12,602 results · Clear filters · Feed
-
High max 7.1SUSE-SU-2024:0182-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). - CVE-2023-50230: Fixed an out of bounds write in the secondary ver…
first Jan 23, 2024 -
High max 7.5SUSE-SU-2021:2927-1 1 CVE
Security update for rubygem-addressable
This update for rubygem-addressable fixes the following issues: - CVE-2021-32740: Fixed denial of service via maliciously crafted templates (bsc#1188207).
first Sep 2, 2021 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-23222: Fixed type confusion that may lead to arbitrary code execution. (bsc#1219113)
first Feb 1, 2024 -
High max 8.8SUSE-RU-2022:1385-1 4 CVEs
Recommended update for Salt
This update fixes the following issues: salt: - Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil (bsc#1197533) - Prevent data pollution between actions processed at the same time (bsc#1197637) - Fix salt-ssh opts po…
first Apr 25, 2022 -
High max 8.1SUSE-SU-2024:0205-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2023-50447: Fixed arbitrary code execution via the environment parameter. (bsc#1219048)
first Jan 24, 2024 -
High max 7.8SUSE-SU-2023:4926-1 1 CVE
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765).
first Dec 20, 2023 -
High max 8.2openSUSE-SU-2024:12294-1 1 CVE
element-desktop-1.11.4-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:3675-1 1 CVE
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2024-48957: Fixed out-of-bounds access in execute_filter_audio in archive_read_support_format_rar.c (bsc#1231544).
first Oct 16, 2024 -
High max 7.8openSUSE-SU-2024:12123-1 4 CVEs
go1.17-1.17.11-1.1 on GA media
These are all security issues fixed in the go1.17-1.17.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2023:1821-1 1 CVE
Security update for harfbuzz
This update for harfbuzz fixes the following issues: - CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).
first Apr 12, 2023 -
High max 7.8SUSE-SU-2025:1238-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes one issue. The following security issue was fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218).
first Apr 14, 2025 -
High max 8.2SUSE-SU-2024:2147-1 2 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-1829: Fixed a use-after-fr…
first Jun 21, 2024 -
High max 7.7openSUSE-SU-2025:14648-1 7 CVEs
MozillaThunderbird-128.6.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 15, 2025 -
High max 8.6SUSE-SU-2019:1554-1 3 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: Security issues fixed: - CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format (bsc#1132174). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure …
first Jun 18, 2019 -
High max 7.8SUSE-SU-2025:01979-1 6 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49177: Data le…
first Jun 17, 2025 -
High max 8.8openSUSE-SU-2025:0120-1 1 CVE
Security update for chromium
This update for chromium fixes the following issues: - Chromium 135.0.7049.84 (stable release 2025-04-08) (boo#1240968) * CVE-2025-3066: Use after free in Site Isolation
first Apr 13, 2025 -
High max 7.5SUSE-SU-2023:2390-1 1 CVE
Security update for apache-commons-fileupload
This update for apache-commons-fileupload fixes the following issues: Updated to version 1.5: - CVE-2023-24998: Added a configurable maximum number of files to upload per request (bsc#1208513).
first Jun 6, 2023 -
High max 8.8openSUSE-SU-2018:1058-1 1 CVE
Security update for phpMyAdmin
This update for phpMyAdmin to version 4.8.0.1 fixes the following issues: - CVE-2018-10188: Possible execution of arbitrary SQL statements via manipulated URLs (boo#1090309) This version also contains a number of upstream changes, improvements, new functions …
first Apr 23, 2018 -
High max 7.5SUSE-SU-2025:02046-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239192).
first Jun 20, 2025 -
High max 7.5SUSE-SU-2021:1806-1 2 CVEs
Security update for python-httplib2
This update for python-httplib2 fixes the following issues: - Update to version 0.19.0 (bsc#1182053). - CVE-2021-21240: Fixed regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed unescaped part of uri where an attac…
first May 31, 2021 -
High max 7.5SUSE-SU-2024:0638-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-0567: Fixed an incorrect rejection of certificate chains with distributed trust (bsc#1218862). - CVE-2024-0553: Fixed a timing attack against the RSA-PSK key exchange, which could lead to the leaka…
first Feb 27, 2024 -
High max 7.5SUSE-SU-2023:0871-1 5 CVEs
Security update for container-suseconnect
This update of container-suseconnect fixes the following issue: - container-suseconnect was rebuilt against the current go1.19 release, fixing security issues and other bugs fixed in go1.19.7. - CVE-2022-41723: Fixed quadratic complexity in HPACK decoding (bs…
first Mar 22, 2023 -
High max 8.8openSUSE-SU-2024:0155-1 7 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 125.0.6422.141 (boo#1225690) * CVE-2024-5493: Heap buffer overflow in WebRTC * CVE-2024-5494: Use after free in Dawn * CVE-2024-5495: Use after free in Dawn * CVE-2024-5496: Use after free in Media…
first Jun 10, 2024 -
High max 7.5SUSE-SU-2019:3179-1 1 CVE
Security update for dpdk
This update of dpdk to version 18.11.3 provides the following fixes: dpdk was updated to 18.11.3 (fate#327817, bsc#1145713, jsc#ECO-274, fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jsc#SLE-4715) Security issue fixed: - CVE-2019-14818: Fixe…
first Dec 5, 2019 -
High max 7.5openSUSE-SU-2024:11206-1 1 CVE
python36-Flask-Cors-3.0.10-1.3 on GA media
These are all security issues fixed in the python36-Flask-Cors-3.0.10-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0openSUSE-SU-2019:2503-1 10 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-0154: An unprotected read access to i915 registers has been fixed that could have been abused to facilitate a local denial-o…
first Nov 14, 2019 -
High max 7.5SUSE-SU-2022:4303-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2022-42252: Fixed a request smuggling (bsc#1204918).
first Dec 1, 2022 -
High max 7.5openSUSE-SU-2021:0920-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418) - CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
first Jun 25, 2021 -
High max 8.8SUSE-SU-2023:4500-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 release. (bsc#1215278) - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
first Nov 21, 2023 -
High max 7.3SUSE-SU-2024:2171-2 1 CVE
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971).
first Jun 22, 2024 -
High max 8.8SUSE-SU-2020:3864-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free w…
first Dec 17, 2020 -
High max 7.8SUSE-SU-2024:1351-1 1 CVE
Security update for graphviz
This update for graphviz fixes the following issues: - CVE-2023-46045: Fixed out-of-bounds read via a crafted config6a file (bsc#1219491)
first Apr 19, 2024 -
High max 8.8openSUSE-SU-2025:14922-1 1 CVE
chromedriver-134.0.6998.117-1.1 on GA media
These are all security issues fixed in the chromedriver-134.0.6998.117-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2025 -
High max 7.7openSUSE-SU-2020:0148-1 1 CVE
Security update for mailman
This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a privilege escalation during package install. Could be exploited by a local users who is members of the the mailman group. (boo#1154328)
first Jan 29, 2020 -
High max 7.5SUSE-SU-2023:2264-1 1 CVE
Security update for python-Flask
This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching (bsc#1211246).
first May 22, 2023 -
High max 7.3openSUSE-SU-2024:13818-1 1 CVE
libuv-devel-1.48.0-1.1 on GA media
These are all security issues fixed in the libuv-devel-1.48.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0SUSE-SU-2024:2760-1 2 CVEs
Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 5, 2024 -
High max 7.8SUSE-SU-2023:4158-1 2 CVEs
Security update for suse-module-tools
This update for suse-module-tools fixes the following issues: - Updated to version 15.3.17: - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335). - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#P…
first Oct 23, 2023 -
High max 8.3
chromedriver-125.0.6422.112-1.1 on GA media
These are all security issues fixed in the chromedriver-125.0.6422.112-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.1SUSE-SU-2025:01814-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Mozilla Firefox ESR 128.11 (MFSA 2025-44, bsc#1243353): - MFSA-TMP-2025-0001: Double-free in libvpx encoder (bmo#1962421) - CVE-2025-5263: Error handling for script execution was incorrectly…
first Jun 4, 2025