898 results · Clear filters · Feed
-
Low max 3.8SUSE-SU-2025:03509-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-57807: heap out-of-bounds�write�can lead to memory corruption (bsc#1249362).
first Oct 9, 2025 -
Low max 2.3openSUSE-SU-2025:14670-1 1 CVE
ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 on GA media
These are all security issues fixed in the ruby3.4-rubygem-actionmailer-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 21, 2025 -
Low max 3.3SUSE-SU-2021:0777-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issues: - Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041). - CVE-2021-25316: Do not use predictab…
first Mar 12, 2021 -
Low max 3.7openSUSE-SU-2024:13996-1 2 CVEs
java-17-openj9-17.0.11.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2017:1052-1 7 CVEs
Security update for ntp
This ntp update to version 4.2.8p10 fixes the following issues: Security issues fixed (bsc#1030050): - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock - CVE-2017-6463: Authenticated DoS via Malicious Config…
first Apr 18, 2017 -
Low max 3.7openSUSE-SU-2025:0152-1 1 CVE
Security update for kanidm
This update for kanidm fixes the following issues: - Update to version 1.6.2~git0.a20663ea8: * Release 1.6.2 * fix: clippy * maint: typo in log message * Set kid manually to prevent divergence * Order keys in application JWKS / Fix rotation bug * Fix toml iss…
first May 12, 2025 -
Low max 3.3openSUSE-SU-2021:0638-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161) This update was imported from the SUSE:SLE-15:Update update project.
first Apr 30, 2021 -
Low max 2.7SUSE-SU-2024:1404-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2024-3177: Fixed bypass of mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539)
first Apr 23, 2024 -
Low max 2.6SUSE-SU-2023:3735-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).
first Sep 22, 2023 -
Low max 3.5SUSE-SU-2020:2409-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).
first Sep 1, 2020 -
Low max 3.7SUSE-SU-2015:1663-1 2 CVEs
Security update for haproxy
haproxy was updated to fix two security issues. These security issues were fixed: - CVE-2015-3281: Information disclosure (bsc#937042). - CVE-2015-4000: The Logjam Attack / weakdh.org (bsc#937202).
first Jul 8, 2015 -
Low max 3.2SUSE-SU-2022:3674-1 1 CVE
Security update for clone-master-clean-up
This update for clone-master-clean-up fixes the following issues: - CVE-2021-32000: Fixed some potentially dangerous file system operations (bsc#1181050). Bugfixes: - Fixed failures to remove btrfs snapshots (bsc#1203651).
first Oct 20, 2022 -
Low max 3.7SUSE-RU-2019:2627-1 1 CVE
Recommended update for python-setuptools and dependend packages
All changes necessary for upgrade of python-setuptools to 40.6.2 (bsc#1075812) New packages: - python-cachetools - python-google-auth - python-packaging Rebuilt without source changes: - python-cffi - python-cliff - python-mock - python-oauthlib - python-pbr …
first Oct 11, 2019 -
Low max 3.4SUSE-SU-2016:1457-1 4 CVEs
Security update for cyrus-imapd
- Previous versions of cyrus-imapd would not allow its users to disable old protocols like SSLv1 and SSLv2 that are unsafe due to various known attacks like BEAST and POODLE. https://bugzilla.cyrusimap.org/show_bug.cgi?id=3867 remedies this issue by adding th…
first May 31, 2016 -
Low max 3.9
libvmtools-devel-12.2.0-4.1 on GA media
These are all security issues fixed in the libvmtools-devel-12.2.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2024:0648-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed am integer overflow in freerdp_bitmap_planar_context_reset() (bsc#1219049).
first Feb 28, 2024 -
Low max 2.8SUSE-SU-2024:3074-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2024-43167: Fix null pointer dereference issue in function ub_ctx_set_fwd (bsc#1229068)
first Sep 2, 2024 -
Low max 3.9openSUSE-SU-2022:0088-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303) - CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
first Jan 17, 2022 -
Low max 3.9openSUSE-SU-2023:0405-1 1 CVE
Security update for fish
This update for fish fixes the following issues: - CVE-2023-49284: Fixed shell expansion triggered by command substitution output (boo#1217808).
first Dec 16, 2023 -
Low max 3.3openSUSE-SU-2024:0342-1 1 CVE
Security update for lxc
This update for lxc fixes the following issues: lxc was updated to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on st…
first Oct 30, 2024 -
Low max 2.9SUSE-SU-2024:1967-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375).
first Jun 10, 2024 -
Low max 2.2SUSE-SU-2020:14304-1 1 CVE
Recommended update for permissions
This update for permissions fixes the following issues: Security issues fixed: - CVE-2020-8013: Fixed a missing symlink check. Do not follow symlinks that are the final path element (bsc#1163922). - Fixed a regression where chkstat broke when /proc was not av…
first Feb 28, 2020 -
Low max 3.4SUSE-SU-2024:4288-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)
first Dec 11, 2024 -
Low max 3.3SUSE-SU-2021:0776-1 1 CVE
Security update for s390-tools
This update for s390-tools fixes the following issues: - Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target (bsc#1183041). - CVE-2021-25316: Do not use predictab…
first Mar 12, 2021 -
Low max 3.3openSUSE-SU-2025:15557-1 1 CVE
autogen-5.18.16-8.1 on GA media
These are all security issues fixed in the autogen-5.18.16-8.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2025 -
Low max 3.9
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695).
first Jun 22, 2023 -
Low max 3.7SUSE-SU-2024:1498-2 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS…
first Jun 18, 2024 -
Low max 3.7openSUSE-SU-2024:12678-1 1 CVE
postgresql13-13.10-1.1 on GA media
These are all security issues fixed in the postgresql13-13.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.5SUSE-SU-2017:2257-1 2 CVEs
Security update for SUSE Manager Server 3.1
This update for the SUSE Manager Server 3.1 provides several fixes and improvements. The following security issues have been fixed: jabberd: - Fix offered SASL mechanism check. (bsc#1047282, CVE-2017-10807) spacewalk-java: - Do not allow XSS as Organization n…
first Aug 25, 2017 -
Low max 3.8SUSE-SU-2019:0081-1 1 CVE
Security update for sssd
This update for sssd provides the following fixes: This security issue was fixed: - CVE-2018-10852: Set stricter permissions on /var/lib/sss/pipes/sudo to prevent the disclosure of sudo rules for arbitrary users (bsc#1098377) These non-security issues were fi…
first Jan 11, 2019 -
Low max 3.7SUSE-SU-2022:3004-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a denial of service (bsc#1202593).
first Sep 2, 2022 -
Low max 3.3SUSE-SU-2021:14712-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
first Apr 30, 2021 -
Low max 3.4openSUSE-SU-2024:10479-1 1 CVE
fossil-1.35-1.3 on GA media
These are all security issues fixed in the fossil-1.35-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2024:1499-2 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS…
first Jun 18, 2024 -
Low max 2.9SUSE-SU-2025:03450-1 2 CVEs
Security update for cairo
This update for cairo fixes the following issues: - CVE-2019-6461: Avoid assert when drawing arcs with NaN angles. (bsc#1122338) - CVE-2025-50422: Fix NULL pointer access in `active_edges_to_traps()` leading to crash in Poppler. (bsc#1247589)
first Oct 2, 2025 -
Low max 3.1openSUSE-SU-2021:0123-1 1 CVE
Security update for viewvc
This update for viewvc fixes the following issues: - update to 1.1.28 (boo#1167974, CVE-2020-5283): * security fix: escape subdir lastmod file name (#211) * fix standalone.py first request failure (#195) * suppress stack traces (with option to show) (#140) * …
first Jan 19, 2021 -
Low max 3.4openSUSE-SU-2024:10311-1 4 CVEs
apache2-mod_nss-1.0.14-4.1 on GA media
These are all security issues fixed in the apache2-mod_nss-1.0.14-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.4SUSE-SU-2023:2691-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2023-2431: Fixed a bypass issue of seccomp profile enforcement (bsc#1212493).
first Jun 28, 2023 -
Low max 3.7SUSE-SU-2015:1143-1 7 CVEs
Security update for openssl
This update of openssl fixes the following security issues: - CVE-2015-4000 (bsc#931698) * The Logjam Attack / weakdh.org * reject connections with DH parameters shorter than 1024 bits * generates 2048-bit DH parameters by default - CVE-2015-1788 (bsc#934487)…
first Jun 17, 2015 -
Low max 3.7SUSE-SU-2023:0479-1 1 CVE
Security update for postgresql12
This update for postgresql12 fixes the following issues: Update to 12.14: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102). - Update to 12.13 (bsc#1205300).
first Feb 22, 2023