6,771 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2023:3301-1 1 CVE
Security update for libyajl
This update for libyajl fixes the following issues: - CVE-2023-33460: Fixed memory leak which could cause out-of-memory in server (bsc#1212928).
first Aug 14, 2023 -
Medium max 6.5SUSE-SU-2018:4296-1 5 CVEs
Security update for mailman
This update for mailman fixes the following security vulnerabilities: - Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018…
first Dec 28, 2018 -
Medium max 5.5openSUSE-SU-2020:1819-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: Update to samba 4.11.14 - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2…
first Nov 2, 2020 -
Medium max 6.2SUSE-SU-2024:1844-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
first May 29, 2024 -
Medium max 6.3SUSE-SU-2024:2938-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
first Aug 15, 2024 -
Medium max 5.7SUSE-SU-2022:0060-1 1 CVE
Security update for python36-pip
This update for python36-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).
first Jan 12, 2022 -
Medium max 6.4SUSE-SU-2020:2078-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use …
first Jul 29, 2020 -
Medium max 6.1SUSE-SU-2022:4050-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2022-32166: Fixed out of bounds read in minimask_equal() (bsc#1203865).
first Nov 17, 2022 -
Medium max 5.4SUSE-SU-2025:02755-1 3 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318…
first Aug 12, 2025 -
Medium max 5.3SUSE-SU-2023:2552-1 1 CVE
Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed double free (bsc#1210212).
first Jun 20, 2023 -
Medium max 5.6SUSE-SU-2018:2482-1 1 CVE
Security update for xen
This update for xen fixes the following issues: This security issue was fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 da…
first Aug 22, 2018 -
Medium max 5.5SUSE-SU-2024:0815-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 8, 2024 -
Medium max 5.9SUSE-SU-2023:4047-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931) Other changes: - Added GB18030-2022 charmap (jsc#PED-4908, BZ #30243) - Run vismain only if linke…
first Oct 11, 2023 -
Medium max 6.4openSUSE-SU-2019:2143-1 1 CVE
Security update for podman
This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065) This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Sep 16, 2019 -
Medium max 6.0openSUSE-SU-2024:14359-1 1 CVE
cargo-c-0.10.3~git0.ee7d7ef-2.1 on GA media
These are all security issues fixed in the cargo-c-0.10.3~git0.ee7d7ef-2.1 package on the GA media of openSUSE Tumbleweed.
first Sep 22, 2024 -
Medium max 5.3SUSE-SU-2016:0435-1 2 CVEs
Security update for rubygem-activesupport-4_2
This update for rubygem-activesupport-4_2 fixes the following issues: - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329) - CVE-2016-0753: Input Validation Circumvention (bsc#963334)
first Feb 11, 2016 -
Medium max 4.4openSUSE-SU-2024:14210-1 1 CVE
weblate-5.6.2-1.1 on GA media
These are all security issues fixed in the weblate-5.6.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 19, 2024 -
Medium max 5.5openSUSE-SU-2024:12954-1 1 CVE
ImageMagick-7.1.1.10-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.1.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.9SUSE-SU-2022:3693-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15-SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-20008: Fixed local information disclosure due to possibility to read kernel heap memory via mmc_blk_read_single of…
first Oct 22, 2022 -
Medium max 6.5SUSE-SU-2025:1330-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - Fixed bwlimit=0 option broken by CVE-2024-12088 fix (bsc#1239649).
first Apr 16, 2025 -
Medium max 6.1openSUSE-SU-2024:11516-1 1 CVE
libxapian-devel-1.4.18-1.6 on GA media
These are all security issues fixed in the libxapian-devel-1.4.18-1.6 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2025:0991-1 1 CVE
Security update for rsync
This update for rsync fixes the following issues: - CVE-2024-12747: Fixed race condition in handling symbolic links (bsc#1235475) - Broken rsyncd after protocol bump, regression reported (bsc#1237187). - Bump protocol version to 32 - make it easier to show se…
first Mar 24, 2025 -
Medium max 6.5SUSE-SU-2024:1532-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.12 * Monitoring: Node exporter upgraded to 1.7.0 * Automatic migration from Salt 3000 to the Salt Bundle * New update-salt recurring state * uyuni-proxy-systemd-se…
first May 6, 2024 -
Medium max 6.5SUSE-RU-2022:4361-1 5 CVEs
Recommended update for pdsh, slurm_22_05
This update for pdsh, slurm_22_05 fixes the following issues: Slurm was updated to 22.05.5 - Fixes a number of moderate severity issues, noteable are: * Load hash plugin at slurmstepd launch time to prevent issues loading the plugin at step completion if the …
first Dec 8, 2022 -
Medium max 5.9SUSE-SU-2025:01785-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.13: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 30, 2025 -
Medium max 5.9openSUSE-SU-2024:13155-1 1 CVE
ruby3.2-rubygem-fluentd-1.15.3-1.4 on GA media
These are all security issues fixed in the ruby3.2-rubygem-fluentd-1.15.3-1.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:13212-1 1 CVE
python310-urllib3-2.0.4-2.1 on GA media
These are all security issues fixed in the python310-urllib3-2.0.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2025:01830-1 2 CVEs
Security update for helm-mirror
This update for helm-mirror fixes the following issues: - CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart (bsc#1241028) - CVE-2025-32387: Fixed stack overflow due to parser recursion that can exceed the…
first Jun 6, 2025 -
Medium max 6.0SUSE-SU-2025:4290-1 2 CVEs
Security update for cups
This update for cups fixes the following issues: - CVE-2025-61915: Fixed a local denial-of-service via cupsd.conf update and related issues. (bsc#1253783) - CVE-2025-58436: Fixed an issue where a slow client communication leads to a possible DoS attack. (bsc#…
first Nov 28, 2025 -
Medium max 6.1SUSE-SU-2023:3123-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set. (…
first Aug 2, 2023 -
Medium max 6.3SUSE-SU-2024:3853-1 1 CVE
Security update for uwsgi
This update for uwsgi fixes the following issues: - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules (bsc#1222332)
first Oct 31, 2024 -
Medium max 5.4openSUSE-SU-2023:0191-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: Updated to latest release 4.0.47, this version fixes CVE-2023-29454 (boo#1213338): - New Features and Improvements + ZBXNEXT-7694 Added 'utf8mb3' character set support for MySQL database + ZBX-20946 Enabled B…
first Jul 24, 2023 -
Medium max 4.0openSUSE-SU-2025:14882-1 2 CVEs
bsdtar-3.7.7-3.1 on GA media
These are all security issues fixed in the bsdtar-3.7.7-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 12, 2025 -
Medium max 5.3SUSE-SU-2023:3397-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) - Don't pass zero length input to EVP_Cipher because s390x assembler optimized AES cannot h…
first Aug 23, 2023 -
Medium max 6.5SUSE-SU-2019:2962-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core…
first Nov 12, 2019 -
Medium max 4.2openSUSE-SU-2024:13343-1 1 CVE
python310-urllib3-2.0.7-1.1 on GA media
These are all security issues fixed in the python310-urllib3-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:13070-1 1 CVE
libopenssl-1_0_0-devel-1.0.2u-21.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-21.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2023:3791-1 1 CVE
Security update for postfix
This update for postfix fixes the following issues: Security fixes: - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196). Other fixes: - postfix: config.postfix causes too tight permission on main.cf (bsc#1…
first Sep 26, 2023 -
Medium max 5.3SUSE-SU-2024:3929-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906)
first Nov 6, 2024 -
Medium max 4.9SUSE-SU-2024:0824-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - CVE-2023-7207: Fixed path traversal vulnerability (bsc#1218571, bsc#1219238)
first Mar 8, 2024