1,565 results · Clear filters · Feed
-
High max 8.5
Security update for xstream
This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…
first Oct 20, 2021 -
High max 8.4
GraphicsMagick-1.3.25-1.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.9
Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_60 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-bound…
first Mar 28, 2023 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 6, 2021 -
High max 8.6
security update for git, git-lfs, obs-scm-bridge, python-PyYAML
This update for git, git-lfs, obs-scm-bridge, python-PyYAML fixes the following issues: git was updated from version 2.43.0 to 2.51.0 (bsc#1243197): - Security issues fixed: * CVE-2025-27613 Fixed arbitrary writable file creation and truncation in Gitk(bsc#12…
first Aug 29, 2025 -
High max 8.1
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…
first Apr 17, 2020 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-48742: rtne…
first Jan 24, 2025 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jul 6, 2021 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Update to 120.0.6099.224 (boo#1218892): - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audi…
first Jan 18, 2024 -
Critical max 9.8
Security update for grafana
This update for grafana fixes the following issues: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454) - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688)
first Jan 20, 2022 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/sch…
first Jul 10, 2025 -
Critical max 9.8
MozillaFirefox-131.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-131.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 11, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_156 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed a he…
first May 6, 2024 -
Critical max 9.8
Security update for java-1_6_0-ibm
IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to…
first Aug 21, 2015 -
High max 8.3
chromedriver-124.0.6367.207-1.1 on GA media
These are all security issues fixed in the chromedriver-124.0.6367.207-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5
Security update for kubernetes1.27
This update for kubernetes1.27 fixes the following issues: Update kubernetes to version 1.27.16 - CVE-2024-24786: Fixed infinite loop in protojson.Unmarshal in golang-protobuf (bsc#1229867) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid …
first Sep 3, 2024 -
High max 7.5
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)
first Oct 25, 2023 -
High max 7.8
Security update for polkit
This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).
first Jan 25, 2022 -
High max 8.8
chromedriver-95.0.4638.69-1.1 on GA media
These are all security issues fixed in the chromedriver-95.0.4638.69-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
libpolkit0-0.118-7.2 on GA media
These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3
Security update for java-1_7_1-ibm
The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4…
first Dec 14, 2015 -
High max 7.7
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400) - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugi…
first Sep 19, 2024 -
High max 7.5
Security update for nodejs18
This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…
first Oct 23, 2023 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47594: mptcp: never allow the PM to close a listener subflow (bsc#1226560). - CVE-2022-48983: io_uring: Fix a null-…
first Dec 13, 2024 -
High max 8.8
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security fixes: - Mozilla Thunderbird 115.2.2 (MFSA 2023-40, bsc#1215245) - CVE-2023-4863: Fixed heap buffer overflow in libwebp (bmo#1852649). - Mozilla Thunderbird 115.2 (MFSA 2023-38, bsc#12146…
first Sep 18, 2023 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 …
first Feb 13, 2023 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …
first Jan 26, 2021 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …
first Jan 10, 2020 -
High max 8.4
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_67 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Jan 31, 2022 -
High max 8.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (b…
first Jan 26, 2022 -
Medium max 6.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…
first Mar 30, 2022 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 108.0.5359.94 (boo#1205999) - CVE-2022-4262: Type Confusion in V8
first Dec 8, 2022 -
High max 7.5
ruby3.1-rubygem-actionmailer-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-actionmailer-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
cacti-1.2.23-1.1 on GA media
These are all security issues fixed in the cacti-1.2.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.122 (bsc#1164828). Security issues fixed: - CVE-2020-6418: Fixed a type confusion in V8 (bsc#1164828). - CVE-2020-6407: Fixed an OOB memory access in streams (bsc#1…
first Feb 27, 2020 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.5 (bsc#1219604): - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113). - CVE-2024-23206: Fixed fingerprint…
first Feb 20, 2024 -
High max 7.5
Security update for cacti, cacti-spine
This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (C…
first Jul 27, 2020 -
High max 8.6
git-2.50.1-1.1 on GA media
These are all security issues fixed in the git-2.50.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 11, 2025 -
High max 7.8
Security update for the Linux RT Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). …
first Feb 21, 2022 -
High max 7.5
Security update for nodejs18
This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…
first Oct 19, 2023