12,602 results · Clear filters · Feed
-
High max 8.8
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…
first Sep 15, 2023 -
High max 8.8
chromedriver-103.0.5060.114-1.1 on GA media
These are all security issues fixed in the chromedriver-103.0.5060.114-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8openSUSE-SU-2019:1672-1 3 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wi…
first Jun 30, 2019 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…
first Jan 14, 2025 -
High max 7.5openSUSE-SU-2021:4112-1 1 CVE
Security update for log4j12
This update for log4j12 fixes the following issues: - CVE-2021-4104: Disable the JMSAppender class from log4j to protect against the log4jshell vulnerability. [bsc#1193662]
first Dec 17, 2021 -
High max 7.5SUSE-SU-2023:3207-1 5 CVEs
Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (…
first Aug 7, 2023 -
High max 7.5openSUSE-SU-2024:14225-1 2 CVEs
curl-8.9.0-1.1 on GA media
These are all security issues fixed in the curl-8.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 30, 2024 -
High max 7.8SUSE-SU-2023:3585-1 4 CVEs
Security update for the Linux Kernel (Live Patch 44 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_162 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory a…
first Sep 11, 2023 -
High max 7.5SUSE-SU-2025:1518-1 11 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_lis…
first May 8, 2025 -
High max 8.8SUSE-SU-2024:3361-1 3 CVEs
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2023-52846: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). - CVE-2022-48662: Fixed a general protection fault (GPF)…
first Sep 23, 2024 -
High max 8.8openSUSE-SU-2024:12098-1 2 CVEs
MozillaThunderbird-91.9.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:01968-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-5601: Dissection engine crash (bsc#1244081).
first Jun 16, 2025 -
High max 8.1SUSE-SU-2022:3968-1 1 CVE
Security update for nodejs14
This update for nodejs14 fixes the following issues: - Update to 14.21.1: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). - Update to 14.21.0: - src: add --openssl-shared-config option
first Nov 14, 2022 -
High max 8.1SUSE-SU-2022:2039-1 6 CVEs
Security update for grub2
This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…
first Jun 10, 2022 -
High max 8.8SUSE-SU-2017:2871-2 2 CVEs
Security update for wget
This update for wget fixes the following security issues: - CVE-2017-13089,CVE-2017-13090: Missing checks for negative remaining_chunk_size in skip_short_body and fd_read_body could cause stack buffer overflows, which could have been exploited by malicious se…
first Nov 16, 2017 -
High max 8.4openSUSE-SU-2024:14190-1 1 CVE
conftest-0.54.0-1.1 on GA media
These are all security issues fixed in the conftest-0.54.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 15, 2024 -
High max 7.8openSUSE-SU-2023:0054-1 1 CVE
Security update for jhead
This update for jhead fixes the following issues: - Fixed autorotation problem caused by CVE-2022-41751 patch. [boo#1207150]
first Feb 20, 2023 -
High max 8.0SUSE-SU-2019:3215-1 2 CVEs
Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_15 fixes several issues. The following security issues were fixed: - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escala…
first Dec 10, 2019 -
High max 8.8SUSE-SU-2018:2470-1 5 CVEs
Security update for gtk2
This update for gtk2 provides the following fixes: These security issues were fixed: - CVE-2017-6312: Prevent integer overflow that allowed context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image…
first Aug 21, 2018 -
High max 8.7SUSE-SU-2024:3303-1 4 CVEs
Security update for python312
This update for python312 fixes the following issues: - Update to 3.12.6 - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module. (bsc#1228780). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines. (bsc#1229…
first Sep 18, 2024 -
High max 7.4openSUSE-SU-2024:14338-1 1 CVE
wpa_supplicant-2.11-1.1 on GA media
These are all security issues fixed in the wpa_supplicant-2.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 13, 2024 -
High max 7.5SUSE-SU-2024:1774-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
first May 24, 2024 -
High max 7.5openSUSE-SU-2024:14083-1 1 CVE
python310-3.10.14-3.1 on GA media
These are all security issues fixed in the python310-3.10.14-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 29, 2024 -
High max 7.8SUSE-SU-2022:4516-1 7 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointve…
first Dec 16, 2022 -
High max 7.8SUSE-SU-2023:3390-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inform…
first Aug 23, 2023 -
High max 7.5SUSE-SU-2023:0516-2 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - Add wheel subpackage with the generated wheel for this package (bsc#1176262, CVE-2019-20916). - Make wheel a separate build run to avoid the setuptools/wheel build cycle. - Switch this package to use up…
first Feb 24, 2023 -
High max 7.5openSUSE-SU-2025:15070-1 1 CVE
libevtlog-4_8-0-4.8.2-1.1 on GA media
These are all security issues fixed in the libevtlog-4_8-0-4.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first May 8, 2025 -
High max 8.8openSUSE-SU-2024:13906-1 3 CVEs
ffmpeg-4-4.4.4-7.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.4-7.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.4SUSE-SU-2024:2475-1 2 CVEs
Security update for p7zip
This update for p7zip fixes the following issues: - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets (bsc#1227358) - CVE-2023-52169: Fixed out-of-bounds read in NTFS handler (bsc#12273…
first Jul 12, 2024 -
High max 8.8openSUSE-SU-2024:14518-1 1 CVE
chromedriver-131.0.6778.85-1.1 on GA media
These are all security issues fixed in the chromedriver-131.0.6778.85-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 22, 2024 -
High max 8.2SUSE-SU-2023:4647-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-45539: Fixed misinterpretation of a path_end rule with # as part of the URI component (bsc#1217653).
first Dec 6, 2023 -
High max 7.5SUSE-SU-2024:1161-1 1 CVE
Security update for go1.21
This update for go1.21 fixes the following issues: - CVE-2023-45288: Fixed denial of service via HTTP/2 continuation frames (bsc#1221400) Other changes: - go minor release upgrade to 1.21.9 (bsc#1212475)
first Apr 8, 2024 -
High max 8.8SUSE-SU-2020:1255-1 57 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-11494: An issue was discovered in slc_bump in drivers/net/can/slcan.c, which allowed attackers to read uninitializ…
first May 26, 2020 -
High max 8.0SUSE-SU-2018:1511-1 4 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP2)
This update for the Linux Kernel 4.4.114-92_67 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in …
first Jun 5, 2018 -
High max 7.3openSUSE-SU-2022:10160-1 1 CVE
Security update for v4l2loopback
This update for v4l2loopback fixes the following issues: - Fix string format vulnerability (boo#1202156, CVE-2022-2652)
first Oct 20, 2022 -
High max 7.1SUSE-SU-2020:1672-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).
first Jun 18, 2020 -
High max 7.8SUSE-SU-2023:2719-1 3 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_147 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-1390: Fixed re…
first Jun 29, 2023 -
High max 7.5SUSE-SU-2019:0054-2 3 CVEs
Security update for systemd
This update for systemd fixes the following issues: * Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323): Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a loca…
first Apr 12, 2019 -
High max 7.5SUSE-SU-2023:2793-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).
first Jul 7, 2023 -
High max 7.5SUSE-SU-2018:1121-1 1 CVE
Security update for corosync
This update for corosync fixes the following issue: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix a …
first May 2, 2018