12,602 results · Clear filters · Feed
-
High max 8.8
nodejs-electron-27.2.0-1.1 on GA media
These are all security issues fixed in the nodejs-electron-27.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2022:0126-1 1 CVE
Security update for openstack-monasca-agent, spark, spark-kit, zookeeper
This update for openstack-monasca-agent, spark, spark-kit, zookeeper fixes the following issues: - CVE-2021-4104: Remove JMSAppender from log4j jars (bsc#1193662)
first Jan 19, 2022 -
High max 8.8SUSE-SU-2024:1468-1 9 CVEs
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2024-31578: Fixed heap use-after-free via av_hwframe_ctx_init() when vulkan_frames init failed (bsc#1223070) - CVE-2023-49502: Fixed heap buffer overflow via the ff_bwdif_filter_intra_c function in liba…
first Apr 29, 2024 -
High max 7.8SUSE-SU-2023:2708-1 3 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_111 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can someti…
first Jun 29, 2023 -
High max 8.8
kernel-devel-longterm-6.6.17-1.1 on GA media
These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:0344-1 2 CVEs
Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…
first Feb 5, 2024 -
High max 7.5SUSE-SU-2022:2720-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-20…
first Aug 9, 2022 -
High max 8.2SUSE-SU-2022:0895-1 4 CVEs
Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2021-43818: Removed SVG image data URLs since they can embed script content (bsc#1193752). - CVE-2021-28957: Fixed a potential XSS due to improper input sanitization (bsc#1184177). - CVE-2020-27783…
first Mar 17, 2022 -
High max 7.5openSUSE-SU-2020:0189-1 38 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.87 (boo#1162833). Security issues fixed: - CVE-2020-6381: Integer overflow in JavaScript (boo#1162833). - CVE-2020-6382: Type Confusion in JavaScript (boo#1162833).…
first Feb 8, 2020 -
High max 7.5SUSE-SU-2021:0651-1 3 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: New upstream LTS version 12.21.0: - CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion (bsc#1182619) - CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) - CVE-2021…
first Feb 26, 2021 -
High max 7.5SUSE-SU-2018:1989-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2016-10708: Prevent DoS due to crashes caused by out-of-sequence NEWKEYS message (bsc#1076957).
first Jul 19, 2018 -
High max 7.5openSUSE-SU-2024:14002-1 1 CVE
gnome-remote-desktop-46.2-1.1 on GA media
These are all security issues fixed in the gnome-remote-desktop-46.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:1703-1 3 CVEs
Security update for helm
This update for helm to version 2.13.1 fixes the following issues: - set correct git_commit value so that 'helm version' reports correctly - added service file for helm-serve - Require golang 1.10.6 or newer - Tiller should only enforce what we expect from He…
first Jul 14, 2019 -
High max 7.5SUSE-SU-2023:3066-1 4 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service …
first Jul 31, 2023 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…
first Apr 29, 2023 -
High max 7.5SUSE-SU-2024:0999-1 2 CVEs
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770). - CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771).
first Mar 26, 2024 -
High max 7.8SUSE-SU-2022:4071-1 2 CVEs
Security update for python39
This update for python39 fixes the following issues: Security fixes: - CVE-2022-42919: Fixed local privilege escalation via the multiprocessing forkserver start method (bsc#1204886). - CVE-2022-45061: Fixed a quadratic IDNA decoding time (bsc#1205244). Other …
first Nov 18, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' a…
first Mar 8, 2022 -
High max 7.5openSUSE-SU-2025:15379-1 1 CVE
minio-client-20250721T052808Z-1.1 on GA media
These are all security issues fixed in the minio-client-20250721T052808Z-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 24, 2025 -
High max 7.8SUSE-SU-2022:1172-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_108 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user pr…
first Apr 12, 2022 -
High max 7.5SUSE-SU-2024:1257-1 3 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_163 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-4…
first Apr 12, 2024 -
High max 8.8openSUSE-SU-2022:10130-1 6 CVEs
Security update for opera
This update for opera fixes the following issues: Update to 91.0.4516.20 - CHR-9019 Update chromium on desktop-stable-105-4516 to 105.0.5195.127 - DNA-101312 Allow changing logged in user with BrowserAPI - The update to chromium 105.0.5195.127 fixes following…
first Sep 26, 2022 -
High max 7.8SUSE-SU-2022:3432-1 2 CVEs
Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_71 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#120311…
first Sep 27, 2022 -
High max 7.8
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achie…
first Feb 14, 2024 -
High max 7.5openSUSE-SU-2021:1113-1 3 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service. (bsc#1187977) - CVE-2020…
first Aug 9, 2021 -
High max 7.0SUSE-SU-2018:3618-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way …
first Nov 5, 2018 -
High max 7.5openSUSE-SU-2019:1666-1 53 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 75.0.3770.90 (boo#1137332 boo#1138287): * CVE-2019-5842: Use-after-free in Blink. Also updated to 75.0.3770.80 boo#1137332: * CVE-2019-5828: Use after free in ServiceWorker * CVE-201…
first Jun 28, 2019 -
High max 8.8SUSE-SU-2024:2199-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491)
first Jun 25, 2024 -
High max 7.5
Security update for go1.20
This update for go1.20 fixes the following issues: - Update to go1.20.10 (bsc#1206346) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109)
first Oct 13, 2023 -
High max 7.8SUSE-SU-2025:03105-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_44 fixes several issues. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
first Sep 8, 2025 -
High max 7.5SUSE-SU-2024:4327-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2024-30251: Fixed infinite loop on specially crafted POST request (bsc#1223726).
first Dec 16, 2024 -
High max 7.8SUSE-SU-2023:1608-1 24 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability …
first Mar 28, 2023 -
High max 7.8openSUSE-SU-2020:2337-1 1 CVE
Security update for blosc
This update for blosc fixes the following issues: Update to version 1.20.1 boo#1179914 CVE-2020-29367: * More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now * BloscLZ updated to 2.3.0. Expect …
first Dec 26, 2020 -
High max 7.8SUSE-SU-2025:0730-1 8 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427). - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429). - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237…
first Feb 26, 2025 -
High max 9.8SUSE-SU-2024:2051-2 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
first Jun 18, 2024 -
High max 7.5SUSE-SU-2021:0436-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).
first Feb 11, 2021 -
High max 7.5openSUSE-SU-2024:13506-1 6 CVEs
traefik-2.10.7-1.1 on GA media
These are all security issues fixed in the traefik-2.10.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0636-1 1 CVE
Security update for slirp4netns
This update for slirp4netns fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in ip_reass (bsc#1170940). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first May 9, 2020 -
High max 8.8SUSE-SU-2022:2837-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2022-0204: Fixed a buffer overflow in the implementation of the gatt protocol (bsc#1194704).
first Aug 18, 2022 -
High max 7.5openSUSE-SU-2024:12503-1 1 CVE
python39-3.9.15-3.1 on GA media
These are all security issues fixed in the python39-3.9.15-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024