1,565 results · Clear filters · Feed
-
Critical max 9.6
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465).
first Mar 19, 2025 -
High max 8.1
Security update for go1.21-openssl
This update for go1.21-openssl fixes the following issues: Update to version 1.21.4.1 cut from the go1.21-openssl-fips branch at the revision tagged go1.21.4-1-openssl-fips. * Update to go1.21.4 go1.21.4 (released 2023-11-07) includes security fixes to the pa…
first Nov 16, 2023 -
High max 7.8
perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media
These are all security issues fixed in the perl-Spreadsheet-ParseExcel-0.660.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for flash-player
flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).
first Oct 16, 2015 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. This feature was added: - Support for the 2017 Intel Purley platform. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using …
first Dec 9, 2016 -
High max 8.8
nodejs-electron-21.3.4-1.1 on GA media
These are all security issues fixed in the nodejs-electron-21.3.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703). - CVE-2025-21678: gtp:…
first Feb 13, 2025 -
Critical max 9.3
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Update to 1.6.8 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: * Fix XSS vulnerability in post-processing of …
first Oct 9, 2024 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).
first Jul 11, 2021 -
High max 8.8
Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Me…
first Jul 5, 2021 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
first Jan 25, 2022 -
High max 8.8
MozillaFirefox-117.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-117.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of servi…
first Oct 18, 2022 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: opera was updated to 88.0.4412.74: - DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches Update to 88.0.4412.53 - DNA-99108 [Lin] Options on video pop out not possible to change - DNA-99832 On aut…
first Jul 13, 2022 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#…
first Nov 6, 2020 -
High max 8.7
Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project.
first Nov 5, 2019 -
Critical max 10.0
Security update for storm
This update for storm fixes the following issues: - Remove JndiLookup from log4j 2.x jars during build to prevent 'log4shell' code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228) - Remove JMSAppender from log4j 1.2.x jars during build to prevent attacks…
first Dec 15, 2021 -
High max 7.8
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: a…
first Feb 24, 2025 -
High max 7.5
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Dec 1, 2023 -
High max 7.5
Security update for nginx
This update for nginx fixes the following issues: - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171) - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)
first Jan 29, 2025 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are …
first Mar 9, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…
first Mar 8, 2022 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Update to version 1.6.4 (boo#1216429): * CVE-2023-5631: Fix cross-site scripting vulnerability in handling of SVG in HTML messages * Fix PHP8 warnings * Fix default 'mime.types' path on Windows * Manag…
first Nov 2, 2023 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3 (bnc#1206750): - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. - CVE-2022-42856: Fixed a potential arbitrary code execution when processing mali…
first Jan 10, 2023 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability (bsc#1239547).
first Mar 24, 2025 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 80.0.4170.63 - CHR-8612 Update chromium on desktop-stable-94-4170 to 94.0.4606.81 - DNA-95434 Crash at opera::ThemesService::UpdateCurrentTheme() - The update to chromium 94.0.4606…
first Nov 1, 2021 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_86 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).
first Mar 1, 2022 -
Critical max 9.6
chromedriver-107.0.5304.121-1.1 on GA media
These are all security issues fixed in the chromedriver-107.0.5304.121-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807). Bugfixes: - Fixed WebKitGTK not allowing to be used from non-main threads (bsc#12021…
first Sep 23, 2022 -
High max 8.8
Security update for chromium
This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)
first Nov 4, 2016 -
High max 8.0
Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_120 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…
first Dec 11, 2019 -
High max 8.3
Security update for opera
This update for opera fixes the following issues: - Update to 117.0.5408.163 * DNA-120683 [Issue back] Sometimes onboarding is blank and useless * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133, GX132 and Air132 - Changes in 117.0.5408.154 * DNA-1212…
first Mar 31, 2025 -
Medium max 6.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…
first Mar 30, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achie…
first Feb 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27…
first Nov 1, 2024 -
High max 8.8
Security update for MozillaFirefox
This security update (bsc#940918) fixes the following issues: * MFSA 2015-78 (CVE-2015-4495, bmo#1178058): Same origin violation * Remove PlayPreview registration from PDF Viewer (bmo#1179262)
first Aug 12, 2015 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 12, 2021 -
Critical max 9.6
Security update for chromium
This update for chromium fixes the following issues: - Update to 86.0.4240.111 boo#1177936 - CVE-2020-16000: Inappropriate implementation in Blink. - CVE-2020-16001: Use after free in media. - CVE-2020-16002: Use after free in PDFium. - CVE-2020-15999: Heap b…
first Oct 23, 2020 -
High max 8.8
Security update for Chromium
This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed (boo#1118529): - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use …
first Dec 15, 2018