5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2024:2635-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security fixes: - CVE-2024-5535: Fixed SSL_select_next_proto buffer overread (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463) - Build with enabled sm2 and sm4 support (bsc#1222899) - Fix n…
first Jul 30, 2024 -
Critical max 9.1SUSE-SU-2018:1327-2 1 CVE
Security update for curl
This update for curl fixes several issues: Security issues fixed: - CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098) Non security issues fixed: - If the DEFAULT_SUSE cipher list is not available use the HIG…
first Oct 18, 2018 -
Critical max 9.8SUSE-SU-2021:3170-1 3 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: branch-network-formula: - Use kernel parameters from PXE formula also for local boot cobbler - security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection (bsc#1189458) - CVE-2021-4032…
first Sep 20, 2021 -
Critical max 9.8SUSE-SU-2024:1748-1 7 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 22, 2024 -
Critical max 10.0
Security update for logback
This update for logback fixes the following issues: Upgrade to version 1.2.8 + In response to log4Shell/CVE-2021-44228, all JNDI lookup code in logback has been disabled until further notice. This impacts ContextJNDISelector and insertFromJNDI element in conf…
first Dec 24, 2021 -
Critical max 9.8SUSE-SU-2025:1127-1 4 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075) - CVE-2025-27832: Fixed compression buffer overflow in NPDL devi…
first Apr 3, 2025 -
Critical max 9.8SUSE-SU-2025:01710-1 2 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.10.1 ESR. - MFSA 2025-37 (bsc#1243303) * CVE-2025-4918: Out-of-bounds access when resolving Promise objects * CVE-2025-4919: Out-of-bounds access when op…
first May 26, 2025 -
Critical max 9.8SUSE-SU-2024:1720-1 6 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_130 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 21, 2024 -
Critical max 9.8openSUSE-SU-2019:2225-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532) This update was imported from the SUSE:SLE-15:Update update project.
first Sep 30, 2019 -
Critical max 9.1SUSE-SU-2018:3253-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: Security issue fixed: - CVE-2018-10933: Fixed a server mode authentication bypass (bsc#1108020). Non security issue fixed: - Fix popd syntax to be compatible with newer versions of the bash shell.
first Oct 19, 2018 -
Critical max 9.1SUSE-SU-2023:0012-1 7 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow i…
first Jan 2, 2023 -
Critical max 9.1SUSE-SU-2024:2302-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid le…
first Jul 4, 2024 -
Critical max 9.8SUSE-SU-2024:2905-1 4 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-40776: Fixed a use-after-free issue with improved memory management (bsc#1228613). - CVE-2024-40779: Fixed a out-of-bounds read with improved bounds checking (bsc#1228693). - CVE-2024-40780: F…
first Aug 14, 2024 -
Critical max 9.8openSUSE-SU-2024:14568-1 2 CVEs
python310-Django-5.1.4-1.1 on GA media
These are all security issues fixed in the python310-Django-5.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 11, 2024 -
Critical max 9.8SUSE-SU-2024:3483-1 296 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-36936: Touch soft lockup …
first Sep 27, 2024 -
Critical max 9.8SUSE-RU-2021:3162-1 3 CVEs
Recommended update for SUSE Manager 4.2.2 Release Notes
This update for SUSE Manager 4.2.2 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.2 * SUSE Manager is now able to manage Rocky Linux 8 clients * Tech Preview: Inter-Server Sync V2 * Bugs mentioned bsc#1171483, …
first Sep 20, 2021 -
Critical max 9.8openSUSE-SU-2024:12776-1 2 CVEs
apache2-2.4.56-1.1 on GA media
These are all security issues fixed in the apache2-2.4.56-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1489-1 157 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-36781: Fixed reference leak when pm_runtime_get_sync fails in i2c/imx (bsc#1220557). - CVE-2021-46911: Fixed kern…
first May 3, 2024 -
Critical max 9.8openSUSE-SU-2025:14850-1 1 CVE
ffmpeg-7-7.1-4.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 2, 2025 -
Critical max 9.1SUSE-SU-2017:2115-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2017-8872: Out-of-bounds read could lead to application crash (bsc#1038444)
first Aug 9, 2017 -
Critical max 9.1SUSE-SU-2024:1607-1 6 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-25287: out-of-bounds read in J2kDecode in j2ku_graya_la (bsc#1185805) - CVE-2021-25288: out-of-bounds read in J2kDecode in j2ku_gray_i (bsc#1185803) - CVE-2021-28675: DoS in PsdImagePlugin (…
first May 10, 2024 -
Critical max 9.8openSUSE-SU-2024:12045-1 8 CVEs
MozillaThunderbird-91.9.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2019:1804-1 21 CVEs
Security update for ruby-bundled-gems-rpmhelper, ruby2.5
This update for ruby2.5 and ruby-bundled-gems-rpmhelper fixes the following issues: Changes in ruby2.5: Update to 2.5.5 and 2.5.4: https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/ https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-releas…
first Jul 10, 2019 -
Critical max 9.1openSUSE-SU-2024:0384-1 2 CVEs
Security update for zabbix
This update for zabbix fixes the following issues: Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and…
first Dec 1, 2024 -
Critical max 9.3openSUSE-SU-2020:0524-1 1 CVE
Security update for git
This update for git fixes the following issues: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host (bsc#1168930). This update was imported from the S…
first Apr 16, 2020 -
Critical max 9.2SUSE-SU-2025:0601-1 2 CVEs
Security update for brise
This update for brise fixes the following issues: - CVE-2025-21613: Fixed argument injection via the URL field (bsc#1235573). - CVE-2024-45337: Fixed authorization bypass in golang.org/x/crypto via the ServerConfig.PublicKeyCallback callback (bsc#1234597).
first Feb 20, 2025 -
Critical max 9.8SUSE-SU-2025:0856-1 72 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672). - CVE-2024-40980: drop_monitor: replace spin_lock…
first Mar 13, 2025 -
Critical max 10.0openSUSE-SU-2024:14017-1 1 CVE
liblzma5-32bit-5.6.2-1.1 on GA media
These are all security issues fixed in the liblzma5-32bit-5.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:01707-1 170 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27415: netfilter: bridge: confirm multicast packets before passing them up the stack (bsc#1224757). - CVE-2024-2…
first May 26, 2025 -
Critical max 9.8SUSE-SU-2023:0675-1 2 CVEs
Security update for emacs
This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515). - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512).
first Mar 8, 2023 -
Critical max 9.3SUSE-SU-2025:02387-1 9 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_20 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extend…
first Jul 18, 2025 -
Critical max 9.8openSUSE-SU-2019:2227-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Non-security issues fixed: - Updated to upstream version 1.16.1. (bsc#1149203) (jsc#SLE-8532) This update was imported from the SUSE:SLE-15:Update update project.
first Sep 30, 2019 -
Critical max 9.8SUSE-SU-2017:2674-1 1 CVE
Security update for Salt
This update for salt fixes one security issue and bugs: The following security issue has been fixed: - CVE-2017-12791: Directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via …
first Oct 9, 2017 -
Critical max 9.1SUSE-SU-2019:1439-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect …
first Jun 6, 2019 -
Critical max 9.8SUSE-SU-2024:3631-1 23 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2022:2146-1 3 CVEs
Security update for release-notes-susemanager, release-notes-susemanager-proxy
This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to 4.2.7 * Salt has been upgraded to 3004 version * Enabled salt bundle as optional * Debian 11 client support has …
first Jun 20, 2022 -
Critical max 9.1openSUSE-SU-2025:14613-1 2 CVEs
velero-1.15.1-1.1 on GA media
These are all security issues fixed in the velero-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 1, 2025 -
Critical max 9.8openSUSE-SU-2022:0136-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in ble…
first Jan 20, 2022 -
Critical max 9.3SUSE-SU-2024:4329-1 1 CVE
Security update for aws-iam-authenticator
This update for aws-iam-authenticator fixes the following issues: - CVE-2022-1996: Fixed CORS bypass (bsc#1200528).
first Dec 16, 2024 -
Critical max 9.8openSUSE-SU-2024:12986-1 3 CVEs
renderdoc-1.27-1.1 on GA media
These are all security issues fixed in the renderdoc-1.27-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024