1,565 results · Clear filters · Feed
-
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extr…
first Jul 21, 2021 -
Critical max 9.8
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8…
first May 10, 2019 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jul 2, 2021 -
High max 8.8
Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Me…
first Jul 9, 2021 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098). - CVE-2024-36904: tcp: Use refcount_inc…
first Jul 16, 2024 -
Critical max 9.6
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …
first Nov 27, 2020 -
Critical max 9.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-2659…
first Jan 29, 2025 -
Critical max 10.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073) - CVE-2024-3…
first Aug 29, 2025 -
High max 8.2
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege …
first May 9, 2023 -
High max 8.8
Security update for libvpx
This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).
first Oct 3, 2023 -
High max 7.8
Security update for flash-player
This update for flash-player fixes the following issues: - Security update to 11.2.202.621 (bsc#979422): * APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1…
first May 16, 2016 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …
first Jul 21, 2021 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are …
first Mar 9, 2022 -
Critical max 9.8
Security update for tomcat
This update for tomcat to version 9.0.31 fixes the following issues: Security issues fixed: - CVE-2019-17569: Fixed a regression in the handling of Transfer-Encoding headers that would have allowed HTTP Request Smuggling (bsc#1164825). - CVE-2020-1935: Fixed …
first Mar 15, 2020 -
High max 7.8
Security update for ghostscript
This update for ghostscript fixes the following security vulnerabilities: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) CVE-2016-9601: An integer overflow in the bundled jb…
first Apr 28, 2017 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1938: mod_proxy_ajp: Add 'secret' parameter to proxy workers to implement legacy …
first Apr 21, 2020 -
Critical max 10.0
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2025-24201: Fixed out-of-bounds write vulnerability due to that WebGL context primitive restart can be toggled from WebContent process (bsc#1239547).
first Mar 26, 2025 -
Critical max 10.0
proftpd-1.3.5b-2.5 on GA media
These are all security issues fixed in the proftpd-1.3.5b-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: a…
first Feb 22, 2025 -
High max 8.8
chromedriver-120.0.6099.224-1.1 on GA media
These are all security issues fixed in the chromedriver-120.0.6099.224-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achi…
first Feb 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093) - Have the lang package provide libwebkit2gtk3-lang (bsc#1214093) - Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581):…
first Sep 8, 2023 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …
first Jan 26, 2021 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to 106.0.4998.52 * CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 * DNA-113175 Can not merge folders on start page * DNA-113341 Implement 'special' menus * DNA-113811 Removing ico…
first Jan 24, 2024 -
High max 7.0
Security update for Linux Kernel Live Patch 0 for SLE 12 SP1
This update for the Linux Kernel 3.12.49-11 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: The …
first Oct 25, 2016 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …
first Jul 20, 2021 -
High max 8.4
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_83 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Jan 31, 2022 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492) Security issues fixed with this version update: * CVE-2019-13721: Use-after-free …
first Nov 6, 2019 -
Critical max 10.0
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_c…
first Jun 22, 2019 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Update to version 77.0.4054.146 - CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114 - DNA-92171 Create active linkdiscovery service - DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiA…
first Jul 1, 2021 -
High max 7.8
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-26622: Fixe…
first May 8, 2024 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 103.0.5060.114 (boo#1201216) * CVE-2022-2294: Heap buffer overflow in WebRTC * CVE-2022-2295: Type Confusion in V8 * CVE-2022-2296: Use after free in Chrome OS Shell
first Jul 12, 2022 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 128.0.6613.84 (boo#1229591) * CVE-2024-7964: Use after free in Passwords * CVE-2024-7965: Inappropriate implementation in V8 * CVE-2024-7966: Out of bounds memory access in Skia * CVE-2024-7967: …
first Aug 23, 2024 -
Critical max 9.8
Security Beta update for SUSE Manager Client Tools and Salt
This update fixes the following issues: ansible: - Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133) * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive info in traceback error message (in 2.9.27) * bsc#1188061 CVE-2021-3583 Templ…
first Jan 23, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_99 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free…
first Oct 16, 2018 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via …
first Sep 27, 2018 -
High max 8.8
matrix-synapse-1.93.0-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.93.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A…
first Mar 4, 2022 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…
first Jan 9, 2025