12,602 results · Clear filters · Feed
-
High max 7.5SUSE-SU-2024:1862-1 4 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat (bsc#1219559). - CVE-2023-27043: Modifed fix for unicode string handling in email.utils.parseaddr() (bsc#1222537). - CVE-2022-48560: Fixed use-after-free in P…
first May 30, 2024 -
High max 7.5SUSE-SU-2021:3557-1 1 CVE
Security update for salt
This update for salt fixes the following issues: - CVE-2021-21996: Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265)
first Oct 27, 2021 -
High max 7.5openSUSE-SU-2024:13106-1 1 CVE
hoard-v.1.4.2~0-1.1 on GA media
These are all security issues fixed in the hoard-v.1.4.2~0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5openSUSE-SU-2020:1598-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262) This update was imported from the SUSE:SLE-15:Update update project.
first Oct 3, 2020 -
High max 7.8SUSE-SU-2024:0249-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2024-0408: Fixed SELinux unlabeled GLX PBuffer. (bsc#1218845) - CVE-2024-0409: Fixed SELinux context corruption. (bsc#1218846)
first Jan 26, 2024 -
High max 7.5SUSE-SU-2021:2327-1 6 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - update to 12.22.2: - CVE-2021-22918: Out of bounds read (bsc#1187973) - CVE-2021-23362: ssri Regular Expression Denial of Service and hosted-git-info (bsc#1187977) - CVE-2021-27290: Regular Expression Den…
first Jul 14, 2021 -
High max 8.8
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…
first Oct 12, 2021 -
High max 7.5openSUSE-SU-2020:0567-1 2 CVEs
Security update for python-typed-ast
This update for python-typed-ast fixes the following issues: python-typed-ast was reverted to version 1.3.1 because it broke another package (bsc#1163532). Security issues fixed: - CVE-2019-19274: Fixed an out-of-bounds read (bsc#1161562). - CVE-2019-19275: F…
first May 1, 2020 -
High max 8.7SUSE-SU-2024:3357-1 3 CVEs
Security update for python310
This update for python310 fixes the following issues: - Update to version 3.10.15 - CVE-2024-8088: Fixed denial of service in zipfile. (bsc#1229704) - CVE-2024-7592: Fixed uncontrolled CPU resource consumption when in http.cookies module. (bsc#1229596) - CVE-…
first Sep 20, 2024 -
High max 7.5openSUSE-SU-2025:0066-1 58 CVEs
Security update for java-11-openj9
This update for java-11-openj9 fixes the following issues: - Update to OpenJDK 11.0.26 with OpenJ9 0.49.0 virtual machine - Including Oracle October 2024 and January 2025 CPU changes * CVE-2024-21208 (boo#1231702), CVE-2024-21210 (boo#1231711), CVE-2024-21217…
first Feb 18, 2025 -
High max 8.1SUSE-SU-2016:1538-1 15 CVEs
Security update for libxml2
This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114]. - CVE-2016-4483: Code was added to avoid an out of bound acces…
first Jun 9, 2016 -
High max 7.0openSUSE-SU-2024:11864-1 1 CVE
tomcat-9.0.43-5.1 on GA media
These are all security issues fixed in the tomcat-9.0.43-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 8.8
Security update for seamonkey
This update for seamonkey fixes the following issues: update to SeaMonkey 2.53.17.1 * Upstream libwebp security fix bug 1852749. * CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649. * Fix bad string encoded in ansi. l10n fr problem only bug 1847887. …
first Oct 2, 2023 -
High max 7.5openSUSE-SU-2020:0362-1 59 CVEs
Security update for wireshark
This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, Lo…
first Mar 19, 2020 -
High max 7.5SUSE-SU-2023:2378-1 3 CVEs
Security update for openstack-heat, openstack-swift, python-Werkzeug
This update for openstack-heat, openstack-swift, python-Werkzeug contains the following fixes: Security fixes included in this update: openstack-heat: - CVE-2023-1625: Fixed an issue where parameter values marked as 'hidden' would be shown in the stack's envi…
first Jun 5, 2023 -
High max 8.3SUSE-SU-2018:2593-1 2 CVEs
Security update for spice-gtk
This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Avoid buffer overflow on image lz checks (bsc#1101295)
first Sep 3, 2018 -
High max 7.5SUSE-SU-2024:3001-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460, bsc#1228574) - CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461, bsc#1228575)
first Aug 23, 2024 -
High max 7.5SUSE-SU-2023:0568-1 3 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20230214 release. Security issues fixed: - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0…
first Feb 28, 2023 -
High max 8.8SUSE-SU-2023:0292-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: - CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474)
first Feb 7, 2023 -
High max 7.8SUSE-SU-2024:4177-1 2 CVEs
Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_141 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…
first Dec 4, 2024 -
High max 7.5SUSE-SU-2022:2673-1 2 CVEs
Security update for python-ujson
This update for python-ujson fixes the following issues: - CVE-2022-31116: Fixed improper decoding of escaped surrogate characters (bsc#1201255). - CVE-2022-31117: Fixed a double free while reallocating a buffer for string decoding (bsc#1201254).
first Aug 4, 2022 -
High max 7.5SUSE-SU-2018:2530-2 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2016-10708: Prevent DoS due to crashes caused by out-of-sequence NEWKEYS message (bsc#1076957).
first Oct 18, 2018 -
High max 8.4openSUSE-SU-2020:1304-1 1 CVE
Security update for inn
This update for inn fixes the following issues: - change file owners in /usr/lib/news to root [boo#1172573] [CVE-2020-8026] This update was imported from the openSUSE:Leap:15.1:Update update project.
first Aug 30, 2020 -
High max 7.5SUSE-SU-2023:0691-1 1 CVE
Security update for hdf5
This update for hdf5 fixes the following issues: - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file (bsc#1207973).
first Mar 9, 2023 -
High max 7.5SUSE-SU-2020:2041-1 1 CVE
Security update for rust, rust-cbindgen
This update for rust, rust-cbindgen fixes the following issues: rust was updated for use by Firefox 76ESR. - Fixed miscompilations with rustc 1.43 that lead to LTO failures (bsc#1173202) Update to version 1.43.1 - Updated openssl-src to 1.1.1g for CVE-2020-19…
first Jul 24, 2020 -
High max 8.4SUSE-SU-2019:2291-1 12 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 5 Fix Pack 40. Security issues fixed: - CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021) - CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021) - C…
first Sep 4, 2019 -
High max 7.8SUSE-SU-2023:3115-1 1 CVE
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_66 fixes one issue. The following security issue was fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/…
first Aug 1, 2023 -
High max 7.5SUSE-SU-2019:2049-1 2 CVEs
Security update for ceph
This update for ceph fixes the following issues: Security issues fixed: - CVE-2019-3821: civetweb: fix file descriptor leak (bsc#1125080) - CVE-2018-16889: rgw: sanitize customer encryption keys from log output in v4 auth (bsc#1121567) Non-security issues fix…
first Aug 5, 2019 -
High max 8.3SUSE-SU-2024:1462-1 7 CVEs
Security update for shim
This update for shim fixes the following issues: - Update shim-install to set the TPM2 SRK algorithm (bsc#1213945) - Limit the requirement of fde-tpm-helper-macros to the distro with suse_version 1600 and above (bsc#1219460) Update to version 15.8: Security i…
first Apr 29, 2024 -
High max 7.3SUSE-SU-2019:2244-1 1 CVE
Security update for apache-commons-beanutils
This update for apache-commons-beanutils fixes the following issues: Security issue fixed: - CVE-2019-10086: Added special BeanIntrospector class which allows suppressing the ability for an attacker to access the classloader via the class property available o…
first Aug 28, 2019 -
High max 7.5SUSE-SU-2024:2299-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2024-24814: Fixed a bug that can led to DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied. (bsc#1219911)
first Jul 4, 2024 -
High max 7.8SUSE-SU-2023:2734-1 1 CVE
Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_60 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).
first Jun 29, 2023 -
High max 7.8SUSE-SU-2024:1750-1 3 CVEs
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by uns…
first May 22, 2024 -
High max 7.8
ghostscript-9.54.0-2.2 on GA media
These are all security issues fixed in the ghostscript-9.54.0-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
High max 7.5SUSE-SU-2025:03297-1 1 CVE
Security update for frr
This update for frr fixes the following issues: - CVE-2024-55553: excessive resource consumption may lead to denial of service due to repeated RIB revalidation when processing several RPKI updates (bsc#1235237).
first Sep 23, 2025 -
High max 7.8SUSE-SU-2023:4319-1 2 CVEs
Security update for the Linux Kernel (Live Patch 49 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_179 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-1281: Fixed use after free t…
first Oct 31, 2023 -
High max 8.8openSUSE-SU-2021:3641-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351). - CVE-2021-3655: Fixed a missing size validations…
first Nov 9, 2021 -
High max 8.0SUSE-SU-2024:2771-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_127 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…
first Aug 6, 2024 -
High max 7.5SUSE-SU-2023:2080-1 1 CVE
Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2023-24580: Fixed potential DoS in file uploads (bsc#1208082).
first May 2, 2023 -
High max 7.5SUSE-SU-2024:2333-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-6239: Fixed crash when using pdfinfo with -dests parameter on malformed input files (bsc#12269160).
first Jul 8, 2024