6,771 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2023:0395-1 1 CVE
Security update for python-py
This update for python-py fixes the following issues: - CVE-2022-42969: Fixed an excessive resource consumption that could be triggered when interacting with a Subversion repository containing crated data (bsc#1204364). This also updates python3-py to version…
first Feb 13, 2023 -
Medium max 6.5SUSE-SU-2022:4208-1 11 CVEs
Security update for exiv2-0_26
This update for exiv2-0_26 fixes the following issues: - CVE-2019-17402: Fixed improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577). - CVE-2018-20098: Fixed a heap-based buffer over-read i…
first Nov 23, 2022 -
Medium max 5.3SUSE-SU-2023:1570-1 1 CVE
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2023-22742: Fixed SSH keys verification failure (bsc#1207364).
first Mar 24, 2023 -
Medium max 5.6SUSE-SU-2018:1658-1 4 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4 (bsc#1092631). - CVE-2…
first Jun 12, 2018 -
Medium max 6.5openSUSE-SU-2022:0940-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Update Xen to version 4.14.4 (bsc#1027519) Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mi…
first Mar 23, 2022 -
Medium max 5.5SUSE-SU-2023:2143-1 1 CVE
Security update for protobuf-c
This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. (bsc#1210323)
first May 9, 2023 -
Medium max 5.3SUSE-SU-2024:1968-1 1 CVE
Security update for python-Brotli
This update for python-Brotli fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB. (bsc#1175825)
first Jun 10, 2024 -
Medium max 4.8SUSE-SU-2025:0235-1 1 CVE
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.26+4 (January 2025 CPU) Security fixes: - CVE-2025-21502: Enhance array handling (JDK-8330045, bsc#1236278) Other changes: - JDK-8224624: Inefficiencies in CodeString…
first Jan 24, 2025 -
Medium max 5.3openSUSE-SU-2024:13111-1 1 CVE
libopenssl-1_0_0-devel-1.0.2u-22.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-22.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:2599-2 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…
first Jul 29, 2022 -
Medium max 6.5SUSE-SU-2025:01889-1 2 CVEs
Security update for nbdkit
This update for nbdkit fixes the following issues: Update to version 1.36.5. Security fixes: - CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 2**32 will trigger an assertion failure and cause a de…
first Jun 11, 2025 -
Medium max 5.3openSUSE-SU-2024:14426-1 1 CVE
python310-virtualenv-20.26.6-1.1 on GA media
These are all security issues fixed in the python310-virtualenv-20.26.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 25, 2024 -
Medium max 5.5openSUSE-SU-2024:13662-1 1 CVE
libopenssl-1_1-devel-1.1.1w-7.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1w-7.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2025:0279-1 1 CVE
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Upgrade to upstream tag jdk-21.0.6+7 (January 2025 CPU) Security fixes: - CVE-2025-21502: Enhance array handling (JDK-8330045, bsc#1236278) Other changes: - JDK-6942632: Hotspot should be able to use…
first Jan 28, 2025 -
Medium max 5.3openSUSE-SU-2024:13198-1 1 CVE
python310-Django-4.2.5-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4SUSE-SU-2024:1863-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722)
first May 30, 2024 -
Medium max 6.6openSUSE-SU-2025:14865-1 1 CVE
grafana-11.5.2-1.1 on GA media
These are all security issues fixed in the grafana-11.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2025 -
Medium max 6.3SUSE-SU-2024:2292-1 3 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-29510: Fixed an arbitrary path traversal when running in a permitted path (bsc#1226945). - CVE-2024-33870: Fixed a format string injection that could lead to command execution (bsc#1226944). -…
first Jul 3, 2024 -
Medium max 6.5SUSE-SU-2024:3404-1 1 CVE
Security update for rage-encryption
This update for rage-encryption fixes the following issues: - Update to version 0.10.0 - CVE-2024-43806: Fixed rustix::fs::Dir iterator with the linux_raw backend that can cause memory exhaustion. (bsc#1229959)
first Sep 23, 2024 -
Medium max 6.5SUSE-SU-2023:2154-1 1 CVE
Security update for distribution
This update for distribution fixes the following issues: - CVE-2023-2253: Fixed possible DoS via a crafted malicious /v2/_catalog API endpoint request (bsc#1207705).
first May 9, 2023 -
Medium max 5.3SUSE-SU-2022:4452-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u352 (icedtea-3.25.0): - CVE-2022-21619,CVE-2022-21624: Fixed difficult to exploit vulnerability allows unauthenticated attacker with network access and can cause unauthorize…
first Dec 13, 2022 -
Medium max 5.9SUSE-SU-2024:3927-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
first Dec 19, 2024 -
Medium max 6.5SUSE-SU-2022:2866-1 1 CVE
Security update for systemd-presets-common-SUSE
This update for systemd-presets-common-SUSE fixes the following issues: - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524). The following non-security bugs were fixed: - Modify branding-prese…
first Aug 22, 2022 -
Medium max 4.3SUSE-SU-2020:3068-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582)
first Oct 28, 2020 -
Medium max 5.3openSUSE-SU-2024:13295-1 1 CVE
helm-3.13.0-2.1 on GA media
These are all security issues fixed in the helm-3.13.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4openSUSE-SU-2019:0131-1 2 CVEs
Security update for pdns-recursor
This update for pdns-recursor to version 4.1.10 fixes the following issues: Security issues fixed: - CVE-2019-3806: Fixed a case when Lua hooks are not called over TCP (boo#1121887) - CVE-2019-3807: Fixed an issue where DNSSEC validation was not performed for…
first Feb 4, 2019 -
Medium max 6.5SUSE-SU-2019:0049-1 13 CVEs
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk to version 7u201 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…
first Jan 9, 2019 -
Medium max 6.5SUSE-SU-2018:2408-1 3 CVEs
Security update for python
This update for python-base fixes the following issues: Security issues fixed: - CVE-2018-1061: Fixed DoS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (bsc#1088004). - CVE-2018-1060: Fixed DoS via regular expression catastroph…
first Aug 17, 2018 -
Medium max 5.9SUSE-SU-2025:01750-1 1 CVE
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgrade to 13.21: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 29, 2025 -
Medium max 5.5SUSE-SU-2025:0194-1 1 CVE
Security update for libqt5-qtwebkit
This update for libqt5-qtwebkit fixes the following issues: - CVE-2024-40779: Fixed heap buffer overflow in computeSampleUsingLinearInterpolation (bsc#1228693)
first Jan 20, 2025 -
Medium max 5.9SUSE-SU-2025:02464-2 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Aug 1, 2025 -
Medium max 6.9openSUSE-SU-2024:14600-1 2 CVEs
libmozjs-128-0-128.5.1-3.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.5.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Dec 18, 2024 -
Medium max 5.3openSUSE-SU-2024:13104-1 1 CVE
python311-3.11.4-2.1 on GA media
These are all security issues fixed in the python311-3.11.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2024:14072-1 1 CVE
ruby3.3-rubygem-fluentd-1.17.0-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-fluentd-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 24, 2024 -
Medium max 5.0SUSE-SU-2019:1809-1 1 CVE
Security update for fence-agents
This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Added aliyun fence agent (bsc#1139913).
first Jul 10, 2019 -
Medium max 6.3openSUSE-SU-2025:14901-1 1 CVE
dcmtk-3.6.9-3.1 on GA media
These are all security issues fixed in the dcmtk-3.6.9-3.1 package on the GA media of openSUSE Tumbleweed.
first Mar 17, 2025 -
Medium max 6.5SUSE-SU-2024:1815-1 1 CVE
Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: grafana: - Packaging improvements: * Changed deprecated `disabled` service mode to `manual` * Drop golang-packaging macros * Drop explicit mod=vendor as it is enabled automatically - Update to version 9.5.18: * [SECURIT…
first May 29, 2024 -
Medium max 5.3SUSE-SU-2024:3332-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400) - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially ena…
first Sep 19, 2024 -
Medium max 5.5SUSE-SU-2021:3948-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issue: - Update to 10.2.41: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497). - Add missing dependenc…
first Dec 6, 2021 -
Medium max 5.5SUSE-SU-2024:0908-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2024-1062: Fixed possible denial of service when audit logging is enabled (bsc#1219836).
first Mar 15, 2024