12,602 results · Clear filters · Feed
-
High max 7.8openSUSE-SU-2021:2435-1 1 CVE
Security update for crmsh
This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553) - Fix: history: use Path.mkdir instead of mkdir command(bsc#11…
first Jul 21, 2021 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…
first Apr 29, 2023 -
High max 7.3SUSE-SU-2019:2983-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issue: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).
first Nov 15, 2019 -
High max 7.8SUSE-SU-2025:0265-1 10 CVEs
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix su…
first Jan 27, 2025 -
High max 7.8SUSE-SU-2025:01977-1 5 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49178: Unproce…
first Jun 17, 2025 -
High max 7.5SUSE-SU-2023:2639-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2023-24329: Fixed urllib.parse bypass when supplying a URL that starts with blank characters (bsc#1208471).
first Jun 26, 2023 -
High max 8.6SUSE-SU-2025:4107-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).
first Nov 14, 2025 -
High max 7.5SUSE-SU-2017:1736-1 2 CVEs
Security update for bind
This update for bind fixes the following issues: - An attacker with the ability to send and receive messages to an authoritative DNS server was able to circumvent TSIG authentication of AXFR requests. A server that relied solely on TSIG keys for protection co…
first Jun 29, 2017 -
High max 8.8SUSE-SU-2024:3640-1 2 CVEs
Security update for the Linux Kernel (Live Patch 50 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_183 fixes several issues. The following security issues were fixed: - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (…
first Oct 15, 2024 -
High max 8.8SUSE-SU-2022:3606-1 6 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_93 fixes several issues. The following security issues were fixed: - CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994). - CVE-2022-42719: Fixed use-after-free in…
first Oct 18, 2022 -
High max 7.1SUSE-SU-2020:0131-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location (bsc#1158095).
first Jan 20, 2020 -
High max 7.5SUSE-SU-2022:1265-1 1 CVE
Security update for jsoup, jsr-305
This update for jsoup, jsr-305 fixes the following issues: - CVE-2021-37714: Fixed infinite in untrusted HTML or XML data parsing (bsc#1189749). Changes in jsr-305: - Build with java source and target levels 8 - Upgrade to upstream version 3.0.2 Changes in js…
first Apr 19, 2022 -
High max 8.0
Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_3 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2018-20856: Fixed a use-afte…
first Dec 11, 2019 -
High max 7.5SUSE-SU-2025:0342-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 (bsc#1236518)
first Feb 3, 2025 -
High max 7.8SUSE-SU-2023:3035-1 3 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_134 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt …
first Jul 31, 2023 -
High max 8.8SUSE-SU-2022:2522-1 3 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 (bsc#1201221): - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupt…
first Jul 22, 2022 -
High max 8.8openSUSE-SU-2024:12404-1 6 CVEs
chromedriver-106.0.5249.119-1.1 on GA media
These are all security issues fixed in the chromedriver-106.0.5249.119-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:3470-1 4 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API …
first Sep 27, 2024 -
High max 8.8SUSE-SU-2020:2140-1 1 CVE
Security update for rubygem-actionview-4_2
This update for rubygem-actionview-4_2 fixes the following issues: - Fixed a potential remote code execution of user-provided local names (bsc#1173144, CVE-2020-8163).
first Aug 6, 2020 -
High max 7.5openSUSE-SU-2024:12616-1 1 CVE
wasm-pack-0.10.3~0-2.1 on GA media
These are all security issues fixed in the wasm-pack-0.10.3~0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.0SUSE-SU-2022:4573-1 38 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial of servi…
first Dec 19, 2022 -
High max 7.4SUSE-SU-2024:3162-1 7 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 30 (bsc#1228346) - CVE-2024-21147: Fixed an array index overflow in RangeCheckElimination. (bsc#1228052) - CVE-2024-21145: Fixed an out-of-bounds access…
first Sep 6, 2024 -
High max 7.5SUSE-SU-2023:1747-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).
first Apr 4, 2023 -
High max 7.6openSUSE-SU-2024:11358-1 8 CVEs
runc-1.0.2-1.2 on GA media
These are all security issues fixed in the runc-1.0.2-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2024:0153-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…
first Jan 18, 2024 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 65.0.3467.62 - CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108 - DNA-81387 Remove support for old bundle structure in signing scripts - DNA-81675 Update widevin…
first Dec 10, 2019 -
High max 7.4SUSE-SU-2022:2401-1 1 CVE
Security update for python-PyJWT
This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756).
first Jul 14, 2022 -
High max 8.8SUSE-SU-2018:1180-1 3 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2017-9935: There was a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an…
first May 9, 2018 -
High max 8.8
chromedriver-98.0.4758.102-1.1 on GA media
These are all security issues fixed in the chromedriver-98.0.4758.102-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:03356-1 2 CVEs
Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_266 fixes several issues. The following security issues were fixed: - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). - CVE-2025-38498: do_change_type(): refuse to operate …
first Sep 25, 2025 -
High max 7.5SUSE-SU-2022:3250-1 4 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2022-35949: Fixed SSRF when an application takes in user input into the path/pathname option of undici.request (bsc#1202382). - CVE-2022-35948: Fixed CRLF injection via Content-Type (bsc#1202383). - C…
first Sep 12, 2022 -
High max 7.5SUSE-SU-2019:0926-1 2 CVEs
Security update for tar
This update for tar fixes the following issues: Security issues fixed: - CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496). - CVE-2018-20482: Fixed a denial of service …
first Apr 10, 2019 -
High max 8.6SUSE-SU-2022:4218-1 2 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178). - CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182). Other: - Bump upstream SBAT generation to 3
first Nov 25, 2022 -
High max 8.8openSUSE-SU-2025:0012-1 1 CVE
Security update for opera
This update for opera fixes the following issues: - Update to 116.0.5366.21 * CHR-9904 Update Chromium on desktop-stable-131-5366 to 131.0.6778.86 * DNA-119581 Crash at views::View::ConvertPointToTarget * DNA-119847 Missing Opera warning color and some margin…
first Jan 15, 2025 -
High max 8.1SUSE-SU-2025:03100-1 8 CVEs
Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_20 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 8, 2025 -
High max 7.4SUSE-SU-2025:02510-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530) - CVE-2025-53019: Fixed format specifiers in a filename template may cause a memory leak (bsc#1246534) -…
first Jul 24, 2025 -
High max 7.3SUSE-SU-2022:4603-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337).
first Dec 21, 2022 -
High max 8.8openSUSE-SU-2024:13771-1 1 CVE
chromedriver-122.0.6261.128-1.1 on GA media
These are all security issues fixed in the chromedriver-122.0.6261.128-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2023:1678-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).
first Mar 29, 2023 -
High max 8.8SUSE-SU-2021:0257-1 6 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird was updated to 78.7.0 ESR (MFSA 2021-05, bsc#1181414) * CVE-2021-23953: Fixed a Cross-origin information leakage via redirected PDF requests * CVE-2021-23954: Fixed a type co…
first Feb 1, 2021