6,767 results · Clear filters · Feed
-
Medium max 6.5openSUSE-SU-2024:14401-1 1 CVE
libsonivox3-3.6.14-1.1 on GA media
These are all security issues fixed in the libsonivox3-3.6.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 14, 2024 -
Medium max 5.5SUSE-SU-2024:1138-1 2 CVEs
Security update for guava
This update for guava fixes the following issues: - Upgrade to guava from v30.1.1 to v32.0.1 - CVE-2023-2976: Fixed Predictable temporary files and directories used in FileBackedOutputStream. (bsc#1212401) - CVE-2020-8908: Fixed a bug that could allow an atta…
first Apr 8, 2024 -
Medium max 6.1openSUSE-SU-2019:1785-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks (bsc#1137825). This update was imported from the SUSE:S…
first Jul 21, 2019 -
Medium max 5.9openSUSE-SU-2024:14443-1 1 CVE
xsd-4.1.0-3.1 on GA media
These are all security issues fixed in the xsd-4.1.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2024 -
Medium max 5.3openSUSE-SU-2024:12442-1 6 CVEs
java-15-openjdk-15.0.9.0-1.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:10815-1 8 CVEs
dirmngr-2.2.27-2.4 on GA media
These are all security issues fixed in the dirmngr-2.2.27-2.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:2313-1 1 CVE
Security update for netty3
This update for netty3 fixes the following issues: - CVE-2024-29025: Fixed HttpPostRequestDecoder can out of memory due to large number of form fields (bsc#1222045).
first Jul 8, 2024 -
Medium max 5.3SUSE-SU-2021:3942-1 1 CVE
Security update for brotli
This update for brotli fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first Dec 6, 2021 -
Medium max 5.5SUSE-SU-2023:3385-1 1 CVE
Security update for janino
This update for janino fixes the following issues: janino was upgraded to version 3.1.10: - CVE-2023-33546: Fixed DoS due to missing error handling (bsc#1211923).
first Aug 23, 2023 -
Medium max 5.3openSUSE-SU-2024:12663-1 2 CVEs
java-11-openjdk-11.0.18.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2020:0893-1 4 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.116 (boo#1173251): * CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6…
first Jun 28, 2020 -
Medium max 6.3openSUSE-SU-2024:14080-1 1 CVE
squid-6.10-1.1 on GA media
These are all security issues fixed in the squid-6.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 27, 2024 -
Medium max 6.1openSUSE-SU-2020:1105-1 4 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Print a list of available disk devices (bsc#1170824) - Install wipefs to initrd - Force install crypt modules golang-github-prometheus-prometheus: - Update change log and spec file + Modified spec fil…
first Jul 27, 2020 -
Medium max 6.4SUSE-SU-2016:2904-1 3 CVEs
Security update for sudo
This update for sudo fixes the following security issues: - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-201…
first Nov 24, 2016 -
Medium max 5.9SUSE-SU-2024:2408-1 2 CVEs
Security update for libvpx
This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large parameters (bsc#1225879). - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensio…
first Jul 11, 2024 -
Medium max 5.3openSUSE-SU-2024:12828-1 1 CVE
libruby3_2-3_2-3.2.2-1.1 on GA media
These are all security issues fixed in the libruby3_2-3_2-3.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2023:1686-1 1 CVE
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
first Mar 29, 2023 -
Medium max 6.1openSUSE-SU-2025:14996-1 1 CVE
hauler-1.2.2-1.1 on GA media
These are all security issues fixed in the hauler-1.2.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2025 -
Medium max 5.9SUSE-SU-2022:2356-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)
first Jul 11, 2022 -
Medium max 5.5SUSE-SU-2024:0831-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 11, 2024 -
Medium max 6.3SUSE-SU-2025:4538-1 3 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) …
first Dec 31, 2025 -
Medium max 5.3SUSE-SU-2023:2972-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 26, 2023 -
Medium max 6.5SUSE-SU-2022:3490-1 3 CVEs
Security update for slurm
This update for slurm fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary p…
first Oct 3, 2022 -
Medium max 5.9SUSE-SU-2025:01747-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: Security fixes: - CVE-2025-4382: exposure of data from encrypted device through CLI once the root device is successfully unlocked via TPM (bsc#1242971). Other bug fixes: - Fix incorrect nvme disks and boot ord…
first May 29, 2025 -
Medium max 4.0SUSE-SU-2021:0770-1 1 CVE
Security update for libsolv, libzypp, yast2-installation, zypper
This update for libsolv, libzypp, yast2-installation, zypper fixes the following issues: Update zypper to version 1.14.43: - doc: give more details about creating versioned package locks (bsc#1181622) - man: Document synonymously used patch categories (bsc#11…
first Mar 11, 2021 -
Medium max 5.7openSUSE-SU-2025:14801-1 11 CVEs
kernel-firmware-usb-network-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-usb-network-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.5SUSE-SU-2020:2121-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0305: In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead …
first Aug 4, 2020 -
Medium max 6.5SUSE-SU-2020:1179-1 1 CVE
Security update for rmt-server
This update for rmt-server to version 2.5.7 fixes the following issues: Security issues fixed: - CVE-2019-18904: Fixed offline migrations (bsc#1160922). - Fixed a local denial of service (bsc#1165548). Non-security issues fixed: - Align supported subscription…
first May 5, 2020 -
Medium max 6.5openSUSE-SU-2024:10050-1 9 CVEs
libpng16-16-1.6.26-1.1 on GA media
These are all security issues fixed in the libpng16-16-1.6.26-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:1759-1 1 CVE
Security update for microcode_ctl
This update for microcode_ctl fixes the following security issue: - CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bsc#1095735)
first Jun 19, 2018 -
Medium max 6.5openSUSE-SU-2024:11396-1 2 CVEs
spectre-meltdown-checker-0.44-1.2 on GA media
These are all security issues fixed in the spectre-meltdown-checker-0.44-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2026:0072-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821). - CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822).
first Jan 8, 2026 -
Medium max 5.5openSUSE-SU-2024:0064-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: - CVE-2024-22119: Fixed a stored XSS in graph items select form (boo#1219775).
first Mar 1, 2024 -
Medium max 6.5openSUSE-SU-2020:0856-1 3 CVEs
Security update for chromium
This update for chromium fixes the following issues: Update to version 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 - Enforce to n…
first Jun 24, 2020 -
Medium max 4.9SUSE-SU-2021:2617-1 4 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…
first Aug 5, 2021 -
Medium max 6.5SUSE-SU-2017:1349-1 1 CVE
Security update for SUSE Manager Server 3.0
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470) Additionally, the following non-security issues have been fixed: rhnli…
first May 18, 2017 -
Medium max 6.0SUSE-SU-2025:4289-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2025-61915: Fixed local denial-of-service via cupsd.conf update (bsc#1253783)
first Nov 28, 2025 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Update to version 1.6.4 (boo#1216429): * CVE-2023-5631: Fix cross-site scripting vulnerability in handling of SVG in HTML messages * Fix PHP8 warnings * Fix default 'mime.types' path on Windows * Manag…
first Nov 2, 2023 -
Medium max 5.3SUSE-SU-2025:0512-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. (bsc#1236878)
first Feb 13, 2025 -
Medium max 5.0SUSE-FU-2025:0661-1 1 CVE
Feature update for slurm and pdsh
This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm_24_11: - Security issues fixed: * CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes u…
first Feb 24, 2025