12,602 results · Clear filters · Feed
-
High max 8.7SUSE-SU-2019:0766-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe (bsc#1130267). - CVE-2018-12…
first Mar 27, 2019 -
High max 7.5openSUSE-SU-2024:11360-1 3 CVEs
cargo1.53-1.53.0-2.5 on GA media
These are all security issues fixed in the cargo1.53-1.53.0-2.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.6SUSE-SU-2025:0051-1 1 CVE
Security update for gstreamer
This update for gstreamer fixes the following issues: - CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. (boo#1234449)
first Jan 9, 2025 -
High max 8.2openSUSE-SU-2025:15130-1 1 CVE
ruby3.4-rubygem-websocket-extensions-0.1.5-1.22 on GA media
These are all security issues fixed in the ruby3.4-rubygem-websocket-extensions-0.1.5-1.22 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
High max 7.8SUSE-SU-2025:02146-1 1 CVE
Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_195 fixes one issue. The following security issue was fixed: - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238730).
first Jun 27, 2025 -
High max 7.5SUSE-SU-2023:1657-1 3 CVEs
Security update for rubygem-loofah
This update for rubygem-loofah fixes the following issues: - CVE-2022-23514: Fixed inefficient regular expression leading to denial of service (bsc#1206415). - CVE-2022-23515: Fixed improper neutralization of data URIs leading to Cross Site Scripting (bsc#120…
first Mar 29, 2023 -
High max 7.8SUSE-SU-2025:02312-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50200: selinux: Add boundary check in put_entry() (bsc#1245149).
first Jul 15, 2025 -
High max 7.5openSUSE-SU-2024:13762-1 1 CVE
libunbound8-1.19.2-1.1 on GA media
These are all security issues fixed in the libunbound8-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:0019-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: Update to version 2.10: - Add option to turn off system token support (bsc#1205089) - Update the `last_seen_at` column on zypper service refresh - Do not retry to import non-existing files in air-gapped m…
first Jan 3, 2023 -
High max 8.0
Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…
first Dec 10, 2019 -
High max 7.5openSUSE-SU-2023:0174-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-36053: Fixed potential regular expression denial of service vulnerability in EmailValidator/URLValidator (boo#1212742)
first Jul 11, 2023 -
High max 8.0SUSE-SU-2025:1326-1 3 CVEs
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2025-27152: Fixed SSRF and creadential leakage due to requests sent to absolute URL even when baseURL is set (bsc#1239308) - CVE-2023-1907: Fixed an issue which could result in users being authenticat…
first Apr 16, 2025 -
High max 7.8SUSE-SU-2024:3881-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#1231419) - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_d…
first Nov 4, 2024 -
High max 7.4SUSE-SU-2021:14801-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).
first Sep 18, 2021 -
High max 8.8openSUSE-SU-2024:10856-1 7 CVEs
icinga2-2.13.1-1.3 on GA media
These are all security issues fixed in the icinga2-2.13.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.7SUSE-SU-2024:1518-1 2 CVEs
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) * CVE-2024-22232: Prevent directory traversal attacks in the mast…
first May 6, 2024 -
High max 8.8openSUSE-SU-2024:13139-1 21 CVEs
chromedriver-116.0.5845.96-1.1 on GA media
These are all security issues fixed in the chromedriver-116.0.5845.96-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2023:0017-1 1 CVE
Security update for SDL2
This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed potential memory leak in GLES_CreateTexture (boo#1206727).
first Jan 15, 2023 -
High max 7.8SUSE-SU-2018:2719-1 4 CVEs
Security update for openssh-openssl1
This update for openssh-openssl1 fixes the following issues: These security issues were fixed: - CVE-2016-10708: Prevent NULL pointer dereference via an out-of-sequence NEWKEYS message allowed remote attackers to cause a denial of service (bsc#1076957). - CVE…
first Sep 14, 2018 -
High max 7.7SUSE-SU-2025:0056-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.6.0 ESR * Fixed: Various security fixes. MFSA 2025-02 (bsc#1234991) * CVE-2025-0237 (bmo#1915257) WebChannel APIs susceptible to confused deputy attack * CVE-202…
first Jan 9, 2025 -
High max 7.5openSUSE-SU-2025:14973-1 1 CVE
etcd-3.5.21-1.1 on GA media
These are all security issues fixed in the etcd-3.5.21-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2025 -
High max 8.2
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local priv…
first May 9, 2023 -
High max 7.8SUSE-SU-2021:0840-1 2 CVEs
Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_46 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a TH…
first Mar 17, 2021 -
High max 7.5SUSE-SU-2020:0790-1 1 CVE
Security update for python-cffi, python-cryptography, python-xattr
This update for python-cffi, python-cryptography and python-xattr fixes the following issues: Security issue fixed: - CVE-2018-10903: Fixed GCM tag forgery via truncated tag in finalize_with_tag API (bsc#1101820). Non-security issues fixed: python-cffi was up…
first Mar 25, 2020 -
High max 8.1openSUSE-SU-2024:11043-1 5 CVEs
libmbedcrypto7-2.27.0-1.2 on GA media
These are all security issues fixed in the libmbedcrypto7-2.27.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2024:14505-1 4 CVEs
postgresql16-16.5-1.1 on GA media
These are all security issues fixed in the postgresql16-16.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 15, 2024 -
High max 8.8openSUSE-SU-2019:2675-1 38 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15211: There was a use-after-free caused by a malicious USB device in drivers/media/v4l2-core/v4l2-dev.c (bnc#1146519). - CV…
first Dec 12, 2019 -
High max 8.8
Security update for chromium
This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)
first Nov 4, 2016 -
High max 8.6SUSE-SU-2024:2073-1 8 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Update to version 115.12.0 ESR (bsc#1226027) - CVE-2024-5702: Use-after-free in networking - CVE-2024-5688: Use-after-free in JavaScript object transplant - CVE-2024-5690: External protocol hand…
first Jun 18, 2024 -
High max 7.5openSUSE-SU-2024:13326-1 1 CVE
go1.20-1.20.10-1.1 on GA media
These are all security issues fixed in the go1.20-1.20.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2018:1174-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following issues: * CVE-2016-9190: Pillow allows context-dependent attackers to execute arbitrary code by using the \'crafted image file\' approach, related to an \'Insecure Sign Extension\' issue affecting the ImagingN…
first May 8, 2018 -
High max 8.8openSUSE-SU-2023:0117-1 16 CVEs
Security update for chromium
This update for chromium fixes the following issues: - build with llvm15 on Leap - Chromium 113.0.5672.126 (boo#1211442): * CVE-2023-2721: Use after free in Navigation * CVE-2023-2722: Use after free in Autofill UI * CVE-2023-2723: Use after free in DevTools …
first May 31, 2023 -
High max 7.5openSUSE-SU-2024:13905-1 2 CVEs
cmctl-1.14.5-1.1 on GA media
These are all security issues fixed in the cmctl-1.14.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.2SUSE-SU-2023:2202-1 2 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Updated to version 14.8: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). -…
first May 15, 2023 -
High max 7.3openSUSE-SU-2019:2139-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621). This update was imported from the SUSE:SLE-15:Update update project.
first Sep 16, 2019 -
High max 7.5openSUSE-SU-2024:12862-1 1 CVE
sccache-0.4.1~18-2.1 on GA media
These are all security issues fixed in the sccache-0.4.1~18-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:3721-1 10 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2022-26354: Fixed a memory leak due to a missing virtqueue detach on error. (bsc#1198712) - CVE-2021-3929: Fixed an use-after-free in nvme DMA reentrancy issue. (bsc#1193880) - CVE-2023-0330: Fixed a stac…
first Sep 21, 2023 -
High max 8.8SUSE-SU-2021:0536-1 1 CVE
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 (bsc#1182286): + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT d…
first Feb 22, 2021 -
High max 7.5SUSE-SU-2024:0860-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-0553: Fixed insufficient mitigation for side channel attack in RSA-PSK, aka CVE-2023-5981 (bsc#1218865).
first Mar 13, 2024 -
High max 8.8SUSE-SU-2024:4127-1 12 CVEs
Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_58 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in…
first Dec 2, 2024