5,613 results · Clear filters · Feed
-
Critical max 9.2SUSE-SU-2025:0624-1 4 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated from version 10.4.13 to 10.4.15: - Security issues fixed: * CVE-2024-45339: Fixed vulnerability when creating log files (bsc#1236559) * CVE-2024-11741: Fixed the Grafana Alerting VictorOp…
first Feb 21, 2025 -
Critical max 9.1openSUSE-SU-2025:0030-1 1 CVE
Security update for dante
This update for dante fixes the following issues: - Update to version 1.4.4 * Fixed incorrect access control for some sockd.conf configurations involving socksmethod (boo#1234688, CVE-2024-54662).
first Jan 23, 2025 -
Critical max 9.1openSUSE-SU-2025:14963-1 1 CVE
go1.24-1.24.2-1.1 on GA media
These are all security issues fixed in the go1.24-1.24.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2025 -
Critical max 9.8SUSE-SU-2026:0176-1 8 CVEs
Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)
This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).…
first Jan 19, 2026 -
Critical max 9.3openSUSE-SU-2024:14603-1 8 CVEs
govulncheck-vulndb-0.0.20241218T202206-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241218T202206-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 19, 2024 -
Critical max 9.8SUSE-SU-2024:3209-1 292 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-36936: Touch soft lock…
first Sep 11, 2024 -
Critical max 9.9SUSE-SU-2019:0387-1 1 CVE
Security update for build
This update for build version 20190128 fixes the following issues: Security issue fixed: - CVE-2017-14804: Improve file name check extractbuild (bsc#1069904) Non-security issue fixed: - Add initial SLE 15 SP1 config (bsc#1122895)
first Feb 14, 2019 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.1: + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush sup…
first Jun 17, 2021 -
Critical max 9.8SUSE-SU-2022:1921-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.10.0 ESR (MFSA 2022-21)(bsc#1200027) - CVE-2022-31736: Cross-Origin resource's length leaked - CVE-2022-31737: Heap buffer overflow in WebGL - CVE-2022-31738: Brows…
first Jun 2, 2022 -
Critical max 9.8SUSE-SU-2023:2526-1 4 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: Update to go1.20.5 (bsc#1206346): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-294…
first Jun 16, 2023 -
Critical max 9.8openSUSE-SU-2024:13820-1 2 CVEs
python310-numpy-1.26.2-5.1 on GA media
These are all security issues fixed in the python310-numpy-1.26.2-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:02846-1 83 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631). - CVE-2021-46987: btrfs: fix deadloc…
first Aug 18, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). - CVE-2023-52778: mptcp: deal with large GS…
first Dec 13, 2024 -
Critical max 9.8openSUSE-SU-2024:12852-1 15 CVEs
MozillaThunderbird-102.10.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2025:03626-1 84 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110). - CVE-2022-50233: Bluetooth: eir: Fix u…
first Oct 17, 2025 -
Critical max 9.8openSUSE-SU-2023:0293-1 3 CVEs
Security update for exim
This update for exim fixes the following issues: * CVE-2023-42114: NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability (boo#1215784) * CVE-2023-42115: AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability (boo#1215785) * CVE-2023-421…
first Oct 5, 2023 -
Critical max 9.4SUSE-SU-2024:2335-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26828: Fixed underflow in parse…
first Jul 8, 2024 -
Critical max 9.8openSUSE-SU-2022:0330-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-3999: Fixed incorrect errno in getcwd (bsc#1194640) - CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768) - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_c…
first Feb 4, 2022 -
Critical max 9.8SUSE-SU-2025:01873-1 4 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-49855: nbd: fix race between timeout and…
first Jun 10, 2025 -
Critical max 10.0
firefox-esr-128.9.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 3, 2025 -
Critical max 10.0openSUSE-SU-2025:14958-1 4 CVEs
libmozjs-128-0-128.8.1-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
Critical max 9.6
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: 'compose_attachments' context added to M…
first Nov 26, 2020 -
Critical max 9.8
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2018:1835-1 13 CVEs
Security update for tiff
This update for tiff fixes the following security issues: - CVE-2017-5225: Prevent heap buffer overflow in the tools/tiffcp that could have caused DoS or code execution via a crafted BitsPerSample value (bsc#1019611) - CVE-2018-7456: Prevent a NULL Pointer de…
first Jun 28, 2018 -
Critical max 9.8openSUSE-SU-2021:0270-1 2 CVEs
Security update for python
This update for python fixes the following issues: - buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126, CVE-2021-3177). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in their corre…
first Feb 10, 2021 -
Critical max 9.8openSUSE-SU-2021:1645-1 1 CVE
Security update for getdata
getdata was updated to 0.11.0, fixing bugs and a security issue: - CVE-2021-20204: Fixed a use after free in _GD_Supports() in encoding.c (boo#1186251) for all relevant changes see: https://github.com/ketiltrout/getdata/releases/tag/v0.11.0
first Dec 30, 2021 -
Critical max 9.8openSUSE-SU-2024:0023-1 1 CVE
Security update for libuev
This update for libuev fixes the following issues: - Update to 2.4.1: * Update README with list of moden Linux APIs used * Fix #27: possible buffer overrun in uev_run() boo#1218749 CVE-2022-48620
first Jan 18, 2024 -
Critical max 9.8SUSE-SU-2024:1645-1 41 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976). - CVE-2021-47113: Abort btrfs rename_exchange i…
first May 14, 2024 -
Critical max 9.8SUSE-SU-2026:0263-1 392 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785). - CVE-2022-50700: wifi: ath10k: Delay the unmappi…
first Jan 22, 2026 -
Critical max 9.4SUSE-SU-2024:3368-1 15 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF…
first Sep 23, 2024 -
Critical max 9.8SUSE-SU-2024:0975-1 52 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26600: Fixed NULL pointer dereference for SRP (bsc#1220340). - CVE-2021-47078: Fixed a bug by clearing all QP fi…
first Mar 22, 2024 -
Critical max 9.8SUSE-SU-2024:0920-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - Fixed segfaults in gs_heap_free_object() — ref:_00D1igLOd._500Tr4BRgx:ref (bsc#1219357). Previously fixed security issue: - CVE-2020-36773: Fixed out-of-bounds write and use-after-free in devices/vecto…
first Mar 18, 2024 -
Critical max 9.8SUSE-SU-2024:4105-1 1 CVE
Security update for tomcat10
This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.33 * Fixed CVEs: + CVE-2024-52316: If the Jakarta Authentication fails with an exception, set a 500 status (bsc#1233434) * Catalina + Add: Add support for the new Servlet API method …
first Nov 28, 2024 -
Critical max 9.8openSUSE-SU-2024:12184-1 19 CVEs
MozillaFirefox-102.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-102.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:0470-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (b…
first Feb 21, 2023 -
Critical max 10.0SUSE-SU-2023:4348-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE…
first Nov 2, 2023 -
Critical max 9.1openSUSE-SU-2024:14595-1 1 CVE
traefik2-2.11.16-1.1 on GA media
These are all security issues fixed in the traefik2-2.11.16-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 17, 2024 -
Critical max 9.8SUSE-SU-2018:0873-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2018-7750: Fixed transport.py in the SSH server implementation of Paramiko that does not properly check whether authentication is completed before processing other requests (bsc#1085276).
first Apr 4, 2018 -
Critical max 9.8SUSE-SU-2022:2847-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2022-37434: Fixed heap-based buffer over-read or buffer overflow via large gzip header extra field (bsc#1202175).
first Aug 18, 2022 -
Critical max 10.0openSUSE-SU-2024:14235-1 1 CVE
nova-3.10.0-1.1 on GA media
These are all security issues fixed in the nova-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2024