6,767 results · Clear filters · Feed
-
Medium max 5.6SUSE-SU-2018:0705-1 1 CVE
Security update for microcode_ctl
This update for ucode-intel fixes the following issues: The Intel CPU microcode version was updated to version 20180312. This update enables the IBPB+IBRS based mitigations of the Spectre v2 flaws (boo#1085207 CVE-2017-5715) - New Platforms - BDX-DE EGW A0 6-…
first Mar 16, 2018 -
Medium max 5.9openSUSE-SU-2024:14037-1 1 CVE
python310-w3lib-2.2.0-1.1 on GA media
These are all security issues fixed in the python310-w3lib-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2023:3947-1 3 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object…
first Oct 3, 2023 -
Medium max 4.3SUSE-SU-2025:02471-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2025-27465: Fixed incorrect stubs exception handling for flags recovery (XSA-470) (bsc#1244644) - Fixed more AMD transient execution attacks (XSA-471) (bsc#1246112)
first Jul 22, 2025 -
Medium max 4.7SUSE-SU-2025:3788-1 2 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference whe…
first Oct 24, 2025 -
Medium max 4.0SUSE-SU-2020:0954-1 1 CVE
Security update for rubygem-actionview-4_2
This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView (bsc#1167240).
first Apr 8, 2020 -
Medium max 5.5SUSE-RU-2024:1637-1 1 CVE
Recommended update for google-cloud SDK
This update for google-cloud SDK fixes the following issues: - Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697) - Bellow 5 binaries Obsolete the python3.6 counterpart: python311-google-resumable-media python311-google-api-co…
first May 14, 2024 -
Medium max 5.7SUSE-SU-2023:1628-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - Re-build containerd to use updated golang-packaging (jsc#1342). - Update to containerd v1.6.16 for Do…
first Mar 28, 2023 -
Medium max 5.9openSUSE-SU-2024:13530-1 1 CVE
ssh-audit-3.1.0-1.1 on GA media
These are all security issues fixed in the ssh-audit-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2022:14875-1 11 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 5 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods…
first Jan 18, 2022 -
Medium max 4.9openSUSE-SU-2024:13653-1 1 CVE
cpio-2.15-1.1 on GA media
These are all security issues fixed in the cpio-2.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.7openSUSE-SU-2025:14779-1 11 CVEs
kernel-firmware-i915-20250210-1.1 on GA media
These are all security issues fixed in the kernel-firmware-i915-20250210-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.3SUSE-SU-2024:0329-2 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).
first Mar 5, 2024 -
Medium max 6.8SUSE-SU-2022:1437-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container (bsc#1197870). Update to version 1.25.1. The following non-security bugs were fixed: - add workaround for https://bugzil…
first Apr 27, 2022 -
Medium max 5.6SUSE-SU-2018:0131-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update…
first Jan 18, 2018 -
Medium max 5.9SUSE-SU-2023:4921-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
first Dec 20, 2023 -
Medium max 6.5SUSE-SU-2020:1087-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry …
first Apr 23, 2020 -
Medium max 5.1openSUSE-SU-2021:1520-1 3 CVEs
Security update for permissions
This update for permissions fixes the following issues: Update to version 20200127: * Makefile: Leap 15.3 still uses /etc, so adjust the installation setup Update to version 20181225: * mgetty: faxq-helper now finally reside in /usr/libexec * libksysguard5: U…
first Dec 2, 2021 -
Medium max 5.9SUSE-SU-2024:1539-2 1 CVE
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: - CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)
first Jun 18, 2024 -
Medium max 5.9SUSE-SU-2019:1236-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first May 14, 2019 -
Medium max 5.3openSUSE-SU-2024:13016-1 1 CVE
bouncycastle-1.74-1.1 on GA media
These are all security issues fixed in the bouncycastle-1.74-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2023:1635-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
first Mar 28, 2023 -
Medium max 5.4openSUSE-SU-2025:15102-1 1 CVE
python311-pycapnp-2.0.0-2.5 on GA media
These are all security issues fixed in the python311-pycapnp-2.0.0-2.5 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 5.3openSUSE-SU-2024:12927-1 1 CVE
mysql-connector-java-8.0.33-2.1 on GA media
These are all security issues fixed in the mysql-connector-java-8.0.33-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2023:3689-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fixed leaking buffers stored in cstates cache (bsc#1192760).
first Sep 19, 2023 -
Medium max 5.3SUSE-SU-2021:1006-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22890: TLS 1.3 session ticket proxy host mixup (bsc#1183934) - CVE-2021-22876: Automatic referer leaks credentials (bsc#1183933)
first Apr 1, 2021 -
Medium max 5.9SUSE-SU-2019:1852-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces fo…
first Jul 15, 2019 -
Medium max 6.5openSUSE-SU-2020:0122-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs…
first Jan 28, 2020 -
Medium max 6.9SUSE-SU-2025:03511-1 1 CVE
Security update for python-xmltodict
This update for python-xmltodict fixes the following issues: - CVE-2025-9375: XML injection vulnerability in `xmltodict` allows input data manipulation (bsc#1249036).
first Oct 9, 2025 -
Medium max 5.5SUSE-SU-2019:1219-1 7 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts …
first May 13, 2019 -
Medium max 5.0SUSE-SU-2019:14032-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]
first Apr 27, 2019 -
Medium max 5.5SUSE-SU-2023:1927-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. (bsc#1210308)
first Apr 20, 2023 -
Medium max 5.6SUSE-SU-2020:1606-1 4 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: nodejs12 was updated to version 12.18.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-8172: Fixed am issue where TLS session reuse could have led t…
first Jun 11, 2020 -
Medium max 6.5openSUSE-SU-2021:2641-1 1 CVE
Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags (bsc#1182503).
first Aug 9, 2021 -
Medium max 5.9SUSE-SU-2019:1423-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…
first Jun 5, 2019 -
Medium max 6.5SUSE-SU-2020:1199-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).
first May 6, 2020 -
Medium max 4.0SUSE-SU-2020:0578-1 1 CVE
Security update for yast2-rmt
This update for yast2-rmt to version 1.3.0 fixes the following issues: Security issue fixed: - CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835). Non-security issue fixed: - Add support for forwarding registratio…
first Mar 3, 2020 -
Medium max 6.8openSUSE-SU-2025:14820-1 2 CVEs
openssh-9.9p2-1.1 on GA media
These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 18, 2025 -
Medium max 6.7SUSE-SU-2023:3083-1 2 CVEs
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_147 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that a…
first Aug 1, 2023 -
Medium max 5.5SUSE-SU-2021:1165-1 3 CVEs
Security update for glibc
This update for glibc fixes the following issues: - CVE-2020-27618: Accept redundant shift sequences in IBM1364 (bsc#1178386) - CVE-2020-29562: Fix incorrect UCS4 inner loop bounds (bsc#1179694) - CVE-2020-29573: Harden printf against non-normal long double v…
first Apr 13, 2021