898 results · Clear filters · Feed
-
Low max 3.4SUSE-SU-2016:2329-1 2 CVEs
Security update for apache2-mod_nss
This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements: - SHA256 cipher names change spelling from *_sha256 to *_sha_256. - Drop mod_nss_migrate.pl and use upstream migrate script instead. - Check for Apache user owner/group …
first Sep 16, 2016 -
Low max 3.1SUSE-SU-2021:3325-1 3 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related…
first Oct 9, 2021 -
Low max 3.3SUSE-SU-2025:01754-1 1 CVE
Security update for augeas
This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909)
first May 29, 2025 -
Low max 2.7openSUSE-SU-2025:15558-1 1 CVE
element-desktop-1.11.112-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.112-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2025 -
Low max 2.8SUSE-SU-2025:02175-1 1 CVE
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
first Jun 30, 2025 -
Low max 3.9SUSE-SU-2024:1836-1 2 CVEs
Security update for nodejs16
This update for nodejs16 fixes the following issues: - CVE-2024-30260: undici: proxy-authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (bsc#1222530) - CVE-2024-30261: undici: Ensure that integrity cannot be tamp…
first May 29, 2024 -
Low max 3.3SUSE-SU-2016:1896-1 1 CVE
Security update for salt
salt was updated to fix one security issue. This security issue was fixed: - CVE-2015-8034: Prevent saving state.sls cache data to disk with insecure permissions (bsc#957914).
first Jul 28, 2016 -
Low max 3.3openSUSE-SU-2024:13514-1 1 CVE
s390-tools-2.30.0-1.1 on GA media
These are all security issues fixed in the s390-tools-2.30.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3openSUSE-SU-2024:11535-1 1 CVE
yast2-samba-provision-1.0.5-1.2 on GA media
These are all security issues fixed in the yast2-samba-provision-1.0.5-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1SUSE-SU-2024:4366-1 1 CVE
Security update for subversion
This update for subversion fixes the following issues: - CVE-2024-46901: Fixed denial-of-service via control characters in paths in mod_dav_svn (bsc#1234317)
first Dec 17, 2024 -
Low max 3.7SUSE-SU-2016:0968-1 1 CVE
Security update for rubygem-activesupport-3_2
This update for rubygem-activesupport-3_2 fixes the following issues: The previous patch for CVE-2015-7576 was adding the file lib/active_support/security_utils.rb but this file was not being added into the gemspec,thus the final gem did not contain that file.
first Apr 7, 2016 -
Low max 3.6SUSE-SU-2023:4290-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376).
first Oct 31, 2023 -
Low max 2.8SUSE-SU-2025:02178-1 1 CVE
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
first Jun 30, 2025 -
Low max 3.3SUSE-SU-2021:1453-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
first Apr 30, 2021 -
Low max 3.5SUSE-SU-2023:0409-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3606: Fixed a null pointer dereference inside the function find_prog_by_sec_insn of the file tools/lib/bpf/li…
first Feb 14, 2023 -
Low max 2.1SUSE-SU-2025:0144-1 2 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-50349: Passwords for trusted sites could be sent to untrusted sites (bsc#1235600). - CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601).
first Jan 16, 2025 -
Low max 3.7SUSE-SU-2023:3443-1 2 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u382 (icedtea-3.28.0) - CVE-2023-22045: Fixed a difficult to exploit vulnerability that allows unauthenticated attacker with network access via multiple protocols to compromi…
first Aug 28, 2023 -
Low max 3.7SUSE-SU-2016:1618-1 1 CVE
Security update for mysql
This update for mysql fixes the following issues: - bsc#959724: fix incorrect usage of sprintf/strcpy that caused possible buffer overflow issues at various places On SUSE Linux Enterprise 11 SP4 this fix was not yet shipped: - Increase the key length (to 204…
first Jun 17, 2016 -
Low max 3.1openSUSE-SU-2024:14570-1 1 CVE
libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 on GA media
These are all security issues fixed in the libsvn_auth_gnome_keyring-1-0-1.14.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 11, 2024 -
Low max 3.7SUSE-SU-2016:0042-1 3 CVEs
Security update for rubygem-passenger
This update fixes the following security issues: - CVE-2015-7519: Passenger is not filtering environment like apache is doing (bnc#956281) - CVE-2013-4136: Fixed security issue Passenger would reuse existing server instance directories (temporary directories)…
first Jan 7, 2016 -
Low max 3.3SUSE-SU-2023:3711-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issues: - CVE-2023-41053: Fixed SORT_RO may bypass ACL configuration (bsc#1215094).
first Sep 20, 2023 -
Low max 2.3SUSE-SU-2025:0982-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers (bsc#1238450).
first Mar 21, 2025 -
Low max 3.2SUSE-SU-2024:2304-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).
first Jul 4, 2024 -
Low max 3.7SUSE-SU-2015:1268-2 17 CVEs
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979).…
first Jul 15, 2015 -
Low max 3.7SUSE-SU-2022:3005-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a denial of service (bsc#1202593).
first Sep 2, 2022 -
Low max 3.1SUSE-SU-2022:4168-1 1 CVE
Security update for redis
This update for redis fixes the following issues: - CVE-2022-3647: Fixed crash in sigsegvHandler debug function (bsc#1204633).
first Nov 22, 2022 -
Low max 3.8SUSE-SU-2018:2144-1 1 CVE
Security update for sssd
This update for sssd fixes the following security issue: - CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users (bsc#1098377).
first Jul 30, 2018 -
Low max 2.9SUSE-SU-2025:03449-1 1 CVE
Security update for cairo
This update for cairo fixes the following issues: - CVE-2025-50422: Fixed Poppler crash on malformed input (bsc#1247589) - Update to version 1.18.4: + The dependency on LZO has been made optional through a build time configuration toggle. + You can build Cair…
first Oct 2, 2025 -
Low max 3.7openSUSE-SU-2024:13871-1 5 CVEs
java-11-openjdk-11.0.23.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1openSUSE-SU-2024:14484-1 1 CVE
govulncheck-vulndb-0.0.20241112T145010-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241112T145010-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 12, 2024 -
Low max 3.8SUSE-SU-2022:3562-1 1 CVE
Security update for libgsasl
This update for libgsasl fixes the following issues: - CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).
first Oct 11, 2022 -
Low max 3.1SUSE-SU-2024:2262-3 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: - Upgrade to 14.12 (bsc#1224051): - CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to the table owner. See release notes for the steps that have to be taken to fix exi…
first Jul 31, 2024 -
Low max 2.6SUSE-SU-2023:2828-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349).
first Jul 14, 2023 -
Low max 3.7openSUSE-SU-2024:13879-1 4 CVEs
java-1_8_0-openjdk-1.8.0.412-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.412-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.4SUSE-SU-2023:4909-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2023-47641: Fixed inconsistent interpretation of the http protocol, if content-length and transport-encoding are in the same header with transport-encoding value of 'chunked*' (bsc#1217174)
first Dec 19, 2023 -
Low max 2.7SUSE-SU-2024:1403-1 1 CVE
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2024-3177: Fixed bypass of mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539)
first Apr 23, 2024 -
Low max 3.6openSUSE-SU-2024:14312-1 1 CVE
runc-1.2.0~rc3-1.1 on GA media
These are all security issues fixed in the runc-1.2.0~rc3-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 4, 2024 -
Low max 3.7openSUSE-SU-2024:13084-1 2 CVEs
java-1_8_0-openjdk-1.8.0.382-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.382-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3openSUSE-SU-2024:13490-1 2 CVEs
sudo-1.9.15p2-1.1 on GA media
These are all security issues fixed in the sudo-1.9.15p2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2025:01662-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631).
first May 22, 2025