12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2021:2354-1 4 CVEs
Security update for nodejs14
This update for nodejs14 fixes the following issues: Update nodejs14 to 14.17.2. Including fixes for: - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362…
first Jul 15, 2021 -
High max 7.3openSUSE-SU-2024:11768-1 1 CVE
cargo1.57-1.57.0-3.1 on GA media
These are all security issues fixed in the cargo1.57-1.57.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2024:1160-1 1 CVE
Security update for go1.22
This update for go1.22 fixes the following issues: - CVE-2023-45288: Fixed denial of service via HTTP/2 continuation frames (bsc#1221400) Other changes: - go minor release upgrade to 1.22.2 (bsc#1218424)
first Apr 8, 2024 -
High max 8.3SUSE-SU-2025:0313-1 2 CVEs
Security update for apptainer
This update for apptainer fixes the following issues: - CVE-2023-45288: Fixed unclosed connections when receiving too many headers in golang.org/x/net/http2 (bsc#1236528)
first Jan 31, 2025 -
High max 7.5openSUSE-SU-2024:13763-1 1 CVE
clojure-1.11.2.1446-1.1 on GA media
These are all security issues fixed in the clojure-1.11.2.1446-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.8SUSE-SU-2025:0090-1 3 CVEs
Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-af…
first Jan 14, 2025 -
High max 7.6openSUSE-SU-2024:12366-1 2 CVEs
grafana-8.5.13-1.1 on GA media
These are all security issues fixed in the grafana-8.5.13-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for opera
This update for opera fixes the following issues: Opera was updated to version 80.0.4170.63 - CHR-8612 Update chromium on desktop-stable-94-4170 to 94.0.4606.81 - DNA-95434 Crash at opera::ThemesService::UpdateCurrentTheme() - The update to chromium 94.0.4606…
first Nov 1, 2021 -
High max 7.5SUSE-SU-2020:2806-1 2 CVEs
Security update for tar
This update for tar fixes the following issues: Security issues fixed: - CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496). - CVE-2018-20482: Fixed a denial of service …
first Sep 30, 2020 -
High max 8.4SUSE-SU-2024:2985-1 1 CVE
Security update for libqt5-qtquick3d
This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed a heap-based buffer overflow in the PLY importer class (bsc#1228199) - Fixed progressive anti-aliasing, which doesn't work if any object in the scene used a PrincipledMateria…
first Aug 20, 2024 -
High max 8.6SUSE-SU-2024:0298-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2023-50269: fixed X-Forwarded-For Stack Overflow. (bsc#1217654) - CVE-2024-23638: fixed Denial of Service attack against Cache Manager error responses. (bsc#1219131)
first Feb 1, 2024 -
High max 8.4SUSE-SU-2020:0355-1 2 CVEs
Security update for pcp
This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763). Non-security issue fixed: - Fixed an dependency issue with pcp2csv (bsc#1129991).
first Feb 7, 2020 -
High max 7.8openSUSE-SU-2025:14864-1 1 CVE
gerbera-2.5.0-1.1 on GA media
These are all security issues fixed in the gerbera-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2025 -
High max 8.6openSUSE-SU-2024:13805-1 4 CVEs
curl-8.7.1-1.1 on GA media
These are all security issues fixed in the curl-8.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2021:2123-1 2 CVEs
Security update for dovecot23
This update for dovecot23 fixes the following issues: - CVE-2021-29157: Local attacker can login as any user and access their emails (bsc#1187418) - CVE-2021-33515: Attacker can potentially steal user credentials and mails (bsc#1187419)
first Jul 10, 2021 -
High max 7.8SUSE-SU-2025:1125-1 3 CVEs
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2023-40403: Fixed sensitive information disclosure during processing web content (bsc#1238591) - CVE-2024-55549: Fixed use-after-free in xsltGetInheritedNsList (bsc#1239637) - CVE-2025-24855: Fixed use…
first Apr 3, 2025 -
High max 8.8SUSE-SU-2023:4216-1 1 CVE
Security update for zlib
This update for zlib fixes the following issues: - CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent (bsc#1216378).
first Oct 26, 2023 -
High max 7.8SUSE-SU-2023:1973-1 3 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_121 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in me…
first Apr 24, 2023 -
High max 8.3SUSE-SU-2024:1461-1 7 CVEs
Security update for shim
This update for shim fixes the following issues: - Update shim-install to set the TPM2 SRK algorithm (bsc#1213945) - Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460) Update to version 15.8: Security i…
first Apr 29, 2024 -
High max 8.0openSUSE-SU-2019:1571-1 11 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading to a k…
first Jun 18, 2019 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807). Bugfixes: - Fixed WebKitGTK not allowing to be used from non-main threads (bsc#12021…
first Sep 23, 2022 -
High max 7.5SUSE-SU-2022:1485-1 3 CVEs
Security update for python39
This update for python39 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). - Update to 3.9.10 (jsc#SLE-23849) - Remove shebangs from from python-base libraries in _libdir. (bsc#1193179) - Updat…
first May 2, 2022 -
High max 7.8SUSE-SU-2024:3836-1 3 CVEs
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - Intermittent nfs mount failures (may be due to SUNR…
first Oct 30, 2024 -
High max 7.8SUSE-SU-2025:01702-2 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-4802: possible execution of attacker controlled code when statically linked setuid binaries using dlopen search for libraries to load in LD_LIBRARY_PATH (bsc#1243317).
first Jun 4, 2025 -
High max 7.5openSUSE-SU-2024:13673-1 1 CVE
python310-Django-4.2.10-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for chromium
This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)
first Nov 4, 2016 -
High max 8.1SUSE-SU-2025:0300-1 1 CVE
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)
first Jan 30, 2025 -
High max 7.8SUSE-SU-2023:4697-1 2 CVEs
Security update for gimp
This update for gimp fixes the following issues: - CVE-2023-44442: Fixed PSD File Parsing Heap-based (bsc#1217161). - CVE-2023-44444: Fixed PSP File Parsing Off-By-One (bsc#1217163).
first Dec 8, 2023 -
High max 7.8SUSE-SU-2025:02619-1 3 CVEs
Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the li…
first Aug 4, 2025 -
High max 7.8SUSE-SU-2022:3283-1 2 CVEs
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2022-24765: Fixed potential command injection via git worktree (bsc#1198234). - CVE-2022-29187: Fixed incomplete fix for CVE-2022-24765 (bsc#1201431).
first Sep 15, 2022 -
High max 7.8SUSE-SU-2019:2003-1 1 CVE
Security update for libreoffice
This update for libreoffice fixes the following issues: LibreOffice was updated to 6.2.5.2 (fate#327121). Security issue fixed: - CVE-2018-16858: LibreOffice was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundle…
first Jul 29, 2019 -
High max 7.0SUSE-SU-2023:3706-1 3 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). - CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230). - CVE-2023-32360: Fixed informa…
first Sep 20, 2023 -
High max 7.5SUSE-SU-2020:0320-1 1 CVE
Security update for terraform
This update for terraform to version 0.12.19 fixes the following issues: - CVE-2019-19316: Fixed an information leak where SAS token could be transfered in cleartext (bsc#1158440).
first Feb 4, 2020 -
High max 7.5openSUSE-SU-2024:14141-1 2 CVEs
python310-httplib2-0.22.0-4.5 on GA media
These are all security issues fixed in the python310-httplib2-0.22.0-4.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
High max 8.2SUSE-SU-2023:2296-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054).
first May 25, 2023 -
High max 7.3openSUSE-SU-2022:10214-1 1 CVE
Security update for python-joblib
This update for python-joblib fixes the following issues: - CVE-2022-21797: Fixed arbitrary code execution in joblib (boo#1204232)
first Nov 23, 2022 -
High max 8.0
Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_120 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…
first Dec 11, 2019 -
High max 9.8SUSE-SU-2024:2036-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)
first Jun 17, 2024 -
High max 7.5SUSE-SU-2023:4212-1 11 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Updated to version 115.4.0 ESR (bsc#1216338). - CVE-2023-5721: Fixed a potential clickjack via queued up rendering. - CVE-2023-5722: Fixed a cross-Origin size and header leakage. - CVE-2023-5723: Fi…
first Oct 26, 2023 -
High max 7.5SUSE-SU-2023:0007-1 1 CVE
Security update for ffmpeg
This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
first Jan 2, 2023