806 results · Clear filters · Feed
-
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
first Apr 20, 2021 -
High max 8.4
Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled by default but can be re-enabled by editing '/etc/ImageMagick-*/policy.xml' (…
first May 7, 2016 -
High max 7.8
sudo-1.9.7p2-1.4 on GA media
These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5
libnghttp2-14-1.57.0-1.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.57.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).
first Feb 24, 2025 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 80.0.4170.63 - CHR-8612 Update chromium on desktop-stable-94-4170 to 94.0.4606.81 - DNA-95434 Crash at opera::ThemesService::UpdateCurrentTheme() - The update to chromium 94.0.4606…
first Nov 1, 2021 -
High max 7.5
Security update for nodejs18
This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…
first Oct 20, 2023 -
High max 7.9
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-…
first Feb 14, 2023 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…
first Aug 9, 2021 -
High max 7.9
Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_130 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-0266: Fixed a use-after-free vulner…
first Mar 28, 2023 -
High max 7.8
kernel-devel-5.16.14-1.1 on GA media
These are all security issues fixed in the kernel-devel-5.16.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…
first Mar 18, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web …
first Jun 22, 2023 -
High max 7.5
Security update for rubygem-actionview-4_2
This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332)
first Feb 15, 2016 -
High max 8.3
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_49 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555:…
first Jul 28, 2021 -
High max 8.8
Recommended update for MozillaFirefox
This update for MozillaFirefox to version 60.7.1 fixes the following issues: Security issue fixed: - CVE-2019-11707: Fixed a type confusion vulnerability in Arrary.pop (bsc#1138614) Other issue addressed: - Fixed broken language plugins (bsc#1137792)
first Jun 21, 2019 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' a…
first Mar 8, 2022 -
High max 7.8
Security update for flash-player
flash-player was updated to fix 35 security issues. These security issues were fixed: - CVE-2015-3135, CVE-2015-4432, CVE-2015-5118: Heap buffer overflow vulnerabilities that could lead to code execution (bsc#937339). - CVE-2015-3117, CVE-2015-3123, CVE-2015-…
first Jul 8, 2015 -
High max 7.8
libpolkit-agent-1-0-0.120-2.1 on GA media
These are all security issues fixed in the libpolkit-agent-1-0-0.120-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update to Chromium 59.0.3071.86 fixes the following security issues: - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-…
first Jun 7, 2017 -
High max 7.5
Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-5_1 fixes the following issues: Security issues fixed: - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to …
first May 8, 2019 -
High max 8.4
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_10 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Feb 1, 2022 -
High max 7.5
bind-9.10.3P4-21.1 on GA media
These are all security issues fixed in the bind-9.10.3P4-21.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - Security update Remote Code Execution / Local File read [bsc#978061] CVE-2016-3714, CVE-2016-3715, CVE-2016-3717, CVE-2016-3718 - CVE-2016-3714: Insufficient shell characters filtering leads to (pot…
first May 11, 2016 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 91.0.4472.114 (boo#1187481) * CVE-2021-30554: Use after free in WebGL * CVE-2021-30555: Use after free in Sharing * CVE-2021-30556: Use after free in WebAudio * CVE-2021-30557: Use after free in Ta…
first Jun 28, 2021 -
High max 8.8
nodejs14-14.17.5-1.2 on GA media
These are all security issues fixed in the nodejs14-14.17.5-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2021-45868: Fixed a wrong validation check in fs/quota/quota_tree.c which could lead to an use-after-free if there is a corrupted quota file. (bnc#1197366) - CV…
first Apr 14, 2022 -
High max 7.5
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272)
first Oct 30, 2023 -
High max 7.5
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869) - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability…
first Sep 19, 2024 -
High max 8.0
Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_6 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privileg…
first Dec 10, 2019 -
High max 8.4
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_96 fixes one issue. The following security issue was fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).
first Jan 31, 2022 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out”…
first Aug 15, 2022 -
High max 7.8
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix sus…
first Jan 27, 2025 -
High max 8.0
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix p…
first Feb 24, 2025 -
High max 8.0
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix possibl…
first Feb 24, 2025 -
High max 7.8
Security update for apache2
This update for apache2 fixes the following issues: * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scrip…
first Apr 16, 2019 -
High max 7.8
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_16 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to …
first Mar 29, 2022 -
High max 8.8
Security update for flash-player
Adobe flash-player was updated to 11.2.202.577 to fix the following list of security issues (bsc#970547): These updates resolve integer overflow vulnerabilities that could lead to code execution (CVE-2016-0963, CVE-2016-0993, CVE-2016-1010). These updates res…
first Mar 11, 2016 -
High max 7.8
Security update for sudo
This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
first Apr 20, 2021 -
High max 7.5
Security update for kubernetes1.26
This update for kubernetes1.26 fixes the following issues: Update kubernetes to version 1.26.15: - CVE-2024-24786: Fixed infinite loop in protojson.Unmarshal in golang-protobuf (bsc#1229867) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid…
first Sep 3, 2024