6,767 results · Clear filters · Feed
-
Medium max 5.5SUSE-SU-2020:2102-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10781: Fixed a denial of service issue in the ZRAM implementation (bnc#1173074). - CVE-2020-0305: In cdev_ge…
first Jul 31, 2020 -
Medium max 6.2SUSE-SU-2025:4116-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-9714: Fixed inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076) - CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed…
first Nov 17, 2025 -
Medium max 6.9SUSE-SU-2024:4428-1 2 CVEs
Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)
first Dec 27, 2024 -
Medium max 5.9SUSE-SU-2025:01661-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
first May 22, 2025 -
Medium max 5.5SUSE-SU-2024:0136-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). - Check localtime_r() return value to fix crashing (bsc#1217000)
first Jan 18, 2024 -
Medium max 5.6SUSE-SU-2019:2299-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-3819: A flaw was fixed in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may have ente…
first Sep 5, 2019 -
Medium max 6.5openSUSE-SU-2024:13897-1 1 CVE
matrix-synapse-1.105.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.105.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2024:11694-1 1 CVE
grafana-7.5.12-1.1 on GA media
These are all security issues fixed in the grafana-7.5.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:2631-2 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: This new feature was added: - bsc#1094325, bsc#1094725: libxl: Enable virsh blockresize for XEN guests This security issue was fixed: - CVE-2017-5715: Additional fixes for the Spectre patches (bsc#1079869) T…
first Oct 18, 2018 -
Medium max 6.5SUSE-SU-2017:1352-1 1 CVE
Security update for SUSE Manager Client Tools
The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470) Additionally, the following non-security issues have been fixed: cobbl…
first May 18, 2017 -
Medium max 6.5openSUSE-SU-2022:2177-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019) - CVE-2019-19377: Fixed an user-after-free that could be tr…
first Jun 24, 2022 -
Medium max 5.6SUSE-SU-2022:2376-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can l…
first Jul 12, 2022 -
Medium max 5.3SUSE-SU-2023:4198-1 1 CVE
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Upgraded to JDK 11.0.21+9 (October 2023 CPU): - CVE-2023-22081: Fixed a partial denial of service issue that could be triggered via HTTPS (bsc#1216374). Please visit the Oracle Release Notes page f…
first Oct 25, 2023 -
Medium max 5.5SUSE-SU-2022:3941-1 2 CVEs
Security update for xwayland
This update for xwayland fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 10, 2022 -
Medium max 6.5openSUSE-SU-2023:0370-1 1 CVE
Security update for connman
This update for connman fixes the following issues: - Update to 1.42 * Fix issue with iwd and signal strength calculation. * Fix issue with iwd and handling service removal. * Fix issue with iwd and handling new connections. * Fix issue with handling default …
first Nov 14, 2023 -
Medium max 4.3openSUSE-SU-2025:15792-1 2 CVEs
python39-3.9.24-2.1 on GA media
These are all security issues fixed in the python39-3.9.24-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 1, 2025 -
Medium max 6.5openSUSE-SU-2019:1435-1 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657). This update was imported from the SUSE:SLE-15:Update update project.
first May 22, 2019 -
Medium max 5.3SUSE-SU-2020:3378-1 1 CVE
Security update for podman
This update for podman fixes the following issues: Security issue fixed: - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API (bsc#1176804). Non-security issues fixed: - add de…
first Nov 19, 2020 -
Medium max 6.4SUSE-SU-2019:2341-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065)
first Sep 10, 2019 -
Medium max 5.3SUSE-SU-2019:2893-1 1 CVE
Security update for samba
This update for samba fixes the following issue: - CVE-2019-10218: Fixed a path injection caused by filenames containing path separators (bso#14071) (bsc#1144902).
first Nov 5, 2019 -
Medium max 5.3SUSE-SU-2019:2379-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: Security issue fixed: - CVE-2019-12781: Add incorrect HTTP detection with reverse-proxy connecting via HTTPS (bsc#1139945).
first Sep 16, 2019 -
Medium max 4.7openSUSE-SU-2024:13138-1 2 CVEs
w3m-0.5.3+git20230121-2.1 on GA media
These are all security issues fixed in the w3m-0.5.3+git20230121-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2024:0045-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers…
first Jan 7, 2024 -
Medium max 5.3SUSE-SU-2023:3827-1 1 CVE
Security update for python-brotlipy
This update for python-brotlipy fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first Sep 27, 2023 -
Medium max 5.5openSUSE-SU-2024:13639-1 1 CVE
libeverest-3.5.2-1.1 on GA media
These are all security issues fixed in the libeverest-3.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2025:1054-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: - CVE-2025-2361: Fixed improper sanitization of user-controlled input passed via the cmd parameter in the Mercurial SCM Web Interface (bsc#1239685)
first Mar 28, 2025 -
Medium max 6.5SUSE-SU-2022:3473-1 2 CVEs
Security update for python310
This update for python310 fixes the following issues: Updated to version 3.10.7: - CVE-2020-10735: Fixed DoS due to missing limit of amount of digits when converting text to int (bsc#1203125). - CVE-2021-28861: Fixed an open redirect in the http server when a…
first Sep 30, 2022 -
Medium max 6.6SUSE-SU-2025:0785-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641)
first Mar 5, 2025 -
Medium max 5.8SUSE-SU-2025:0609-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).
first Feb 21, 2025 -
Medium max 4.2openSUSE-SU-2019:1193-1 6 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-2019-3819: A flaw was…
first Apr 12, 2019 -
Medium max 6.6openSUSE-SU-2021:4208-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - CVE-2021-44832: Fixes a remote code execution via JDBC Appender (bsc#1194127)
first Dec 30, 2021 -
Medium max 6.8SUSE-SU-2021:3770-1 11 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version OpenJDK 8u312 (October 2021 CPU): - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in …
first Nov 23, 2021 -
Medium max 5.9SUSE-SU-2024:2246-1 1 CVE
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Jun 29, 2024 -
Medium max 4.0openSUSE-SU-2019:1089-1 1 CVE
Security update for yast2-rmt
This update for yast2-rmt to 1.2.2 fixes the following issues: Security issue fixed: - CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (bsc#1119835) Non-security issues fixed: - Launch as root from gnome-shell menu (bsc#1123562) - Remove b…
first Apr 2, 2019 -
Medium max 5.9SUSE-SU-2019:2550-1 1 CVE
Security update for bind
This update for bind fixes the following issues: Security issue fixed: - CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687) Non-security issue fixed: - bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368)
first Oct 4, 2019 -
Medium max 4.0openSUSE-SU-2025:14746-1 1 CVE
go1.23-1.23.6-1.1 on GA media
These are all security issues fixed in the go1.23-1.23.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 8, 2025 -
Medium max 5.6SUSE-SU-2018:2426-1 1 CVE
Security update for kernel-livepatch-tools
This update for kernel-livepatch-tools fixes the following issues: Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue (CVE-2018-3646 bsc#1099306) The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or d…
first Aug 17, 2018 -
Medium max 5.3SUSE-SU-2019:0971-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346).
first Apr 17, 2019 -
Medium max 5.7openSUSE-SU-2025:14786-1 11 CVEs
kernel-firmware-mellanox-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-mellanox-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.9SUSE-SU-2019:2753-1 16 CVEs
Security update for xen
This update for xen to version 4.11.2 fixes the following issues: Security issues fixed: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fi…
first Oct 23, 2019