6,771 results · Clear filters · Feed
-
Medium max 5.9SUSE-SU-2016:2281-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2016-6210: Prevent user enumeration through the timing of password processing (bsc#989363) [-prevent_timing_user_enumeration] - Allow lowering the DH groups parameter limit in server as well as when GS…
first Sep 9, 2016 -
Medium max 5.8openSUSE-SU-2019:1288-1 1 CVE
Security update for libvirt
This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1…
first Apr 28, 2019 -
Medium max 5.3SUSE-RU-2020:1342-1 1 CVE
Recommended update for python3
This update for python3 fixes the following issues: - Changed the name of idle3 icons to idle3.png to avoid collision with Python 2 version (bsc#1165894).
first May 19, 2020 -
Medium max 6.5SUSE-SU-2022:1359-1 9 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for…
first Apr 25, 2022 -
Medium max 6.5openSUSE-SU-2024:0194-2 1 CVE
Security update for keybase-client
This update for keybase-client fixes the following issues: Update to version 6.2.8 * Update client CA * Fix incomplete locking in config file handling. - Update the Image dependency to address CVE-2023-29408 / boo#1213928. This is done via the new update-imag…
first Jul 8, 2024 -
Medium max 5.6SUSE-SU-2018:4300-1 9 CVEs
Security update for xen
This update for xen fixes the following issues: Update to Xen 4.10.2 bug fix release (bsc#1027519). Security vulnerabilities fixed: - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowe…
first Dec 28, 2018 -
Medium max 6.1openSUSE-SU-2021:0152-1 1 CVE
Security update for python-autobahn
This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570). This update was imported from the openSUSE:Leap:15.1:Update update project.
first Jan 24, 2021 -
Medium max 6.4SUSE-SU-2020:2307-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
first Aug 25, 2020 -
Medium max 5.3openSUSE-SU-2024:13066-1 1 CVE
python310-3.10.12-2.1 on GA media
These are all security issues fixed in the python310-3.10.12-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2024:13137-1 5 CVEs
ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2023:4904-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).
first Dec 19, 2023 -
Medium max 5.5SUSE-SU-2024:0291-1 1 CVE
Security update for rear116
This update for rear116 fixes the following issues: - CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).
first Jan 31, 2024 -
Medium max 5.7SUSE-SU-2023:3953-1 2 CVEs
Security update for mdadm
This update for mdadm fixes the following issues: - CVE-2023-28736: Fixed a buffer overflow (bsc#1214244). - CVE-2023-28938: Fixed uncontrolled resource consumption (bsc#1214245).
first Oct 3, 2023 -
Medium max 6.7SUSE-SU-2023:3104-1 2 CVEs
Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_130 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that a…
first Aug 1, 2023 -
Medium max 6.8SUSE-SU-2023:0352-1 6 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Update to version 8.5.15 (jsc#PED-2617): * CVE-2022-39306: Fix for privilege escalation (bsc#1205225) * CVE-2022-39307: Omit error from http response when user does not exists (bsc#1205227) - Update to versio…
first Feb 10, 2023 -
Medium max 4.7SUSE-SU-2025:3787-1 2 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference whe…
first Oct 24, 2025 -
Medium max 5.1openSUSE-SU-2024:11926-1 1 CVE
grub2-2.06-18.1 on GA media
These are all security issues fixed in the grub2-2.06-18.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.7openSUSE-SU-2025:14796-1 11 CVEs
kernel-firmware-realtek-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-realtek-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 6.9SUSE-SU-2022:3599-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount rac…
first Oct 17, 2022 -
Medium max 5.5SUSE-SU-2020:2325-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Esc…
first Aug 25, 2020 -
Medium max 5.3SUSE-SU-2019:2875-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2019-10218: Fixed a path injection caused by filenames containing path separators (bso#14071) (bsc#1144902).
first Oct 31, 2019 -
Medium max 6.5SUSE-SU-2023:2478-2 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: Updated to version 10.5.20: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404).
first Jul 20, 2023 -
Medium max 5.8SUSE-SU-2024:4146-1 3 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2024-11233: Single byte overread with convert.quoted-printable-decode filter (bsc#1233702). - CVE-2024-11234: Configuring a proxy in a stream context might allow for CRLF injection in URIs (bsc#1233703). …
first Dec 3, 2024 -
Medium max 4.8openSUSE-SU-2024:13235-1 1 CVE
cpp7-7.5.0+r278197-15.1 on GA media
These are all security issues fixed in the cpp7-7.5.0+r278197-15.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2025:4370-1 2 CVEs
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 11, 2025 -
Medium max 6.2openSUSE-SU-2020:0804-1 2 CVEs
Security update for texlive-filesystem
This update for texlive-filesystem fixes the following issues: Security issues fixed: - CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740). - CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910). This update was imported from th…
first Jun 13, 2020 -
Medium max 5.9SUSE-SU-2023:4983-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).
first Dec 28, 2023 -
Medium max 5.5SUSE-SU-2023:2749-1 1 CVE
Security update for iniparser
This update for iniparser fixes the following issues: - CVE-2023-33461: Fixed NULL pointer dereference in iniparser_getboolean() (bsc#1211889).
first Jun 30, 2023 -
Medium max 4.4SUSE-SU-2023:3822-2 1 CVE
Security update for supportutils
This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords (bsc#1207598). Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory (bsc#1210950) + A Cleartext Stor…
first Oct 18, 2023 -
Medium max 6.5openSUSE-SU-2024:12297-1 1 CVE
python310-3.10.6-3.1 on GA media
These are all security issues fixed in the python310-3.10.6-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2020:0467-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service…
first Feb 25, 2020 -
Medium max 5.3SUSE-SU-2022:14926-1 17 CVEs
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues: Update Java 7.0 to Service Refresh 11 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2…
first Mar 23, 2022 -
Medium max 4.0SUSE-SU-2020:0079-1 1 CVE
Security update for libzypp
This update for libzypp fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763).
first Sep 16, 2020 -
Medium max 5.3SUSE-SU-2023:2467-1 1 CVE
Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212).
first Jun 8, 2023 -
Medium max 4.8openSUSE-SU-2025:14685-1 1 CVE
java-11-openjdk-11.0.26.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.26.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 23, 2025 -
Medium max 6.5SUSE-SU-2023:4893-1 15 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2023-39350: Fixed incorrect offset calculation leading to DoS (bsc#1214856). - CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX (bsc#1214857). - CVE-2023-39352: Fixed Invalid offs…
first Dec 18, 2023 -
Medium max 5.1SUSE-SU-2021:3117-1 1 CVE
Security update for Mesa
This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).
first Sep 16, 2021 -
Medium max 5.7openSUSE-SU-2025:14777-1 11 CVEs
kernel-firmware-chelsio-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-chelsio-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.9openSUSE-SU-2024:13937-1 1 CVE
libopenssl-1_1-devel-1.1.1w-9.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1w-9.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2023:1599-1 1 CVE
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_134 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
first Mar 28, 2023