5,613 results · Clear filters · Feed
-
Critical max 9.8openSUSE-SU-2019:1872-1 7 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Security issues fixed: - CVE-2019-11358: Fixed prototype pollution. - CVE-2019-12308: Fixed XSS in AdminURLFieldWidget (bsc#1136468) - CVE-2019-12781: Fixed incorrect HTTP detection with reverse-proxy …
first Aug 14, 2019 -
Critical max 9.8SUSE-SU-2023:2525-1 4 CVEs
Security update for go1.19
This update for go1.19 fixes the following issues: Update to go1.19.10 (bsc#1200441): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-29…
first Jun 16, 2023 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…
first Nov 25, 2020 -
Critical max 9.8SUSE-SU-2024:3820-1 20 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debu…
first Oct 30, 2024 -
Critical max 9.1SUSE-SU-2021:0675-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066).
first Mar 2, 2021 -
Critical max 9.4SUSE-SU-2024:2343-1 10 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2024:3189-1 104 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-43907: drm/amdgpu/pm: fix the null pointer dereference in apply_state_adjust_rules (bsc#1229787). - CVE-2024-43905:…
first Sep 10, 2024 -
Critical max 9.8SUSE-SU-2025:4128-1 189 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph:…
first Nov 18, 2025 -
Critical max 9.8SUSE-SU-2024:3777-1 6 CVEs
Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2024-35863: Fixed potential UAF in is_valid_opl…
first Oct 29, 2024 -
Critical max 9.8SUSE-SU-2024:3399-1 18 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF…
first Sep 23, 2024 -
Critical max 9.1SUSE-SU-2019:3068-1 2 CVEs
Security update for ardana-db, ardana-keystone, ardana-neutron, ardana-nova, crowbar-core, crowbar-openstack, crowbar-ui, openstack-barbican, openstack-heat-templates, openstack-keystone, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-sahara, python-psutil, release-notes-suse-openstack-cloud
This update for ardana-db, ardana-keystone, ardana-neutron, ardana-nova, crowbar-core, crowbar-openstack, crowbar-ui, openstack-barbican, openstack-heat-templates, openstack-keystone, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstac…
first Nov 26, 2019 -
Critical max 9.8SUSE-SU-2018:0778-1 9 CVEs
Security update for memcached
This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS (bsc#817781). - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458). - CVE-2013-7239: SASL authentication allows wrong cr…
first Mar 22, 2018 -
Critical max 9.3openSUSE-SU-2021:1253-1 4 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo#1190291 - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critical Function - CVE-202…
first Sep 14, 2021 -
Critical max 9.8openSUSE-SU-2024:10054-1 124 CVEs
phpMyAdmin-4.6.5.2-1.1 on GA media
These are all security issues fixed in the phpMyAdmin-4.6.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:3388-1 8 CVEs
Security update for tomcat
This update for tomcat to version 8.0.53 fixes the following security issues: - CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL c…
first Oct 24, 2018 -
Critical max 9.1SUSE-SU-2024:2891-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138) Other fixes: - Build with no-afalgeng (bsc#1226463)
first Aug 13, 2024 -
Critical max 10.0openSUSE-SU-2024:13727-1 16 CVEs
ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-rack-2.2-2.2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:0115-1 14 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - CVE-2021-4140: Fixed iframe sandbox bypass with XSLT (bsc#1194547). - CVE-2022-22737: Fixed race condition when playing audio files (bsc#1194547). - CVE-2022-22738: Fixed heap-buffer-overflow in ble…
first Jan 18, 2022 -
Critical max 9.3SUSE-SU-2020:3037-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Adjust max memlock on…
first Oct 26, 2020 -
Critical max 9.8SUSE-SU-2025:0302-1 1 CVE
Security update for google-osconfig-agent
This update for google-osconfig-agent fixes the following issues: - Update to version 20250115.01 (bsc#1236406, bsc#1236407) - CVE-2024-24790: Bump the golang compiler version to 1.22.4 (bsc#1225974)
first Jan 30, 2025 -
Critical max 9.8openSUSE-SU-2024:14197-1 16 CVEs
MozillaFirefox-128.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-128.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 17, 2024 -
Critical max 9.8SUSE-SU-2025:03520-1 2 CVEs
Security update for cJSON
This update for cJSON fixes the following issues: - CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers (bsc#1241502) - CVE-2025-57052: Fix the incorrect check in decode_array_index_from_pointer (bsc#1249112)
first Oct 10, 2025 -
Critical max 9.8SUSE-SU-2025:3797-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2025-58147, CVE-2025-58148: Fixed incorrect input sanitisation in Viridian hypercalls (bsc#1251271, XSA-475) - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed mutiple vulnerabilities in the Viridian …
first Oct 27, 2025 -
Critical max 9.6openSUSE-SU-2022:10201-1 6 CVEs
Security update for chromium
This update for chromium fixes the following issues: - Chromium 107.0.5304.110 (boo#1205221) * CVE-2022-3885: Use after free in V8 * CVE-2022-3886: Use after free in Speech Recognition * CVE-2022-3887: Use after free in Web Workers * CVE-2022-3888: Use after …
first Nov 14, 2022 -
Critical max 9.8SUSE-SU-2024:2399-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.13.0 ESR (MFSA 2024-30, bsc#1226316): - CVE-2024-6600: Memory corruption in WebGL API - CVE-2024-6601: Race condition in permission assignment - CVE-2024…
first Jul 11, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: - Update to version 72.0.3815.400 - DNA-88996 [Mac] Vertical spacing of sidebar items incorrect - DNA-89698 [Mac] text on bookmark bar not visible when application is not focused - DNA-89746 Add product-name s…
first Dec 6, 2020 -
Critical max 9.8openSUSE-SU-2024:14308-1 1 CVE
htmldoc-1.9.18-2.1 on GA media
These are all security issues fixed in the htmldoc-1.9.18-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 4, 2024 -
Critical max 9.2openSUSE-SU-2025:14658-1 1 CVE
amazon-ssm-agent-3.3.1611.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.1611.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 17, 2025 -
Critical max 9.8openSUSE-SU-2021:2830-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520] - CVE-2021-3712: a bug in the code for printing certificate details could le…
first Aug 24, 2021 -
Critical max 9.4SUSE-SU-2024:2549-1 5 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_179 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock…
first Jul 18, 2024 -
Critical max 9.8SUSE-SU-2024:0591-1 1 CVE
Security update for python-uamqp
This update for python-uamqp fixes the following issues: - CVE-2024-25110: Fixed a use-after-free in open_get_offered_capabilities() (bsc#1219867).
first Feb 22, 2024 -
Critical max 9.8SUSE-SU-2019:14122-1 2 CVEs
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c with many selectors (bsc#1139083). - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
first Jul 15, 2019 -
Critical max 9.8openSUSE-SU-2024:12587-1 4 CVEs
ctdb-4.17.4+git.300.305b22bfce-1.1 on GA media
These are all security issues fixed in the ctdb-4.17.4+git.300.305b22bfce-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.6.5: - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server set…
first Nov 21, 2020 -
Critical max 9.4SUSE-SU-2024:2474-1 2 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 12, 2024 -
Critical max 9.8SUSE-SU-2025:0137-1 20 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…
first Jan 16, 2025 -
Critical max 9.8
Security update for tomcat
This update for Tomcat provides the following fixes: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security…
first Dec 10, 2016 -
Critical max 9.8SUSE-RU-2018:2639-1 3 CVEs
Recommended update for SUSE Manager 3.1 Release Notes
This update for the SUSE Manager 3.0 Release Notes provides the following additions: - SUSE Manager Server bugs fixed by latest updates + bsc#1057635, bsc#1083295, bsc#1087837, bsc#1089362, bsc#1089526, bsc#1089662, bsc#1093458, bsc#1096264, bsc#1096514, bsc#…
first Sep 6, 2018 -
Critical max 9.8openSUSE-SU-2024:14023-1 2 CVEs
go1.21-1.21.11-1.1 on GA media
These are all security issues fixed in the go1.21-1.21.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2016:1528-1 3 CVEs
Security update for openssh
openssh was updated to fix three security issues. These security issues were fixed: - CVE-2016-3115: Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH allowed remote authenticated users to bypass intended shell-command restrictions via c…
first Jun 8, 2016