6,767 results · Clear filters · Feed
-
Medium max 5.9openSUSE-SU-2024:13518-1 1 CVE
putty-0.80-1.1 on GA media
These are all security issues fixed in the putty-0.80-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:1079-1 1 CVE
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - CVE-2024-29025: Fixed out of memory due to large number of form fields (bsc#1222045).
first Apr 2, 2024 -
Medium max 6.7SUSE-SU-2022:2444-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_83 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege wit…
first Jul 19, 2022 -
Medium max 4.8SUSE-SU-2025:0674-1 2 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 40 (bsc#1236470): - CVE-2025-21502: unauthenticated attacker can obtain unauthorized read and write access to data through the Hotspot component API (bsc#…
first Feb 24, 2025 -
Medium max 4.3SUSE-SU-2023:3240-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760)
first Aug 8, 2023 -
Medium max 6.5SUSE-RU-2019:0863-1 3 CVEs
Security update for SUSE Manager Server 3.1
This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None (bsc#1130658) - SUSE texmode fix (bsc#1109316) - Fix for SUSE distribution detection in ISO building (bsc#1123991) py26-compat-salt: - Remove arch from nam…
first Apr 3, 2019 -
Medium max 6.1SUSE-SU-2017:1794-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2017-7526: Hardening against a local side-channel attack in RSA key handling has been added (bsc#1046607)
first Jul 6, 2017 -
Medium max 6.5SUSE-SU-2022:1285-1 9 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for…
first Apr 20, 2022 -
Medium max 6.5openSUSE-SU-2024:13793-1 1 CVE
libfreebl3-3.98-1.1 on GA media
These are all security issues fixed in the libfreebl3-3.98-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:3098-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).
first Sep 6, 2022 -
Medium max 6.5SUSE-SU-2021:2440-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…
first Jul 21, 2021 -
Medium max 6.5SUSE-SU-2020:3625-1 10 CVEs
Security update for mariadb
This update for mariadb includes the following fixes: Security fixes included in this update: - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue which could have result…
first Dec 4, 2020 -
Medium max 5.9SUSE-SU-2022:1446-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2022-24302: Fixed a race condition between creation and chmod when writing private keys. (bsc#1197279)
first Apr 28, 2022 -
Medium max 5.9SUSE-SU-2017:0848-1 1 CVE
Security update for python-oslo.middleware
This update for python-oslo.middleware fixes the following issues: Security issue fixed: - CVE-2017-2592: Using the CatchError class may include sensitive values in the error message accompanying a Traceback, resulting in their disclosure (bsc#1022043).
first Mar 29, 2017 -
Medium max 4.6openSUSE-SU-2024:12984-1 1 CVE
syncthing-1.23.5-1.1 on GA media
These are all security issues fixed in the syncthing-1.23.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:3876-1 2 CVEs
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441) * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cach…
first Sep 28, 2023 -
Medium max 4.4openSUSE-SU-2025:14855-1 1 CVE
go1.23-1.23.7-1.1 on GA media
These are all security issues fixed in the go1.23-1.23.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 6, 2025 -
Medium max 5.3SUSE-SU-2020:3932-1 7 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * Class libraries:…
first Dec 23, 2020 -
Medium max 4.3SUSE-SU-2023:2100-1 1 CVE
Security update for terraform-provider-helm
This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure by updating embedded helm package (bsc#1208086).
first May 4, 2023 -
Medium max 5.3SUSE-SU-2020:3159-1 8 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage…
first Nov 5, 2020 -
Medium max 6.2SUSE-SU-2022:3291-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or termi…
first Sep 16, 2022 -
Medium max 6.5SUSE-SU-2019:2536-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137).
first Oct 3, 2019 -
Medium max 5.8openSUSE-SU-2025:14986-1 1 CVE
python311-Django-5.1.8-1.1 on GA media
These are all security issues fixed in the python311-Django-5.1.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 11, 2025 -
Medium max 5.5SUSE-SU-2020:2122-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14331: A buffer over write in vgacon_scroll was fixed (bnc#1174205). - CVE-2020-10135: Legacy pairing and secure-c…
first Aug 4, 2020 -
Medium max 5.6SUSE-SU-2018:0986-1 19 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 Realtime kernel was updated to 4.4.120 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch predict…
first Apr 19, 2018 -
Medium max 5.4SUSE-SU-2024:2140-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.17 - CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997)
first Jun 21, 2024 -
Medium max 5.3openSUSE-SU-2022:0873-1 13 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String match…
first Mar 16, 2022 -
Medium max 6.2SUSE-SU-2024:1310-1 2 CVEs
Security update for texlive
This update for texlive fixes the following issues: - CVE-2023-46048: Fixed NULL pointer dereference in texk/web2c/pdftexdir/writet1.c (bsc#1222126) - CVE-2023-46051: Fixed NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c (bsc#1222127)
first Apr 16, 2024 -
Medium max 6.7SUSE-SU-2025:1451-1 1 CVE
Security update for libva
This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: * uncontrolled search path may allow an authenticated user to escalate privilege via local access (CVE-2023-39929, bsc#1224413, jsc#PED-11066) T…
first May 5, 2025 -
Medium max 5.5SUSE-RU-2024:1637-2 1 CVE
Recommended update for google-cloud SDK
This update for google-cloud SDK fixes the following issues: - Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697) - Bellow 5 binaries Obsolete the python3.6 counterpart: python311-google-resumable-media python311-google-api-co…
first Jun 20, 2024 -
Medium max 6.5
Security update for chromium
This update for chromium fixes the following issues: Chromium 91.0.4472.77 (boo#1186458): * Support Managed configuration API for Web Applications * WebOTP API: cross-origin iframe support * CSS custom counter styles * Support JSON Modules * Clipboard: read-o…
first Jun 4, 2021 -
Medium max 5.9SUSE-SU-2021:0068-1 3 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - New upstream LTS version 12.20.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…
first Jan 11, 2021 -
Medium max 6.5openSUSE-SU-2020:2237-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2020-26137: Fixed a CRLF injection via HTTP request method (bsc#1177120). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Dec 13, 2020 -
Medium max 6.7SUSE-SU-2020:3186-1 2 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_9 fixes several issues. The following security issues were fixed: - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impac…
first Nov 5, 2020 -
Medium max 6.5SUSE-SU-2020:1524-1 3 CVEs
Security update for python
This update for python to version 2.7.17 fixes the following issues: Syncing with lots of upstream bug fixes and security fixes. Bug fixes: - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2019-18348: Fixed …
first Jun 3, 2020 -
Medium max 4.3openSUSE-SU-2024:12105-1 1 CVE
neomutt-20220429-1.1 on GA media
These are all security issues fixed in the neomutt-20220429-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5openSUSE-SU-2020:2161-1 11 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-29369: There was a race condition between certain expand functions (expand_downwards and expand_upwards) and page-table free…
first Dec 4, 2020 -
Medium max 5.9SUSE-SU-2025:01887-1 1 CVE
Security update for perl-Crypt-OpenSSL-RSA
This update for perl-Crypt-OpenSSL-RSA fixes the following issues: - CVE-2024-2467: Side-channel attack in PKCS#1 v1.5 padding mode (Marvin Attack) (bsc#1221446)
first Jun 11, 2025 -
Medium max 6.4openSUSE-SU-2024:13941-1 1 CVE
go1.21-1.21.10-1.1 on GA media
These are all security issues fixed in the go1.21-1.21.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2024:1880-2 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
first Jul 31, 2024