6,771 results · Clear filters · Feed
-
Medium max 6.5openSUSE-SU-2024:10594-1 7 CVEs
Botan-2.18.1-1.3 on GA media
These are all security issues fixed in the Botan-2.18.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.7openSUSE-SU-2025:14792-1 11 CVEs
kernel-firmware-prestera-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-prestera-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.4openSUSE-SU-2024:12895-1 1 CVE
element-desktop-1.11.30-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.30-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2025:15342-1 1 CVE
xen-4.20.1_02-1.1 on GA media
These are all security issues fixed in the xen-4.20.1_02-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 11, 2025 -
Medium max 5.3SUSE-SU-2024:3944-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).
first Nov 7, 2024 -
Medium max 6.5openSUSE-SU-2024:12399-1 9 CVEs
exiv2-0.27.5-4.1 on GA media
These are all security issues fixed in the exiv2-0.27.5-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2020:1805-1 4 CVEs
Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-201…
first Jun 30, 2020 -
Medium max 6.5openSUSE-SU-2019:2420-1 21 CVEs
Security update for chromium, re2
This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privile…
first Nov 1, 2019 -
Medium max 5.9SUSE-SU-2023:2624-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case…
first Jun 23, 2023 -
Medium max 4.9SUSE-SU-2024:1922-1 1 CVE
Security update for mariadb104
This update for mariadb104 fixes the following issues: - Update to 10.4.33: - CVE-2023-22084: Fixed a bug that allowed high privileged attackers with network access via multiple protocols to compromise the server. (bsc#1217405)
first Jun 4, 2024 -
Medium max 5.3SUSE-SU-2023:3580-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-41164: Fixed a potential denial of service vulnerability in django.utils.encoding.uri_to_iri() (bsc#1214667).
first Sep 11, 2023 -
Medium max 5.6SUSE-SU-2018:1308-1 4 CVEs
Security update for kvm
This update for kvm fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrates with corresponding changes in libvirt. A January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM g…
first May 16, 2018 -
Medium max 5.9openSUSE-SU-2024:13517-1 1 CVE
openssh-9.3p2-5.1 on GA media
These are all security issues fixed in the openssh-9.3p2-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:0638-1 10 CVEs
Security update for xen
This update for xen fixes several issues. This new feature was included: - add script and sysv service to watch for vcpu online/offline events in a HVM domU These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information l…
first Mar 8, 2018 -
Medium max 4.4SUSE-SU-2017:1360-1 30 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.74 to receive various security and bugfixes. Notable new/improved features: - Improved support for Hyper-V - Support for the tcp_westwood TCP scheduling algorithm The following security bugs were fix…
first May 19, 2017 -
Medium max 4.5SUSE-SU-2024:4330-1 2 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim (bsc#1231373) - CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238) Other fixes: - Updated to version 9.1.0836
first Dec 16, 2024 -
Medium max 5.3SUSE-SU-2024:0268-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)
first Jan 30, 2024 -
Medium max 5.6SUSE-SU-2018:0041-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) This new firmware enables the Indirect Branch Control (IBC) feature on AMD family 17h processor to mitigate an attack on the branch predicto…
first Jan 8, 2018 -
Medium max 5.9openSUSE-SU-2024:13565-1 1 CVE
teleport-14.3.0-1.1 on GA media
These are all security issues fixed in the teleport-14.3.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3SUSE-SU-2023:0140-1 1 CVE
Security update for libzypp-plugin-appdata
This update for libzypp-plugin-appdata fixes the following issues: - CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836). - Added hardening to systemd service (bsc#1181400).
first Jan 25, 2023 -
Medium max 5.0SUSE-SU-2019:1606-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)
first Aug 21, 2019 -
Medium max 6.6SUSE-SU-2024:3878-1 1 CVE
Security update for rubygem-actionmailer-5_1
This update for rubygem-actionmailer-5_1 fixes the following issues: - CVE-2024-47889: Fixed Possible ReDoS vulnerability in block_format in Action Mailer (bsc#1231723).
first Nov 1, 2024 -
Medium max 5.5SUSE-SU-2017:0571-1 4 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows …
first Feb 27, 2017 -
Medium max 5.3openSUSE-SU-2019:2343-1 2 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Upda…
first Oct 20, 2019 -
Medium max 6.5SUSE-SU-2022:3312-1 5 CVEs
Security update for libcontainers-common
This update for libcontainers-common fixes the following issues: libcontainers-common was updated: - common component was updated to 0.44.0. - storage component was updated to 1.36.0. - image component was updated to 5.16.0. - podman component was updated to …
first Sep 19, 2022 -
Medium max 5.9openSUSE-SU-2019:1353-1 3 CVEs
Security update for gnutls
This update for gnutls fixes to version 3.6.7 the following issues: Security issued fixed: - CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682). - CVE-2019-3829: Fixed a double free vulnerability in the certificat…
first May 8, 2019 -
Medium max 6.1openSUSE-SU-2024:13511-1 1 CVE
python312-3.12.1-1.1 on GA media
These are all security issues fixed in the python312-3.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2022:0577-1 3 CVEs
Security update for php72
This update for php72 fixes the following issues: - CVE-2015-9253: Fixed endless loop when the master process restarts a child process using program execution functions (bsc#1081790). - CVE-2017-8923: Fixed denial of service (application crash) when using .= …
first Feb 25, 2022 -
Medium max 5.3SUSE-SU-2022:4024-1 3 CVEs
Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_117 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-2588: Fixed use-after-free in cls_rout…
first Nov 16, 2022 -
Medium max 6.1SUSE-SU-2023:3143-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (b…
first Aug 2, 2023 -
Medium max 5.3openSUSE-SU-2024:11895-1 13 CVEs
java-1_8_0-openjdk-1.8.0.322-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.322-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2019:1325-1 8 CVEs
Security update for php5
This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-9637: F…
first May 23, 2019 -
Medium max 6.5openSUSE-SU-2019:2504-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0…
first Nov 14, 2019 -
Medium max 6.1SUSE-SU-2017:1866-1 1 CVE
Security update for compat-libgcrypt11
This update for libgcrypt fixes the following security issue: - CVE-2017-7526: Hardening against local side-channel attack. (bsc#1046607)
first Jul 14, 2017 -
Medium max 5.5SUSE-SU-2022:4056-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 56bee38fd0da18dad5fc5c5d12c02238a22b50e2 * 8a70235d8a core: Add trigger limit for path units * 93e544f3a0 co…
first Nov 17, 2022 -
Medium max 6.2SUSE-SU-2024:1100-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2024-2494: Add a check for negative array lengths before allocation to prevent potential DoS. (bsc#1221815) The following non-security bug was fixed: - Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap…
first Apr 3, 2024 -
Medium max 6.7SUSE-SU-2020:2579-1 1 CVE
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069). The following non-sec…
first Sep 9, 2020 -
Medium max 5.5SUSE-SU-2022:2601-1 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…
first Jul 29, 2022 -
Medium max 6.5openSUSE-SU-2024:11743-1 1 CVE
netty-4.1.72-1.1 on GA media
These are all security issues fixed in the netty-4.1.72-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8openSUSE-SU-2019:2672-1 2 CVEs
Security update for permissions
This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privile…
first Dec 11, 2019