5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2024:14055-1 6 CVEs
python310-urllib3-2.1.0-3.1 on GA media
These are all security issues fixed in the python310-urllib3-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2024 -
Critical max 9.4SUSE-SU-2024:2396-1 4 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 10, 2024 -
Critical max 9.8SUSE-SU-2022:4083-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 102.5.0 ESR (MFSA 2022-48, bsc#1205270): - CVE-2022-45403: Service Workers might have learned size of cross-origin media files - CVE-2022-45404: Fullscreen n…
first Nov 18, 2022 -
Critical max 9.8SUSE-SU-2021:2818-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - Update to 5.3.1. - CVE-2020-14343: A vulnerability was discovered in the PyYAML library, where it was susceptible to arbitrary code execution when it processes untrusted YAML files through the full_l…
first Aug 24, 2021 -
Critical max 9.8
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476…
first Jan 19, 2026 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 9, 2022 -
Critical max 9.8SUSE-SU-2023:0597-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515). - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512).
first Mar 2, 2023 -
Critical max 9.8SUSE-SU-2018:0122-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2017-8816: Buffer overrun flaw in the NTLM authentication code (bsc#1069226). - CVE-2017-8817: Read out of bounds flaw in the FTP wildcard function (bsc#1069222).
first Jan 17, 2018 -
Critical max 9.8SUSE-SU-2019:3053-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c …
first Nov 25, 2019 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability …
first Aug 13, 2025 -
Critical max 9.3SUSE-SU-2020:2647-1 1 CVE
Security update for for SUSE Manager 4.1
This update for SUSE Manager 4.1 fixes the following issues: google-gson: - Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages. httpcomponents-client: - Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41…
first Sep 16, 2020 -
Critical max 9.8openSUSE-SU-2024:11732-1 18 CVEs
MozillaFirefox-96.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-96.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2019:2039-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593). This update was …
first Aug 31, 2019 -
Critical max 9.8openSUSE-SU-2025:0003-1 5 CVEs
Security update for etcd
This update for etcd fixes the following issues: Update to version 3.5.12: * Bump golang.org/x/crypto to v0.17+ to address CVE-2023-48795 * test: fix TestHashKVWhenCompacting: ensure all goroutine finished * print error log when creating peer listener failed …
first Jan 7, 2025 -
Critical max 9.8
Security update for roundcubemail
This update for roundcubemail fixes the following issues: roundcubemail was upgraded to 1.3.15 This is a security update to the LTS version 1.3. (boo#1175135) * Security: Fix cross-site scripting (XSS) via HTML messages with malicious svg content [CVE-2020-16…
first Sep 24, 2020 -
Critical max 10.0
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT (bsc#1239302) - Update to Tomcat 9.0.102 * Fixes: + launch with java 17 (bsc#1239676) * Catalina + Fix: Weak eta…
first Apr 3, 2025 -
Critical max 9.8
Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Exclude s390 arch - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requ…
first Jan 23, 2024 -
Critical max 9.8
Security update for java-1_7_1-ibm
IBM Java was updated to 7.1-3.10 to fix several security issues. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in …
first Jul 28, 2015 -
Critical max 9.1openSUSE-SU-2024:12349-1 2 CVEs
corepack18-18.9.0-1.1 on GA media
These are all security issues fixed in the corepack18-18.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
chromedriver-105.0.5195.102-1.1 on GA media
These are all security issues fixed in the chromedriver-105.0.5195.102-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14493-1 1 CVE
icinga2-2.14.3-1.1 on GA media
These are all security issues fixed in the icinga2-2.14.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 14, 2024 -
Critical max 9.8SUSE-SU-2024:3800-1 11 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_194 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2024:3794-1 5 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_169 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2024:1970-1 2 CVEs
Security update for go1.22
This update for go1.22 fixes the following issues: go1.21.11 release (bsc#1212475). - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973). - CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapp…
first Jun 10, 2024 -
Critical max 10.0SUSE-SU-2023:4817-1 3 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…
first Dec 13, 2023 -
Critical max 9.8SUSE-SU-2022:0698-1 5 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25…
first Mar 3, 2022 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454) - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688)
first Jan 20, 2022 -
Critical max 9.8SUSE-SU-2025:4174-1 17 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 140.5.0 ESR (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: We…
first Nov 24, 2025 -
Critical max 9.8SUSE-SU-2024:3857-1 16 CVEs
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 31, 2024 -
Critical max 9.8openSUSE-SU-2024:13943-1 1 CVE
tinyproxy-1.11.2-1.1 on GA media
These are all security issues fixed in the tinyproxy-1.11.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:13203-1 17 CVEs
cacti-1.2.25-2.1 on GA media
These are all security issues fixed in the cacti-1.2.25-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2024:2841-1 6 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes wit…
first Aug 8, 2024 -
Critical max 9.8SUSE-SU-2022:2308-1 3 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550) - CVE-2022-2097: Fixed partial missing encryption in…
first Jul 6, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: netfilt…
first Jan 15, 2025 -
Critical max 9.8SUSE-SU-2023:2105-1 7 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: Update to 1.20.4 (bnc#1206346): - CVE-2023-24539: Fixed an improper sanitization of CSS values (boo#1211029). - CVE-2023-24540: Fixed an improper handling of JavaScript whitespace (boo#1211030). - CVE-2023-29…
first May 5, 2023 -
Critical max 9.3SUSE-SU-2022:3666-1 2 CVEs
Security update for helm
This update for helm fixes the following issues: helm was updated to version 3.9.4: * CVE-2022-36055: Fixed denial of service through string value parsing (bsc#1203054). * Updating the certificates used for testing * Updating index handling helm was updated t…
first Oct 19, 2022 -
Critical max 9.8openSUSE-SU-2024:14070-1 1 CVE
ruby3.3-rubygem-activestorage-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-activestorage-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap b…
first Oct 25, 2020 -
Critical max 9.8openSUSE-SU-2024:14365-1 1 CVE
traefik-3.1.4-1.1 on GA media
These are all security issues fixed in the traefik-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2024 -
Critical max 9.8openSUSE-SU-2024:12879-1 1 CVE
ruby3.2-rubygem-activerecord-7.0-7.0.4.3-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-activerecord-7.0-7.0.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024