806 results · Clear filters · Feed
-
High max 7.5
kubernetes1.28-apiserver-1.28.13-2.1 on GA media
These are all security issues fixed in the kubernetes1.28-apiserver-1.28.13-2.1 package on the GA media of openSUSE Tumbleweed.
first Aug 29, 2024 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames …
first Jul 11, 2023 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …
first Jul 21, 2021 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 (bsc#1215814) * CVE-2023-5217: Fixed a heap buffer overflow in libvpx
first Oct 3, 2023 -
High max 8.8
ungoogled-chromium-117.0.5938.132-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for Chromium
Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CV…
first Mar 17, 2017 -
High max 8.0
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_4 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a pare…
first Dec 11, 2019 -
High max 8.4
Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-59_27 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…
first Feb 1, 2022 -
High max 8.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (b…
first Jan 26, 2022 -
High max 8.3
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_56 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…
first Jul 29, 2021 -
High max 8.8
libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media
These are all security issues fixed in the libjavascriptcoregtk-4_0-18-2.32.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429). - …
first Feb 15, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27…
first Oct 24, 2024 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-14174: processing maliciously crafted web content may lead to memory corruption due to improper validation (bsc#1255497). - CVE-2025-43501: pro…
first Dec 26, 2025 -
High max 7.0
Security update for Linux Kernel Live Patch 15 for SLE 12
This update for the Linux Kernel 3.12.60-52_54 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419).
first Oct 26, 2016 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 RT kernel was updated to 3.12.67 to receive various security and bugfixes. This feature was added: - fate#320805: Execute in place (XIP) support for the ext2 filesystem. The following security bugs were fixed: - CVE-2016-2069:…
first Dec 30, 2016 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …
first Jan 10, 2020 -
High max 8.8
MozillaThunderbird-115.2.2-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…
first Apr 21, 2024 -
High max 7.9
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_121 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-0266: Fixed a use-after-free vulner…
first Mar 28, 2023 -
High max 7.5
libvarnishapi3-7.4.2-1.1 on GA media
These are all security issues fixed in the libvarnishapi3-7.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspic…
first Jan 28, 2025 -
High max 7.5
Security update for rubygem-actionpack-4_2
This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2016-0751: Object Leak DoS (bsc#963331) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) - CVE-2016-0752: directory traversal and information leak…
first Feb 15, 2016 -
High max 7.8
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_102 fixes one issue. The following security issue was fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#11…
first Mar 29, 2022 -
High max 7.5
Security update for MozillaFirefox
This update for MozillaFirefox fixes security issues. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bbsc#1012964): - CVE-2016-9079: Use-after-free in SVG Animation could be used for code execution (MFSA 2016-92 bsc#1012964)
first Dec 7, 2016 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…
first Apr 27, 2023 -
High max 7.0
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to fix two issues. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418). This non-security bug was fixed: - sch…
first Oct 21, 2016 -
High max 7.5
Security update for php7-pear
This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).
first Sep 13, 2021 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. - CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580). - CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580)…
first Mar 9, 2022 -
High max 8.8
Security update for Chromium
This update for Chromium to version 66.0.3359.181 fixes the following issues: - CVE-2018-6118: Use after free in Media Cache (bsc#1091288) - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after f…
first May 27, 2018 -
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…
first Sep 15, 2023 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: Chromium 116.0.5845.179 (boo#1215023): * CVE-2023-4761: Out of bounds memory access in FedCM * CVE-2023-4762: Type Confusion in V8 * CVE-2023-4763: Use after free in Networks * CVE-2023-4764: Incorrect secu…
first Sep 12, 2023 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2020-16119: Fixed a use-after-free vulnerability exploitable by a local attacker due to reuse of a DCCP socket. (bnc#1177471) - CVE-2022-20008: Fixed a bug whic…
first Oct 24, 2022 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…
first Jan 14, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 18, 2021 -
High max 7.5
stunnel-5.38-1.1 on GA media
These are all security issues fixed in the stunnel-5.38-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147). - CVE-2022-50087: firmware: arm_scpi: Ensu…
first Jul 14, 2025 -
High max 8.8
Security update for chromium
This update for chromium fixes the following issues: - Chromium 128.0.6613.84 (boo#1229591) * CVE-2024-7964: Use after free in Passwords * CVE-2024-7965: Inappropriate implementation in V8 * CVE-2024-7966: Out of bounds memory access in Skia * CVE-2024-7967: …
first Aug 23, 2024 -
High max 8.8
ungoogled-chromium-120.0.6099.224-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-120.0.6099.224-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
ungoogled-chromium-120.0.6099.216-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-120.0.6099.216-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024