6,771 results · Clear filters · Feed
-
Medium max 6.5openSUSE-SU-2022:0131-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573) You can reenable via systemctl setting /proc/sys/kernel/unprivil…
first Jan 19, 2022 -
Medium max 5.5openSUSE-SU-2024:0021-1 1 CVE
Security update for perl-Spreadsheet-ParseXLSX
This update for perl-Spreadsheet-ParseXLSX fixes the following issues: Updated to 0.29: see /usr/share/doc/packages/perl-Spreadsheet-ParseXLSX/Changes 0.29: - Fix for 'Argument '' isn't numeric in addition (+) at /usr/local/shar… - Incorrect cell values due t…
first Jan 16, 2024 -
Medium max 5.9SUSE-SU-2024:1981-1 1 CVE
Security update for iperf
This update for iperf fixes the following issues: - Update to version 3.17.1 - CVE-2024-26306: Fixed a vulnerability that could led to marvin attack if the authentication option is used. (bsc#1224262)
first Jun 11, 2024 -
Medium max 5.1SUSE-SU-2020:3003-1 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035).
first Oct 22, 2020 -
Medium max 5.6SUSE-SU-2018:2528-1 12 CVEs
Security update for xen
This update for xen fixes the following issues: These security issue were fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 …
first Aug 27, 2018 -
Medium max 5.6openSUSE-SU-2024:14145-1 2 CVEs
python310-logilab-common-1.11.0-1.5 on GA media
These are all security issues fixed in the python310-logilab-common-1.11.0-1.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 5.5openSUSE-SU-2019:1438-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts …
first May 23, 2019 -
Medium max 6.8SUSE-SU-2025:0659-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040). - Add a s390 specific ioctl for ECC hardware support (bsc#1225637): - for migration to openssh 8.4: writ…
first Feb 23, 2025 -
Medium max 5.4SUSE-SU-2022:3867-1 1 CVE
Security update for python-Flask-Security-Too
This update for python-Flask-Security-Too fixes the following issues: - CVE-2021-23385: Fixed open redirect (bsc#1202105).
first Nov 3, 2022 -
Medium max 6.5SUSE-SU-2023:2343-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
first Jun 1, 2023 -
Medium max 6.5SUSE-SU-2022:3991-1 2 CVEs
Security update for dhcp
This update for dhcp fixes the following issues: - CVE-2022-2928: Fixed an option refcount overflow (bsc#1203988). - CVE-2022-2929: Fixed a DHCP memory leak (bsc#1203989).
first Nov 15, 2022 -
Medium max 5.5SUSE-SU-2020:2103-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15393: Fixed a memory leak in usbtest_disconnect (bnc#1173514). - CVE-2020-12771: An issue was discovered in…
first Aug 3, 2020 -
Medium max 6.5SUSE-SU-2024:0764-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
first Mar 5, 2024 -
Medium max 6.1SUSE-SU-2019:2182-1 1 CVE
Security update for rubygem-rails-html-sanitizer
This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2018-3741: Fixed a XSS vulnerability due to insufficient filtering in scrub_attribute (bsc#1086598).
first Aug 19, 2019 -
Medium max 5.5SUSE-SU-2023:2462-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a Regular Expression Denial of Service (ReDOS) vulnerability (bsc#1210617).
first Jun 8, 2023 -
Medium max 5.3
Security update for java-1_7_1-ibm
The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4…
first Dec 14, 2015 -
Medium max 5.3openSUSE-SU-2024:12805-1 1 CVE
ruby3.1-rubygem-rack-3.0.7-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-rack-3.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2024:2575-1 2 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2023-38417: Fixed improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 (bsc#1225600) - CVE-2023-47210: Fixed improper input validation for so…
first Jul 22, 2024 -
Medium max 4.7SUSE-SU-2024:1670-1 1 CVE
Security update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions
This update for python-azure-core, python-azure-storage-blob, python-azure-storage-queue, python-typing, python-typing_extensions fixes the following issues: - CVE-2022-30187: Fixed an information disclosure issue that an attacker could exploit to leak sensit…
first May 16, 2024 -
Medium max 6.4SUSE-SU-2023:2608-1 1 CVE
Security update for ntp
This update for ntp fixes the following issues: - CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates (bsc#1210390).
first Jun 22, 2023 -
Medium max 5.5SUSE-SU-2022:3311-1 3 CVEs
Security update for tika-core
This update for tika-core fixes the following issues: - CVE-2022-33879: Regular Expression Denial of Service in StandardsExtractingContentHandler (bsc#1201217) - CVE-2022-30973, CVE-2022-30126: Regular Expression Denial of Service in Standards Extractor (bsc#…
first Sep 19, 2022 -
Medium max 5.5openSUSE-SU-2024:12619-1 2 CVEs
redis-7.0.8-1.1 on GA media
These are all security issues fixed in the redis-7.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2024:3198-1 5 CVEs
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * …
first Sep 10, 2024 -
Medium max 6.5SUSE-SU-2023:2084-1 1 CVE
Security update for shim
This update for shim fixes the following issues: - CVE-2022-28737 was missing as reference previously. - Upgrade shim-install for bsc#1210382 After closing Leap-gap project since Leap 15.3, openSUSE Leap direct uses shim from SLE. So the ca_string is 'SUSE Li…
first May 2, 2023 -
Medium max 4.9SUSE-SU-2021:2605-1 3 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…
first Aug 4, 2021 -
Medium max 6.3openSUSE-SU-2025:14758-1 1 CVE
python310-3.10.16-2.1 on GA media
These are all security issues fixed in the python310-3.10.16-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 9, 2025 -
Medium max 6.0openSUSE-SU-2024:14105-1 1 CVE
teleport-15.4.7-1.1 on GA media
These are all security issues fixed in the teleport-15.4.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2024 -
Medium max 6.5SUSE-SU-2021:2425-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…
first Jul 21, 2021 -
Medium max 6.1SUSE-SU-2022:4011-1 1 CVE
Security update for jsoup
This update for jsoup fixes the following issues: Updated to version 1.15.3: - CVE-2022-36033: Fixed incorrect sanitization of user input in SafeList.preserveRelativeLinks (bsc#1203459).
first Nov 16, 2022 -
Medium max 5.4SUSE-SU-2024:1948-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2024-34064: Fixed HTML attribute injection when passing user input as keys to xmlattr filter (bsc#1223980)
first Jun 7, 2024 -
Medium max 5.9openSUSE-SU-2024:0036-1 1 CVE
Security update for tinyssh
This update for tinyssh fixes the following issues: tinyssh was updated to 20240101 (boo#1218197, CVE-2023-48795): * fixed channel_forkpty() race condition between close(slave) in parent process and login_tty(slave) in child process * fixed behavior when usin…
first Jan 31, 2024 -
Medium max 6.5SUSE-SU-2018:0338-1 1 CVE
Security update for libXdmcp
This update for libXdmcp fixes the following issues: - CVE-2017-2625: The generation of session key in XDM using libXdmcp might have used weak entropy, making the session keys predictable (bsc#1025046)
first Feb 1, 2018 -
Medium max 5.4openSUSE-SU-2024:11107-1 3 CVEs
obs-service-appimage-0.10.28.1632141620.a8837d3-1.1 on GA media
These are all security issues fixed in the obs-service-appimage-0.10.28.1632141620.a8837d3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-RU-2019:2767-1 14 CVEs
Recommended update for xen
This update for xen to version 4.10.4 fixes the following issues: - Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818). - Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting…
first Oct 24, 2019 -
Medium max 6.0openSUSE-SU-2020:0846-1 1 CVE
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue whe…
first Jun 22, 2020 -
Medium max 6.5SUSE-SU-2019:2657-1 1 CVE
Security update for dhcp
This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called …
first Oct 14, 2019 -
Medium max 6.5SUSE-SU-2024:3354-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
first Sep 20, 2024 -
Medium max 5.5SUSE-SU-2018:1453-1 3 CVEs
Security update for cairo
This update for cairo fixes the following issues: - CVE-2016-9082: Fixed a segfault when using >4GB images since int values were used for pointer operations (bsc#1007255). - CVE-2017-9814: Replace malloc with _cairo_malloc and check cmap size before allocatin…
first May 28, 2018 -
Medium max 4.0SUSE-SU-2025:0393-1 1 CVE
Security update for go1.23
This update for go1.23 fixes the following issues: - CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801). Bug fixes: - go1.23 release tracking (bsc#1229122)
first Feb 10, 2025 -
Medium max 6.5SUSE-SU-2024:1445-1 2 CVEs
Security update for php74
This update for php74 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checke…
first Apr 26, 2024