5,630 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2019:1824-1 2 CVEs
Security update for rmt-server
This update for rmt-server to version 2.3.1 fixes the following issues: - Fix mirroring logic when errors are encountered (bsc#1140492) - Refactor RMT::Mirror to download metadata/licenses in parallel - Check repo metadata GPG signatures during mirroring (bsc…
first Aug 1, 2019 -
Critical max 9.8SUSE-SU-2024:3772-1 14 CVEs
Security update for go1.22-openssl
This update for go1.22-openssl fixes the following issues: This update ships go1.22-openssl 1.22.7.1 (jsc#SLE-18320) - Update to version 1.22.7.1 cut from the go1.22-fips-release branch at the revision tagged go1.22.7-1-openssl-fips. * Update to Go 1.22.7 (#2…
first Oct 29, 2024 -
Critical max 9.8SUSE-SU-2024:1427-1 8 CVEs
Security Beta update for SUSE Manager Client Tools and Salt
This update fixes the following issues: POS_Image-Graphical7: - Update to version 0.1.1710765237.46af599 * Move image services to dracut-saltboot package * Use salt bundle - Update to version 0.1.1645440615.7f1328c * Remove deprecated kiwi functions POS_Image…
first Apr 24, 2024 -
Critical max 9.8SUSE-SU-2024:0910-1 39 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free (bsc#1220409). - CVE-2021-46923: Fixed reference leakage in fs/mount_se…
first Mar 15, 2024 -
Critical max 9.1SUSE-SU-2025:01731-1 5 CVEs
Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: Update to version 1.23.9 (bsc#1229122): Security fixes: - CVE-2024-45336: net/http: sensitive headers incorrectly sent after cross-domain redirect (bsc#1236046) - CVE-2024-45341: crypto/x509: usage of…
first May 28, 2025 -
Critical max 9.8openSUSE-SU-2024:11733-1 14 CVEs
MozillaThunderbird-91.5.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:3785-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383). - CVE-2022-42916: Fixed HSTS bypass via IDN (bsc#1204386).
first Oct 26, 2022 -
Critical max 9.8SUSE-SU-2024:3783-1 4 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
Critical max 9.8openSUSE-SU-2024:14250-1 7 CVEs
MozillaThunderbird-115.14.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2024 -
Critical max 9.8SUSE-SU-2023:2947-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were pre…
first Jul 24, 2023 -
Critical max 9.8SUSE-RU-2020:0685-1 2 CVEs
Recommended update for Salt
This update fixes the following issues: salt: - RHEL/CentOS 8 uses platform-python instead of python3 - New configuration option for selection of grains in the minion start event. - Fix 'os_family' grain for Astra Linux Common Edition - Fix for salt-api NET A…
first Mar 13, 2020 -
Critical max 9.8openSUSE-SU-2024:12336-1 2 CVEs
python311-3.11.0rc2-1.1 on GA media
These are all security issues fixed in the python311-3.11.0rc2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3983-1 204 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48879: efi: fix NULL-deref in init error path (bsc#1229556). - CVE-2022-48956: ipv6: avoid use-after-free in ip6…
first Nov 13, 2024 -
Critical max 9.8SUSE-SU-2024:2824-1 15 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes wit…
first Aug 8, 2024 -
Critical max 9.4SUSE-RU-2023:2566-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: branch-network-formula: - Update to version 0.1.1680167239.23f2fec * Remove unnecessary import of 'salt.ext.six' cobbler: - Fix cobbler buildiso so that the artifact can be booted by EFI firmware. (bsc#1206060) - Switch…
first Jun 21, 2023 -
Critical max 9.8SUSE-SU-2024:3679-1 14 CVEs
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2024:3830-1 21 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 30, 2024 -
Critical max 9.3SUSE-SU-2020:3095-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
first Oct 29, 2020 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 27, 2025 -
Critical max 10.0SUSE-SU-2015:2338-1 13 CVEs
Security update for xen
This update fixes the following security issues: - bsc#955399 - Fix xm migrate --log_progress. Due to logic error progress was not logged when requested. - bsc#956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - …
first Dec 22, 2015 -
Critical max 9.8SUSE-SU-2019:1368-2 1 CVE
Recommended update for sles12sp3-docker-image, sles12sp4-image, system-user-root
This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues: - CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524)
first Oct 11, 2019 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…
first Jan 25, 2025 -
Critical max 9.8openSUSE-SU-2024:11571-1 6 CVEs
MozillaThunderbird-91.2.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3767-1 5 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_175 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 29, 2024 -
Critical max 9.1SUSE-SU-2025:01885-2 1 CVE
Security update for perl-YAML-LibYAML
This update for perl-YAML-LibYAML fixes the following issues: - CVE-2025-40908: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified (bsc#1243902)
first Jul 10, 2025 -
Critical max 9.8SUSE-RU-2021:0633-1 10 CVEs
Recommended update for SUSE Manager 4.1.5.1 Release Notes
This update for SUSE Manager 4.1.5.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Revision 4.1.5.1 - Bugs mentioned bsc#1181550, bsc#1181556, bsc#1181557, bsc#1181558, bsc#1181559, bsc#1181560, bsc#1181561, bsc#1181562, bs…
first Feb 26, 2021 -
Critical max 9.8openSUSE-SU-2024:12988-1 4 CVEs
go1.20-1.20.5-1.1 on GA media
These are all security issues fixed in the go1.20-1.20.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues: Update to 1.11.0: * Fixed Bugs: + BeanComparator.compare(T, T) now throws IllegalArgumentException instead of RuntimeException to wrap all cases of ReflectiveOperationException. + MappedMeth…
first Jun 20, 2025 -
Critical max 9.8SUSE-SU-2024:3831-1 16 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 30, 2024 -
Critical max 9.8openSUSE-SU-2024:11300-1 1 CVE
ripgrep-13.0.0-2.2 on GA media
These are all security issues fixed in the ripgrep-13.0.0-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:4514-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: - CVE-2023-41913: Fixed a bug in charon-tkm related to handling DH public values that can lead to remote code execution (bsc#1216901).
first Nov 21, 2023 -
Critical max 9.8SUSE-SU-2022:2321-1 2 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jul 7, 2022 -
Critical max 9.8SUSE-SU-2022:4331-1 1 CVE
Security update for bcel
This update for bcel fixes the following issues: - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing (bsc#1205125).
first Dec 6, 2022 -
Critical max 10.0SUSE-SU-2024:3553-1 147 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 CoCo kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487). - CVE-2023-52916: media:…
first Oct 8, 2024 -
Critical max 9.1SUSE-SU-2022:3616-1 2 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-35256: Fixed incorrect parsing of header fields (bsc#1203832). - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325).
first Oct 18, 2022 -
Critical max 9.8openSUSE-SU-2024:13259-1 1 CVE
apache-commons-configuration2-2.9.0-1.1 on GA media
These are all security issues fixed in the apache-commons-configuration2-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
java-1_8_0-openjdk-1.8.0.111-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.111-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:0323-1 1 CVE
Security update for python-uamqp
This update for python-uamqp fixes the following issues: - CVE-2024-21646: Fix integer overflow which may cause remote code execution (bsc#1219409).
first Feb 5, 2024 -
Critical max 9.1SUSE-SU-2023:0072-1 3 CVEs
Security update for php74
This update for php74 fixes the following issues: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958).
first Jan 11, 2023 -
Critical max 9.1openSUSE-SU-2024:10687-1 2 CVEs
clojure-1.10.3.855-1.2 on GA media
These are all security issues fixed in the clojure-1.10.3.855-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024