Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.1

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: PostgreSQL upgrade to version 16.3 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompat…

    first May 15, 2024
  • Low max 2.9

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2024-4141: Fixed out-of-bounds array write (bsc#1223375).

    first Jun 3, 2024
  • Low max 3.7

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS…

    first May 6, 2024
  • Low max 3.7

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bs…

    first Apr 26, 2024
  • Low max 3.4

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak in curl used for the first host to the followed-to host under certain circumstances (bsc#1234068)

    first Dec 19, 2024
  • Low max 2.6

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349).

    first Jul 26, 2023
  • Low max 3.3

    Security update for xen

    This update for xen fixes the following issues: Security fixes: - CVE-2022-42336: Fix an issue where guests configuring AMD Speculative Store Bypass Disable would have no effect (XSA-431) (bsc#1211433). - CVE-2022-42335: Fixed an issue where guests running un…

    first Jun 19, 2023
  • Low max 3.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114).

    first May 26, 2021
  • Low max 3.3

    Security update for PackageKit

    This update for PackageKit fixes the following issues: - CVE-2020-16121: Fixed an information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930).

    first Dec 22, 2020
  • Low max 2.2

    Security update for yast2-multipath

    This update for yast2-multipath to version 3.1.9 fixes the following issues: Security issue fixed: - CVE-2018-17955: Use random file name instead of static names (bsc#1117592). Non-security issue fixed: - Removed calls to /sbin/insserv (bsc#1026027).

    first Jan 21, 2021
  • Low max 2.2

    Security update for permissions

    This update for permissions fixes the following issues: Security issues fixed: - CVE-2020-8013: Fixed an issue where chkstat set unintended setuid/capabilities for mrsh and wodim (bsc#1163922). Non-security issues fixed: - Fixed a regression where chkstat bro…

    first Feb 28, 2020
  • Low max 3.7

    Security update for compat-openssl098

    This update for compat-openssl098 fixes the following issues: - CVE-2020-1968: Introduced hardening against the Raccoon attack by always generating fresh DH keys and never reuse them across multiple TLS connections (bsc#1176331).

    first Sep 15, 2020
  • Low max 3.4

    Security update for yast2-rmt

    This update for yast2-rmt to version 1.1.12 fixes the following issues: Security issue fixed: - CVE-2018-17957: Secure MySQL credentials by not exposing them on the command line (bsc#1117602)

    first Dec 20, 2018
  • Low max 3.3

    Security update for salt

    salt was updated to fix one security issue. This security issue was fixed: - CVE-2015-8034: Prevent saving state.sls cache data to disk with insecure permissions (bsc#957914).

    first Jul 28, 2016
  • Low max 3.7

    Security update for compat-openssl098

    This update fixes the following security issues: - CVE-2015-4000 (boo#931698) * The Logjam Attack / weakdh.org * reject connections with DH parameters shorter than 1024 bits * generates 2048-bit DH parameters by default - CVE-2015-1788 (boo#934487) * Malforme…

    first Jun 17, 2015
  • Low max 3.4

    Recommended update for Package Management Stack

    This update provides fixes and enhancements for the Software Update Stack. gnome-packagekit: - Fix title of license agreement window. (bsc#927319) libsolv: - Rework splitprovides handling. (bnc#921332) - Add product:regflavor attribute. (bnc#896224) - Fix bug…

    first Jun 15, 2015
  • Low max 3.4

    Security update for apache2-mod_nss

    This update provides apache2-mod_nss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. (CVE-2016-3099) - Created valgrind suppression files to ease debugging. - Implement SSL_PPTYPE_FILTER to call executables to …

    first Sep 10, 2016
  • Low max 3.4

    Feature update for zxing-cpp libreoffice

    This feature update for zxing-cpp and libreoffice fixes the following issues: Update LibreOffice from version 7.1.3.2 to 7.2.3.2 (jsc#SLE-18213): - Fix external URL connections issues when WebDav is built using `libserf`. (bsc#1187173, bsc#1186871) - Fix an i…

    first Jan 10, 2022