5,630 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2022:0798-1 2 CVEs
Security update for SUSE Manager Server 4.1
This update fixes the following issues: c3p0: - Update to version c3p0 0.9.5.5 and mchange-commons-java 0.2.19 * Address CVE-2018-20433 * Address CVE-2019-5427 - XML-config parsing related attacks (bsc#1133198) * Properly implement the JDBC 4.1 abort method -…
first Mar 10, 2022 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) …
first Jun 21, 2021 -
Critical max 9.1SUSE-SU-2021:2480-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security issues fixed: - CVE-2021-35942: wordexp: Fixed handle overflow in positional parameter number (bsc#1187911) - CVE-2016-10228: Rewrite iconv option parsing (bsc#1027496) Other fixes: - Fixed race in pt…
first Jul 27, 2021 -
Critical max 9.8SUSE-SU-2023:0707-1 5 CVEs
Security update for python39
This update for python39 fixes the following issues: - CVE-2023-24329: Fixed blocklists bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). Update to 3.9.16: - python -m http.server no longer allows term…
first Mar 10, 2023 -
Critical max 9.8SUSE-SU-2023:2778-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).
first Jul 4, 2023 -
Critical max 9.0SUSE-SU-2023:0321-1 3 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#120725…
first Feb 8, 2023 -
Critical max 9.8SUSE-SU-2021:2830-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520] - CVE-2021-3712: a bug in the code for printing certificate details could le…
first Aug 24, 2021 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666) - CVE-2021-34798: Fixed a N…
first Oct 6, 2021 -
Critical max 9.1SUSE-SU-2021:3289-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: Security issues fixed: - CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911) - CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489) Also the following bug was fi…
first Oct 6, 2021 -
Critical max 9.8SUSE-SU-2020:0489-1 1 CVE
Security update for ppp
This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610).
first Feb 26, 2020 -
Critical max 9.3SUSE-SU-2020:2648-1 1 CVE
Security update for SUSE Manager 3.2
This update for SUSE Manager 3.2 fixes the following issues: salt-netapi-client: - Refresh authentication module list to newer Salt versions spacewalk-admin: - Use the Salt API in authenticated and encrypted form (bsc#1175884, CVE-2020-8028) spacewalk-java: -…
first Sep 16, 2020 -
Critical max 9.3SUSE-SU-2020:0992-1 1 CVE
Security update for git
This update for git fixes the following issues: Security issue fixed: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host (bsc#1168930). Non-security …
first Apr 14, 2020 -
Critical max 9.8SUSE-SU-2020:3624-1 5 CVEs
Security update for crowbar-openstack, grafana, influxdb, python-urllib3
This update for crowbar-openstack, grafana, influxdb, python-urllib3 contains the following fixes: Security fixes included in this update: openstack-glance - CVE-2016-8611: Added rate limiting for glance api (bnc#1005886) grafana - CVE-2020-24303: Fixed an XS…
first Dec 4, 2020 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 19, 2020 -
Critical max 9.9SUSE-SU-2020:1946-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2020-15049.patch: fixes a Cache Poisoning and Request Smuggling attack (CVE-2020-15049, bsc#1173455)
first Jul 17, 2020 -
Critical max 9.8SUSE-SU-2019:2253-2 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
first Sep 19, 2019 -
Critical max 9.8SUSE-SU-2019:14172-1 1 CVE
Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5482: Fixed a TFTP small blocksize heap buffer overflow (bsc#1149496).
first Sep 17, 2019 -
Critical max 9.8
Security update for tomcat
This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed …
first Mar 10, 2020 -
Critical max 9.9SUSE-SU-2020:14460-1 21 CVEs
Security update for squid3
This update for squid3 fixes the following issues: - Fixed a Cache Poisoning and Request Smuggling attack (CVE-2020-15049, bsc#1173455) - Fixed incorrect buffer handling that can result in cache poisoning, remote execution, and denial of service attacks when …
first Aug 24, 2020 -
Critical max 9.8SUSE-SU-2019:14142-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong se…
first Aug 8, 2019 -
Critical max 9.8SUSE-SU-2018:3816-1 2 CVEs
Security update for py26-compat-salt
This update for py26-compat-salt fixes the following issues: Salt was updated to version 2016.11.10 and contains the following fixes: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751:…
first Nov 20, 2018 -
Critical max 9.8SUSE-SU-2018:1323-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: curl was updated to version 7.37.0 (fate#325339 bsc#1084137) This update syncs the curl version to the one in SUSE Linux Enterprise 12 and is full binary compatible to the previous version. This update is done …
first May 16, 2018 -
Critical max 9.8
Security update for tomcat
This update for tomcat fixes the following issues: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security M…
first Dec 10, 2016 -
Critical max 9.8
Security update for java-1_6_0-ibm
This IBM Java 1.6.0 SR16 FP25 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix …
first May 20, 2016 -
Critical max 9.8SUSE-SU-2019:2867-1 11 CVEs
Security update for ardana-ansible, ardana-glance, ardana-horizon, ardana-input-model, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, galera-3, grafana, mariadb, mariadb-connector-c, novnc, openstack-cinder, openstack-glance, openstack-heat, openstack-horizon-plugin-neutron-vpnaas-ui, openstack-keystone, openstack-monasca-installer, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-no
This update for ardana-ansible, ardana-glance, ardana-horizon, ardana-input-model, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, galera-3, grafana, mariadb, mariadb-connect…
first Oct 30, 2019 -
Critical max 9.8SUSE-SU-2020:0234-1 37 CVEs
Security update for python
This update for python fixes the following issues: Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
first Jan 24, 2020 -
Critical max 9.8SUSE-SU-2025:1263-1 249 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47248: udp: fix race between close() and udp_abort() (bsc#1224867). - CVE-2022-49051: net: usb: aqc111: Fix out-of-bou…
first Apr 15, 2025 -
Critical max 9.8SUSE-SU-2025:1072-1 2 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228578).
first Mar 31, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…
first Mar 17, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-48742: rtnetli…
first Mar 11, 2025