5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2018:2561-1 3 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: Security issues fixed: - Forbid exposure of private methods in the API (CVE-2018-10931, CVE-2018-1000225, bsc#1104287, bsc#1104189, bsc#1105442) - Check access token when calling 'modify_setting' API endpoin…
first Aug 30, 2018 -
Critical max 9.8openSUSE-SU-2019:0194-1 2 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin to version 4.8.5 fixes the following issues: Security issues fixed: - CVE-2019-6799: Fixed an arbitrary file read vulnerability (boo#1123272) - CVE-2019-6798: Fixed a SQL injection in the designer interface (boo#1123271) Other chang…
first Mar 23, 2019 -
Critical max 10.0SUSE-SU-2025:03502-1 4 CVEs
Security update for valkey
This update for valkey to version 8.0.6 fixes the following security issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote cod…
first Oct 8, 2025 -
Critical max 9.1SUSE-SU-2024:3876-1 2 CVEs
Security update for python-waitress
This update for python-waitress fixes the following issues: - CVE-2024-49768: Fixed request processing race condition in HTTP pipelining with invalid first request when lookahead is enabled (bsc#1232556) - CVE-2024-49769: Fixed incorrect connection clean up l…
first Nov 1, 2024 -
Critical max 9.8SUSE-SU-2024:4122-1 34 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024 -
Critical max 9.8openSUSE-SU-2024:12518-1 19 CVEs
MozillaFirefox-107.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-107.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2022:0199-1 14 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - CVE-2021-4140: Fixed Iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in…
first Jan 26, 2022 -
Critical max 9.8SUSE-SU-2022:0657-1 5 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first Mar 2, 2022 -
Critical max 9.8SUSE-SU-2023:3355-1 3 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to LTS version 16.20.2: - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createR…
first Aug 18, 2023 -
Critical max 9.8SUSE-SU-2024:3642-1 18 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 15, 2024 -
Critical max 9.8SUSE-SU-2025:3742-1 10 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that…
first Oct 23, 2025 -
Critical max 9.8openSUSE-SU-2024:14011-1 1 CVE
minidlna-1.3.3-2.1 on GA media
These are all security issues fixed in the minidlna-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11557-1 2 CVEs
python-onionshare-2.4-1.1 on GA media
These are all security issues fixed in the python-onionshare-2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2020:3897-1 7 CVEs
Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark
This update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic…
first Dec 21, 2020 -
Critical max 9.8SUSE-SU-2019:13977-1 1 CVE
Security update for python-numpy
This update for python-numpy fixes the following issues: Security issue fixed: - CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208). With this update we decrease the possibility of allowing remote attackers…
first Mar 12, 2019 -
Critical max 9.6openSUSE-SU-2024:12173-1 38 CVEs
radare2-5.7.0-1.1 on GA media
These are all security issues fixed in the radare2-5.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2022:2342-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_str…
first Jul 8, 2022 -
Critical max 9.8openSUSE-SU-2024:12270-1 1 CVE
rsync-3.2.5-1.1 on GA media
These are all security issues fixed in the rsync-3.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2024:2449-1 4 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_119 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of th…
first Jul 12, 2024 -
Critical max 9.1SUSE-SU-2026:0298-1 22 CVEs
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.6 (released 2026-01-15) (jsc#SLE-18320, bsc#1244485): Security fixes: - CVE-2025-4674 cmd/go: disable support for multiple vcs in one module (bsc#1246118). - CVE-2025-47906 os/e…
first Jan 26, 2026 -
Critical max 9.6SUSE-SU-2022:14896-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.0 ESR / MFSA 2022-05 (bsc#1195682) - CVE-2022-22753: Privilege Escalation to SYSTEM on Windows via Maintenance Service - CVE-2022-22754: Extensions could have byp…
first Feb 24, 2022 -
Critical max 9.8openSUSE-SU-2024:11205-1 30 CVEs
python36-Django-3.2.7-2.3 on GA media
These are all security issues fixed in the python36-Django-3.2.7-2.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:4579-1 7 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to version 102.6 (bsc#1206242): - CVE-2022-46880: Use-after-free in WebGL - CVE-2022-46872: Arbitrary file read from a compromised content process - CVE-2022-46881: Memory corruption in Web…
first Dec 20, 2022 -
Critical max 10.0openSUSE-SU-2024:13689-1 3 CVEs
docker-24.0.7_ce-3.1 on GA media
These are all security issues fixed in the docker-24.0.7_ce-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2020:0086-1 26 CVEs
Security update for python3
This update for python3 to version 3.6.10 fixes the following issues: - CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507). - CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955). - CVE…
first Jan 21, 2020 -
Critical max 9.1openSUSE-SU-2025:14660-1 1 CVE
golang-github-prometheus-prometheus-3.1.0-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 17, 2025 -
Critical max 9.8SUSE-SU-2022:1184-1 3 CVEs
Security update for netatalk
This update for netatalk fixes the following issues: - CVE-2022-23125: Fixed remote arbitrary code execution related to copyapplfile(). - CVE-2022-23121: Fixed remote arbitrary code execution related to parse_entries(). - CVE-2021-31439: Fixed remote arbitrar…
first Apr 13, 2022 -
Critical max 9.8SUSE-SU-2020:2057-1 8 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - Add 0019-FLI-overflow-error-fix-and-testcase.patch * Fixes CVE-2016-0775, bsc#965582 - Add 0020-Fix-OOB-reads-in-FLI-decoding.patch * Fixes CVE-2020-10177, bsc#1173413 - Add 0021-Fix-bounds-overflow-…
first Jul 27, 2020 -
Critical max 9.8SUSE-SU-2025:02262-1 157 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (bsc#1237981). - CVE-2022-49139: Bluetooth: fix null ptr deref on h…
first Jul 9, 2025 -
Critical max 9.8SUSE-SU-2024:3623-1 19 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 14, 2024 -
Critical max 9.8openSUSE-SU-2024:14483-1 11 CVEs
MozillaFirefox-132.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-132.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 11, 2024 -
Critical max 9.8SUSE-SU-2024:3478-1 3 CVEs
Security update for quagga
This update for quagga fixes the following issues: - CVE-2017-15865: sensitive information disclosed when malformed BGP UPDATE packets are processed. (bsc#1230866) - CVE-2024-44070: crash when parsing Tunnel Encap attribute due to no length check. (bsc#122943…
first Sep 27, 2024 -
Critical max 9.8SUSE-SU-2024:3829-1 30 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…
first Oct 30, 2024 -
Critical max 9.8SUSE-SU-2019:2381-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed a double-free during kerberos FTP data transfer. (bsc#1149495) - CVE-2019-5482: Fixed a TFTP small block size heap buffer overflow (bsc#1149496).
first Sep 16, 2019 -
Critical max 10.0SUSE-SU-2024:2947-1 310 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952). - CVE-2021-47103: net: sock: preserve kabi fo…
first Aug 16, 2024 -
Critical max 9.8SUSE-SU-2024:3648-1 4 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2020:1285-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
first May 15, 2020 -
Critical max 9.8SUSE-SU-2024:3633-1 1 CVE
Security update for keepalived
This update for keepalived fixes the following issues: - CVE-2024-41184: Fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
first Oct 15, 2024 -
Critical max 9.8openSUSE-SU-2024:0349-1 1 CVE
Security update for htmldoc
This update for htmldoc fixes the following issues: - CVE-2024-46478: Fixed a buffer overflow when handling tabs through the parse_pre function (boo#1232380).
first Nov 5, 2024 -
Critical max 9.8openSUSE-SU-2021:0415-1 1 CVE
Security update for froxlor
This update for froxlor fixes the following issues: - Upstream upgrade to version 0.10.23 (boo#846355) - Upstream upgrade to version 0.10.22 (boo#846355) - BuildRequire cron as this contains now the cron directories - Use %license for COPYING file instead of …
first Mar 16, 2021