898 results · Clear filters · Feed
-
Low max 3.7openSUSE-SU-2024:13873-1 3 CVEs
java-21-openjdk-21.0.3.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.9openSUSE-SU-2024:12971-1 1 CVE
apache2-mod_apparmor-3.1.4-1.1 on GA media
These are all security issues fixed in the apache2-mod_apparmor-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3SUSE-SU-2025:1413-1 1 CVE
Security update for augeas
This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909)
first Apr 30, 2025 -
Low max 3.5SUSE-SU-2017:2453-1 1 CVE
Security update for SUSE Manager Server 3.0
This update for the SUSE Manager Server 3.0 provides several fixes and improvements. The following security issue has been fixed: spacewalk-java: - CVE-2017-7538: Do not allow HTML code injection via Cross Site Scripting (XSS) in the Organization Name. (bsc#1…
first Sep 13, 2017 -
Low max 3.7openSUSE-SU-2025:15068-1 1 CVE
sequoia-octopus-librnp-1.11.0-2.1 on GA media
These are all security issues fixed in the sequoia-octopus-librnp-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed.
first May 8, 2025 -
Low max 2.7SUSE-SU-2025:02746-1 2 CVEs
Security update for zabbix
This update for zabbix fixes the following issues: - CVE-2024-42333: Fixed buffer over-read for broken UTF8 mail data injection. (bsc#1233834) - CVE-2024-22117: Fixed a bug that can cause the map element to crash when new URLs are added. (bsc#1233791)
first Aug 11, 2025 -
Low max 3.1SUSE-SU-2025:3778-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - CVE-2025-11731: fixed a type confusion in exsltFuncResultComp function that could cause a denial of service (bsc#1251979)
first Oct 24, 2025 -
Low max 3.7SUSE-SU-2023:0390-1 1 CVE
Security update for postgresql12
This update for postgresql12 fixes the following issues: Update to 12.14: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).
first Feb 13, 2023 -
Low max 3.7SUSE-SU-2022:4009-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-43980: Improve the recycling of Processor objects to make it more robust. (bsc#1203868)
first Nov 16, 2022 -
Low max 3.1openSUSE-SU-2020:0332-1 2 CVEs
Security update for gd
This update for gd fixes the following issues: Security issue fixed: - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471). - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120). This update was im…
first Mar 10, 2020 -
Low max 3.7SUSE-SU-2021:0930-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2020-11080: HTTP/2 Large Settings Frame DoS (bsc#1181358)
first Mar 24, 2021 -
Low max 3.1SUSE-SU-2024:1768-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: PostgreSQL upgrade to version 14.12 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompa…
first May 23, 2024 -
Low max 3.7openSUSE-SU-2024:13995-1 3 CVEs
java-11-openj9-11.0.23.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.23.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7openSUSE-SU-2021:3485-1 1 CVE
Security update for squid
This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403).
first Oct 20, 2021 -
Low max 3.8SUSE-SU-2025:1551-1 1 CVE
Security update for go1.24
This update for go1.24 fixes the following issues: Update to go1.24.3 (bsc#1236217): Security fixes: - CVE-2025-22873: Fixed os.Root permits access to parent directory (bsc#1242715) Changelog: * go#73556 go#73555 security: fix CVE-2025-22873 os: Root permits …
first May 14, 2025 -
Low max 3.6SUSE-SU-2024:3222-1 1 CVE
Security update for runc
This update for runc fixes the following issues: - Update to runc v1.1.14 - CVE-2024-45310: Fixed an issue where runc can be tricked into creating empty files/directories on host. (bsc#1230092)
first Sep 12, 2024 -
Low max 3.7openSUSE-SU-2025:14899-1 1 CVE
wpa_supplicant-2.11-4.1 on GA media
These are all security issues fixed in the wpa_supplicant-2.11-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 16, 2025 -
Low max 3.7SUSE-SU-2020:14511-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys and never reuse them across multiple TLS connections (bsc#1176331).
first Oct 5, 2020 -
Low max 3.3openSUSE-SU-2024:10707-1 20 CVEs
cups-2.3.3op2-4.2 on GA media
These are all security issues fixed in the cups-2.3.3op2-4.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.1SUSE-SU-2025:0871-1 1 CVE
Security update for subversion
This update for subversion fixes the following issues: - CVE-2024-46901: Fixed mod_dav_svn denial-of-service via control characters in paths (bsc#1234317)
first Mar 14, 2025 -
Low max 2.9SUSE-SU-2024:1901-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375).
first Jun 3, 2024 -
Low max 2.6SUSE-SU-2023:3830-1 1 CVE
Security update for xrdp
This update for xrdp fixes the following issues: - CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805).
first Sep 27, 2023 -
Low max 3.1SUSE-SU-2024:1703-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: PostgreSQL upgrade to version 14.12 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompa…
first May 20, 2024 -
Low max 3.1openSUSE-SU-2024:12857-1 2 CVEs
viewvc-1.3.0~dev20230104-1.1 on GA media
These are all security issues fixed in the viewvc-1.3.0~dev20230104-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2024:1793-1 4 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u412 build 08 with OpenJ9 0.44.0 virtual machine: - CVE-2024-21094: Fixed C2 compilation failure with 'Exceeded _node_regs array' (bsc#1222986). - CVE-2024-21011: Fixed long Exce…
first May 27, 2024 -
Low max 3.1SUSE-SU-2021:1313-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2021-21330: Fixed the way pure-Python HTTP parser interprets `//` (bsc#1184745)
first Apr 26, 2021 -
Low max 3.6openSUSE-SU-2024:12063-1 1 CVE
exiv2-0.27.5-2.1 on GA media
These are all security issues fixed in the exiv2-0.27.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.7SUSE-SU-2025:01662-2 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631).
first May 29, 2025 -
Low max 3.7SUSE-SU-2017:1047-1 7 CVEs
Security update for ntp
This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed (bsc#1030050): - CVE-2017-6464: Denial of Service via Malformed Config - CVE-201…
first Apr 18, 2017 -
Low max 3.7SUSE-SU-2015:1851-1 4 CVEs
Security update for apache2
The Apache2 webserver was updated to fix several issues: Security issues fixed: - The chunked transfer coding implementation in the Apache HTTP Server did not properly parse chunk headers, which allowed remote attackers to conduct HTTP request smuggling attac…
first Oct 22, 2015 -
Low max 2.9SUSE-SU-2024:1980-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375).
first Jun 11, 2024 -
Low max 3.7SUSE-SU-2026:0264-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in g_buffered_input_stream_peek (bsc#1257049).
first Jan 23, 2026 -
Low max 3.1openSUSE-SU-2021:1334-1 3 CVEs
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related…
first Oct 4, 2021 -
Low max 2.1SUSE-SU-2025:0116-1 2 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2024-50349: Passwords for trusted sites could be sent to untrusted sites (bsc#1235600). - CVE-2024-52006: Carriage Returns via the credential protocol to credential helpers (bsc#1235601).
first Jan 15, 2025 -
Low max 3.7SUSE-SU-2025:01735-1 1 CVE
Security update for wxWidgets-3_2
This update for wxWidgets-3_2 fixes the following issues: - CVE-2024-58249: Fixed crash when connection is refused in wxWebRequestCURL (bsc#1239902)
first May 29, 2025 -
Low max 2.6SUSE-SU-2023:2848-1 1 CVE
Security update for php74
This update for php74 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349).
first Jul 17, 2023 -
Low max 3.1SUSE-SU-2024:2266-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: PostgreSQL upgrade to version 16.3 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompat…
first Jul 2, 2024 -
Low max 3.3SUSE-SU-2021:1454-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2021-25317: ownership of /var/log/cups could allow privilege escalation from lp user to root via symlink attacks (bsc#1184161)
first Apr 30, 2021 -
Low max 2.8openSUSE-SU-2024:11579-1 1 CVE
docker-20.10.9_ce-1.2 on GA media
These are all security issues fixed in the docker-20.10.9_ce-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Low max 3.3openSUSE-SU-2024:11860-1 1 CVE
cosign-1.5.2-1.1 on GA media
These are all security issues fixed in the cosign-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024