12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2024:1667-1 3 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). - CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537). - CVE-2022-48560: Fixed use-after-free in P…
first May 16, 2024 -
High max 8.8SUSE-SU-2019:0900-1 2 CVEs
Security update for dovecot22
This update for dovecot22 fixes the following issues: Security issues fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack overflow allowing local root escalation (bsc#1130116). - CVE-2019-3814: Fixed a vulnerability related to …
first Apr 8, 2019 -
High max 7.8SUSE-SU-2025:4152-1 5 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933) - …
first Nov 21, 2025 -
High max 7.5openSUSE-SU-2024:11140-1 2 CVEs
pam-1.5.2-1.1 on GA media
These are all security issues fixed in the pam-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8SUSE-SU-2025:3825-1 1 CVE
Recommended update 5.0.5.1 for Multi-Linux Manager Server
This update fixes the following issues: server-attestation-image: - CVE-2025-53192: Do not use apache-commons-ognl but its successor ognl (bsc#1248252) - Image rebuilt to the newest version and updated build dependencies server-hub-xmlrpc-api-image, server-im…
first Oct 28, 2025 -
High max 7.5SUSE-SU-2022:3325-1 1 CVE
Security update for go1.18
This update for go1.18 fixes the following issues: Update to go version 1.18.6 (bsc#1193742): - CVE-2022-27664: Fixed DoS in net/http caused by mishandled server errors after sending GOAWAY (bsc#1203185).
first Sep 21, 2022 -
High max 7.4openSUSE-SU-2019:2110-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks (bsc#1138461). This update was imported from the SUSE:SLE-15:Update update project. This u…
first Sep 10, 2019 -
High max 7.5SUSE-SU-2025:0590-1 2 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - CVE-2025-24970: incorrect validation of packets by SslHandler can lead to a native crash. (bsc#1237037) - CVE-2025-25193: unsafe reading of environment files can lead to an application crash.…
first Feb 19, 2025 -
High max 7.5
Security update for nginx
This update for nginx fixes the following issues: - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171) - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)
first Jan 29, 2025 -
High max 8.8openSUSE-SU-2024:0335-1 2 CVEs
Security update for chromium
This update for chromium fixes the following issues: - Chromium 129.0.6668.100 (boo#1231420) * CVE-2024-9602: Type Confusion in V8 * CVE-2024-9603: Type Confusion in V8
first Oct 14, 2024 -
High max 7.9
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…
first Mar 28, 2023 -
High max 7.8openSUSE-SU-2022:10179-1 1 CVE
Security update for jhead
This update for jhead fixes the following issues: - CVE-2022-41751: Fixed shell injection via filenames (boo#1204409)
first Oct 31, 2022 -
High max 7.5SUSE-SU-2024:3757-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
first Oct 25, 2024 -
High max 8.1
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…
first Apr 15, 2020 -
High max 7.5SUSE-SU-2023:0309-1 4 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GENERAL_NAME_cmp for x400Address (bsc#1207533). - CVE-2023-0215: Fixed use-after-free following BIO_new_NDEF() (bsc#1207536). - CVE-2022-4450:…
first Feb 7, 2023 -
High max 8.1SUSE-SU-2024:0608-1 8 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 115.8 (bsc#1220048): - CVE-2024-1546: Out-of-bounds memory read in networking channels - CVE-2024-1547: Alert dialog could have been spoofed on another site - CVE-2024-1548: Fu…
first Feb 23, 2024 -
High max 7.5SUSE-SU-2022:4010-1 1 CVE
Security update for apache2-mod_wsgi
This update for apache2-mod_wsgi fixes the following issues: - CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634)
first Nov 16, 2022 -
High max 7.5openSUSE-SU-2025:14656-1 2 CVEs
perl-Compress-Raw-Zlib-2.213-1.1 on GA media
These are all security issues fixed in the perl-Compress-Raw-Zlib-2.213-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 16, 2025 -
High max 7.8SUSE-SU-2025:03671-1 5 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2024-49974: NFSD: For…
first Oct 20, 2025 -
High max 8.6openSUSE-SU-2025:14689-1 1 CVE
podman-5.3.2-1.1 on GA media
These are all security issues fixed in the podman-5.3.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 23, 2025 -
High max 7.5openSUSE-SU-2024:14057-1 1 CVE
sngrep-1.8.1-2.1 on GA media
These are all security issues fixed in the sngrep-1.8.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 19, 2024 -
High max 7.5openSUSE-SU-2024:14067-1 6 CVEs
ruby3.3-rubygem-actionpack-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-actionpack-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
High max 7.8SUSE-SU-2023:4142-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak interna…
first Oct 20, 2023 -
High max 8.1SUSE-SU-2024:2496-1 3 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to 18.20.4: - CVE-2024-36138: Fixed CVE-2024-27980 fix bypass (bsc#1227560) - CVE-2024-22020: Fixed a bypass of network import restriction via data URL (bsc#1227554) Changes in 18.20.3: - This releas…
first Jul 16, 2024 -
High max 7.5openSUSE-SU-2021:2354-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362…
first Jul 15, 2021 -
High max 8.2SUSE-SU-2024:2120-1 6 CVEs
Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-afte…
first Jun 21, 2024 -
High max 7.5SUSE-SU-2025:1333-1 6 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file (bsc#1227031) - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error h…
first Apr 17, 2025 -
High max 7.8SUSE-SU-2023:1605-1 2 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_142 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-1078: Fixed a heap out-of-boun…
first Mar 28, 2023 -
High max 8.1SUSE-SU-2025:03534-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-9566: fixed an issue where kube play command could cause host files to get overwritten (bsc#1249154)
first Oct 10, 2025 -
High max 7.8SUSE-SU-2023:2741-1 5 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE-…
first Jun 30, 2023 -
High max 8.8SUSE-SU-2023:0835-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to version 102.9.0 ESR (bsc#1209173): - CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android - CVE-2023-25748: Fullscreen Notification could have been hi…
first Mar 21, 2023 -
High max 7.4SUSE-SU-2021:14792-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following security issue: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. …
first Aug 24, 2021 -
High max 7.5openSUSE-SU-2025:15817-1 2 CVEs
buildpacks-cli-0.39.1-1.1 on GA media
These are all security issues fixed in the buildpacks-cli-0.39.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2025 -
High max 7.5SUSE-SU-2024:3459-1 3 CVEs
Security update for kubernetes1.24
This update of kubernetes1.24 fixes the following issues: - rebuild the package with the current go 1.23 security release (bsc#1229122).
first Oct 2, 2024 -
High max 7.8SUSE-SU-2018:2070-1 1 CVE
Security update for ntfs-3g
This update for ntfs-3g fixes the following issues: - CVE-2017-0358: Missing sanitization of the environment during a call to modprobe allowed local users to escalate fo root privilege (bsc#1022500)
first Jul 26, 2018 -
High max 8.4SUSE-SU-2024:4143-1 1 CVE
Security update for python3-virtualenv
This update for python3-virtualenv fixes the following issues: Security issue fixed: - CVE-2024-53899: Fixed a command injection through activation scripts (bsc#1233706) Non-security issue fixed: - Relax version requirements that cannot be provided (bsc#12320…
first Dec 2, 2024 -
High max 7.5SUSE-SU-2022:3745-1 1 CVE
Security update for golang-github-prometheus-node_exporter
This update for golang-github-prometheus-node_exporter fixes the following issues: (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114, CVE-2022-21698)
first Oct 26, 2022 -
High max 7.5openSUSE-SU-2024:14156-1 3 CVEs
python310-pysaml2-7.4.2-1.2 on GA media
These are all security issues fixed in the python310-pysaml2-7.4.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 107.0.5304.87 (boo#1204819) * CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 (boo#1204732) * CVE-2022-3652: Type Confusion in V8 * CVE-2022-3653: Heap buffer overflow in Vulkan * CVE-20…
first Oct 31, 2022 -
High max 7.5SUSE-SU-2022:3673-1 1 CVE
Security update for jasper
This update for jasper fixes the following issues: - CVE-2022-2963: Fixed memory leaks in function cmdopts_parse (bsc#1202642).
first Oct 20, 2022