5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2023:0110-1 2 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands (bsc#1207033). - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file (…
first Jan 20, 2023 -
Critical max 9.6
nodejs-electron-19.0.17-1.1 on GA media
These are all security issues fixed in the nodejs-electron-19.0.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.0
Security update exim
exim was updated to fix a security issue. - CVE-2019-10149: Fixed a Remote Command Execution in exim (bsc#1136587)
first Jun 7, 2019 -
Critical max 9.8SUSE-SU-2022:3681-1 1 CVE
Security update for libksba
This update for libksba fixes the following issues: - CVE-2022-3515: Fixed a possible overflow in the TLV parser (bsc#1204357).
first Oct 21, 2022 -
Critical max 9.8SUSE-SU-2019:1212-2 1 CVE
Security update for jakarta-commons-fileupload
This update for jakarta-commons-fileupload fixes the following issue: Security issue fixed: - CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829).
first Oct 11, 2019 -
Critical max 9.8openSUSE-SU-2024:14065-1 1 CVE
python310-django-allauth-0.63.3-1.1 on GA media
These are all security issues fixed in the python310-django-allauth-0.63.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
Critical max 9.8SUSE-SU-2024:2019-1 541 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35924: Limit read size on v1.2 (bsc#1224657). - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2…
first Jun 13, 2024 -
Critical max 9.8SUSE-SU-2022:0498-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054). - CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
first Feb 18, 2022 -
Critical max 10.0SUSE-SU-2015:2339-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting ext4 filesystems in no-journal mode could hav lead to a system crash (bsc#956709). - CVE-2015-7799: The…
first Dec 22, 2015 -
Critical max 10.0SUSE-SU-2024:2709-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to Docker 25.0.6-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/25.0/#2506> - CVE-2024-41110: A Authz zero length regression that could lead to authentication bypa…
first Aug 2, 2024 -
Critical max 9.8SUSE-SU-2024:3661-1 6 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 10.0openSUSE-SU-2025:14948-1 1 CVE
MozillaFirefox-136.0.4-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-136.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 1, 2025 -
Critical max 9.4SUSE-SU-2024:2726-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-26923: Fixed false-positive lockdep splat f…
first Aug 2, 2024 -
Critical max 9.8SUSE-SU-2020:2899-1 1 CVE
Security update for rubygem-activesupport-5_1
This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186)
first Oct 13, 2020 -
Critical max 9.8SUSE-SU-2025:0100-1 3 CVEs
Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_194 fixes several issues. The following security issues were fixed: - CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1226337). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occ…
first Jan 14, 2025 -
Critical max 9.8SUSE-SU-2025:0158-1 36 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 17, 2025 -
Critical max 9.8openSUSE-SU-2024:13598-1 6 CVEs
xwayland-23.2.4-1.1 on GA media
These are all security issues fixed in the xwayland-23.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14170-1 2 CVEs
ruby3.3-rubygem-kramdown-2.4.0-1.12 on GA media
These are all security issues fixed in the ruby3.3-rubygem-kramdown-2.4.0-1.12 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.3SUSE-SU-2022:3334-1 1 CVE
Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer
This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Update to v…
first Sep 22, 2022 -
Critical max 9.8SUSE-SU-2025:03503-1 5 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pe…
first Oct 9, 2025 -
Critical max 9.8openSUSE-SU-2024:14512-1 1 CVE
cobbler-3.3.7-1.1 on GA media
These are all security issues fixed in the cobbler-3.3.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 20, 2024 -
Critical max 9.8openSUSE-SU-2024:11108-1 3 CVEs
oci-cli-3.0.2-1.2 on GA media
These are all security issues fixed in the oci-cli-3.0.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2019:1918-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: - Fixed a regression with the fix for CVE-2019-12900, which caused incompatibilities with files that used many selectors (bsc#1139083). This update was imported from the SUSE:SLE-15:Update update project.
first Aug 15, 2019 -
Critical max 9.8openSUSE-SU-2024:11285-1 18 CVEs
python38-3.8.12-1.2 on GA media
These are all security issues fixed in the python38-3.8.12-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2025:14962-1 1 CVE
go1.23-1.23.8-1.1 on GA media
These are all security issues fixed in the go1.23-1.23.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2025 -
Critical max 10.0SUSE-SU-2025:03618-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).
first Oct 16, 2025 -
Critical max 10.0SUSE-SU-2024:2892-1 139 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-42096: x86: stop playing stack ga…
first Aug 13, 2024 -
Critical max 9.8
python310-Pillow-10.3.0-1.1 on GA media
These are all security issues fixed in the python310-Pillow-10.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12244-1 1 CVE
ruby3.1-rubygem-activerecord-7.0-7.0.3.1-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activerecord-7.0-7.0.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-boynux-squid_exporter: - Exclude s390 architecture - Enhanced to build on Enterprise Linux 8 grafana: - Version update from 8.3.10 to 8.5.13 (jsc#PED-2145) - Security fixes: * CVE-2022-36062: (bsc#1203596)…
first Dec 13, 2022 -
Critical max 9.8
Security update for opera
This update for opera fixes the following issues: Update to 110.0.5130.64 * CHR-9748 Update Chromium on desktop-stable-124-5130 to 124.0.6367.243 * DNA-116317 Create outline or shadow around emojis on tab strip * DNA-116320 Create animation for emoji disappea…
first Jun 10, 2024 -
Critical max 9.8
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues: - Update to sr16 fp26 to fix a regression in TLS connections. (bsc#981087) - IBM Java 1.6.0 SR16 FP25 released (bsc#977646 bsc#977648 bsc#977650 bsc#979252) CVE-2016-0376 CVE-2016-0264 CVE-2016-0363 C…
first May 31, 2016 -
Critical max 9.8openSUSE-SU-2024:12161-1 10 CVEs
MozillaThunderbird-91.11.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2024:12522-1 1 CVE
Botan-2.19.3-1.1 on GA media
These are all security issues fixed in the Botan-2.19.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2025:02778-1 8 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273). - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extr…
first Aug 13, 2025 -
Critical max 9.8SUSE-SU-2024:4074-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 128.5.0 ESR, fixed various security fixes and other quality improvements, MFSA 2024-64 (bsc#1233695): * CVE-2024-11691: Memory corruption in Apple GPU drivers * CVE-20…
first Nov 27, 2024 -
Critical max 10.0SUSE-SU-2025:01964-1 339 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). - CVE-2024-35840: mptcp: use OPTION_MP…
first Jun 16, 2025 -
Critical max 9.8
MozillaThunderbird-128.3.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 11, 2024 -
Critical max 9.8SUSE-SU-2025:0230-1 18 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49035: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (bsc#1215304). - CVE-2024-53146: NFSD: Prevent a potential…
first Jan 24, 2025 -
Critical max 9.8SUSE-SU-2022:3273-1 28 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.2.0esr ESR: * Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 (bsc#1202645) * CVE-2022-38472 (bmo#1769155) Address bar spoofing via XSLT …
first Sep 14, 2022