5,630 results · Clear filters · Feed
-
Critical max 9.3openSUSE-SU-2022:10081-1 1 CVE
Security update for trivy
This update for trivy fixes the following issues: trivy was updated to version 0.30.4: * fix: remove the first arg when running as a plugin (#2595) * fix: k8s controlplaner scanning (#2593) * fix(vuln): GitLab report template (#2578) Update to version 0.30.3:…
first Aug 6, 2022 -
Critical max 9.8openSUSE-SU-2024:12178-1 2 CVEs
libopenssl-1_0_0-devel-1.0.2u-9.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-9.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
log4j-2.13.2-2.1 on GA media
These are all security issues fixed in the log4j-2.13.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
Security update for log4j
This update for log4j fixes the following issue: CVE-2021-44228: The previously published fix by upstream turned out to be incomplete. Therefore, upstream has recommended disabling JNDI support in log4j by default to be completely sure that this vulnerability…
first Dec 15, 2021 -
Critical max 9.1openSUSE-SU-2025:14664-1 1 CVE
python311-httpx-0.28.1-2.1 on GA media
These are all security issues fixed in the python311-httpx-0.28.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jan 18, 2025 -
Critical max 9.8openSUSE-SU-2024:11850-1 4 CVEs
glibc-2.35-1.1 on GA media
These are all security issues fixed in the glibc-2.35-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2021:3291-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use __pthread_attr_copy in mq_notify (bsc#1186489). - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number (bsc#1187911).
first Dec 8, 2021 -
Critical max 9.1openSUSE-SU-2021:1374-1 2 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-35942: wordexp: handle overflow in positional parameter number (bsc#1187911) - CVE-2021-33574: Use __pthread_attr_copy in mq_notify (bsc#1186489) This update was imported from the SUSE:SLE-15:Update…
first Oct 18, 2021 -
Critical max 9.3openSUSE-SU-2021:1252-1 4 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: Update to 20.0.12 Fixed security issues (boo#1190291): - CVE-2021-32766 (CWE-209): Generation of Error Message Containing Sensitive Information - CVE-2021-32800 (CWE-306): Missing Authentication for Critic…
first Sep 14, 2021 -
Critical max 9.8openSUSE-SU-2024:13371-1 1 CVE
etcd-for-k8s1.27-3.5.9-1.1 on GA media
These are all security issues fixed in the etcd-for-k8s1.27-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2022:0657-1 5 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…
first Mar 2, 2022 -
Critical max 9.8openSUSE-SU-2020:0286-1 1 CVE
Security update for ppp
This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610). This update was imported from the SUSE:SLE-15:Update update project.
first Mar 2, 2020 -
Critical max 9.8openSUSE-SU-2024:12723-1 7 CVEs
grafana-9.3.6-1.1 on GA media
These are all security issues fixed in the grafana-9.3.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.1openSUSE-SU-2021:0349-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-36242: Using the Fernet class to symmetrically encrypt multi gigabyte values could result in an integer overflow and buffer overflow (bsc#1182066). This update was imported from the SU…
first Feb 26, 2021 -
Critical max 9.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…
first Apr 30, 2021 -
Critical max 9.8openSUSE-SU-2021:0347-1 10 CVEs
Security update for salt
This update for salt fixes the following issues: - Fix regression on cmd.run when passing tuples as cmd (bsc#1182740) - Allow `extra_filerefs` as sanitized `kwargs` for SSH client - Fix errors with virt.update - Fix for multiple for security issues (CVE-2020-…
first Feb 26, 2021 -
Critical max 9.8
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE…
first May 1, 2020 -
Critical max 9.8openSUSE-SU-2024:14132-1 1 CVE
python310-asyncpg-0.29.0-1.3 on GA media
These are all security issues fixed in the python310-asyncpg-0.29.0-1.3 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8
Security update for salt
This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keywor…
first Nov 5, 2020 -
Critical max 9.6
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914). This update was imported from the SUSE:SLE-15:Update update project.
first Oct 26, 2020 -
Critical max 9.9openSUSE-SU-2020:1369-1 4 CVEs
Security update for squid
This update for squid fixes the following issues: squid was updated to version 4.13: - CVE-2020-24606: Fix livelocking in peerDigestHandleReply (bsc#1175671). - CVE-2020-15811: Improve Transfer-Encoding handling (bsc#1175665). - CVE-2020-15810: Enforce token …
first Sep 7, 2020 -
Critical max 9.8openSUSE-SU-2021:0331-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3177: Fixed buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution (bsc#1181126). - Provide the newest setuptools wheel (bsc#1176262, CVE-2019-20916) in thei…
first Feb 22, 2021 -
Critical max 9.8openSUSE-SU-2024:14134-1 5 CVEs
python310-bleach-6.1.0-1.5 on GA media
These are all security issues fixed in the python310-bleach-6.1.0-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Critical max 9.8openSUSE-SU-2024:10669-1 1 CVE
c3p0-0.9.5.5-1.3 on GA media
These are all security issues fixed in the c3p0-0.9.5.5-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2025:15033-1 5 CVEs
govulncheck-vulndb-0.0.20250424T181457-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250424T181457-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 26, 2025 -
Critical max 9.8openSUSE-SU-2024:10124-1 1 CVE
python-dulwich-0.12.0-2.3 on GA media
These are all security issues fixed in the python-dulwich-0.12.0-2.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:14244-1 45 CVEs
ansible-9-9.8.0-1.1 on GA media
These are all security issues fixed in the ansible-9-9.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 8, 2024 -
Critical max 10.0openSUSE-SU-2025:14875-1 18 CVEs
ruby3.4-rubygem-rack-3.1.12-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rack-3.1.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 11, 2025 -
Critical max 10.0openSUSE-SU-2024:10196-1 124 CVEs
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
exim-4.86.2-2.2 on GA media
These are all security issues fixed in the exim-4.86.2-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
MozillaFirefox-50.1.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:12976-1 2 CVEs
python311-3.11.3-1.1 on GA media
These are all security issues fixed in the python311-3.11.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 10.0
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11202-1 40 CVEs
python-2.7.18-8.1 on GA media
These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.8openSUSE-SU-2024:11171-1 31 CVEs
phpMyAdmin-5.1.1-1.2 on GA media
These are all security issues fixed in the phpMyAdmin-5.1.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Critical max 9.2SUSE-SU-2025:0688-1 2 CVEs
Security update for pam_pkcs11
This update for pam_pkcs11 fixes the following issues: - CVE-2025-24032: default value for `cert_policy` (`none`) allows for authentication bypass (bsc#1237062). - CVE-2025-24031: uninitialized pointer dereference caused by user pressing ctrl-c/ctrl-d when as…
first Feb 24, 2025 -
Critical max 9.2SUSE-SU-2025:0191-1 1 CVE
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 (bsc#1235575) Full changelog: https://github.com/aws/amazon-ssm-agent/compar…
first Jan 20, 2025 -
Critical max 9.8SUSE-SU-2024:3152-1 7 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: - Update to Firefox Extended Support Release 128.2.0 ESR (bsc#1229821) - CVE-2024-8381: Type confusion when looking up a property name in a 'with' block - CVE-2024-8382: Internal event interfaces were…
first Sep 6, 2024 -
Critical max 9.8SUSE-SU-2024:3112-1 7 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 115.14 * fixed: When using an external installation of GnuPG, Thunderbird occassionally sent/received corrupted messages * fixed: Users of external GnuPG were unable to decry…
first Sep 3, 2024