5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2017:2854-1 90 CVEs
Security update for tcpdump
This update for tcpdump to version 4.9.2 fixes several issues. These security issues were fixed: - CVE-2017-11108: Prevent remote attackers to cause DoS (heap-based buffer over-read and application crash) via crafted packet data. The crash occured in the EXTR…
first Oct 26, 2017 -
Critical max 9.8SUSE-SU-2021:0934-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2021-20232: Fixed a use after free issue which could have led to memory corruption and other potential consequences (bsc#1183456). - CVE-2021-20231: Fixed a use after free issue which could have led to …
first Mar 24, 2021 -
Critical max 9.8SUSE-SU-2024:2817-1 6 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-42005: Fixed SQL injection in QuerySet.values() and values_list() (bsc#1228629) - CVE-2024-41989: Fixed Memory exhaustion in django.utils.numberformat.floatformat() (bsc#1228630) - CVE-2024-…
first Aug 7, 2024 -
Critical max 9.8SUSE-SU-2024:3108-1 1 CVE
Security update for frr
This update for frr fixes the following issues: - CVE-2024-44070: Fixed missing stream length check before TLV value is taken in bgp_attr_encap (bsc#1229438)
first Sep 3, 2024 -
Critical max 9.8SUSE-SU-2018:2899-1 3 CVEs
Security update for smt
This update for smt to 2.0.34 fixes the following issues: These security issues were fixed: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read (bsc#1103809) - CVE-2018-12470: SQL injection i…
first Sep 27, 2018 -
Critical max 9.8openSUSE-SU-2024:14380-1 3 CVEs
libmozjs-128-0-128.2.0-2.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.2.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 2, 2024 -
Critical max 9.8SUSE-SU-2026:0168-1 10 CVEs
Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.164 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 19, 2026 -
Critical max 9.8openSUSE-SU-2021:3331-1 20 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#119133…
first Oct 11, 2021 -
Critical max 10.0SUSE-SU-2024:2940-1 149 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-42096: x86: stop playing stack games…
first Aug 16, 2024 -
Critical max 9.8
Security update for SUSE Manager 3.2
This security update for SUSE Manager 3.2 fixes the following issues: py26-compat-salt: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) spac…
first Nov 6, 2020 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 9, 2022 -
Critical max 9.1SUSE-SU-2023:0429-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-23914: Fixed HSTS ignored on multiple requests (bsc#1207990). - CVE-2023-23915: Fixed HSTS amnesia with --parallel (bsc#1207991). - CVE-2023-23916: Fixed HTTP multi-header compression denial of servi…
first Feb 15, 2023 -
Critical max 9.8SUSE-SU-2019:1221-2 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: Security issue fixed: - CVE-2019-11068: Fixed a protection mechanism bypass where callers of xsltCheckRead() and xsltCheckWrite() would permit access upon receiving an error (bsc#1132160).
first Jul 1, 2019 -
Critical max 9.8SUSE-SU-2019:2267-1 9 CVEs
Security update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keystone, ardana-logging, ardana-magnum, ardana-monasca, ardana-mq, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-ses, ardana-swift, ardana-tempest, crowbar-core
This update for ardana-ansible, ardana-barbican, ardana-cinder, ardana-cluster, ardana-cobbler, ardana-db, ardana-designate, ardana-extensions-nsx, ardana-glance, ardana-heat, ardana-horizon, ardana-input-model, ardana-installer-ui, ardana-ironic, ardana-keys…
first Sep 18, 2019 -
Critical max 9.1SUSE-SU-2022:3503-1 2 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-35256: Fixed incorrect parsing of header fields (bsc#1203832). - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325).
first Oct 4, 2022 -
Critical max 9.8
Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma
This update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma fixes the following issues: Security updates included on this update: ardana-ansible, ardana-cobbler, grafana, op…
first Sep 22, 2022 -
Critical max 9.8SUSE-SU-2024:4103-1 46 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47589: igbvf: fix double free in `igbvf_probe` (bsc#1226557). - CVE-2022-48956: ipv6: avoid use-after-free in ip6…
first Nov 28, 2024 -
Critical max 9.8SUSE-SU-2022:0137-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in ble…
first Jan 20, 2022 -
Critical max 9.0SUSE-SU-2025:1504-1 16 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) - CVE-2025-32051: F…
first May 7, 2025 -
Critical max 9.8SUSE-SU-2024:3467-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002) - CVE-2022-48919: Fix double free race when mount fai…
first Sep 27, 2024 -
Critical max 9.4openSUSE-SU-2024:13018-1 1 CVE
grafana-10.0.1-1.1 on GA media
These are all security issues fixed in the grafana-10.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:1059-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes one issue. The following security issue was fixed: - CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235916).
first Mar 28, 2025 -
Critical max 9.3openSUSE-SU-2020:0598-1 15 CVEs
Security update for git
This update for git fixes the following issues: Security issues fixed: * CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being contacte…
first May 1, 2020 -
Critical max 9.8
Security update for vlc
This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel …
first Nov 12, 2023 -
Critical max 9.8SUSE-SU-2024:4231-1 13 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_194 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 6, 2024 -
Critical max 10.0SUSE-SU-2024:3174-1 1 CVE
Security update for bubblewrap and flatpak
This update for bubblewrap and flatpak fixes the following issues: - CVE-2024-42472: Fixed access to files outside sandbox for apps using persistent (bsc#1229157)
first Sep 9, 2024 -
Critical max 9.8
MozillaThunderbird-45.5.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-45.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:2822-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2020-10109: Fixed an HTTP request smuggling issue (bsc#1166458).
first Aug 16, 2022 -
Critical max 9.8SUSE-SU-2018:3261-1 7 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: Version update to 7.0.90: - Another bugfix release, for full details see: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2018-11784: When the default servlet in Apache To…
first Oct 19, 2018 -
Critical max 9.8SUSE-SU-2022:2180-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jun 24, 2022 -
Critical max 9.8SUSE-SU-2024:3670-1 5 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.1SUSE-SU-2023:2783-2 7 CVEs
Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websoc
This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfr…
first Sep 19, 2023 -
Critical max 9.8openSUSE-SU-2024:12172-1 1 CVE
python310-Django-4.0.6-1.1 on GA media
These are all security issues fixed in the python310-Django-4.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:02139-1 8 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-f…
first Jun 26, 2025 -
Critical max 9.8SUSE-SU-2024:3408-1 73 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-44947: Initialize beyond-EOF page contents before setti…
first Sep 24, 2024 -
Critical max 9.1SUSE-SU-2023:0387-1 7 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow i…
first Feb 13, 2023 -
Critical max 9.8SUSE-SU-2023:2105-2 7 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: Update to 1.20.4 (bnc#1206346): - CVE-2023-24539: Fixed an improper sanitization of CSS values (boo#1211029). - CVE-2023-24540: Fixed an improper handling of JavaScript whitespace (boo#1211030). - CVE-2023-29…
first May 8, 2023 -
Critical max 9.8SUSE-SU-2019:2399-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11236: Fixed CRLF injection via request parameter (bsc#1132663). - CVE-2018-20060: Remove Authorization hea…
first Sep 18, 2019 -
Critical max 9.8SUSE-SU-2024:3804-1 4 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2022:14934-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
first Mar 31, 2022