5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2025:14941-1 1 CVE
rke2-1.32.3+rke2r1-1.1 on GA media
These are all security issues fixed in the rke2-1.32.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 28, 2025 -
Critical max 9.3SUSE-SU-2025:03257-1 2 CVEs
Security update for raptor
This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser (bsc#1235673). - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser (bsc#1235674).
first Sep 17, 2025 -
Critical max 9.9SUSE-SU-2020:2443-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token …
first Sep 2, 2020 -
Critical max 9.3SUSE-SU-2020:2200-1 3 CVEs
Security update for google-compute-engine
This update for google-compute-engine fixes the following issues: - Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258). - Don't enable and start google-network-daemon.servi…
first Aug 11, 2020 -
Critical max 9.8openSUSE-SU-2024:12227-1 8 CVEs
MozillaFirefox-103.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-103.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14161-1 1 CVE
python310-rope-1.12.0-1.3 on GA media
These are all security issues fixed in the python310-rope-1.12.0-1.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 10.0openSUSE-SU-2025:14811-1 17 CVEs
ruby3.4-rubygem-rack-2.2-2.2.11-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 14, 2025 -
Critical max 9.8
Security update for cacti, cacti-spine
This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.23: * Fix unexpected reindexing when using uptime as the reindex method * Spine should prevent the script server from connecting to remote when offline * Improve Script Server Time…
first Jan 21, 2023 -
Critical max 9.8SUSE-SU-2019:2053-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML docu…
first Aug 6, 2019 -
Critical max 9.4SUSE-SU-2024:2773-1 11 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 6, 2024 -
Critical max 9.8openSUSE-SU-2025:14621-1 12 CVEs
libruby3_4-3_4-3.4.1-1.1 on GA media
These are all security issues fixed in the libruby3_4-3_4-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 7, 2025 -
Critical max 9.8openSUSE-SU-2024:14185-1 1 CVE
kubelogin-0.1.4-1.1 on GA media
These are all security issues fixed in the kubelogin-0.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2024 -
Critical max 9.8SUSE-SU-2022:2068-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
first Jun 14, 2022 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Chromium 94.0.4606.81 (boo#1191463): * CVE-2021-37977: Use after free in Garbage Collection * CVE-2021-37978: Heap buffer overflow in Blink * CVE-2021-37979: Heap buffer overflow in WebRTC * CVE-2021-37980:…
first Oct 12, 2021 -
Critical max 10.0SUSE-SU-2023:4805-1 5 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213584). - CVE-202…
first Dec 13, 2023 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.7.0 ESR (bsc#1196900): - CVE-2022-26383: Browser window spoof using fullscreen mode - CVE-2022-26384: iframe allow-scripts sandbox bypass - CVE-2022-26387: Time-of-…
first Mar 11, 2022 -
Critical max 9.8openSUSE-SU-2024:13709-1 2 CVEs
nodejs-electron-27.3.3-1.1 on GA media
These are all security issues fixed in the nodejs-electron-27.3.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1979-1 180 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2022-48686: Fix UAF when detecting digest errors (bsc#1223…
first Jun 11, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 72.0.3815.320 - CHR-8177 Update chromium on desktop-stable-86-3815 to 86.0.4240.183 - DNA-89748 ‘Manage Extensions’ dialog is displayed with preloaded extensions - DNA-89766 Addres…
first Nov 17, 2020 -
Critical max 10.0SUSE-RU-2024:4391-1 2 CVEs
Recommended update for docker-stable
This update for docker-stable fixes the following issues: - Update docker-buildx to v0.19.2. See upstream changelog online at <https://github.com/docker/buildx/releases/tag/v0.19.2>. Some notable changelogs from the last update: * <https://github.com/docker/b…
first Dec 20, 2024 -
Critical max 9.8SUSE-SU-2024:3824-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_21 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 30, 2024 -
Critical max 9.3SUSE-SU-2025:3827-1 3 CVEs
Security update 4.3.16.1 for SUSE Manager Server Release Notes
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16.1 * CVEs Fixed: CVE-2025-53883, CVE-2025-53880, CVE-2025-53192 * Bugs mentioned: bsc#1246439, bsc#1246277, bsc#1248252
first Oct 28, 2025 -
Critical max 9.8openSUSE-SU-2023:0253-1 3 CVEs
Security update for renderdoc
This update for renderdoc fixes the following issues: Security issues fixed: * CVE-2023-33863: integer overflow to heap-based buffer overflow * CVE-2023-33864: integer underflow to heap-based buffer overflow * CVE-2023-33865: symlink vulnerability in /tmp/Ren…
first Sep 25, 2023 -
Critical max 9.8SUSE-SU-2022:0495-1 2 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-23852: Fixed signed integer overflow in XML_GetBuffer (bsc#1195054). - CVE-2022-23990: Fixed integer overflow in the doProlog function (bsc#1195217).
first Feb 18, 2022 -
Critical max 9.8SUSE-SU-2021:3446-1 6 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332) * CVE-2021-38496: Use-after-free in MessageTask * CVE-2021-38497: V…
first Oct 15, 2021 -
Critical max 10.0SUSE-SU-2025:03506-1 4 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] …
first Oct 9, 2025 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: 'compose_attachments' context added to M…
first Nov 28, 2020 -
Critical max 9.8SUSE-SU-2023:2575-1 13 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Version update from 8.5.22 to 9.5.1 (jsc#PED-3694): * Security fixes: - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip (bsc#1209645) - CVE-2023-1387: grafana: JWT URL-login flow le…
first Jun 21, 2023 -
Critical max 9.8openSUSE-SU-2024:14152-1 1 CVE
python310-openapi-spec-validator-0.7.1-1.3 on GA media
These are all security issues fixed in the python310-openapi-spec-validator-0.7.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2024:1663-1 218 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Real Time kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705). - CVE-2024-27062: Fixed nouveau lock i…
first May 15, 2024 -
Critical max 9.8
grafana-8.3.4-1.1 on GA media
These are all security issues fixed in the grafana-8.3.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2026:0308-1 18 CVEs
Security update for go1.24-openssl
This update for go1.24-openssl fixes the following issues: Update to version 1.24.12 (released 2026-01-15) (jsc#SLE-18320, bsc#1236217): Security fixes: - CVE-2025-47912: net/url: insufficient validation of bracketed IPv6 hostnames (bsc#1251257). - CVE-2025-5…
first Jan 28, 2026 -
Critical max 9.8openSUSE-SU-2019:2259-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532) This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openS…
first Oct 6, 2019 -
Critical max 9.8SUSE-RU-2022:1579-1 6 CVEs
Recommended update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR MFSA 2022-17 (bsc#1198970) * CVE-2022-29914: Fullscreen notification bypass using popups * CVE-2022-29909: Bypassing permission prompt in nested browsing co…
first May 9, 2022 -
Critical max 10.0
Security update for erlang26
This update for erlang26 fixes the following issues: - CVE-2025-30211: Fixed KEX init error results with excessive memory usage (bsc#1240390) - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300)
first Apr 22, 2025 -
Critical max 9.8SUSE-SU-2024:2876-1 28 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.1.0 ESR (MFSA 2024-35, bsc#1228648) - CVE-2024-7518: Fullscreen notification dialog can be obscured by document - CVE-2024-7519: Out of bounds memory acc…
first Aug 13, 2024 -
Critical max 9.8SUSE-SU-2022:0844-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).
first Mar 15, 2022 -
Critical max 9.8SUSE-SU-2024:3519-1 11 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.0 ESR (MFSA-2024-47, bsc#1230979): - CVE-2024-8900: Clipboard write permission bypass - CVE-2024-9392: Compromised content process can bypass site isol…
first Oct 3, 2024 -
Critical max 9.8SUSE-SU-2022:2075-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166).
first Jun 14, 2022 -
Critical max 9.1SUSE-SU-2024:2307-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid le…
first Jul 5, 2024