5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:4266-1 29 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets …
first Dec 9, 2024 -
Critical max 9.1SUSE-SU-2024:2303-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid le…
first Jul 4, 2024 -
Critical max 10.0SUSE-SU-2023:1715-1 2 CVEs
Security update for flatpak
This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410). - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411). Update to version 1.12.8: - Updat…
first Mar 31, 2023 -
Critical max 9.3openSUSE-SU-2024:13398-1 5 CVEs
squid-6.4-1.1 on GA media
These are all security issues fixed in the squid-6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11968-1 1 CVE
openvpn-2.5.6-1.1 on GA media
These are all security issues fixed in the openvpn-2.5.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2025:1143-1 1 CVE
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass (bsc#1234563). Other fixes: - Updated to version 20250327.01 (bsc#1239763,…
first Apr 4, 2025 -
Critical max 9.8
Security update for salt
This update for salt contains the following fixes: - Fix for TypeError in Tornado importer (bsc#1174165) - Require python3-distro only for TW (bsc#1173072) - Update to Salt version 3000: See release notes: https://docs.saltstack.com/en/latest/topics/releases/…
first Jul 26, 2020 -
Critical max 9.1openSUSE-SU-2024:14515-1 2 CVEs
govulncheck-vulndb-0.0.20241120T172248-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241120T172248-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 21, 2024 -
Critical max 9.1SUSE-SU-2023:0084-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string (bsc#1206958).
first Jan 12, 2023 -
Critical max 9.8SUSE-SU-2021:4150-1 33 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to version 91.4 MFSA 2021-54 (bsc#1193485) - CVE-2021-43536: URL leakage when navigating while executing asynchronous function - CVE-2021-43537: Heap buffer overflow when using structured…
first Dec 22, 2021 -
Critical max 9.8openSUSE-SU-2020:0719-1 1 CVE
Security update for dom4j
This update for dom4j fixes the following issues: - CVE-2020-10683: Fixed an XML External Entity vulnerability in default SAX parser (bsc#1169760). This update was imported from the SUSE:SLE-15:Update update project.
first May 26, 2020 -
Critical max 9.8openSUSE-SU-2017:2978-1 5 CVEs
Security update for ansible
This update for ansible to version 2.4.1.0 fixes the following vulnerabilities: - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment (bsc#1038785) - CVE-2016-9587: host to controller command execution vulnerability (bsc#10190…
first Nov 10, 2017 -
Critical max 9.8
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
first Mar 19, 2020 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 20, 2020 -
Critical max 9.8openSUSE-SU-2019:1527-1 2 CVEs
Security update for rmt-server
This update for rmt-server to version 2.1.4 fixes the following issues: - Fix duplicate nginx location in rmt-server-pubcloud (bsc#1135222) - Mirror additional repos that were enabled during mirroring (bsc#1132690) - Make service IDs consistent across differe…
first Jun 7, 2019 -
Critical max 9.8SUSE-SU-2024:1935-1 2 CVEs
Security update for go1.22
This update for go1.22 fixes the following issues: go1.21.11 release (bsc#1212475). - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973). - CVE-2024-24790: Fixed unexpected behavior from Is methods for IPv4-mapp…
first Jun 7, 2024 -
Critical max 9.8openSUSE-SU-2024:12311-1 1 CVE
log4net-1.2.10-78.1 on GA media
These are all security issues fixed in the log4net-1.2.10-78.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2024:2342-1 4 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2022:0212-1 3 CVEs
Security update for log4j
This update for log4j fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#11948…
first Jan 27, 2022 -
Critical max 9.1SUSE-SU-2024:1807-2 5 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-32002: Fixed recursive clones on case-insensitive filesystems that support symbolic links are susceptible to case confusion (bsc#1224168). - CVE-2024-32004: Fixed arbitrary code execution during local…
first May 28, 2024 -
Critical max 9.1SUSE-SU-2022:2101-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_str…
first Jun 16, 2022 -
Critical max 9.2SUSE-SU-2025:0689-1 2 CVEs
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when as…
first Feb 24, 2025 -
Critical max 9.4SUSE-RU-2023:2592-1 2 CVEs
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.6 * Salt has been upgraded to 3006.0 * SUSE Linux Enterprise Server 15 SP5 Family support has been added * SUSE Linux Enterprise Server Micro 5.4 support has been …
first Jun 21, 2023 -
Critical max 9.8SUSE-SU-2025:02398-1 9 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_167 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has be…
first Jul 21, 2025 -
Critical max 9.8SUSE-SU-2025:01939-1 1 CVE
Security update for libcryptopp
This update for libcryptopp fixes the following issues: - CVE-2024-28285: Fixed potential leak of secret key of ElGamal encryption via fault injection (bsc#bsc#1224280).
first Jun 13, 2025 -
Critical max 9.8SUSE-SU-2019:2050-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-20852: Fixed an information leak where cookies could …
first Aug 6, 2019 -
Critical max 9.8SUSE-SU-2025:01816-1 1 CVE
Security update for libcryptopp
This update for libcryptopp fixes the following issues: - CVE-2024-28285: Fixed potential leak of secret key of ElGamal encryption via fault injection (bsc#1224280)
first Jun 4, 2025 -
Critical max 9.8
ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media
These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3649-1 16 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.3SUSE-SU-2024:3221-1 3 CVEs
Security update for containerd
This update for containerd fixes the following issues: - Update to containerd v1.7.21 - CVE-2023-47108: Fixed DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics. (bsc#1217070) - CVE-2023-45142: Fixed DoS vulne…
first Sep 12, 2024 -
Critical max 9.8SUSE-SU-2017:2676-1 1 CVE
Security update for Salt
This update for salt fixes one security issue and bugs: The following security issue has been fixed: - CVE-2017-12791: Directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via …
first Oct 9, 2017 -
Critical max 9.8SUSE-SU-2024:4090-1 19 CVEs
Security update for frr
This update for frr fixes the following issues: Update to frr 8.5.6 (jsc#PED-PED-11092) including fixes for: - CVE-2024-44070,CVE-2024-34088,CVE-2024-31951,CVE-2024-31950, CVE-2024-31948,CVE-2024-27913,CVE-2023-47235,CVE-2023-47234, CVE-2023-46753,CVE-2023-46…
first Nov 28, 2024 -
Critical max 9.8SUSE-SU-2020:1273-1 6 CVEs
Security update for grafana
This update for grafana to version 4.6.5 fixes the following issues: Security issues fixed: - CVE-2019-15043: Added authentication to a few rest endpoints (jsc#SOC-10357, bsc#1148383). - CVE-2018-19039: Fixed File Exfiltration vulnerability (jsc#SOC-9976 bsc#…
first May 13, 2020 -
Critical max 9.8SUSE-SU-2024:1749-1 8 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by uns…
first May 22, 2024 -
Critical max 9.8
apache2-2.4.51-1.1 on GA media
These are all security issues fixed in the apache2-2.4.51-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:1694-1 3 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2021-44906: Fixed prototype pollution in npm dependency (bsc#1198247). - CVE-2021-44907: Fixed insuficient sanitation in npm dependency (bsc#1197283). - CVE-2022-0235: Fixed passing of cookie data and …
first May 17, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112). - CVE-2024-53104: media: uvcvideo: Skip parsing fr…
first Feb 18, 2025 -
Critical max 9.8SUSE-SU-2024:0921-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - Fixed segfaults in gs_heap_free_object() — ref:_00D1igLOd._500Tr4BRgx:ref (bsc#1219357). Previously fixed security issue: - CVE-2020-36773: Fixed out-of-bounds write and use-after-free in devices/vecto…
first Mar 18, 2024 -
Critical max 9.8SUSE-SU-2025:01918-1 157 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (bsc#1237981). - CVE-2022-49139: Bluetooth: fix null ptr deref o…
first Jun 12, 2025 -
Critical max 10.0
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT (bsc#1239302)
first Mar 19, 2025