12,602 results · Clear filters · Feed
-
High max 8.8
MozillaThunderbird-115.3.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-115.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.1SUSE-SU-2019:0249-2 3 CVEs
Security update for curl
This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP (bsc#1123378). - CVE-2019-3822: Fixed a stack based buffer overflow in the function crea…
first Apr 12, 2019 -
High max 7.5SUSE-SU-2022:3108-1 3 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a vic…
first Sep 6, 2022 -
High max 7.8SUSE-SU-2023:4219-1 4 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (b…
first Oct 26, 2023 -
High max 7.5SUSE-SU-2021:0754-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331) - Fixed unresolved error codes …
first Mar 9, 2021 -
High max 8.2SUSE-SU-2023:1673-1 2 CVEs
Security update for xstream
This update for xstream fixes the following issues: - CVE-2022-40151: Fixed stackoverflow in XML serialization (bsc#1203520). - CVE-2022-41966: Fixed denial of service via uncontrolled recursion during deserialization (bsc#1206729). - Upgrade to 1.4.20.
first Mar 29, 2023 -
High max 7.3openSUSE-SU-2024:14378-1 1 CVE
bsdtar-3.7.6-1.1 on GA media
These are all security issues fixed in the bsdtar-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 2, 2024 -
High max 7.4openSUSE-SU-2019:2474-1 2 CVEs
Security update for python-ecdsa
This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient ch…
first Nov 9, 2019 -
High max 7.8SUSE-SU-2025:03498-1 2 CVEs
Security update for the Linux Kernel (Live Patch 68 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_258 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race condi…
first Oct 8, 2025 -
High max 8.8SUSE-SU-2019:3389-1 24 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16746: There was an issue in net/wireless/nl80211.c where the kernel did not check the length of variable elements…
first Dec 27, 2019 -
High max 7.8
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). -…
first Jun 5, 2023 -
High max 8.6SUSE-SU-2023:1701-1 2 CVEs
Security update for grub2
This security update of grub2 fixes the following issues: - CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178). - CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182). - Bump upstream SBAT generation to 3 - rebuild …
first Mar 30, 2023 -
High max 7.8
Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…
first Mar 19, 2025 -
High max 8.6openSUSE-SU-2024:13930-1 5 CVEs
python310-Jinja2-3.1.4-1.1 on GA media
These are all security issues fixed in the python310-Jinja2-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:0436-1 1 CVE
Security update for python-nltk
This update for python-nltk fixes the following issues: Update to 3.4.5 (boo#1146427, CVE-2019-14751): * CVE-2019-14751: Fixed Zip slip vulnerability in downloader for the unlikely situation where a user configures their downloader to use a compromised server…
first Mar 31, 2020 -
High max 8.1SUSE-SU-2018:1826-1 8 CVEs
Security update for tiff
This update for tiff fixes the following issues: These security issues were fixed: - CVE-2017-18013: There was a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. (bsc#1074317) - CVE-2018-10963: The …
first Jun 27, 2018 -
High max 7.8SUSE-SU-2023:4308-1 4 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network sc…
first Oct 31, 2023 -
High max 7.8SUSE-SU-2023:3313-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inform…
first Aug 14, 2023 -
High max 8.8SUSE-SU-2024:2107-1 2 CVEs
Security update for php-composer2
This update for php-composer2 fixes the following issues: - CVE-2024-35241: Fixed code execution when installing packages in repository with specially crafted branch names (bsc#1226181). - CVE-2024-35242: Fixed command injection via specially crafted branch n…
first Jun 20, 2024 -
High max 7.8openSUSE-SU-2021:1553-1 1 CVE
Security update for python-Babel
This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768). This update was imported from the SUSE:SLE-15-SP2:Update updat…
first Dec 10, 2021 -
High max 8.8SUSE-SU-2022:0323-1 7 CVEs
Security update for samba
This update contains a major security update for Samba. samba has received security fixes: - CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share (bsc#1193690); - CVE-2021-44142: Out-of-bounds heap r…
first Feb 14, 2022 -
High max 7.8SUSE-SU-2023:3621-1 4 CVEs
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_154 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds mem…
first Sep 15, 2023 -
High max 7.8openSUSE-SU-2024:12777-1 2 CVEs
emacs-28.2-3.1 on GA media
These are all security issues fixed in the emacs-28.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:0736-1 2 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2024-47220: Fixed a HTTP request smuggling attack in WEBrick (bsc#1230930) - CVE-2024-49761: Fixed a ReDoS vulnerability in ruby rexml (bsc#1232440) Other fixes: - [ruby/uri] Fix quadratic backtracking…
first Feb 26, 2025 -
High max 7.5openSUSE-SU-2024:14553-1 1 CVE
jupyter-jupyterlab-latex-4.1.1-2.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-latex-4.1.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024 -
High max 7.5openSUSE-SU-2024:12969-1 5 CVEs
libopenssl-3-devel-3.1.1-1.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:1062-1 18 CVEs
Security update for chromium
This update for chromium to version 73.0.3683.75 fixes the following issues: Security issues fixed (bsc#1129059): - CVE-2019-5787: Fixed a use after free in Canvas. - CVE-2019-5788: Fixed a use after free in FileAPI. - CVE-2019-5789: Fixed a use after free in…
first Mar 28, 2019 -
High max 7.5SUSE-SU-2023:2476-1 9 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628). - CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631)…
first Jun 9, 2023 -
High max 7.8SUSE-SU-2022:4533-1 5 CVEs
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_doin…
first Dec 17, 2022 -
High max 8.8openSUSE-SU-2019:1753-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wi…
first Jul 20, 2019 -
High max 8.8SUSE-SU-2024:3160-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 14.13 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 6, 2024 -
High max 8.8SUSE-SU-2024:3154-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: - Upgrade to 14.13 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)
first Sep 6, 2024 -
High max 7.8
Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (…
first Mar 30, 2022 -
High max 8.8SUSE-RU-2022:1114-1 8 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.8.0 ESR (bsc#1197903): MFSA 2022-14 (bsc#1197903) * CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use * CV…
first Apr 6, 2022 -
High max 7.5SUSE-SU-2023:2379-1 2 CVEs
Security update for openstack-heat, python-Werkzeug
This update for openstack-heat, python-Werkzeug contains the following fixes: Security fixes included on this update: openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's environment. (bsc#120…
first Jun 5, 2023 -
High max 8.8SUSE-SU-2022:2072-1 6 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.36.3 (bsc#1200106) - CVE-2022-30293: Fixed heap-based buffer overflow in WebCore::TextureMapperLayer::setContentsLayer (bsc#1199287). - CVE-2022-26700: Fixed memory corruption issue t…
first Jun 14, 2022 -
High max 7.8SUSE-SU-2018:3540-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. OpenSSH…
first Oct 29, 2018 -
High max 8.1SUSE-SU-2025:0958-1 3 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934) - CVE-2020-22021: Fixed Buffer Overflow vulnerability in filter_edges function in libavfilter/vf_yadif.c (bsc#1186586)
first Mar 19, 2025 -
High max 7.8SUSE-SU-2023:2055-1 2 CVEs
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues. The following security issues were fixed: - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).…
first Apr 27, 2023 -
High max 7.5openSUSE-SU-2024:12725-1 4 CVEs
corepack18-18.14.2-1.1 on GA media
These are all security issues fixed in the corepack18-18.14.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024