898 results · Clear filters · Feed
-
Low max 3.4SUSE-SU-2016:2396-1 4 CVEs
Security update for apache2-mod_nss
This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099) - Created valgrind suppression files to ease debugging. - Implement SSL_PPTYPE_FILTER to call executables to …
first Sep 27, 2016 -
Low max 3.1openSUSE-SU-2025:14768-1 1 CVE
grafana-11.5.1-1.1 on GA media
These are all security issues fixed in the grafana-11.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Low max 3.7openSUSE-SU-2024:12680-1 1 CVE
libecpg6-15.2-1.1 on GA media
These are all security issues fixed in the libecpg6-15.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.4SUSE-SU-2024:4284-2 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
first Dec 19, 2024 -
Low max 2.2SUSE-SU-2020:3231-1 1 CVE
Security update for yast2-multipath
This update for yast2-multipath to version 3.2.2 fixes the following issues: - CVE-2018-17955: Use random file name instead of static names (bsc#1117592).
first Nov 6, 2020 -
Low max 3.7openSUSE-SU-2021:0588-1 1 CVE
Security update for python-django-registration
This update for python-django-registration fixes the following issues: Update to 3.1.2 (boo#1184427, CVE-2021-21416) * Filter sensitive POST parameters in error reports * Fix RemovedInDjango40Warning from Signal arguments
first Apr 19, 2021 -
Low max 3.7SUSE-SU-2020:14491-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys and never reuse them across multiple TLS connections (bsc#1176331).
first Sep 15, 2020 -
Low max 3.2openSUSE-SU-2024:11500-1 1 CVE
virt-install-3.2.0-10.1 on GA media
These are all security issues fixed in the virt-install-3.2.0-10.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1SUSE-SU-2020:0589-1 1 CVE
Security update for postgresql10
This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).
first Mar 5, 2020 -
Low max 3.8SUSE-SU-2025:03510-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-57807: heap out-of-bounds�write�can lead to memory corruption (bsc#1249362).
first Oct 9, 2025 -
Low max 3.1SUSE-SU-2021:3254-1 3 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related…
first Sep 29, 2021 -
Low max 3.7
Security update for zabbix
This update for zabbix fixes the following issues: - Updated to latest realease 4.0.37. Security issues fixed: - CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists (boo#1194681). - CVE-2021-27927: Fix…
first Feb 16, 2022 -
Low max 2.8SUSE-SU-2015:2327-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - Add 0004-1.6.x-fixed-a-settings-leak-possibility-in-the-date-.patch to prevent settings leak in date template filter (bsc#955412, CVE-2015-8213)
first Dec 19, 2015 -
Low max 3.7SUSE-SU-2021:3485-1 1 CVE
Security update for squid
This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403).
first Oct 20, 2021 -
Low max 3.9
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695).
first Sep 8, 2023 -
Low max 3.3SUSE-SU-2024:2627-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-29508: Fixed heap pointer leak in pdf_base_font_alloc (bsc#1227380)
first Jul 30, 2024 -
Low max 3.1openSUSE-SU-2024:13950-1 1 CVE
libecpg6-16.3-1.1 on GA media
These are all security issues fixed in the libecpg6-16.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2022:3101-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: - CVE-2022-35230: Javascript embedded in links for graphs page will be executed (bsc#1201290).
first Sep 6, 2022 -
Low max 2.3SUSE-SU-2025:0981-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers (bsc#1238450).
first Mar 21, 2025 -
Low max 3.1SUSE-SU-2020:0623-1 3 CVEs
Security update for gd
This update for gd fixes the following issues: - CVE-2017-7890: Fixed a buffer over-read into uninitialized memory (bsc#1050241). - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone() (bsc#1165471). - CVE-2019-11038: Fixed a information disclos…
first Mar 9, 2020 -
Low max 3.7SUSE-SU-2019:0139-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: python-urllib3 was updated to version 1.22 (fate#326733, bsc#1110422) and contains new features and lots of bugfixes: The full changelog can be found on: https://github.com/Lukasa/urllib3/blob/1.22/CH…
first Jan 21, 2019 -
Low max 3.1SUSE-SU-2021:14760-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).
first Jun 30, 2021 -
Low max 2.2openSUSE-SU-2024:11533-1 1 CVE
yast2-multipath-4.4.1-1.2 on GA media
These are all security issues fixed in the yast2-multipath-4.4.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3SUSE-SU-2024:1046-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544). - Dropped unnecessary executable permission (bsc#1209138).
first Mar 28, 2024 -
Low max 3.7SUSE-SU-2016:0623-1 1 CVE
Security update for rubygem-activesupport-3_2
This update for rubygem-activesupport-3_2 fixes the following issues: - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)
first Mar 1, 2016 -
Low max 2.5SUSE-SU-2023:3472-1 1 CVE
Security update for procps
This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290).
first Aug 29, 2023 -
Low max 3.1SUSE-SU-2024:1653-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: PostgreSQL upgrade to version 15.7 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompat…
first May 15, 2024 -
Low max 3.7openSUSE-SU-2024:14138-1 1 CVE
python310-django-registration-3.3-2.2 on GA media
These are all security issues fixed in the python310-django-registration-3.3-2.2 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Low max 3.3SUSE-SU-2024:0966-1 1 CVE
Security update for PackageKit
This update for PackageKit fixes the following issues: - CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544).
first Mar 21, 2024 -
Low max 3.7SUSE-SU-2023:0450-1 1 CVE
Security update for postgresql12
This update for postgresql12 fixes the following issues: Update to 12.14: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).
first Feb 20, 2023 -
Low max 2.5SUSE-SU-2023:3471-1 1 CVE
Security update for procps
This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290).
first Aug 29, 2023 -
Low max 3.4SUSE-SU-2024:4287-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
first Dec 11, 2024 -
Low max 3.7SUSE-SU-2018:1768-1 1 CVE
Security update for nagios-nrpe
This update for nagios-nrpe fixes one issue. This security issue was fixed: - CVE-2015-4000: Prevent Logjam. The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, did not properly convey a DHE_EXPORT choic…
first Jun 20, 2018 -
Low max 3.3SUSE-SU-2025:01534-1 1 CVE
Security update for augeas
This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909)
first Jun 9, 2025 -
Low max 3.5openSUSE-SU-2024:12802-1 2 CVEs
cmark-0.30.3-1.1 on GA media
These are all security issues fixed in the cmark-0.30.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.9SUSE-SU-2022:0088-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303) - CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
first Jan 17, 2022 -
Low max 3.7SUSE-SU-2025:01599-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)
first May 20, 2025 -
Low max 3.3SUSE-SU-2021:2459-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-3588: Fixed a missing bounds checks inside cli_feat_read_cb() function in src/gatt-database.c (bsc#1187165)
first Jul 22, 2021 -
Low max 3.1openSUSE-SU-2024:14481-1 1 CVE
coredns-1.11.3+git129.387f34d-1.1 on GA media
These are all security issues fixed in the coredns-1.11.3+git129.387f34d-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 9, 2024 -
Low max 3.3openSUSE-SU-2024:14523-1 1 CVE
libblkid-devel-2.40.2-2.1 on GA media
These are all security issues fixed in the libblkid-devel-2.40.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Nov 23, 2024