5,613 results · Clear filters · Feed
-
Critical max 9.3SUSE-SU-2020:1295-1 2 CVEs
Security update for git
This update for git to 2.26.2 fixes the following issues: Security issue fixed: - CVE-2020-11008: Specially crafted URLs may have tricked the credentials helper to providing credential information that is not appropriate for the protocol in use and host being…
first May 18, 2020 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework
first Mar 9, 2022 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Oct 12, 2021 -
Critical max 9.8SUSE-SU-2022:1729-1 17 CVEs
Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud
This update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud fixes the followi…
first May 18, 2022 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: netfilter: nf…
first Jan 17, 2025 -
Critical max 9.8SUSE-SU-2025:4094-1 4 CVEs
Security update for lasso
This update for lasso fixes the following issues: - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094) - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092) - CVE-2025-46705: Fixed denial of service in Entr'ouver…
first Nov 13, 2025 -
Critical max 9.1SUSE-SU-2022:2353-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-24882: Fixed incorrect check parameters in NTLM (bsc#1198919). - CVE-2022-24883: Fixed authentication against invalid SAM files (bsc#1198921).
first Jul 11, 2022 -
Critical max 9.1SUSE-SU-2025:02396-1 6 CVEs
Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…
first Jul 21, 2025 -
Critical max 9.0
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703) - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702) - CVE-2021-39275: Fixed an out-of-bound…
first Oct 26, 2021 -
Critical max 9.1SUSE-SU-2025:1436-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.10.0 ESR MFSA 2025-29 (bsc#1241621): * CVE-2025-2817: Potential privilege escalation in Firefox Updater * CVE-2025-4082: WebGL shader attribute memory corruption…
first May 2, 2025 -
Critical max 9.8
Security update for SUSE Manager Client Tools
This update fixes the following issues: cobbler: - Fix parsing cobbler dictionary options with values containing '=', e.g. kernel params containing '=' (bsc#1176978) mgr-daemon: - Update translation strings salt: - Properly validate eauth credentials and toke…
first Nov 6, 2020 -
Critical max 9.3openSUSE-SU-2024:10786-1 21 CVEs
git-2.33.0-1.3 on GA media
These are all security issues fixed in the git-2.33.0-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1610-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-32039: Fixed an out-of-bounds write with variables of type uint32 (bsc#1223293) - CVE-2024-32040: Fixed a integer underflow when using the 'NSC' codec (bsc#1223294) - CVE-2024-32041: Fixed an out-…
first May 10, 2024 -
Critical max 9.6SUSE-SU-2022:0559-1 9 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.6.1 / MFSA 2022-07 (bsc#1196072) * CVE-2022-0566 (bmo#1753094) Crafted email could trigger an out-of-bounds write - Mozilla Thunderbird 91.6 / MFSA 2022-06 (bsc#1195682) *…
first Feb 23, 2022 -
Critical max 9.8openSUSE-SU-2024:14176-1 2 CVEs
ruby3.3-rubygem-rubyzip-2.3.2-1.15 on GA media
These are all security issues fixed in the ruby3.3-rubygem-rubyzip-2.3.2-1.15 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.1SUSE-SU-2022:2099-1 7 CVEs
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338) - CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340) - CVE-2022-28615: Fixed read beyond bounds in ap_str…
first Jun 16, 2022 -
Critical max 9.9SUSE-SU-2024:1340-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2024-2044: Fixed unsafe deserialization and Remote Code Execution by an authenticated user (bsc#1221172)
first Apr 18, 2024 -
Critical max 10.0SUSE-SU-2024:0769-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2024-1597: Fixed SQL Injection via line comment generation (bsc#1220644).
first Mar 5, 2024 -
Critical max 10.0SUSE-SU-2025:0564-1 54 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937). - CVE-2024-46858: mptcp:…
first Feb 17, 2025 -
Critical max 9.8SUSE-SU-2018:2629-1 2 CVEs
Security update for curl
This update for curl fixes the following security issues: - CVE-2018-1000120: Prevent buffer overflow in the FTP URL handling that allowed an attacker to cause a denial of service (bsc#1084521). - CVE-2018-14618: Prevent integer overflow in the NTLM authentic…
first Sep 5, 2018 -
Critical max 9.3SUSE-SU-2023:4380-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-46846: Request/Response smuggling in HTTP/1.1 and ICAP (bsc#1216500). - CVE-2023-46847: Denial of Service in HTTP Digest Authentication (bsc#1216495). - CVE-2023-46724: Fix validation of certificate…
first Nov 6, 2023 -
Critical max 9.1openSUSE-SU-2024:10998-1 4 CVEs
libssh-config-0.9.6-1.2 on GA media
These are all security issues fixed in the libssh-config-0.9.6-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:0531-1 5 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first Feb 21, 2022 -
Critical max 9.8SUSE-SU-2025:0203-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-53095: smb: client: Fix use-after-free of network namespace …
first Jan 21, 2025 -
Critical max 9.8SUSE-SU-2024:3690-1 4 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_133 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2023:3898-1 5 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575): Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683). - CVE-2023-5169: Out-of-bounds…
first Sep 29, 2023 -
Critical max 9.1openSUSE-SU-2024:14585-1 1 CVE
cloudflared-2024.12.1-1.1 on GA media
These are all security issues fixed in the cloudflared-2024.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 16, 2024 -
Critical max 9.8SUSE-SU-2024:1320-1 70 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466). - CVE-2021-46926: Fixed bug when detecting cont…
first Apr 16, 2024 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: Updated to version 7.5.12: - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688). - CVE-2021-39226: Fixed Snapshot authentication bypass (bsc#1191454).
first Sep 27, 2022 -
Critical max 9.8openSUSE-SU-2021:0058-1 6 CVEs
Security update for cobbler
This update for cobbler fixes the following issues: - Add cobbler-tests subpackage for unit testing for openSUSE/SLE - Adds LoadModule definitions for openSUSE/SLE - Switch to new refactored auth module. - use systemctl to restart cobblerd on logfile rotation…
first Jan 14, 2021 -
Critical max 9.1SUSE-SU-2023:0374-1 9 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302). - CVE-2022-23479: Fixed a…
first Feb 10, 2023 -
Critical max 9.8SUSE-SU-2024:1676-1 15 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to version 115.11.0 ESR (bsc#1224056): - CVE-2024-4367: Arbitrary JavaScript execution in PDF.js - CVE-2024-4767: IndexedDB files retained in private browsing mode - CVE-2024-4768: Potential pe…
first May 17, 2024 -
Critical max 9.8openSUSE-SU-2024:13161-1 2 CVEs
ruby3.2-rubygem-kramdown-2.4.0-1.8 on GA media
These are all security issues fixed in the ruby3.2-rubygem-kramdown-2.4.0-1.8 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:4125-1 20 CVEs
Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_52 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024 -
Critical max 9.8SUSE-SU-2024:4140-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47589: igbvf: fix double free in `igbvf_probe` (bsc#1226557). - CVE-2022-48956: ipv6: avoid use-after-free in ip6_frag…
first Dec 2, 2024 -
Critical max 9.8SUSE-SU-2018:1741-1 1 CVE
Security update for cobbler
This update for cobbler fixes the following issues: - CVE-2017-1000469: Escape shell parameters provided by the user for the reposync action. (bsc#1074594) - Fix for calling koan with virt_type kvm. (bsc#1090205)
first Jun 19, 2018 -
Critical max 9.8openSUSE-SU-2024:14419-1 1 CVE
libeverest-3.6.2-1.1 on GA media
These are all security issues fixed in the libeverest-3.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2024 -
Critical max 10.0SUSE-SU-2024:4205-1 1 CVE
Security update for docker-stable
This update for docker-stable fixes the following issues: - Remove DOCKER_NETWORK_OPTS from docker.service. This was removed from sysconfig a long time ago, and apparently this causes issues with systemd in some cases. - Update --add-runtime to point to corre…
first Dec 5, 2024 -
Critical max 9.8
Security update for Salt
This update fixes the following issues: salt: - Fix disk.blkid to avoid unexpected keyword argument '__pub_user' (bsc#1177867) - Ensure virt.update stop_on_reboot is updated with its default value - Do not break package building for systemd OSes - Drop wrong …
first Nov 6, 2020 -
Critical max 9.8
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).
first Mar 27, 2020