5,613 results · Clear filters · Feed
-
Critical max 9.1SUSE-SU-2019:14018-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect …
first Apr 15, 2019 -
Critical max 9.8SUSE-SU-2021:2632-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2021-34552: Fixed a buffer overflow in Convert.c (bsc#1188574)
first Aug 6, 2021 -
Critical max 9.6
ungoogled-chromium-119.0.6045.199-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:03615-1 378 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2022-50233: Bluetooth: ei…
first Oct 16, 2025 -
Critical max 9.8openSUSE-SU-2024:13994-1 4 CVEs
freerdp2-devel-2.11.5-3.1 on GA media
These are all security issues fixed in the freerdp2-devel-2.11.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:3676-1 6 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_194 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.8openSUSE-SU-2024:11191-1 1 CVE
ppp-2.4.8-3.6 on GA media
These are all security issues fixed in the ppp-2.4.8-3.6 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2016:2652-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2016-4658: Use after free via namespace node in XPointer ranges (bsc#1005544).
first Oct 26, 2016 -
Critical max 9.1SUSE-SU-2024:2761-1 1 CVE
Security update for openssl-3-livepatches
This update for openssl-3-livepatches fixes the following issues: - CVE-2024-5535: Fixed SSL_select_next_proto buffer overread (bsc#1227147).
first Aug 6, 2024 -
Critical max 9.4SUSE-SU-2024:2758-1 10 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 5, 2024 -
Critical max 9.8openSUSE-SU-2024:14583-1 17 CVEs
MozillaFirefox-133.0.3-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-133.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 16, 2024 -
Critical max 9.8SUSE-SU-2024:1705-1 6 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…
first May 20, 2024 -
Critical max 9.1SUSE-SU-2024:2201-1 1 CVE
Security update for wget
This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)
first Jun 25, 2024 -
Critical max 9.8openSUSE-SU-2022:2947-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
first Aug 31, 2022 -
Critical max 9.8SUSE-SU-2024:3849-1 17 CVEs
Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_191 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…
first Oct 31, 2024 -
Critical max 9.8openSUSE-SU-2025:14764-1 6 CVEs
libmozjs-128-0-128.7.0-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 11, 2025 -
Critical max 9.8SUSE-SU-2025:02403-1 10 CVEs
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe exte…
first Jul 21, 2025 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…
first Jan 25, 2022 -
Critical max 9.8SUSE-SU-2024:3090-1 1 CVE
Security update for frr
This update for frr fixes the following issues: - CVE-2024-44070: Fixed missing stream length check before TLV value is taken in bgp_attr_encap (bsc#1229438)
first Sep 3, 2024 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issues: - CVE-2021-44228: Fix a remote code execution vulnerability that existed in the LDAP JNDI parser. [bsc#1193611, CVE-2021-44228]
first Dec 12, 2021 -
Critical max 9.8SUSE-SU-2024:3798-1 23 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 30, 2024 -
Critical max 10.0SUSE-RU-2025:0145-1 2 CVEs
Recommended update for bubblewrap, flatpak, wayland-protocols
This update for bubblewrap, flatpak updates flatpak to 1.16.0. flatpak changes: - Update to version 1.16.0: + Bug fixes: - Update libglnx to 2024-12-06: . Fix an assertion failure if creating a parent directory encounters a dangling symlink. . Fix a Meson war…
first Jan 16, 2025 -
Critical max 9.8SUSE-SU-2025:02095-1 8 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds acce…
first Jun 24, 2025 -
Critical max 9.8SUSE-SU-2024:4051-2 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-52533: Fixed a single byte buffer overflow (bsc#1233282).
first Dec 19, 2024 -
Critical max 9.3SUSE-SU-2020:3143-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155).
first Nov 3, 2020 -
Critical max 9.8openSUSE-SU-2024:12117-1 9 CVEs
MozillaThunderbird-91.10.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12721-1 3 CVEs
emacs-28.2-2.1 on GA media
These are all security issues fixed in the emacs-28.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
apache2-2.4.61-1.1 on GA media
These are all security issues fixed in the apache2-2.4.61-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2024 -
Critical max 9.8openSUSE-SU-2024:14117-1 1 CVE
emacs-29.4-2.1 on GA media
These are all security issues fixed in the emacs-29.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 9, 2024 -
Critical max 9.8SUSE-SU-2024:3655-1 5 CVEs
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2024-36899: gpiolib: cdev: Fix use after free…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2023:4091-1 1 CVE
Security update for python-gevent
This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling (bsc#1215469).
first Oct 17, 2023 -
Critical max 9.4SUSE-SU-2025:02050-1 5 CVEs
Security update for python39
This update for python39 fixes the following issues: python39 was updated from version 3.9.21 to version 3.9.23: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273) * CVE-2024-1271…
first Jun 20, 2025 -
Critical max 9.8SUSE-SU-2024:3685-1 12 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2021:0432-1 2 CVEs
Security update for python
This update for python fixes the following issues: - buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126, CVE-2021-3177). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their corre…
first Feb 11, 2021 -
Critical max 9.8SUSE-SU-2022:0713-1 5 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2022-25236: Fixed possible namespace-separator characters insertion into namespace URIs (bsc#1196025). - CVE-2022-25235: Fixed UTF-8 character validation in a certain context (bsc#1196026). - CVE-2022-25…
first Mar 4, 2022 -
Critical max 9.8SUSE-SU-2018:1971-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2018-7750: transport.py in the SSH server implementation of Paramiko did not properly check whether authentication is completed processing other requests. A customized SSH client could have ski…
first Jul 17, 2018 -
Critical max 9.8
Security update for SUSE Manager Server 4.1
This update fixes the following issues: bind-formula: - Temporarily disable dnssec-validation as hotfix for bsc#1177790 grafana-formula: - Use variable for product name - Add HA/SAP dashboards - Add support for system groups in Client Systems dashboard image-…
first Nov 6, 2020 -
Critical max 9.8SUSE-SU-2025:02850-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160). - CVE-2023-52927: netfilter:…
first Aug 18, 2025 -
Critical max 9.8SUSE-SU-2022:3314-1 4 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: drools: - CVE-2021-41411: XML External Entity injection in KieModuleModelImpl.java. (bsc#1200629) httpcomponents-asyncclient: - Provide maven metadata needed by other packages to build image-sync-formula: - Update to ve…
first Sep 19, 2022 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Dec 22, 2020