 324 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110). - CVE-2022-50233: Bluetooth: eir: Fi…
first Oct 22, 2025 -
Critical max 9.1SUSE-SU-2022:3615-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Updated to version 16.17.1: - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). - CVE-2022-32215: Fixed incorrect Parsing of Multi-line Transfer-Encoding (bsc#1201327). - CVE-2022-35256: Fix…
first Oct 18, 2022 -
Critical max 9.8SUSE-SU-2024:3998-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).
first Nov 15, 2024 -
Critical max 9.1openSUSE-SU-2024:13926-1 2 CVEs
tpm2.0-tools-5.7-1.1 on GA media
These are all security issues fixed in the tpm2.0-tools-5.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2021:1310-1 1 CVE
Security update for librsvg
This update for librsvg fixes the following issues: - librsvg was updated to 2.42.9: * Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 (bsc#1148293) -the bundled version of the cssparser crate…
first Apr 23, 2021 -
Critical max 9.4SUSE-SU-2024:2558-1 10 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock…
first Jul 18, 2024 -
Critical max 9.8SUSE-SU-2017:1233-1 1 CVE
Security update for openstack-magnum
This update for openstack-magnum fixes the following issues: Security issues fixed: - CVE-2016-7404: Magnum created instances have full API access to creating user's OpenStack account (bsc#998182). Bugfixes: - Fixed exception for InvalidParameterValue. - Upda…
first May 10, 2017 -
Critical max 10.0openSUSE-SU-2025:14909-1 6 CVEs
apptainer-1.3.6-5.1 on GA media
These are all security issues fixed in the apptainer-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 61 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.231 fixes various security issues The following security issues were fixed: - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1232637). - CVE-2022-49014: net: tun: Fix use-after-fr…
first Nov 18, 2025 -
Critical max 9.8SUSE-SU-2022:14880-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in ble…
first Jan 25, 2022 -
Critical max 9.8SUSE-SU-2024:3021-1 1 CVE
Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_176 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202).
first Aug 27, 2024 -
Critical max 9.8openSUSE-SU-2024:14369-1 7 CVEs
libmozjs-128-0-128.2.0-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 26, 2024