12,602 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2024:14221-1 2 CVEs
ffmpeg-5-5.1.4-9.1 on GA media
These are all security issues fixed in the ffmpeg-5-5.1.4-9.1 package on the GA media of openSUSE Tumbleweed.
first Jul 28, 2024 -
High max 7.5openSUSE-SU-2024:12014-1 6 CVEs
java-15-openjdk-15.0.7.0-1.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.4SUSE-SU-2025:01525-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u452 (icedtea-3.35.0) Security issues fixed: - CVE-2025-21587: unauthorized creation, deletion or modification of critical data through the JSSE component. (bsc#1241274) - CV…
first Jun 5, 2025 -
High max 7.8SUSE-SU-2023:4560-1 4 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940) - CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001) - CVE-2023-5535: use-after-free from buf_contents_changed() (bs…
first Nov 24, 2023 -
High max 8.8SUSE-SU-2024:3224-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 15.8 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 12, 2024 -
High max 8.0
Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…
first Dec 10, 2019 -
High max 7.8openSUSE-SU-2024:14466-1 1 CVE
xorg-x11-server-21.1.14-1.1 on GA media
These are all security issues fixed in the xorg-x11-server-21.1.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2024 -
High max 7.5SUSE-SU-2023:4532-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230) * Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338) * CVE-2023-5721: Que…
first Nov 22, 2023 -
High max 7.9SUSE-SU-2019:1242-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data…
first May 14, 2019 -
High max 7.8SUSE-SU-2023:3599-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of…
first Sep 21, 2023 -
High max 8.3SUSE-SU-2025:0503-1 10 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2024-1298: potential division-by-zero crash in edk2 due to UINT32 overflow in S3 ResumeCount. (bsc#1225889) - CVE-2023-45229: out-of-bounds read in edk2 when processing IA_NA/IA_TA options in DHCPv6 Adver…
first Feb 13, 2025 -
High max 8.8SUSE-SU-2017:2234-1 6 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2017-2834: Out-of-bounds write in license_recv() (bsc#1050714) - CVE-2017-2835: Out-of-bounds write in rdp_recv_tpkt_pdu (bsc#1050712) - CVE-2017-2836: Rdp Client Read Server Proprietary Certificate De…
first Aug 22, 2017 -
High max 7.5openSUSE-SU-2025:14954-1 1 CVE
gotosocial-0.18.3-2.1 on GA media
These are all security issues fixed in the gotosocial-0.18.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …
first Nov 30, 2019 -
High max 7.0SUSE-SU-2025:0344-1 1 CVE
Security update for orc
This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow in the Orc compiler when formatting error messages for certain input files (bsc#1228184)
first Feb 3, 2025 -
High max 8.1SUSE-SU-2025:1157-1 3 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird ESR 128.9 MFSA 2025-24 (bsc#1240083) * CVE-2025-3028: Use-after-free triggered by XSLTProcessor * CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters * CVE-2025-30…
first Apr 7, 2025 -
High max 7.1SUSE-SU-2023:2562-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).
first Jun 21, 2023 -
High max 7.8SUSE-SU-2022:3377-1 2 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#120311…
first Sep 25, 2022 -
High max 7.5SUSE-SU-2021:3351-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).
first Oct 12, 2021 -
High max 7.5SUSE-SU-2019:1234-1 5 CVEs
Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go sec…
first May 14, 2019 -
High max 7.5SUSE-SU-2021:3489-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287)
first Oct 20, 2021 -
High max 7.8SUSE-SU-2023:2007-1 3 CVEs
Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_115 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() …
first Apr 25, 2023 -
High max 7.5SUSE-SU-2023:0724-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domai…
first Mar 14, 2023 -
High max 7.5SUSE-SU-2023:0318-1 1 CVE
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues: - CVE-2022-48279: Fixed a potential firewall bypass due to an incorrect parsing of HTTP multipart requests (bsc#1207378).
first Feb 8, 2023 -
High max 7.5SUSE-SU-2024:0208-1 1 CVE
Security update for tomcat10
This update for tomcat10 fixes the following issues: Updated to Tomcat 10.1.18 - CVE-2023-46589: Fixed HTTP request smuggling due to incorrect headers parsing (bsc#1217649) Find the full release notes at: https://tomcat.apache.org/tomcat-9.0-doc/changelog.html
first Jan 24, 2024 -
High max 8.1SUSE-SU-2020:0140-1 7 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Update to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968) Fixing these security related issues: - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilit…
first Jan 20, 2020 -
High max 7.5SUSE-SU-2024:1657-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2023-52425: Fixed etree XMLPullParser tests for Expat >=2.6.0 with reparse deferral (bsc#1219559).
first May 15, 2024 -
High max 8.8
chromedriver-128.0.6613.84-1.1 on GA media
These are all security issues fixed in the chromedriver-128.0.6613.84-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 23, 2024 -
High max 7.5SUSE-SU-2019:2158-1 1 CVE
Security update for postgresql94
This update for postgresql94 fixes the following issues: Security issue fixed: - CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).
first Oct 15, 2019 -
High max 7.0SUSE-SU-2018:2387-1 4 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-92_38 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in…
first Aug 16, 2018 -
High max 8.8SUSE-SU-2024:2100-1 5 CVEs
Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (…
first Jun 19, 2024 -
High max 7.5SUSE-SU-2020:2524-1 5 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 15)
This update for the Linux Kernel 4.12.14-150_52 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious AC…
first Sep 4, 2020 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747), including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path (bsc#1233631). - CVE-2024-44309: Fixed a dat…
first Dec 4, 2024 -
High max 7.1SUSE-SU-2020:0130-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location (bsc#1158095).
first Jan 20, 2020 -
High max 8.5
Security update for xstream
This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…
first Oct 31, 2021 -
High max 7.5SUSE-SU-2018:0362-1 1 CVE
Security update for bind
This update for bind fixes several issues. This security issue was fixed: - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named (bsc#1076118). These non-security is…
first Feb 5, 2018 -
High max 8.8SUSE-SU-2023:0655-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).
first Mar 8, 2023 -
High max 7.4SUSE-SU-2023:2238-1 7 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - Updated to version jdk8u372 (icedtea-3.27.0): - CVE-2023-21930: Fixed an issue in the JSSE component that could allow an attacker to access critical data without authorization (bsc#1210628). - C…
first May 17, 2023 -
High max 7.5openSUSE-SU-2024:14158-1 2 CVEs
python310-python-gnupg-0.5.2-1.5 on GA media
These are all security issues fixed in the python310-python-gnupg-0.5.2-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.8openSUSE-SU-2024:11495-1 1 CVE
velocity-1.7-9.3 on GA media
These are all security issues fixed in the velocity-1.7-9.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024