6,767 results · Clear filters · Feed
-
Medium max 4.8openSUSE-SU-2025:14682-1 1 CVE
java-17-openjdk-17.0.14.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 22, 2025 -
Medium max 5.9openSUSE-SU-2024:0005-1 1 CVE
Security update for putty
This update for putty fixes the following issues: putty was updated to to release 0.80: * Fix CVE-2023-48795 [boo#1218128] - Update to release 0.79 * Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll e…
first Jan 3, 2024 -
Medium max 5.9SUSE-SU-2021:2085-1 1 CVE
Security update for go1.16
This update for go1.16 fixes the following issues: - Updated go to upstream version 1.16.4 (released 2021-05-06) (bsc#1182345). - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest (bsc#1185790).
first Jun 18, 2021 -
Medium max 5.9SUSE-SU-2020:0523-1 1 CVE
Security update for mariadb-100
This update for mariadb-100 fixes the following issues: MariaDB was updated to version 10.0.40-3 (bsc#1162388). Security issue fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388).
first Feb 28, 2020 -
Medium max 5.6SUSE-SU-2018:2410-1 1 CVE
Security update for xen
This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacke…
first Aug 17, 2018 -
Medium max 6.7SUSE-SU-2020:2116-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)
first Aug 4, 2020 -
Medium max 4.0openSUSE-SU-2025:14959-1 1 CVE
libsaml-devel-3.3.1-2.1 on GA media
These are all security issues fixed in the libsaml-devel-3.3.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 2, 2025 -
Medium max 5.5SUSE-SU-2022:3907-1 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2021-3522: Fixed ID3v2 tag frame size check and potential invalid reads (bsc#1185448).
first Nov 8, 2022 -
Medium max 6.3openSUSE-SU-2024:10780-1 3 CVEs
gdm-3.38.2-2.7 on GA media
These are all security issues fixed in the gdm-3.38.2-2.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2022:10104-1 1 CVE
Security update for varnish
This update for varnish fixes the following issues: Update to release 7.1.1: - CVE-2022-38150: Resolve a denial of service attack involving reason phrases (boo#1202350).
first Aug 27, 2022 -
Medium max 6.3SUSE-SU-2025:0868-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).
first Mar 14, 2025 -
Medium max 5.5SUSE-SU-2018:3064-3 5 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple prot…
first Apr 27, 2019 -
Medium max 6.5SUSE-SU-2024:2037-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checked…
first Jun 17, 2024 -
Medium max 5.4SUSE-SU-2018:2388-1 1 CVE
Security update for perl-Archive-Zip
This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could…
first Aug 16, 2018 -
Medium max 5.5SUSE-SU-2022:0206-1 2 CVEs
Security update for python-numpy
This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…
first Jan 27, 2022 -
Medium max 5.9SUSE-SU-2023:1686-2 1 CVE
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
first Apr 27, 2023 -
Medium max 6.5SUSE-SU-2019:0057-1 9 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…
first Jan 10, 2019 -
Medium max 5.3SUSE-SU-2018:1692-2 10 CVEs
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk to version 7u181 fixes the following issues: + S8162488: JDK should be updated to use LittleCMS 2.8 + S8180881: Better packaging of deserialization + S8182362: Update CipherOutputStream Usage + S8183032: Upgrade to LittleCMS…
first Oct 18, 2018 -
Medium max 4.3openSUSE-SU-2024:0400-1 1 CVE
Security update for nanopb
This update for nanopb fixes the following issues: - CVE-2024-53984: Fix memory not released on error return (boo#1234088)
first Dec 9, 2024 -
Medium max 6.4SUSE-SU-2024:1573-1 2 CVEs
Security update for go1.22
This update for go1.22 fixes the following issues: Update to go1.22.3: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017) - CVE-2024-24788: net: high cpu usage in extractExtendedRCode (bsc#1224018) - cmd/compile: Go 1.22.x…
first May 9, 2024 -
Medium max 5.5SUSE-SU-2023:2450-1 1 CVE
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_121 fixes one issue. The following security issue was fixed: - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
first Jun 7, 2023 -
Medium max 5.3SUSE-SU-2024:0464-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). - CVE-2022-48566: Use CRYPTO_memcmp() for compare_digest (bsc#1214691).
first Feb 14, 2024 -
Medium max 4.7SUSE-SU-2023:0215-1 2 CVEs
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2022-23527: Fixed open redirect in oidc_validate_redirect_url() using tab character (bsc#1206441). - CVE-2021-39191: Fixed open redirect issue in target_link_uri parameter (bsc#1190223…
first Jan 30, 2023 -
Medium max 6.4SUSE-SU-2025:1366-1 3 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 128.9.2 (bsc#1241277) - CVE-2025-3522: Leak of hashed Window credentials via crafted attachment URL - CVE-2025-2830: Information Disclosure of /tmp directory listing - CVE-20…
first Apr 24, 2025 -
Medium max 5.5SUSE-SU-2023:2051-1 2 CVEs
Security update for libtpms
This update for libtpms fixes the following issues: - CVE-2023-1017: Fixed out-of-bounds write in CryptParameterDecryption (bsc#1206022). - CVE-2023-1018: Fixed out-of-bounds read in CryptParameterDecryption (bsc#1206023).
first Apr 27, 2023 -
Medium max 5.4SUSE-RU-2020:0775-1 1 CVE
Recommended update for python-botocore
This update for python-boto3, python-botocore and python-futures fixes the following issues: python-botocore was updated to 1.13.33: - Fix for python3-botocore versioning issues between SLES12 SP3 Teradata and Public Cloud Module. (bsc#1129696) - Remove the b…
first Mar 24, 2020 -
Medium max 5.3SUSE-SU-2024:1079-2 1 CVE
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: - CVE-2024-29025: Fixed out of memory due to large number of form fields (bsc#1222045).
first Jun 18, 2024 -
Medium max 5.9SUSE-SU-2021:3008-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.2.40 [bsc#1189320]: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389
first Sep 9, 2021 -
Medium max 5.3
Security update for java-1_7_1-ibm
The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…
first Dec 3, 2015 -
Medium max 5.4SUSE-SU-2020:2686-1 1 CVE
Security update for rubygem-actionview-4_2
This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2020-15169: Fix cross-site scripting in translation helpers (bsc#1176421)
first Sep 21, 2020 -
Medium max 5.5SUSE-SU-2018:1378-1 1 CVE
Security update for qemu
This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memo…
first May 22, 2018 -
Medium max 5.0SUSE-SU-2021:2637-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035). - CVE-2021-21705: Fixed SSRF bypass in FILTER_VALIDATE_URL (bsc#1188037).
first Aug 6, 2021 -
Medium max 6.5SUSE-SU-2024:0764-2 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
first Mar 5, 2024 -
Medium max 5.5openSUSE-SU-2024:14547-1 1 CVE
ansible-core-2.17-2.17.7-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17-2.17.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 5, 2024 -
Medium max 6.4openSUSE-SU-2020:1168-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-10713 (bsc#1168994) - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - CVE-2020-15706 (bsc#1174463) - CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives whe…
first Aug 8, 2020 -
Medium max 4.5SUSE-SU-2017:1603-1 3 CVEs
Security update for netpbm
This update for netpbm fixes the following issues: Security bugs: * CVE-2017-2586: A NULL pointer dereference in stringToUint function could lead to a denial of service (abort) problem when processing malformed images. [bsc#1024292] * CVE-2017-2581: A out-of-…
first Jun 19, 2017 -
Medium max 5.3SUSE-SU-2021:14668-1 1 CVE
Security update for php53
This update for php53 fixes the following issues: - CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient
first Mar 17, 2021 -
Medium max 4.2SUSE-SU-2025:02779-1 1 CVE
Security update for slurm
This update for slurm fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).
first Aug 13, 2025 -
Medium max 6.5SUSE-SU-2023:1863-1 1 CVE
Security update for shim
This update for shim fixes the following issues: - Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458) - Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX co…
first Apr 17, 2023 -
Medium max 5.9SUSE-SU-2020:3844-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2020-14145: Fixed an observable discrepancy leading to an information leak in the algorithm negotiation (bsc#1173513). - Fixed an issue where AuthorizedKeysCommand produced a lot of output (bsc#1161684…
first Dec 16, 2020