898 results · Clear filters · Feed
-
Low max 3.7SUSE-SU-403 54 CVEs
Security update for OpenSSL
This OpenSSL update fixes the following issues: * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3567 <http://c…
first Oct 24, 2014 -
Low max 3.7SUSE-SU-2025:1367-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)
first Apr 24, 2025 -
Low max 3.8SUSE-SU-2025:03616-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-57807: heap out-of-bounds�write�can lead to memory corruption (bsc#1249362).
first Oct 16, 2025 -
Low max 3.1openSUSE-SU-2024:13402-1 1 CVE
cosign-2.2.1-1.1 on GA media
These are all security issues fixed in the cosign-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2015:1482-1 1 CVE
Recommended update for openldap2
openldap2 was updated to fix one security issue. This security issue was fixed: - CVE-2015-4000: The Logjam Attack / weakdh.org (bsc#937766). This non-security issue was fixed: - bsc#932773: ldapmodify failed with DOS format LDIF files containing '-' separato…
first Jul 29, 2015 -
Low max 2.9SUSE-SU-2024:1899-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375).
first Jun 3, 2024 -
Low max 3.7SUSE-SU-2025:4308-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)
first Nov 28, 2025 -
Low max 2.8SUSE-SU-2025:02179-1 1 CVE
Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
first Jun 30, 2025 -
Low max 3.7SUSE-SU-2020:0419-1 1 CVE
Security update for dnsmasq
This update for dnsmasq fixes the following issues: Security issue fixed: - CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation (bsc#1154849) Other issue addressed: - Removed c…
first Feb 19, 2020 -
Low max 3.3SUSE-SU-2024:1171-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)
first Apr 9, 2024 -
Low max 3.1SUSE-SU-2019:1511-1 1 CVE
Security update for postgresql10
This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10130: Prevent row-level security policies from being bypassed via selectivity estimators (bsc#1134689). Bug fixes: - For a complete list of fixes check the release note…
first Jun 14, 2019 -
Low max 3.7openSUSE-SU-2019:2669-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: Security issues fixed: - CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation (bsc#1154849) - CVE-2017-15107: Fixed a vulnera…
first Dec 11, 2019 -
Low max 3.9openSUSE-SU-2024:13501-1 1 CVE
fish-3.6.4-1.1 on GA media
These are all security issues fixed in the fish-3.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.4SUSE-SU-2016:1459-1 4 CVEs
Security update for cyrus-imapd
This update for cyrus-imapd fixes the following issues: - Previous versions of cyrus-imapd would not allow its users to disable old SSL variants that are vulnerable to attacks like BEAST and POODLE. This patch adds the configuration option 'tls_versions' to r…
first Jun 1, 2016 -
Low max 3.7openSUSE-SU-2021:0597-1 1 CVE
Security update for python-django-registration
This update for python-django-registration fixes the following issues: Update to 3.1.2 (boo#1184427, CVE-2021-21416) * Filter sensitive POST parameters in error reports * Fix RemovedInDjango40Warning from Signal arguments This update was imported from the ope…
first Apr 22, 2021 -
Low max 3.7SUSE-SU-2015:2337-1 1 CVE
Security update for rubygem-passenger
This update for rubygem-passenger fixes the following issues: - CVE-2015-7519: rubygem-passenger was not filtering the environment like apache is doing, allowing injection of environment variables (bsc#956281)
first Dec 21, 2015 -
Low max 3.1openSUSE-SU-2021:0145-1 1 CVE
Security update for viewvc
This update for viewvc fixes the following issues: - update to 1.1.28 (boo#1167974, CVE-2020-5283): * security fix: escape subdir lastmod file name (#211) * fix standalone.py first request failure (#195) * suppress stack traces (with option to show) (#140) * …
first Jan 23, 2021 -
Low max 3.3openSUSE-SU-2024:12959-1 1 CVE
xen-4.17.1_04-1.1 on GA media
These are all security issues fixed in the xen-4.17.1_04-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 2.8SUSE-SU-2024:3111-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2024-43167: Fix null pointer dereference issue in function ub_ctx_set_fwd (bsc#1229068)
first Sep 3, 2024 -
Low max 3.3openSUSE-SU-2024:12935-1 1 CVE
liblxc-devel-5.0.2-1.1 on GA media
These are all security issues fixed in the liblxc-devel-5.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.9openSUSE-SU-2025:14898-1 1 CVE
nethack-3.4.3-6.1 on GA media
These are all security issues fixed in the nethack-3.4.3-6.1 package on the GA media of openSUSE Tumbleweed.
first Mar 16, 2025 -
Low max 3.1openSUSE-SU-2021:0084-1 1 CVE
Security update for viewvc
This update for viewvc fixes the following issues: - update to 1.1.28 (boo#1167974, CVE-2020-5283): * security fix: escape subdir lastmod file name (#211) * fix standalone.py first request failure (#195) * suppress stack traces (with option to show) (#140) * …
first Jan 16, 2021 -
Low max 3.4SUSE-SU-2024:4359-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)
first Dec 17, 2024 -
Low max 3.6openSUSE-SU-2024:13354-1 2 CVEs
redis-7.2.2-1.1 on GA media
These are all security issues fixed in the redis-7.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2023:0586-1 1 CVE
Security update for nrpe
This update for nrpe fixes the following issues: - CVE-2015-4000: Fixed Logjam Attack by increasing the standard size of 512 bit dh parameters to 2048 (bsc#931600, bsc#938906).
first Mar 1, 2023 -
Low max 3.3openSUSE-SU-2025:14947-1 1 CVE
upx-5.0.0-2.1 on GA media
These are all security issues fixed in the upx-5.0.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 31, 2025 -
Low max 3.2SUSE-SU-2024:2476-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).
first Jul 13, 2024 -
Low max 3.2SUSE-SU-2024:2477-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).
first Jul 13, 2024 -
Low max 3.0SUSE-SU-2024:2858-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)
first Aug 8, 2024 -
Low max 3.2SUSE-SU-2024:2494-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).
first Jul 16, 2024 -
Low max 3.7SUSE-SU-2016:0224-1 2 CVEs
Security update for openldap2
This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bs…
first Jan 25, 2016 -
Low max 3.3SUSE-SU-2022:3199-1 1 CVE
Security update for yast2-samba-provision
This update for yast2-samba-provision fixes the following issues: Security issue fixed: - CVE-2018-17956: Fixed a credentials leak (bsc#1117597). Non-Security issues fixed: - Stop packaging docdir, it only contained the license which is now in licensedir. (bs…
first Sep 8, 2022 -
Low max 3.7openSUSE-SU-2024:10371-1 3 CVEs
socat-1.7.3.1-2.7 on GA media
These are all security issues fixed in the socat-1.7.3.1-2.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2023:0391-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Update to 13.10: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).
first Feb 13, 2023 -
Low max 3.4openSUSE-SU-2023:0101-1 1 CVE
Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: pdns-recursor was updated to 4.6.6: * fixes deterred spoofing attempts can lead to authoritative servers being marked unavailable (boo#1209897, CVE-2023-26437) Fixes in 4.6.5: * When an expired NSEC3 e…
first May 2, 2023 -
Low max 3.7SUSE-SU-2015:1269-1 17 CVEs
Security update for MozillaFirefox, mozilla-nspr, mozilla-nss
MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979). - CVE-2015-2728: Type confusion i…
first Jul 14, 2015 -
Low max 3.9openSUSE-SU-2024:13850-1 1 CVE
nodejs-electron-28.2.10-2.1 on GA media
These are all security issues fixed in the nodejs-electron-28.2.10-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3openSUSE-SU-2025:15021-1 1 CVE
augeas-1.14.1-2.1 on GA media
These are all security issues fixed in the augeas-1.14.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 24, 2025 -
Low max 2.5SUSE-SU-2025:0725-1 1 CVE
Security update for procps
This update for procps fixes the following issues: - Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290).
first Feb 26, 2025 -
Low max 3.7openSUSE-SU-2024:10540-1 1 CVE
python3-urllib3-1.18.1-1.2 on GA media
These are all security issues fixed in the python3-urllib3-1.18.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024