6,771 results · Clear filters · Feed
-
Medium max 5.1SUSE-SU-2022:4204-1 1 CVE
Security update for keylime
This update for keylime fixes the following issues: - CVE-2022-3500: Fixed vulnerability where a node seems as attested when in reality it is not properly attested (bsc#1204782).
first Nov 23, 2022 -
Medium max 5.9openSUSE-SU-2025:15340-1 3 CVEs
php8-8.4.10-1.1 on GA media
These are all security issues fixed in the php8-8.4.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 11, 2025 -
Medium max 5.1SUSE-SU-2020:3512-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UD…
first Nov 25, 2020 -
Medium max 5.5openSUSE-SU-2024:12854-1 1 CVE
avahi-0.8-23.1 on GA media
These are all security issues fixed in the avahi-0.8-23.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2025:15005-1 1 CVE
MozillaFirefox-137.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-137.0.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 17, 2025 -
Medium max 5.3SUSE-SU-2022:4129-1 5 CVEs
Security update for the Linux Kernel (Live Patch 30 for SLE 15)
This update for the Linux Kernel 4.12.14-150000_150_92 fixes several issues. The following security issues were fixed: - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could have led to a use-after-fre…
first Nov 18, 2022 -
Medium max 5.5SUSE-SU-2018:1614-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through (bsc#1092885)
first Jun 8, 2018 -
Medium max 5.2SUSE-SU-2017:1835-1 1 CVE
Security update for libICE
This update for libICE fixes the following issues: - CVE-2017-2626: Creation of the ICE auth session cookies used insufficient randomness, making these cookies predictable. A more random generation method has been implemented. (boo#1025068)
first Jul 11, 2017 -
Medium max 5.6SUSE-SU-2021:2861-1 1 CVE
Security update for spectre-meltdown-checker
This update for spectre-meltdown-checker fixes the following issues: spectre-meltdown-checker was updated to version 0.44 (bsc#1189477) - feat: add support for SRBDS related vulnerabilities - feat: add zstd kernel decompression (#370) - enh: arm: add experime…
first Aug 27, 2021 -
Medium max 5.9SUSE-SU-2023:2622-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (…
first Jun 23, 2023 -
Medium max 6.5openSUSE-SU-2024:12463-1 4 CVEs
java-11-openj9-11.0.17.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.8SUSE-SU-2024:4215-1 3 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2024-11233: buffer overread when processing input with the convert.quoted-printable-decode filter. (bsc#1233702) - CVE-2024-11234: possible CRLF injection in URIs when a proxy is configured in a stream co…
first Dec 5, 2024 -
Medium max 5.6openSUSE-SU-2025:14991-1 2 CVEs
libsqlite3-0-3.49.1-3.1 on GA media
These are all security issues fixed in the libsqlite3-0-3.49.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 14, 2025 -
Medium max 4.7openSUSE-SU-2025:14690-1 1 CVE
python311-azure-storage-blob-12.24.1-1.1 on GA media
These are all security issues fixed in the python311-azure-storage-blob-12.24.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 23, 2025 -
Medium max 6.6openSUSE-SU-2024:14472-1 2 CVEs
ruby3.3-rubygem-actionpack-7.0-7.0.8.6-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-actionpack-7.0-7.0.8.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 7, 2024 -
Medium max 6.5SUSE-SU-2022:4250-1 5 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: - Update to OpenJDK 8u352 build 08 with OpenJ9 0.35.0 virtual machine, including Oracle October 2022 CPU changes. - CVE-2022-21619: An unauthenticated attacker with network access via multiple prot…
first Nov 28, 2022 -
Medium max 4.3SUSE-SU-2024:4435-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. (bsc#1234795)
first Dec 30, 2024 -
Medium max 5.0SUSE-SU-2021:2795-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
first Aug 20, 2021 -
Medium max 5.9SUSE-SU-2019:0271-1 1 CVE
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
first Feb 6, 2019 -
Medium max 5.7openSUSE-SU-2024:12558-1 1 CVE
containerd-1.6.12-1.1 on GA media
These are all security issues fixed in the containerd-1.6.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2024:13965-1 1 CVE
python310-aiohttp-3.9.5-2.1 on GA media
These are all security issues fixed in the python310-aiohttp-3.9.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2017:1080-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: These security issues were fixed: - CVE-2017-7228: Broken check in memory_exchange() permited PV guest breakout (bsc#1030442). - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progres…
first Apr 20, 2017 -
Medium max 5.3openSUSE-SU-2024:14532-1 1 CVE
libsndfile-devel-1.2.2-3.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 27, 2024 -
Medium max 6.9SUSE-SU-2025:1455-1 3 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: - CVE-2025-3277,CVE-2025-29087: Fixed integer overflow in sqlite concat function (bsc#1241020) - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078) Other fix…
first May 7, 2025 -
Medium max 6.7SUSE-SU-2024:1258-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2024-28219: Fixed buffer overflow in _imagingcms.c (bsc#1222262) Other fixes: - Re-enabled build tests for s390x and ppc (bsc#1222553)
first Apr 12, 2024 -
Medium max 4.0SUSE-SU-2021:0109-1 1 CVE
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Update zypper to version 1.14.41 Update libzypp to 17.25.4 - CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583) - RepoManager: Force refresh if repo url has changed (bsc#…
first Jan 13, 2021 -
Medium max 6.1SUSE-SU-2022:3937-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issues: - CVE-2021-28957: Fixed XSS due to missing input sanitization for HTML5 attributes (bsc#1184177).
first Nov 10, 2022 -
Medium max 5.5SUSE-SU-2021:1116-1 1 CVE
Security update for umoci
This update for umoci fixes the following issues: - Update to umoci v0.4.6. - CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147)
first Apr 9, 2021 -
Medium max 6.1openSUSE-SU-2021:0338-1 1 CVE
Security update for python-djangorestframework
This update for python-djangorestframework fixes the following issues: Update to 3.11.2 * Security: Drop urlize_quoted_links template tag in favour of Django's built-in urlize. Removes a XSS vulnerability for some kinds of content in the browsable API. (boo#1…
first Feb 25, 2021 -
Medium max 5.9SUSE-SU-2022:3982-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by `/parallel` command line switch. (bsc#1204258) - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. (bsc#1204257)
first Nov 15, 2022 -
Medium max 5.3SUSE-SU-2024:1141-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Align the patch with the upstream one and make it more robust. (bsc#1220358)
first Apr 8, 2024 -
Medium max 6.5SUSE-SU-2018:1425-1 1 CVE
Security update for krb5
This update for krb5 provides the following fixes: Security issues fixed: - CVE-2017-7562: Improper validation of certificate EKU and SAN could lead to authentication bypass. (bsc#1055851) Non-security issues fixed: - Set 'rdns' and 'dns_canonicalize_hostname…
first May 25, 2018 -
Medium max 6.5SUSE-SU-2025:01830-2 2 CVEs
Security update for helm-mirror
This update for helm-mirror fixes the following issues: - CVE-2025-32386: Fixed denial of service due to memory exhaustion after loading a specially crafter chart (bsc#1241028) - CVE-2025-32387: Fixed stack overflow due to parser recursion that can exceed the…
first Jul 8, 2025 -
Medium max 4.8SUSE-SU-2023:1763-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption in Cipher.update_into (bsc#1208036).
first Apr 4, 2023 -
Medium max 5.4SUSE-SU-2019:1352-2 1 CVE
Security update for python3
This update for python3 to version 3.6.8 fixes the following issues: Security issue fixed: - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840). Non-security issue fixed: - Fixed broken…
first Jul 12, 2019 -
Medium max 6.4openSUSE-SU-2020:1169-1 7 CVEs
Security update for grub2
This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use …
first Aug 8, 2020 -
Medium max 5.6SUSE-SU-2018:0660-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow u…
first Mar 12, 2018 -
Medium max 5.3SUSE-SU-2023:4614-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 15: * Oracle October 17 2023 CPU [bsc#1216640] Security fixes: - CVE-2023-22081: Fixed enhanced TLS connections (bsc#1216374) - CVE-2023-22067: Fixed IO…
first Nov 29, 2023 -
Medium max 6.0openSUSE-SU-2024:14355-1 1 CVE
stgit-2.4.12-1.1 on GA media
These are all security issues fixed in the stgit-2.4.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 20, 2024 -
Medium max 6.5SUSE-SU-2021:2439-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…
first Jul 21, 2021