5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2019:2119-1 4 CVEs
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker: - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409). - CVE-2019-13509…
first Aug 13, 2019 -
Critical max 9.8openSUSE-SU-2025:14731-1 11 CVEs
MozillaThunderbird-128.7.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 5, 2025 -
Critical max 9.1openSUSE-SU-2024:12602-1 10 CVEs
libpainter0-0.9.20-4.1 on GA media
These are all security issues fixed in the libpainter0-0.9.20-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issue: CVE-2021-44228: The previously published fix by upstream turned out to be incomplete. Therefore, upstream has recommended disabling JNDI support in log4j by default to be completely sure that this vulnerability…
first Dec 15, 2021 -
Critical max 9.4SUSE-SU-2024:3320-1 4 CVEs
Security update for the Linux Kernel RT (Live Patch 15 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_55 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2024-27398: Fixed use-after-free bugs caused by sc…
first Sep 18, 2024 -
Critical max 9.4SUSE-SU-2024:2755-1 13 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 5, 2024 -
Critical max 9.9
govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250312T181707-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 13, 2025 -
Critical max 9.8openSUSE-SU-2024:12341-1 2 CVEs
python38-3.8.14-1.1 on GA media
These are all security issues fixed in the python38-3.8.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12853-1 1 CVE
ghostscript-9.56.1-2.1 on GA media
These are all security issues fixed in the ghostscript-9.56.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2017:1813-1 4 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: Security issues fixed: * CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID (bsc#1044337) * CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent (bsc#1024989) * CVE-2017-7375: Prevented an…
first Jul 7, 2017 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958. - CVE-2021-47432: lib/generic-radix-tree.c: Do…
first Jul 10, 2024 -
Critical max 9.8SUSE-SU-2024:0858-1 39 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free (bsc#1220409). - CVE-2021-46923: Fixed reference leakage in fs/mount_setat…
first Mar 13, 2024 -
Critical max 9.8openSUSE-SU-2024:14247-1 4 CVEs
python310-Django-5.0.8-1.1 on GA media
These are all security issues fixed in the python310-Django-5.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 8, 2024 -
Critical max 9.8openSUSE-SU-2024:12094-1 2 CVEs
python310-Django-4.0.4-1.1 on GA media
These are all security issues fixed in the python310-Django-4.0.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap b…
first Oct 25, 2020 -
Critical max 9.1SUSE-SU-2022:3516-1 2 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Updated to version 14.20.1: - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). - CVE-2022-35256: Fixed incorrect Parsing of Header Fields (bsc#1203832).
first Oct 4, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: netfilter:…
first Jan 17, 2025 -
Critical max 9.8
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…
first Jan 27, 2025 -
Critical max 9.1SUSE-SU-2025:03159-1 10 CVEs
Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: Update to version 1.23.12 cut from the go1.23-fips-release branch at the revision tagged go1.23.12-1-openssl-fips. ( jsc#SLE-18320) * Rebase to 1.23.12 * Fix HKDF-Extract The latest OpenSSL in c9s/c10…
first Sep 11, 2025 -
Critical max 9.4SUSE-SU-2024:2344-1 8 CVEs
Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_188 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.3openSUSE-SU-2020:1014-1 3 CVEs
Security update for google-compute-engine
This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-20…
first Jul 19, 2020 -
Critical max 9.8openSUSE-SU-2024:12152-1 2 CVEs
python310-3.10.5-2.1 on GA media
These are all security issues fixed in the python310-3.10.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1SUSE-SU-2023:0340-1 7 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23479: Fixed a buffer overflow in xrdp_mm_chan_data_in() (bsc#1206303). - CVE-2022-23480: Fixed a buffer overflow i…
first Feb 10, 2023 -
Critical max 9.8openSUSE-SU-2024:13866-1 1 CVE
perl-CryptX-0.80.0-3.1 on GA media
These are all security issues fixed in the perl-CryptX-0.80.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12908-1 3 CVEs
go1.20-1.20.4-1.1 on GA media
These are all security issues fixed in the go1.20-1.20.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0openSUSE-SU-2025:14754-1 6 CVEs
govulncheck-vulndb-0.0.20250207T224745-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250207T224745-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 9, 2025 -
Critical max 9.8SUSE-SU-2020:3790-1 14 CVEs
Security update for clamav
This update for clamav fixes the following issues: clamav was updated to the new major release 0.103.0. (jsc#ECO-3010,bsc#1118459) Note that libclamav was changed incompatible, if you have a 3rd party application that uses libclamav, it needs to be rebuilt. U…
first Dec 14, 2020 -
Critical max 9.8SUSE-SU-2025:03482-1 4 CVEs
Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2024-50154: tcp/dccp: Do not use timer_pending…
first Oct 7, 2025 -
Critical max 9.8openSUSE-SU-2017:2976-1 5 CVEs
Security update for ansible
This update for ansible to version 2.4.1.0 fixes the following vulnerabilities: - CVE-2017-7481: Security issue with lookup return not tainting the jinja2 environment (bsc#1038785) - CVE-2016-9587: host to controller command execution vulnerability (bsc#10190…
first Nov 10, 2017 -
Critical max 9.1openSUSE-SU-2024:14056-1 1 CVE
wget-1.24.5-2.1 on GA media
These are all security issues fixed in the wget-1.24.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 18, 2024 -
Critical max 9.1SUSE-SU-2024:2991-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2024-5535: Fixed a buffer overread in function SSL_select_next_proto() with an empty supported client protocols buffer (bsc#1227138)
first Aug 20, 2024 -
Critical max 9.8SUSE-SU-2024:3658-1 1 CVE
Security update for keepalived
This update for keepalived fixes the following issues: - CVE-2024-41184: fixed integer overflow in vrrp_ipsets_handler (bsc#1228123)
first Oct 16, 2024 -
Critical max 9.4SUSE-SU-2024:2357-1 9 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 10.0
Security update for erlang
This update for erlang fixes the following issues: - CVE-2025-32433: Fixed unauthenticated remote code execution in Erlang/OTP SSH (bsc#1241300)
first Apr 22, 2025 -
Critical max 9.8SUSE-SU-2022:2309-1 2 CVEs
Security update for openssl
This update for openssl fixes the following issues: - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550) - CVE-2022-2097: Fixed partial missing encryption in AES OCB mode. (bsc#1201099)
first Jul 6, 2022 -
Critical max 9.8SUSE-SU-2024:1706-1 6 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…
first May 20, 2024 -
Critical max 10.0
Security update for MozillaFirefox
This update for MozillaFirefox to version ESR 60.8 fixes the following issues: Security issues fixed: - CVE-2019-9811: Sandbox escape via installation of malicious language pack (bsc#1140868). - CVE-2019-11711: Script injection within domain through inner win…
first Jul 17, 2019 -
Critical max 9.3SUSE-SU-2020:2911-1 15 CVEs
Security update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-agent, openstack-murano, openstack-neutron, openstack-neutron-vpnaas, openstack-nova, openstack-sahara, python-Pillow, rubygem-crowbar-client
This update for ansible, crowbar-core, crowbar-openstack, grafana, grafana-natel-discrete-panel, openstack-aodh, openstack-barbican, openstack-cinder, openstack-gnocchi, openstack-heat, openstack-ironic, openstack-magnum, openstack-manila, openstack-monasca-a…
first Oct 13, 2020 -
Critical max 9.4SUSE-SU-2024:2341-1 4 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…
first Jul 9, 2024 -
Critical max 9.8
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024