12,602 results · Clear filters · Feed
-
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27834 - CVE-2024-2…
first Oct 24, 2024 -
High max 7.8SUSE-SU-2023:2009-1 2 CVEs
Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_68 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() i…
first Apr 25, 2023 -
High max 8.8openSUSE-SU-2024:0212-2 8 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 126.0.6478.182 (boo#1227979): - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after …
first Jul 22, 2024 -
High max 7.5SUSE-SU-2023:1693-1 1 CVE
Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283).
first Mar 30, 2023 -
High max 7.5SUSE-SU-2020:2037-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117)
first Jul 24, 2020 -
High max 7.5SUSE-SU-2025:0071-1 3 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - Version update to 2.90: - CVE-2023-50387: Fixed a Denial Of Service while trying to validate specially crafted DNSSEC responses. (bsc#1219823) - CVE-2023-50868: Fixed a Denial Of Service while trying to va…
first Jan 10, 2025 -
High max 8.8openSUSE-SU-2024:12423-1 1 CVE
libexslt0-1.1.37-1.1 on GA media
These are all security issues fixed in the libexslt0-1.1.37-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2019:1357-1 1 CVE
Security update for curl
This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftp_receive_packet that receives data from a TFTP server (bsc#1135170).
first May 27, 2019 -
High max 7.5SUSE-SU-2025:0299-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 (bsc#1236518)
first Jan 30, 2025 -
High max 7.5SUSE-SU-2023:3164-1 1 CVE
Security update for jtidy
This update for jtidy fixes the following issues: - CVE-2023-34623: Prevent crash when parsing documents with excessive nesting (bsc#1212404).
first Aug 2, 2023 -
High max 7.8SUSE-SU-2021:0532-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute cod…
first Feb 19, 2021 -
High max 8.8openSUSE-SU-2024:0311-1 6 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 129.0.6668.58 (stable released 2024-09-17) (boo#1230678) * CVE-2024-8904: Type Confusion in V8 * CVE-2024-8905: Inappropriate implementation in V8 * CVE-2024-8906: Incorrect security UI in Download…
first Sep 24, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspi…
first Jan 27, 2025 -
High max 7.8SUSE-SU-2023:3572-1 2 CVEs
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_151 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds m…
first Sep 10, 2023 -
High max 7.5SUSE-SU-2024:0157-1 1 CVE
Security update for libcryptopp
This update for libcryptopp fixes the following issues: - CVE-2023-50981: Fixed a potential denial of service issue via crafted DER public key data (bsc#1218222).
first Jan 18, 2024 -
High max 7.8
Security update for ghostscript-library
This update for ghostscript fixes the following security vulnerability: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453)
first May 3, 2017 -
High max 7.8
Security update for flash-player
flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exp…
first Apr 8, 2016 -
High max 7.8SUSE-SU-2023:2679-1 4 CVEs
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_131 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers ca…
first Jun 28, 2023 -
High max 7.5openSUSE-SU-2025:14932-1 1 CVE
qubesome-0.0.10-1.1 on GA media
These are all security issues fixed in the qubesome-0.0.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 26, 2025 -
High max 8.3
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables…
first Jul 20, 2021 -
High max 7.8SUSE-SU-2022:4545-1 5 CVEs
Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_133 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (b…
first Dec 18, 2022 -
High max 7.5SUSE-SU-2024:0590-1 6 CVEs
Security update for bind
This update for bind fixes the following issues: Update to release 9.16.48: Feature Changes: * The IP addresses for B.ROOT-SERVERS.NET have been updated to 170.247.170.2 and 2801:1b8:10::b. Security Fixes: * Validating DNS messages containing a lot of DNSSEC …
first Feb 22, 2024 -
High max 7.5openSUSE-SU-2018:0632-1 4 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Update to version 1.11.10 LTS * Fixes CVE-2018-6188 boo#1077714, CVE-2017-7234, CVE-2017-7233, CVE-2017-12794
first Mar 7, 2018 -
High max 8.8SUSE-SU-2023:4441-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278) - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)
first Nov 14, 2023 -
High max 8.8SUSE-SU-2024:3192-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 13.16 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 10, 2024 -
High max 7.8SUSE-SU-2023:3421-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2156: Fixed IPv6 RPL Protocol Reachable Assertion Denial-of-Service Vulnerability (bsc#1211131). - CVE-2022-409…
first Aug 24, 2023 -
High max 7.1openSUSE-SU-2024:10711-1 6 CVEs
dbus-1-1.12.20-5.5 on GA media
These are all security issues fixed in the dbus-1-1.12.20-5.5 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:1631-1 1 CVE
Security update for kafka
This security update of kafka fixes the following issue: - CVE-2021-4104: Remove JMSAppender from log4j jars during build to prevent bsc#1193662,
first Dec 28, 2021 -
High max 7.5
tor-0.2.8.11-1.1 on GA media
These are all security issues fixed in the tor-0.2.8.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:03339-1 2 CVEs
Security update for the Linux Kernel (Live Patch 69 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_261 fixes several issues. The following security issues were fixed: - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to operate …
first Sep 24, 2025 -
High max 7.8SUSE-SU-2022:4371-1 2 CVEs
Security update for busybox
This update for busybox fixes the following issues: - CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744). - CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660). - Update to 1.35.0 also introduced: - awk: fix p…
first Dec 8, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…
first Mar 9, 2022 -
High max 7.5SUSE-SU-2021:2353-1 6 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362:…
first Jul 15, 2021 -
High max 7.8SUSE-SU-2019:2756-1 44 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function …
first Oct 23, 2019 -
High max 8.1SUSE-SU-2022:4003-1 1 CVE
Security update for nodejs16
This update for nodejs16 fixes the following issues: - Update to LTS versino 16.18.1: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). - Update to LTS version 16.18.0: * http: throw error on content-length mismatc…
first Nov 15, 2022 -
High max 7.8SUSE-SU-2022:2147-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511).
first Jun 21, 2022 -
High max 7.5SUSE-SU-2018:2861-1 1 CVE
Security update for dom4j
This update for dom4j fixes the following issues: - CVE-2018-1000632: Prevent XML injection vulnerability that allowed an attacker to tamper with XML documents (bsc#1105443)
first Sep 25, 2018 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). - CVE-2023-6121: Fixed …
first Jan 16, 2024 -
High max 8.1SUSE-SU-2023:2881-1 1 CVE
Security update for perl
This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).
first Jul 19, 2023 -
High max 8.8SUSE-SU-2025:01729-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2025-3887: Fixed possible RCE vulnerability via buffer overflow in H265 Codec Parsing (bsc#1242809).
first May 28, 2025