5,613 results · Clear filters · Feed
-
Critical max 9.8
chromedriver-124.0.6367.201-1.1 on GA media
These are all security issues fixed in the chromedriver-124.0.6367.201-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:0926-1 65 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47078: Fixed a bug by clearing all QP fields if creation failed (bsc#1220863) - CVE-2021-47076: Fixed a bug by returni…
first Mar 18, 2024 -
Critical max 9.1SUSE-SU-2022:3524-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: Updated to version 16.17.1: - CVE-2022-32213: Fixed bypass via obs-fold mechanic (bsc#1201325). - CVE-2022-32215: Fixed incorrect Parsing of Multi-line Transfer-Encoding (bsc#1201327). - CVE-2022-35256: Fix…
first Oct 5, 2022 -
Critical max 10.0SUSE-SU-2024:2030-1 1 CVE
Security update for libaom
This update for libaom fixes the following issues: - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
first Jun 14, 2024 -
Critical max 9.8SUSE-SU-2024:3774-1 10 CVEs
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …
first Oct 29, 2024 -
Critical max 9.8openSUSE-SU-2024:11863-1 1 CVE
libshp-devel-1.5.0-2.1 on GA media
These are all security issues fixed in the libshp-devel-1.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.6
nodejs-electron-22.3.7-1.1 on GA media
These are all security issues fixed in the nodejs-electron-22.3.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2022:4074-1 4 CVEs
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-39348: Fixed NameVirtualHost Host header injection (bsc#1204781).
first Nov 18, 2022 -
Critical max 9.8
Security update for rmt-server
This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…
first Nov 5, 2020 -
Critical max 9.8SUSE-SU-2024:3052-1 8 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698): - Fix web process cache suspend/resume when sandbox is enabled. - Fix accelerated images dissapearing after scrolling. - Fix video flickeri…
first Aug 28, 2024 -
Critical max 9.8SUSE-SU-2022:14923-1 5 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2022-23219: Fixed buffer overflow in sunrpc clnt_create for 'unix' (bsc#1194768, BZ #22542) - CVE-2022-23218: Fixed buffer overflow in sunrpc svcunix_create (bsc#1194770, BZ #28768) - CVE-2021-3999: Fixe…
first Mar 21, 2022 -
Critical max 9.8SUSE-SU-2024:4148-1 9 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 128.5 * fixed: IMAP could crash when reading cached messages * fixed: Enabling 'Show Folder Size' on Maildir profile could render Thunderbird unusable * fixed: Messages corru…
first Dec 3, 2024 -
Critical max 9.8SUSE-SU-2023:2127-1 7 CVEs
Security update for go1.19
This update for go1.19 fixes the following issues: Update to 1.19.9 (bnc#1200441): - CVE-2023-24539: fixed an improper sanitization of CSS values (bnc#1211029). - CVE-2023-24540: fixed an improper handling of JavaScript whitespace (bnc#1211030). - CVE-2023-29…
first May 8, 2023 -
Critical max 9.8openSUSE-SU-2023:0306-1 1 CVE
Security update for rxvt-unicode
This update for rxvt-unicode fixes the following issues: - Update to version 9.31: (CVE-2022-4170 boo#1206069) - implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater). While present in version 9.30, it should not be exploitable. It is …
first Oct 20, 2023 -
Critical max 9.8openSUSE-SU-2024:12987-1 4 CVEs
go1.19-1.19.10-1.1 on GA media
These are all security issues fixed in the go1.19-1.19.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2020:0160-1 1 CVE
Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor() (bsc#1154370). This update was imported from the SUSE:SLE-15:Update update project.
first Feb 4, 2020 -
Critical max 9.8SUSE-SU-2024:0977-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-25162: Fixed a potential use after free (bsc#1220409). - CVE-2021-46923: Fixed reference leakage in fs/mount_setatt…
first Mar 22, 2024 -
Critical max 9.8SUSE-SU-2025:01882-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2025-31651: Better handling of URLs with literal ';' and '?' (bsc#1242009).
first Jun 11, 2025 -
Critical max 9.8SUSE-SU-2019:3060-2 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211). - CVE-2017-12652: Fixed an Input Validation Err…
first Mar 3, 2020 -
Critical max 9.4SUSE-RU-2023:2595-1 1 CVE
Security update for SUSE Manager Server 4.2
This update fixes the following issues: branch-network-formula: - Update to version 0.1.1680167239.23f2fec * Remove unnecessary import of 'salt.ext.six' cpu-mitigations-formula: - Update to version 0.5.0: * Mark all SUSE Linux Enterprise 15 SP4 and newer and …
first Jun 21, 2023 -
Critical max 9.4SUSE-SU-2023:4758-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.10 * SUSE Linux Enterprise Server Micro 5.5 support * CLM filter by package build date * Enhanced Errata.getDetails API endpoint * CVEs fixed: CVE-2023-22644 * Bug…
first Dec 13, 2023 -
Critical max 9.8SUSE-SU-2019:2261-1 2 CVEs
Security update for python-SQLAlchemy
This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593).
first Sep 2, 2019 -
Critical max 9.8SUSE-SU-2024:4249-1 17 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks …
first Dec 6, 2024 -
Critical max 9.8SUSE-SU-2024:2561-1 176 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication Bluetooth might have allowed an unauthenticated us…
first Jul 18, 2024 -
Critical max 10.0SUSE-SU-2023:4866-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_145 fixes several issues. The following security issues were fixed: - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privileg…
first Dec 14, 2023 -
Critical max 9.8openSUSE-SU-2019:2169-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495). - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496). This update was…
first Sep 24, 2019 -
Critical max 9.8openSUSE-SU-2024:14189-1 5 CVEs
MozillaThunderbird-115.13.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.13.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2024 -
Critical max 9.8openSUSE-SU-2024:13795-1 14 CVEs
MozillaFirefox-124.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-124.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2024:1680-1 7 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption …
first May 17, 2024 -
Critical max 9.8
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 (MFSA 2024-52, bsc#1231413): - CVE-2024-9680: Fixed use-after-free in Animation timeline (bmo#1923344)
first Oct 18, 2024 -
Critical max 9.8SUSE-SU-2024:3651-1 19 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). - CVE-2021-47291: ipv6: fix another slab-out-of-bou…
first Oct 16, 2024 -
Critical max 9.8SUSE-SU-2022:3770-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32221: Fixed POST following PUT confusion (bsc#1204383).
first Oct 26, 2022 -
Critical max 9.1SUSE-RU-2017:0171-1 1 CVE
Recommended update for salt
This update for Salt fixes one security issue and several non-security issues. The following security issue has been fixed: - Fix possible information leak due to revoked keys still being used. (bsc#1012398, CVE-2016-9639) The following non-security issues ha…
first Jan 17, 2017 -
Critical max 9.8SUSE-SU-2023:3972-1 1 CVE
Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2019-19450: Fixed an issue which allowed remote code execution via start_unichar in paraparser.py evaluating untrusted user input. (bsc#1215560)
first Oct 4, 2023 -
Critical max 9.8openSUSE-SU-2024:12476-1 1 CVE
php7-7.4.33-1.1 on GA media
These are all security issues fixed in the php7-7.4.33-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
grafana-7.5.11-3.1 on GA media
These are all security issues fixed in the grafana-7.5.11-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0SUSE-SU-2023:4378-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2163: Fixed an incorrect verifier pruning in BPF that could lead to unsafe code paths being incorrectly marked as …
first Nov 6, 2023 -
Critical max 9.1SUSE-SU-2017:1229-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2017-5647 Pipelined requests could lead to information disclosure (bsc#1033448) - CVE-2017-5648 Untrusted application could retain listener leading to information disclosure (bsc#1033447) - CVE-2016-874…
first May 10, 2017 -
Critical max 9.8openSUSE-SU-2024:13758-1 16 CVEs
chromedriver-121.0.6167.184-1.1 on GA media
These are all security issues fixed in the chromedriver-121.0.6167.184-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8SUSE-SU-2023:2937-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: python was updated to version 3.11.4: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2007-4559: Fixed py…
first Jul 21, 2023