5,613 results · Clear filters · Feed
-
Critical max 9.8SUSE-SU-2024:0111-1 4 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: Security fixes: - CVE-2023-6816: Fixed heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer (bsc#1218582) - CVE-2024-0229: Fixed reattaching to different master device may lead to out-of-b…
first Jan 16, 2024 -
Critical max 9.1openSUSE-SU-2025:0025-1 1 CVE
Security update for cheat
This update for cheat fixes the following issues: - Update to 4.4.2: * Bump chroma to newest version * Remove plan9 support due to build failure * Upgrade to yaml.v3 - Update to 4.4.1: * Update dependencies * Make minor changes to appease revive (linter)
first Jan 23, 2025 -
Critical max 9.1openSUSE-SU-2025:14920-1 1 CVE
gitleaks-8.24.2-1.1 on GA media
These are all security issues fixed in the gitleaks-8.24.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 24, 2025 -
Critical max 9.8
apache-commons-beanutils-1.9.4-3.7 on GA media
These are all security issues fixed in the apache-commons-beanutils-1.9.4-3.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:13268-1 5 CVEs
MozillaThunderbird-115.3.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.4SUSE-SU-2024:2840-1 12 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes wit…
first Aug 8, 2024 -
Critical max 9.8SUSE-SU-2022:2320-1 10 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - CVE-2022-2200: Undesired attributes could be set as part of prototype pollution (bmo#1771381) - CVE-2022-2226: An email with a mismatching OpenPGP signature date was accepted as valid (bmo#17754…
first Jul 7, 2022 -
Critical max 9.1SUSE-SU-2024:2300-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-37370: Fixed confidential GSS krb5 wrap tokens with invalid fields were errouneously accepted (bsc#1227186). - CVE-2024-37371: Fixed invalid memory read when processing message tokens with invalid le…
first Jul 4, 2024 -
Critical max 9.8SUSE-SU-2022:1024-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
first Mar 29, 2022 -
Critical max 9.8SUSE-SU-2018:1998-1 3 CVEs
Security update for mercurial
This update for mercurial fixes the following issues: Security issues fixed: - CVE-2018-13346: Fix mpatch_apply function in mpatch.c that incorrectly proceeds in cases where the fragment start is past the end of the original data (bsc#1100354). - CVE-2018-133…
first Jul 19, 2018 -
Critical max 10.0SUSE-SU-2025:1102-1 6 CVEs
Security update for docker, docker-stable
This update for docker, docker-stable fixes the following issues: - CVE-2025-22868: Fixed unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239185). - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/cr…
first Apr 2, 2025 -
Critical max 9.6
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914).
first Oct 22, 2020 -
Critical max 9.1SUSE-SU-2025:1131-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-5594: Fixed incorrect handling of null bytes and invalid characters in control messages (bsc#1235147)
first Apr 3, 2025 -
Critical max 9.8SUSE-SU-2025:02144-1 7 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_122 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-…
first Jun 26, 2025 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill…
first Dec 13, 2024 -
Critical max 9.8SUSE-SU-2023:1711-1 6 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209). - CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210). - CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211). …
first Mar 31, 2023 -
Critical max 9.1SUSE-SU-2022:3797-1 3 CVEs
Security update for libtasn1
This update for libtasn1 fixes the following issues: Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435). - CVE-2017-6891: Added safety check to fix a stack overflow issue (bsc#1040621). - CVE-2021-46848: Fixed…
first Oct 27, 2022 -
Critical max 9.8openSUSE-SU-2025:14705-1 504 CVEs
kernel-devel-longterm-6.12.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-longterm-6.12.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 28, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41013: xfs: do not walk o…
first Aug 13, 2024 -
Critical max 9.8openSUSE-SU-2024:13766-1 27 CVEs
ungoogled-chromium-122.0.6261.111-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-122.0.6261.111-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:0179-1 8 CVEs
Security update for expat
This update for expat fixes the following issues: - CVE-2021-45960: Fixed left shift in the storeAtts function in xmlparse.c that can lead to realloc misbehavior (bsc#1194251). - CVE-2021-46143: Fixed integer overflow in m_groupSize in doProlog (bsc#1194362).…
first Jan 25, 2022 -
Critical max 9.8SUSE-SU-2024:3379-1 18 CVEs
Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF)…
first Sep 23, 2024 -
Critical max 9.6openSUSE-SU-2022:0906-1 5 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Updated to version 91.7 (bsc#1196900): - CVE-2022-26381: Fixed an invalid memory access due to text reflow when SVG objects were present. - CVE-2022-26383: Fixed an issue where, when resizing a po…
first Mar 21, 2022 -
Critical max 9.8SUSE-SU-2020:0959-1 1 CVE
Security update for python-PyYAML
This update for python-PyYAML fixes the following issues: - CVE-2020-1747: Fixed an arbitrary code execution when YAML files are parsed by FullLoader (bsc#1165439).
first Apr 8, 2020 -
Critical max 9.8SUSE-SU-2024:1726-1 7 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption …
first May 21, 2024 -
Critical max 9.6
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 79.0.4143.50 - CHR-8571 Update chromium on desktop-stable-93-4143 to 93.0.4577.82 - DNA-94104 ContinueShoppingOnEbayBrowserTest.ShouldDisplayOffers TilesStartingWithMostActiveOnes …
first Oct 4, 2021 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547).
first Mar 21, 2025 -
Critical max 9.8SUSE-SU-2024:3037-1 13 CVEs
Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202). - CVE-2024-27398: Fixed use-after-free bugs caused …
first Aug 27, 2024 -
Critical max 9.8SUSE-SU-2024:3014-1 1 CVE
Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_179 fixes one issue. The following security issue was fixed: - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroying qp (bsc#1225202).
first Aug 27, 2024 -
Critical max 9.1SUSE-SU-2023:0033-1 9 CVEs
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2022-23468: Fixed a buffer overflow in xrdp_login_wnd_create() (bsc#1206300). - CVE-2022-23478: Fixed an out of bound write in xrdp_mm_trans_process_drdynvc_chan() (bsc#1206302). - CVE-2022-23479: Fixed a…
first Jan 5, 2023 -
Critical max 9.0SUSE-SU-2024:4333-1 1 CVE
Security update for libaom, libyuv
This update for libaom, libyuv fixes the following issues: libaom was updated to version 3.7.1: * Bug Fixes: - aomedia:3349: heap overflow when increasing resolution - aomedia:3478: GCC 12.2.0 emits a -Wstringop-overflow warning on aom/av1/encoder/motion_sear…
first Dec 16, 2024 -
Critical max 9.4openSUSE-SU-2024:13153-1 1 CVE
php8-8.2.9-1.1 on GA media
These are all security issues fixed in the php8-8.2.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:1462-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-0778: Fixed a infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). - CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247). - CVE-2021-44907: Fix…
first Apr 28, 2022 -
Critical max 9.8SUSE-SU-2019:14231-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: Security issues fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c…
first Nov 26, 2019 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED w…
first Apr 8, 2025 -
Critical max 9.8openSUSE-SU-2024:12138-1 1 CVE
libopenssl-1_1-devel-1.1.1o-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1o-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:2251-2 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)
first Jul 4, 2022 -
Critical max 9.8SUSE-SU-2018:2898-1 3 CVEs
Security update for smt, yast2-smt
This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues: These security issues were fixed in SMT: - CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read (bsc#1103809). -…
first Sep 27, 2018 -
Critical max 9.8
Security update for java-1_7_0-ibm
java-1_7_0-ibm was updated to fix 21 security issues. These security issues were fixed: - CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to …
first Jul 31, 2015 -
Critical max 9.8SUSE-SU-2024:3041-1 2 CVEs
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2021-47402: Fixed use-after-free in fl_walk() (bsc#1225301) - CVE-2021-47378: Fixed use-after-free by destroying cm id before destroyin…
first Aug 27, 2024