6,771 results · Clear filters · Feed
-
Medium max 6.6SUSE-SU-2025:0812-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237681)
first Mar 10, 2025 -
Medium max 5.9SUSE-SU-2023:1948-1 1 CVE
Security update for jettison
This update for jettison fixes the following issues: Upgrade to version 1.5.4: - CVE-2023-1436: Fixed infinite recursion triggered when constructing a JSONArray from a Collection (bsc#1209605).
first Apr 21, 2023 -
Medium max 6.5openSUSE-SU-2022:10098-1 1 CVE
Security update for python-treq
This update for python-treq fixes the following issues: - Fixed CVE-2022-23607 (boo#1195432) binding cookies to the domain.
first Aug 24, 2022 -
Medium max 5.1openSUSE-SU-2019:2541-1 12 CVEs
Security update for squid
This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN pro…
first Nov 21, 2019 -
Medium max 5.3openSUSE-SU-2024:14606-1 1 CVE
teleport-17.1.0-1.1 on GA media
These are all security issues fixed in the teleport-17.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 20, 2024 -
Medium max 4.3openSUSE-SU-2025:14892-1 1 CVE
ed25519-java-0.3.0-6.1 on GA media
These are all security issues fixed in the ed25519-java-0.3.0-6.1 package on the GA media of openSUSE Tumbleweed.
first Mar 15, 2025 -
Medium max 6.8SUSE-SU-2021:0483-1 1 CVE
Security update for python-bottle
This update for python-bottle fixes the following issues: - CVE-2020-28473: Fixed Web Cache Poisoning vulnerability using parameter cloaking (bsc#1182181).
first Feb 16, 2021 -
Medium max 6.5SUSE-SU-2020:2478-1 39 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values…
first Sep 3, 2020 -
Medium max 5.7SUSE-SU-2022:0933-1 2 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786): - CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth produ…
first Mar 22, 2022 -
Medium max 6.6openSUSE-SU-2024:11631-1 9 CVEs
ctdb-4.15.2+git.193.a4d6307f1fd-1.1 on GA media
These are all security issues fixed in the ctdb-4.15.2+git.193.a4d6307f1fd-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:4393-1 1 CVE
Security update for nautilus
This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives (bsc#1205418).
first Dec 9, 2022 -
Medium max 5.9SUSE-SU-2020:3722-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
first Dec 9, 2020 -
Medium max 5.7openSUSE-SU-2025:14793-1 11 CVEs
kernel-firmware-qcom-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-qcom-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 6.5SUSE-SU-2020:14393-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to…
first Jun 9, 2020 -
Medium max 5.9SUSE-SU-2025:01661-2 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
first May 25, 2025 -
Medium max 5.3SUSE-SU-2021:14634-1 2 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 80 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or …
first Feb 19, 2021 -
Medium max 6.5openSUSE-SU-2024:14527-1 2 CVEs
neomutt-20241114-1.1 on GA media
These are all security issues fixed in the neomutt-20241114-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 26, 2024 -
Medium max 5.4openSUSE-SU-2024:14474-1 1 CVE
ruby3.3-rubygem-puma-6.4.3-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-puma-6.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 7, 2024 -
Medium max 5.5openSUSE-SU-2023:0004-1 1 CVE
Security update for multimon-ng
This update for multimon-ng fixes the following issues: - Update to new upstream release 1.2.0 * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9, while FLEX_NEXT gained new features, as well as known regressions. (See #168) * Fix CVE-2020-36619…
first Jan 3, 2023 -
Medium max 6.1openSUSE-SU-2024:11507-1 1 CVE
weblate-4.8.1-1.1 on GA media
These are all security issues fixed in the weblate-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:13422-1 1 CVE
libnbd-1.18.1-2.1 on GA media
These are all security issues fixed in the libnbd-1.18.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.1SUSE-SU-2019:0552-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: Security vulnerability fixed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other bug fixes and changes: - Skip sdap_save_grpmem() if ignore_group_members is set. …
first Mar 6, 2019 -
Medium max 4.7SUSE-SU-2025:3978-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. (bsc#1252749)
first Nov 6, 2025 -
Medium max 5.9SUSE-SU-2024:1949-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
first Jun 7, 2024 -
Medium max 5.7SUSE-SU-2022:1044-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).
first Mar 30, 2022 -
Medium max 6.1SUSE-SU-2023:3722-1 1 CVE
Security update for rust, rust1.72
This update for rust, rust1.72 fixes the following issues: Changes in rust: - Update to version 1.72.0 - for details see the rust1.72 package Changes in rust1.72: - CVE-2023-40030: fix minor non-exploited issue in cargo (bsc#1214689) Version 1.72.0 (2023-08-2…
first Sep 21, 2023 -
Medium max 5.5SUSE-SU-2020:2485-1 3 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in ext4 (bsc#1173798). - CVE-2020-14356: Fixed a NULL pointer …
first Sep 3, 2020 -
Medium max 5.9SUSE-SU-2019:1243-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091: Added x86 cpu feature 'md-clear' (bsc#1111331)
first May 14, 2019 -
Medium max 5.6SUSE-SU-2018:1295-1 3 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2017-5715: Spectre fixes for libvirt (bsc#1079869, bsc#1088147, bsc#1087887). - CVE-2018-1064: Avoid denial of service reading from QEMU guest agent (bsc#1083625). - CVE-2018-574…
first May 15, 2018 -
Medium max 5.5SUSE-SU-2022:2597-1 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…
first Jul 29, 2022 -
Medium max 5.5
Security update for samba
This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …
first Sep 24, 2020 -
Medium max 5.3openSUSE-SU-2024:12965-1 1 CVE
rekor-1.2.1-1.1 on GA media
These are all security issues fixed in the rekor-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2SUSE-SU-2023:4499-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).
first Nov 21, 2023 -
Medium max 5.3SUSE-SU-2023:3242-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 8, 2023 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_54 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, rela…
first Mar 30, 2022 -
Medium max 6.5SUSE-SU-2022:3718-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2019-8921: Fixed heap-based buffer overflow via crafted request (bsc#1193237). - CVE-2016-9803: Fixed memory leak (bsc#1013885).
first Oct 25, 2022 -
Medium max 5.3SUSE-SU-2024:1167-2 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
first Apr 8, 2024 -
Medium max 5.5
Security update for samba
This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…
first Sep 23, 2020 -
Medium max 6.5SUSE-SU-2024:2600-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: - FIPS: Added more safe memset (bsc#1222811). - FIPS: Adjusted AES GCM restrictions (bsc#1222830). - FIPS: Adjusted approved ciphers (bsc#1222813, bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118, bsc#…
first Jul 23, 2024 -
Medium max 5.9SUSE-SU-2019:1235-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first May 14, 2019