898 results · Clear filters · Feed
-
Low max 3.1SUSE-SU-2020:0752-1 1 CVE
Security update for postgresql10
This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).
first Mar 23, 2020 -
Low max 3.1SUSE-SU-2021:1763-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, i…
first May 26, 2021 -
Low max 3.9SUSE-SU-2022:0081-1 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303) - CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
first Jan 14, 2022 -
Low max 3.9SUSE-SU-2023:4527-1 1 CVE
Security update for maven, maven-resolver, sbt, xmvn
This update for maven, maven-resolver, sbt, xmvn fixes the following issues: - CVE-2023-46122: Fixed an arbitrary file write when extracting a crafted zip file with sbt (bsc#1216529). - Upgraded maven to version 3.9.4 - Upgraded maven-resolver to version 1.9.…
first Nov 22, 2023 -
Low max 3.9openSUSE-SU-2023:0404-1 1 CVE
Security update for fish
This update for fish fixes the following issues: - CVE-2023-49284: Fixed shell expansion triggered by command substitution output (boo#1217808).
first Dec 16, 2023 -
Low max 3.7openSUSE-SU-2024:13132-1 1 CVE
java-1_8_0-openj9-1.8.0.382-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.382-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1openSUSE-SU-2024:13209-1 1 CVE
python310-aiohttp-3.8.5-2.1 on GA media
These are all security issues fixed in the python310-aiohttp-3.8.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1SUSE-SU-2020:0594-2 2 CVEs
Security update for gd
This update for gd fixes the following issues: Security issue fixed: - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471). - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).
first Jul 7, 2020 -
Low max 2.3openSUSE-SU-2024:14051-1 1 CVE
keylime-config-7.11.0-1.1 on GA media
These are all security issues fixed in the keylime-config-7.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 17, 2024 -
Low max 3.7SUSE-SU-2016:2209-1 1 CVE
Security update for libtcnative-1-0
This update for libtcnative-1-0 fixes the following issues: - Disable 512-bit export-grade cryptography to prevent Logjam vulnerability CVE-2015-4000 (bsc#938945)
first Aug 31, 2016 -
Low max 3.3openSUSE-SU-2024:12772-1 1 CVE
python310-markdown-it-py-2.2.0-1.1 on GA media
These are all security issues fixed in the python310-markdown-it-py-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2025:02212-1 1 CVE
Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing (bsc#1243314).
first Jul 2, 2025 -
Low max 3.7SUSE-SU-2024:1452-1 5 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS…
first Apr 26, 2024 -
Low max 2.3SUSE-SU-2025:4091-1 1 CVE
Security update for cargo-packaging, rust-bindgen
This update for cargo-packaging and rust-bindgen fixes the following issues: cargo-packaging was updated to version 1.3.0+0: - CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber (bsc#1249012) Other fixes: - Prevent stripping debug info (bsc#122…
first Nov 13, 2025 -
Low max 3.6SUSE-SU-2024:0200-1 1 CVE
Security update for redis7
This update for redis7 fixes the following issues: - CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376). The following non-security issues were fixed: - Redis services are no longer disabled a…
first Jan 23, 2024 -
Low max 2.8openSUSE-SU-2022:10017-1 1 CVE
Security update for chafa
This update for chafa fixes the following issues: - CVE-2022-2061: Fix heap based buffer overflow in lzw_decode (boo#1200510)
first Jun 20, 2022 -
Low max 3.3openSUSE-SU-2024:12440-1 1 CVE
exiv2-0.27.5-6.1 on GA media
These are all security issues fixed in the exiv2-0.27.5-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.5openSUSE-SU-2020:1332-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Sep 4, 2020 -
Low max 2.3openSUSE-SU-2024:12377-1 1 CVE
php7-7.4.32-1.1 on GA media
These are all security issues fixed in the php7-7.4.32-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.9SUSE-SU-2022:0088-3 2 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303) - CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)
first Jan 31, 2023 -
Low max 3.1SUSE-SU-2025:3743-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)
first Oct 23, 2025 -
Low max 3.7openSUSE-SU-2021:0468-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358) This update was imported from the SUSE:SLE-15:Update update project.
first Mar 25, 2021 -
Low max 3.1SUSE-SU-2025:3897-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375).
first Oct 31, 2025 -
Low max 2.6openSUSE-SU-2024:13855-1 1 CVE
nodejs-electron-28.2.10-3.1 on GA media
These are all security issues fixed in the nodejs-electron-28.2.10-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1SUSE-SU-2024:2262-2 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: - Upgrade to 14.12 (bsc#1224051): - CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to the table owner. See release notes for the steps that have to be taken to fix exi…
first Jul 31, 2024 -
Low max 3.7openSUSE-SU-2024:13872-1 4 CVEs
java-17-openjdk-17.0.11.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7openSUSE-SU-2024:13997-1 2 CVEs
java-1_8_0-openj9-1.8.0.412-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.412-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3openSUSE-SU-2025:0072-1 1 CVE
Security update for radare2
This update for radare2 fixes the following issues: - CVE-2025-1378: Fixed memory corruption (boo#1237250) https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check full release notes * Faster analysis, type matching,…
first Feb 21, 2025 -
Low max 2.3SUSE-SU-2025:0883-1 1 CVE
Security update for python312
This update for python312 fixes the following issues: - CVE-2025-1795: Fixed mishandling of comma during folding and unicode-encoding of email headers (bsc#1238450).
first Mar 17, 2025 -
Low max 3.7SUSE-SU-2021:0931-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
first Mar 24, 2021 -
Low max 3.7SUSE-SU-2016:0344-1 1 CVE
Security update for socat
This update for socat fixed the following issues: - bsc#964844: Fixed security advisory 8, Stack overflow in parser, http://www.openwall.com/lists/oss-security/2016/02/01/5. - bsc#938913: Improved resilience against Logjam attacks (CVE-2015-4000) by increasin…
first Feb 5, 2016 -
Low max 3.5SUSE-SU-2020:2408-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2020-15103: Fix integer overflow due to missing input sanitation in rdpegfx channel (bsc#1174321).
first Sep 1, 2020 -
Low max 3.7SUSE-SU-2015:1526-1 1 CVE
Security update for gnutls
This security update of gnutls fixes the following issues: - use minimal padding for CBC, the default random length padding causes problems with some servers (bsc#925499) * added gnutls-use_minimal_cbc_padding.patch - use the default DH minimum for gnutls-cli…
first Aug 14, 2015 -
Low max 3.1openSUSE-SU-2021:0119-1 1 CVE
Security update for viewvc
This update for viewvc fixes the following issues: - update to 1.1.28 (boo#1167974, CVE-2020-5283): * security fix: escape subdir lastmod file name (#211) * fix standalone.py first request failure (#195) * suppress stack traces (with option to show) (#140) * …
first Jan 19, 2021 -
Low max 2.6SUSE-SU-2023:2610-1 1 CVE
Security update for php8
This update for php8 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349).
first Jun 22, 2023 -
Low max 3.1SUSE-SU-2019:1687-1 1 CVE
Security update for postgresql96
This update for postgresql96 fixes the following issues: Security issue fixed: - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators (bsc#1134689).
first Jun 24, 2019 -
Low max 3.7SUSE-SU-2021:14603-1 8 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation (bsc#1154849) - bsc#1177077: Fixed DNSpooq vulnerabilities - CVE-2020-…
first Jan 19, 2021 -
Low max 3.3openSUSE-SU-2021:2459-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-3588: Fixed a missing bounds checks inside cli_feat_read_cb() function in src/gatt-database.c (bsc#1187165)
first Jul 22, 2021 -
Low max 3.7SUSE-SU-2023:3369-1 1 CVE
Security update for python-configobj
This update for python-configobj fixes the following issues: - CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py (bsc#1210070).
first Aug 22, 2023 -
Low max 2.7openSUSE-SU-2025:15559-1 1 CVE
element-web-1.11.112-1.1 on GA media
These are all security issues fixed in the element-web-1.11.112-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 17, 2025