Threat database

A security update for Thunderbird addresses multiple vulnerabilities referenced by CVE-2025-0237 and related CVEs. This update is functionally equivalent to the Red Hat advisory RHSA-2025:0147. No specific affected versions or detailed vulnerability descriptions are provided in the available data.

Multiple security issues affecting the libQt5Pdf5 package were addressed in version 5.15.18-1.1 on the GA media of openSUSE Tumbleweed. These vulnerabilities have been fixed in this package update. No specific details on the nature of the vulnerabilities or affected versions are provided. The severity is assessed as medium based on the available information.

This is a security update for Thunderbird provided by the SUSE Product Security Team, addressing multiple vulnerabilities including CVE-2024-11159 and several related CVEs. The update corresponds functionally to the Red Hat advisory RHSA-2024:10592. No specific affected versions or detailed technical information are provided in the input data.

This is a security update for dotnet9.0 provided by SUSE Product Security Team, functionally equivalent to Red Hat advisory RHSA-2024:9543. The update addresses vulnerabilities identified under CVE-2024-43498. No CVSS score is provided, and no known exploits are reported in the wild. The severity is assessed as low.

This is a security update for the GNOME Shell component provided by SUSE, addressing the vulnerability identified as CVE-2024-36472. The update corresponds functionally to the Red Hat advisory RHSA-2024:9114. No specific affected versions or detailed technical information are provided. The severity is assessed as low.

This is a security update for the bpftrace tool provided by SUSE, addressing the vulnerability identified as CVE-2024-2313. The update corresponds functionally to the Red Hat advisory RHSA-2024:9188. No specific affected versions or detailed technical information are provided. The severity is assessed as low.

A security update for the cyrus-imapd package addresses a vulnerability tracked as CVE-2024-34055. This update is functionally equivalent to the Red Hat advisory RHSA-2024:9195. No detailed technical information or CVSS score is provided. The severity is assessed as low based on available data.

This is a security update for the nano text editor provided by SUSE, addressing the vulnerability identified as CVE-2024-5742. The update is functionally equivalent to the Red Hat advisory RHSA-2024:9430. No specific affected versions or detailed technical information are provided. The severity is assessed as low.

The nodejs-electron-31.7.2-1.1 package on the GA media of openSUSE Tumbleweed addresses multiple security issues. These vulnerabilities have been fixed in this package version. No specific details about the individual vulnerabilities or affected versions are provided. The overall severity is assessed as medium.

This entry refers to a security update for the 'shim' component provided by the SUSE Product Security Team, which is functionally equivalent to the Red Hat advisory RHSA-2024:1903. No specific technical details or affected versions are provided. The severity is assessed as medium.

This security update for Chromium addresses multiple vulnerabilities including a use-after-free in Dawn, inappropriate implementation and type confusion issues in V8, and an integer overflow in Skia. These flaws were fixed in Chromium version 129.0.6668.70 released on 2024-09-24. The vulnerabilities are rated as high severity. No CVSS scores are provided. No known exploits in the wild have been reported. No specific affected versions were detailed beyond the update version.

A security update for the SUSE Linux Enterprise 15 SP4 RT kernel addresses multiple security bug fixes, including CVE-2024-45003 which prevents eviction of an inode under the inode LRU traversing context. This update also reverts several non-security bug fixes related to memory management and recursion issues.

SUSE Linux Enterprise 15 SP6 RT kernel received an update addressing multiple security bug fixes. The update also includes several non-security bug fixes related to soundwire regression and memory management issues. No specific CVE identifiers or detailed vulnerability descriptions are provided.

A security update for the SUSE Linux Enterprise 12 SP5 RT kernel addresses multiple security bugfixes, including a regression in NFS that could cause data corruption. The update fixes error handling for O_DIRECT write scheduling in NFS, resolving the issue identified as bsc#1224785.

A security update for Chromium version 128.0.6613.137 addresses multiple high-severity vulnerabilities including a heap buffer overflow in Skia, use-after-free issues in Media Router and Autofill, and a type confusion flaw in V8. These vulnerabilities could potentially lead to memory corruption and other security issues if exploited. The update was released on 2024-09-10 by the SUSE Product Security Team.

This is a security update for Firefox provided by the SUSE Product Security Team, addressing CVE-2024-7652 and related CVEs. The update corresponds functionally to Red Hat advisory RHSA-2024:6681. No specific affected versions or detailed vulnerability descriptions are provided. The severity is assessed as low.