12,638 results · Clear filters · Feed
-
High max 8.6SUSE-SU-2020:3096-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). - CVE-2019-8341: Fixed a command injection in function from_string (bsc#1125815).
first Oct 29, 2020 -
High max 8.1
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.6.1 ESR MFSA 2020-11 (bsc#1168630) * CVE-2020-6819 (bmo#1620818) Use-after-free while running the nsDocShell destructor * CVE-2020-6820 (bmo#1626728) Use-after-fr…
first Apr 7, 2020 -
High max 8.4SUSE-SU-2019:2371-1 12 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 5 Fix Pack 40. Security issues fixed: - CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021) - CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021) - C…
first Sep 12, 2019 -
High max 8.3SUSE-SU-2020:0660-1 1 CVE
Security update for openstack-manila
This update for openstack-manila fixes the following issues: - CVE-2020-9543: Fixed an issue where other project users to view, update, delete, or share resources that do not belong to them, due to a context-free lookup of a UUID (bsc#1165643)
first Mar 12, 2020 -
High max 8.1SUSE-SU-2025:03097-1 11 CVEs
Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245504) . - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#…
first Sep 8, 2025 -
High max 8.8SUSE-SU-2025:02876-1 4 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_55_91 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …
first Aug 19, 2025 -
High max 8.1
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 68.6.1esr MFSA 2020-11 (bsc#1168630) * CVE-2020-6819 (bmo#1620818) Use-after-free while running the nsDocShell destructor * CVE-2020-6820 (bmo#1626728) Use-after-free when handling a…
first Apr 6, 2020 -
High max 8.8SUSE-SU-2018:3387-1 40 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 to version 2.20.3 fixes the issues: The following security vulnerabilities were addressed: - CVE-2018-12911: Fixed an off-by-one error in xdg_mime_get_simple_globs (boo#1101999) - CVE-2017-13884: An unspecified issue allowed remote…
first Oct 24, 2018 -
High max 8.8openSUSE-SU-2021:1550-1 1 CVE
Security update for hiredis
This update for hiredis fixes the following issues: - CVE-2021-32765: Fix integer/buffer (boo#1191331) This update was imported from the openSUSE:Leap:15.2:Update update project.
first Dec 9, 2021 -
High max 7.5SUSE-SU-2025:0420-1 2 CVEs
Security update for skopeo
This update for skopeo fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227056) - CVE-2023-45288: possible excessive CPU consumption due t…
first Feb 11, 2025 -
High max 7.8SUSE-SU-2022:4304-1 1 CVE
Security update for emacs
This update for emacs fixes the following issues: - CVE-2022-45939: Fixed shell command injection via source code files when using ctags (bsc#1205822).
first Dec 1, 2022 -
High max 8.8openSUSE-SU-2020:2304-1 5 CVEs
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free w…
first Dec 21, 2020 -
High max 8.8SUSE-SU-2021:0800-1 1 CVE
Security update for velocity
This update for velocity fixes the following issues: - CVE-2020-13936: Fixed an arbitrary code execution when attacker is able to modify templates (bsc#1183360).
first Mar 16, 2021 -
High max 8.8openSUSE-SU-2024:14469-1 2 CVEs
chromedriver-130.0.6723.116-1.1 on GA media
These are all security issues fixed in the chromedriver-130.0.6723.116-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 7, 2024 -
High max 7.8SUSE-SU-2023:3006-1 3 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive info…
first Jul 27, 2023 -
High max 7.5openSUSE-SU-2024:0408-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed potential denial-of-service in django.utils.html.strip_tags() (boo#1234232).
first Dec 14, 2024 -
High max 7.8SUSE-SU-2024:3775-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_10_8 fixes one issue. The following security issue was fixed: - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819).
first Oct 29, 2024 -
High max 7.5SUSE-SU-2023:2295-1 2 CVEs
Security update for rmt-server
This update for rmt-server fixes the following issues: Updated to version 2.13: - CVE-2023-28120: Fixed a potential XSS issue in an embedded dependency (bsc#1209507). - CVE-2023-27530: Fixed a denial of service issue in multipart request parsing (bsc#1209096)…
first May 25, 2023 -
High max 8.8SUSE-SU-2023:3267-1 1 CVE
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. (bsc#1213126)
first Aug 10, 2023 -
High max 8.1SUSE-SU-2022:3989-1 1 CVE
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119).
first Nov 15, 2022 -
High max 8.8SUSE-SU-2024:0229-1 9 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.7.0 ESR (MFSA2024-02) (bsc#1218955): - CVE-2024-0741: Out of bounds write in ANGLE - CVE-2024-0742: Failure to update user input timestamp - CVE-2024-074…
first Jan 25, 2024 -
High max 7.5SUSE-SU-2023:2929-1 6 CVEs
Security update for samba
This update for samba fixes the following issues: samba was updated to version 4.17.9: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Req…
first Jul 21, 2023 -
High max 7.1SUSE-SU-2024:0539-1 9 CVEs
Security update for libssh
This update for libssh fixes the following issues: Update to version 0.9.8 (jsc#PED-7719): * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209) * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126) * Fix CVE-2023-6…
first Feb 20, 2024 -
High max 7.5SUSE-SU-2025:01817-1 3 CVEs
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332…
first Jun 5, 2025 -
High max 7.8SUSE-SU-2023:2700-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_148 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
first Jun 28, 2023 -
High max 7.5openSUSE-SU-2023:0077-1 11 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-24580: Prevent DOS in file uploads. (boo#1208082) update to 1.11.15 * CVE-2018-14574: Fixed Open redirect possibility in CommonMiddleware (boo#1102680) * Fixed WKBWriter.write() and write_he…
first Mar 20, 2023 -
High max 7.8SUSE-SU-2022:4611-1 31 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631). - CVE-2022-3424:…
first Dec 23, 2022 -
High max 8.8
Security update for flash-player
This update for flash-player to version 11.2.202.643 fixes one security issue. This security issue was fixed: - CVE-2016-7855: Use-after-free vulnerability that could lead to code execution (bsc#1007098).
first Oct 27, 2016 -
High max 8.2SUSE-SU-2024:2202-1 3 CVEs
Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_186 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-6931: Fixed an out of boun…
first Jun 25, 2024 -
High max 7.8SUSE-SU-2024:0871-1 10 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2023-48231: Fixed Use-After-Free in win_close() (bsc#1217316). - CVE-2023-48232: Fixed Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320). - CVE-2023-48233: Fixed overflow with count for…
first Mar 13, 2024 -
High max 8.8openSUSE-SU-2022:10139-1 18 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 106.0.5249.91 (boo#1203808): * CVE-2022-3370: Use after free in Custom Elements * CVE-2022-3373: Out of bounds write in V8 Uncludes changes from 106.0.5249.61: * CVE-2022-3304: Use after free in CS…
first Oct 3, 2022 -
High max 7.5openSUSE-SU-2024:14424-1 1 CVE
gitoxide-0.38.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.38.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 23, 2024 -
High max 7.8SUSE-SU-2025:03156-1 9 CVEs
Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930)…
first Sep 10, 2025 -
High max 7.5SUSE-SU-2017:2143-1 1 CVE
Security update for strongswan
This update for strongswan fixes the following issues: CVE-2017-11185: Specific RSA signatures passed to the gmp plugin for verification can cause a null-pointer dereference and it may lead to a denial of service (bsc#1051222)
first Aug 11, 2017 -
High max 7.5openSUSE-SU-2024:13914-1 3 CVEs
bouncycastle-1.78.1-1.1 on GA media
These are all security issues fixed in the bouncycastle-1.78.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:02717-1 3 CVEs
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249). - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs …
first Aug 6, 2025 -
High max 8.8SUSE-SU-2024:2163-1 6 CVEs
Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi …
first Jun 21, 2024 -
High max 7.5openSUSE-SU-2024:11999-1 4 CVEs
ruby3.1-rubygem-nokogiri-1.13.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2019:1773-1 2 CVEs
Security update for postgresql10
This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034). - CVE-2019-10130: Prevent row-level security policies from being bypassed via selec…
first Jul 21, 2019 -
High max 7.1SUSE-SU-2024:0204-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300). - CVE-2023-50230: Fixed an out of bounds write in the secondary ver…
first Jan 24, 2024