5,613 results · Clear filters · Feed
-
Critical max 9.3openSUSE-SU-2023:0424-1 1 CVE
Security update for deepin-compressor
This update for deepin-compressor fixes the following issues: - CVE-2023-50255: Fix Zip Path Traversal (boo#1218428)
first Dec 30, 2023 -
Critical max 9.8SUSE-SU-2022:3683-1 1 CVE
Security update for libksba
This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
first Oct 21, 2022 -
Critical max 9.8SUSE-SU-2022:4222-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - CVE-2022-37026: fixed a client authorization bypass vulnerability for SSL, TLS, and DTLS in Erlang/OTP. [bsc#1205318]
first Nov 25, 2022 -
Critical max 9.8SUSE-SU-2025:02157-1 9 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-f…
first Jun 27, 2025 -
Critical max 9.8SUSE-SU-2026:0163-1 10 CVEs
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 19, 2026 -
Critical max 10.0openSUSE-SU-2024:13966-1 1 CVE
cargo1.77-1.77.2-1.1 on GA media
These are all security issues fixed in the cargo1.77-1.77.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:2098-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
first Jun 16, 2022 -
Critical max 9.8
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814) - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575) - CVE-2023-5169: Out-of-bounds write in…
first Oct 9, 2023 -
Critical max 9.1SUSE-SU-2021:0668-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).
first Mar 1, 2021 -
Critical max 10.0SUSE-SU-2024:2056-1 1 CVE
Security update for libaom
This update for libaom fixes the following issues: - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
first Jun 18, 2024 -
Critical max 9.1SUSE-SU-2023:0604-1 2 CVEs
Security update for python-cryptography, python-cryptography-vectors
This update for python-cryptography, python-cryptography-vectors fixes the following issues: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - CVE-2020-36242: Fixed a bug where certain sequences of update() calls could result in integer overflow …
first Mar 2, 2023 -
Critical max 9.8SUSE-SU-2017:2666-1 1 CVE
Security update for salt
This update for salt fixes one security issue and bugs. The following security issue has been fixed: - CVE-2017-12791: Directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via …
first Oct 9, 2017 -
Critical max 10.0SUSE-SU-2022:2192-1 2 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2022-30122: Fixed crafted multipart POST request may cause a DoS (bsc#1200748) - CVE-2022-30123: Fixed crafted requests can cause shell escape sequences (bsc#1200750)
first Jun 27, 2022 -
Critical max 9.8openSUSE-SU-2024:11814-1 2 CVEs
python310-Pillow-9.0.1-1.1 on GA media
These are all security issues fixed in the python310-Pillow-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2022:0498-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054). - CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
first Feb 18, 2022 -
Critical max 9.8SUSE-SU-2025:4135-1 42 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise FIXME kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null-…
first Nov 18, 2025 -
Critical max 9.8SUSE-SU-2023:3899-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575): Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683). - CVE-2023-5169: Out-of-bounds…
first Sep 29, 2023 -
Critical max 9.8SUSE-SU-2023:3799-1 1 CVE
Security update for libpng15
This update for libpng15 fixes the following issues: Security issue fixed: - CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks (bsc#1141493).
first Sep 27, 2023 -
Critical max 9.8openSUSE-SU-2024:14044-1 15 CVEs
MozillaFirefox-127.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-127.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2025:01919-1 433 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-20…
first Jun 12, 2025 -
Critical max 9.8SUSE-SU-2022:3924-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125)
first Nov 9, 2022 -
Critical max 9.8openSUSE-SU-2024:12530-1 1 CVE
bcel-5.2-37.1 on GA media
These are all security issues fixed in the bcel-5.2-37.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2024:2487-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse_se…
first Jul 15, 2024 -
Critical max 9.8openSUSE-SU-2019:1781-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083). This update was imported from the SUSE:SLE-15:Update update project.
first Jul 21, 2019 -
Critical max 9.8openSUSE-SU-2019:1771-1 21 CVEs
Security update for ruby-bundled-gems-rpmhelper, ruby2.5
This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues: Changes in ruby2.5: Update to 2.5.5 and 2.5.4: https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-releas…
first Jul 21, 2019 -
Critical max 9.8SUSE-SU-2025:0034-1 120 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The Linux Enterprise 12 SP5 kernel turned LTSS (Extended Security) The following security bugs were fixed: - CVE-2021-46936: Fixed use-after-free in tw_timer_handler() (…
first Jan 8, 2025 -
Critical max 9.8openSUSE-SU-2022:0178-1 8 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).…
first Jan 25, 2022 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: Updated to version 8.5.13 (jsc#PED-2145, jsc#SLE-23439, jsc#SLE-23422, jsc#SLE-24565): - CVE-2022-36062: Fixed RBAC folders/dashboards privilege escalation (bsc#1203596). - CVE-2022-35957: Fixed escalation f…
first Oct 20, 2022 -
Critical max 9.8openSUSE-SU-2021:2136-1 1 CVE
Security update for cryptctl
This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move r…
first Jul 10, 2021 -
Critical max 9.8SUSE-SU-2024:1711-1 8 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 21, 2024 -
Critical max 9.8SUSE-SU-2019:2064-1 1 CVE
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
first Aug 6, 2019 -
Critical max 9.1
Security update for apache2
This update for apache2 fixes the following issues: Security fixes: - CVE-2024-38477: Fixed null pointer dereference in mod_proxy (bsc#1227270) - CVE-2024-39573: Fixed potential SSRF in mod_rewrite (bsc#1227271) - CVE-2024-38475: Fixed improper escaping of ou…
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2025:1128-1 7 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2020-22037: Fixed unchecked return value of the init_vlc function (bsc#1186756) - CVE-2024-12361: Fixed null pointer dereference (bsc#1237358) - CVE-2024-35368: Fixed double free via the rkmpp_retriev…
first Apr 3, 2025 -
Critical max 9.8SUSE-SU-2026:0174-1 11 CVEs
Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.144 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 19, 2026 -
Critical max 10.0SUSE-SU-2015:2194-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 kernel was updated to 3.12.51 to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7799: The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel did not ensure that certain slot nu…
first Dec 4, 2015 -
Critical max 9.8openSUSE-SU-2020:2276-1 14 CVEs
Security update for clamav
This update for clamav fixes the following issues: clamav was updated to the new major release 0.103.0. (jsc#ECO-3010,bsc#1118459) Note that libclamav was changed incompatible, if you have a 3rd party application that uses libclamav, it needs to be rebuilt. U…
first Dec 18, 2020 -
Critical max 9.8openSUSE-SU-2020:2268-1 14 CVEs
Security update for clamav
This update for clamav fixes the following issues: clamav was updated to the new major release 0.103.0. (jsc#ECO-3010,bsc#1118459) Note that libclamav was changed incompatible, if you have a 3rd party application that uses libclamav, it needs to be rebuilt. U…
first Dec 17, 2020 -
Critical max 9.8openSUSE-SU-2024:13764-1 11 CVEs
chromedriver-122.0.6261.111-1.1 on GA media
These are all security issues fixed in the chromedriver-122.0.6261.111-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Feature update for grafana
This update for grafana fixes the following issues: Update from version 7.5.12 to version 8.3.5 (jsc#SLE-23422) - Security: * CVE-2022-21702: XSS vulnerability in handling data sources (bsc#1195726) * CVE-2022-21703: cross-origin request forgery vulnerability…
first Apr 27, 2022 -
Critical max 9.8SUSE-SU-2026:0044-1 4 CVEs
Security update for mozjs60
This update for mozjs60 fixes the following issues: - CVE-2024-45492: embedded expat: detect integer overflow in function nextScaffoldPart (bsc#1230038) - CVE-2024-45491: embedded expat: detect integer overflow in dtdCopy (bsc#1230037) - CVE-2024-45490: embed…
first Jan 6, 2026