Skip to contentOpensuse Backports vulnerabilities
- google chrome, opensuse backports +1 moreInsufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13713Fix available6.5 Medium
- google chrome, opensuse backports +1 moreInsufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13711Fix available5.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70...CVE-2019-13710Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13709Fix available6.5 Medium
- google chrome, opensuse backports sle +1 moreInappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed...CVE-2019-13708Fix available4.3 Medium
- google chrome, opensuse backports +1 moreInsufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0...CVE-2019-13707Fix available5.5 Medium
- google chrome, opensuse backports sle +1 moreOut of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13706Fix available7.8 High
- google chrome, opensuse backports +1 moreInsufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an...CVE-2019-13705Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13704Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70...CVE-2019-13703Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70...CVE-2019-13702Fix available7.8 High
- google chrome, opensuse backports sle +1 moreIncorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13701Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreOut of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13700Fix available8.8 High
- google chrome, opensuse backports sle +1 moreUse after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had...CVE-2019-13699Fix available8.8 High
- osgeo gdal, debian linux, fedoraproject fedora +3 more +5 moreGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the...CVE-2019-17545Fix available9.8 Critical
- nongnu libntlm, canonical ubuntu linux, debian linux +3 more +5 moreLibntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...CVE-2019-17455Fix available9.8 Critical
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- imagemagick, canonical ubuntu linux, opensuse backports +1 more +3 moreImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-16709Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- nic bird, debian linux, fedoraproject fedora +1 more +3 moreBIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer...CVE-2019-16159Fix available7.5 High
- imapfilter project imapfilter, debian linux, fedoraproject fedora +2 more +4 moreIMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.CVE-2016-10937Fix available7.5 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-10206Fix available6.4 Medium
- kde kconfig, canonical ubuntu linux, debian linux +5 more +7 moreIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...CVE-2019-14744Fix available7.8 High
- schismtracker schism tracker, opensuse backports, leap +2 moreAn issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow...CVE-2019-14524Fix available7.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering function of...CVE-2019-5060Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering functionality of...CVE-2019-5059Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...CVE-2019-5058Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the PCX image-rendering functionality of...CVE-2019-5057Fix available8.8 High
- mcpp project mcpp, opensuse backports sle, leap +2 moreMCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.CVE-2019-14274Fix available5.5 Medium
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 morelavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has...CVE-2019-13962Fix available9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +10 more +12 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-13616Fix available8.1 High
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 moreAn Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media...CVE-2019-13602Fix available7.8 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in...CVE-2019-5051Fix available8.8 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4....CVE-2019-5052Fix available8.8 High
- powerdns authoritative, debian pdns, opensuse backports +1 more +3 moreA Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8...CVE-2019-10163Fix available3.5 Low
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...CVE-2019-5840Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreExcessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5839Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed...CVE-2019-5838Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreResource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a...CVE-2019-5837Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...CVE-2019-5836Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreObject lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5835Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-58346.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed...CVE-2019-5833Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed...CVE-2019-5832Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...CVE-2019-5831Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5830Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5829Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5828Fix available8.8 High
- opensuse backports, leap, videolan vlc media player +2 moreDouble Free in VLC versions <= 3.0.6 leads to a crash.CVE-2019-5460Fix available5.5 Medium
- videolan vlc, vlc media player, opensuse backports +2 more +4 moreAn Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.CVE-2019-5459Fix available7.1 High
- Show moreLoading…