5,613 results · Clear filters · Feed
-
Critical max 9.8
Security update for samba
This update for samba fixes the following issue: - An unprivileged user with access to the samba server could cause smbd to load a specially crafted shared library, which then had the ability to execute arbitrary code on the server as 'root'. [CVE-2017-7494, …
first May 24, 2017 -
Critical max 9.8SUSE-SU-2022:0842-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
first Mar 15, 2022 -
Critical max 9.1SUSE-SU-2021:1939-1 10 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-25292: Fixed a backtracking regex in PDF parser could be used as a DOS attack (bsc#1183101). - CVE-2021-25290: Fixed a negative-offset memcpy with an invalid size in TiffDecode.c (bsc#118310…
first Jun 10, 2021 -
Critical max 9.8SUSE-SU-2025:03301-1 99 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2024-49996: cifs: Fix buffer overflow wh…
first Sep 23, 2025 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 105.0.5195.102 (boo#1203102): * CVE-2022-3075: Insufficient data validation in Mojo Chromium 105.0.5195.52 (boo#1202964): * CVE-2022-3038: Use after free in Network Service * CVE-2022-3039: Use aft…
first Sep 12, 2022 -
Critical max 9.8SUSE-SU-2025:4505-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi…
first Dec 22, 2025 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: - Update to 110.0.5130.39 * DNA-115603 [Rich Hints] Pass trigger source to the Rich Hint * DNA-116680 Import 0-day fix for CVE-2024-5274 - Update to 110.0.5130.35 * CHR-9721 Update Chromium on desktop-stable-1…
first May 27, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48956: ipv6: avoid use-after-free in ip6_fragment() (bsc#1231893). - CVE-2022-48960: net: hisilicon: Fix potential …
first Nov 27, 2024 -
Critical max 9.8openSUSE-SU-2024:0221-1 1 CVE
Security update for python-nltk
This update for python-nltk fixes the following issues: - CVE-2024-39705: Fixed remote code execution through unsafe pickle usage (boo#1227174).
first Jul 26, 2024 -
Critical max 9.8SUSE-SU-2024:1350-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.10.0 ESR (MSFA 2024-19) (bsc#1222535): - CVE-2024-3852: GetBoundName in the JIT returned the wrong object - CVE-2024-3854: Out-of-bounds-read after mis-o…
first Apr 19, 2024 -
Critical max 9.8openSUSE-SU-2019:1433-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an error (bsc#1132160). This update was im…
first May 21, 2019 -
Critical max 9.8SUSE-SU-2023:2946-1 1 CVE
Security update for openssh
This update for openssh fixes the following issue: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were pres…
first Jul 24, 2023 -
Critical max 9.1SUSE-SU-2021:0594-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).
first Feb 25, 2021 -
Critical max 9.8openSUSE-SU-2024:12595-1 1 CVE
libksba-devel-1.6.3-1.1 on GA media
These are all security issues fixed in the libksba-devel-1.6.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:3815-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitr…
first Nov 20, 2018 -
Critical max 9.8SUSE-SU-2023:0453-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (b…
first Feb 20, 2023 -
Critical max 9.8openSUSE-SU-2024:14434-1 33 CVEs
python314-3.14.0~a1-1.1 on GA media
These are all security issues fixed in the python314-3.14.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 28, 2024 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927). - CVE-2024-49925: fbdev: efifb: Register sysfs groups thro…
first Dec 13, 2024 -
Critical max 9.8SUSE-SU-2025:3775-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.4.0 ESR (bsc#1251263). - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: Out of bounds read/write in a privileged …
first Oct 24, 2025 -
Critical max 9.8SUSE-SU-2022:4306-1 1 CVE
Security update for bcel
This update for bcel fixes the following issues: - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing (bsc#1205125).
first Dec 1, 2022 -
Critical max 9.6
nodejs-electron-27.1.3-1.1 on GA media
These are all security issues fixed in the nodejs-electron-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:3769-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
first Oct 26, 2022 -
Critical max 9.8SUSE-SU-2024:4051-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).
first Dec 19, 2024 -
Critical max 9.8SUSE-SU-2020:2876-1 9 CVEs
Security update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-installer-ui, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-dashboard, openstack-ironic, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-infoblox, openstack-nova, python-Flask-Cors, rubygem-crowbar-client, storm, storm-kit, venv-openstack-cinder, venv-openstack-horizon
This update for ardana-ansible, ardana-cinder, ardana-cobbler, ardana-installer-ui, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, grafana, grafana-natel-discrete-panel, openstack-cinder, openstack-dashboard, openstack-ironic, openstack-ironic-python-ag…
first Oct 7, 2020 -
Critical max 10.0openSUSE-SU-2024:13359-1 9 CVEs
libsox3-14.4.2-8.1 on GA media
These are all security issues fixed in the libsox3-14.4.2-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.1openSUSE-SU-2024:12506-1 2 CVEs
apache-ivy-2.5.1-1.1 on GA media
These are all security issues fixed in the apache-ivy-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:02249-1 94 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: c…
first Jul 8, 2025 -
Critical max 9.8openSUSE-SU-2019:1428-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an error (bsc#1132160). This update was im…
first May 21, 2019 -
Critical max 9.8SUSE-SU-2025:0405-1 11 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.7 (MFSA 2025-10, bsc#1236539). Security fixes: - CVE-2025-1009: use-after-free in XSLT. - CVE-2025-1010: use-after-free in Custom Highlight. - CVE-2025-1011: a bu…
first Feb 10, 2025 -
Critical max 9.8SUSE-SU-2025:02852-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2023-52923: netfilter:…
first Aug 18, 2025 -
Critical max 9.8SUSE-SU-2022:3396-1 34 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 102.3.0esr ESR (bsc#1200793, bsc#1201758, bsc#1202645, bsc#1203477): - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages. - CVE-2022-40960: F…
first Sep 26, 2022 -
Critical max 9.8SUSE-SU-2024:4294-1 1 CVE
Security update for socat
This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory (bsc#1225462)
first Dec 11, 2024 -
Critical max 9.8SUSE-SU-2025:03580-1 5 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pe…
first Oct 13, 2025 -
Critical max 9.8SUSE-SU-2023:3306-1 6 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156). - CVE-2…
first Aug 14, 2023 -
Critical max 10.0SUSE-SU-2025:1177-1 186 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-35910: tcp: pr…
first Apr 8, 2025 -
Critical max 9.1SUSE-SU-2025:1153-1 1 CVE
Security update for go1.24
This update for go1.24 fixes the following issues: - Update to go1.24.2 - CVE-2025-22871: Fix an issue with request smuggling through invalid chunked data. (bsc#1240550)
first Apr 7, 2025 -
Critical max 9.8SUSE-SU-2024:3860-1 16 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 31, 2024 -
Critical max 9.9SUSE-SU-2025:01989-1 8 CVEs
Security update for Multi-Linux Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: * CVE-2023-45288: Require Go >= 1.23 for building (bsc#1236516) * CVE-2025-22870: Bumped golang.org/x/net to version 0.39.0 (bs…
first Jun 18, 2025 -
Critical max 9.8SUSE-SU-2020:1009-1 1 CVE
Security update for quartz
This update for quartz fixes the following issues: - CVE-2019-13990: Fixed XML External Entity attack in initDocumentParser (bsc#1143227).
first Apr 16, 2020