6,771 results · Clear filters · Feed
-
Medium max 6.2openSUSE-SU-2024:13690-1 1 CVE
libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.12+kde151-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2022:3805-1 3 CVEs
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42…
first Oct 27, 2022 -
Medium max 6.1openSUSE-SU-2020:0935-1 16 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19462: relay_open in kernel/relay.c allowed local users to cause a denial of service (such as relay blockage) by triggering …
first Jul 16, 2020 -
Medium max 5.4SUSE-SU-2025:0006-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-56201: Fixed sandbox breakout through malicious content and filename of a template (bsc#1234808) - CVE-2024-56326: Fixed sandbox breakout through indirect reference to format method (bsc#123…
first Jan 2, 2025 -
Medium max 6.1SUSE-SU-2025:0281-1 2 CVEs
Security update for go1.22
This update for go1.22 fixes the following issues: - Update to go1.22.11 (bsc#1218424) - CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045) - CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046)
first Jan 29, 2025 -
Medium max 5.9SUSE-SU-2024:0430-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues: Updated to 2.2.3 (jsc#SLE-23879): Bug Fixes: * Fix race condition on verification with multiple signatures attached to image (#3486) * fix(clean): Fix clean cmd for private registries (#3446) * Fixed BYO PKI …
first Feb 8, 2024 -
Medium max 6.0openSUSE-SU-2024:13379-1 1 CVE
pgadmin4-7.8-1.1 on GA media
These are all security issues fixed in the pgadmin4-7.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.4SUSE-SU-2020:2077-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-10713 (bsc#1168994) - CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - CVE-2020-15706 (bsc#1174463) - CVE-2020-15707 (bsc#1174570) - Use overflow checking primitives whe…
first Jul 29, 2020 -
Medium max 6.1SUSE-SU-2020:1972-1 4 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Print a list of available disk devices (bsc#1170824) - Install wipefs to initrd - Force install crypt modules golang-github-prometheus-prometheus: - Update change log and spec file + Modified spec fil…
first Jul 21, 2020 -
Medium max 4.0SUSE-RU-2019:1703-1 1 CVE
Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Removes string replace for textmode fix (bsc#1134195) py26-compat-salt: - Avoid syntax error on yumpkg module running on Python 2.6 (bsc#1136250) - Use ThreadPool from multiprocessing.pool to avoid leakins wh…
first Jun 25, 2019 -
Medium max 4.8openSUSE-SU-2024:14432-1 4 CVEs
java-11-openjdk-11.0.25.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.25.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 28, 2024 -
Medium max 6.0SUSE-SU-2025:0801-1 1 CVE
Security update for pcp
This update for pcp fixes the following issues: - Version upgrade 6.2.0 (bsc#1217826, PED#8192, CVE-2023-6917). - Performance CoPilot 6 is not starting due to missing pmlogger_daily.timer (bsc#1222815).
first Mar 6, 2025 -
Medium max 6.5openSUSE-SU-2025:14833-1 5 CVEs
ffmpeg-4-4.4.5-3.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Feb 25, 2025 -
Medium max 6.3openSUSE-SU-2020:1870-1 1 CVE
Security update for sddm
This update for sddm fixes the following issue: - Fix X not having access control on startup (boo#1177201, CVE-2020-28049).
first Nov 7, 2020 -
Medium max 5.0SUSE-SU-2019:14099-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)
first Jun 21, 2019 -
Medium max 5.5SUSE-SU-2018:2650-1 3 CVEs
Security update for kvm
This update for kvm fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the li…
first Sep 7, 2018 -
Medium max 6.2SUSE-SU-2024:1099-1 3 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. (bsc#1221815) - CVE-2024-2496: Fixed NULL pointer dereference in udevConnectListAllInterfaces() (bsc#122146…
first Apr 3, 2024 -
Medium max 4.4openSUSE-SU-2025:15041-1 1 CVE
golang-github-prometheus-node_exporter-1.9.1-2.1 on GA media
These are all security issues fixed in the golang-github-prometheus-node_exporter-1.9.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 30, 2025 -
Medium max 4.8SUSE-SU-2023:2218-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption in Cipher.update_into (bsc#1208036).
first May 16, 2023 -
Medium max 6.6SUSE-SU-2025:1010-1 1 CVE
Security update for grafana
This update for grafana fixes the following issues: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerability (bsc#1237671)
first Mar 25, 2025 -
Medium max 5.5SUSE-SU-2017:0953-1 5 CVEs
Security update for jasper
This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_…
first Apr 6, 2017 -
Medium max 4.7SUSE-SU-2024:2029-1 1 CVE
Security update for python-scikit-learn
This update for python-scikit-learn fixes the following issues: -CVE-2024-5206: Fixed a possible sensitive data leak in TfidfVectorizer. (bsc#1226185)
first Jun 13, 2024 -
Medium max 5.5SUSE-SU-2021:3348-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa() on a path (bsc#1188063). - logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018). - Adopting BFQ to control I/O (jsc#SLE-21032, bsc#1134353). - Rules weren't appl…
first Oct 12, 2021 -
Medium max 6.5SUSE-SU-2023:4659-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573). - CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).
first Dec 6, 2023 -
Medium max 5.6SUSE-SU-2016:0972-1 1 CVE
Security update for salt
salt was updated to fix one security issue. This security issue was fixed: - CVE-2016-3176: Insecure configuration of PAM external authentication service. Authenticating were able to specify the PAM service (bsc#972436).
first Apr 7, 2016 -
Medium max 6.5openSUSE-SU-2024:11478-1 15 CVEs
ucode-intel-20210608-1.2 on GA media
These are all security issues fixed in the ucode-intel-20210608-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2025:1158-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-10041: sensitive data exposure while performing authentications. (bsc#1232234)
first Apr 7, 2025 -
Medium max 6.5openSUSE-SU-2025:15790-1 1 CVE
python-mistralclient-doc-6.1.0-1.1 on GA media
These are all security issues fixed in the python-mistralclient-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 1, 2025 -
Medium max 6.3SUSE-SU-2024:3358-1 6 CVEs
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * libmfx: out-o…
first Sep 20, 2024 -
Medium max 5.9openSUSE-SU-2024:13569-1 2 CVEs
rclone-1.65.1-1.1 on GA media
These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2022:0816-1 15 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926) - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930) -…
first Mar 14, 2022 -
Medium max 5.8SUSE-SU-2022:2890-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2021-41159: Fixed improper validation of client input (bsc#1191895). - CVE-2022-41160: Fixed improper region checks (bsc#1191895).
first Aug 25, 2022 -
Medium max 6.4SUSE-SU-2020:2308-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421).
first Aug 25, 2020 -
Medium max 6.5SUSE-SU-2022:0362-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-25020: Fixed an overflow in the BPF subsystem due to a mishandling of a long jump over an instruction sequenc…
first Feb 10, 2022 -
Medium max 5.9SUSE-SU-2021:0082-1 3 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - New upstream LTS version 10.23.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…
first Jan 12, 2021 -
Medium max 6.2SUSE-SU-2024:1439-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842).
first Apr 25, 2024 -
Medium max 5.5SUSE-SU-2023:3439-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-38559: Fixed out-of-bounds read in devn_pcx_write_rle() that could result in DoS (bsc#1213637).
first Aug 28, 2023 -
Medium max 5.5SUSE-SU-2018:3555-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: These security issues were fixed: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count valu…
first Oct 29, 2018 -
Medium max 6.3openSUSE-SU-2024:14498-1 2 CVEs
ansible-core-2.17.6-1.1 on GA media
These are all security issues fixed in the ansible-core-2.17.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 15, 2024 -
Medium max 5.9SUSE-SU-2023:2230-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231). - CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232). - CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).
first May 17, 2023