6,771 results · Clear filters · Feed
-
Medium max 5.3openSUSE-SU-2024:11799-1 15 CVEs
java-15-openjdk-15.0.6.0-1.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4SUSE-SU-2025:1004-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879)
first Mar 25, 2025 -
Medium max 4.8openSUSE-SU-2020:1356-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Sep 7, 2020 -
Medium max 5.0SUSE-SU-2024:3604-1 1 CVE
Security update for OpenIPMI
This update for OpenIPMI fixes the following issues: - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator (bsc#1229910)
first Oct 11, 2024 -
Medium max 5.3SUSE-SU-2023:1823-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 (bsc#1208480): * Security fixes: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21835: Fixed handshake DoS atta…
first Apr 12, 2023 -
Medium max 5.3SUSE-SU-2019:1388-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Security issues fixed: - CVE-2019-11691: Use-after-free in XMLHttpRequest - CVE-2019-11692: Use-after-free removing listeners in the event listener manager - CVE-2019-11693: Buffer overflow in WebGL b…
first May 31, 2019 -
Medium max 5.3SUSE-SU-2025:02727-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)
first Aug 7, 2025 -
Medium max 6.5SUSE-SU-2023:1581-2 3 CVEs
Security update for ceph
This update for ceph fixes the following issues: Security issues fixed: - CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837). - CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#…
first May 2, 2023 -
Medium max 4.0SUSE-SU-2025:01780-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-32364: integer overflow due to INT_MIN negation in the PSStack::roll function of Function.cc leads to floating point exception crash in pdftotext (bsc#1240880). - CVE-2025-32365: misplaced isOk ch…
first May 30, 2025 -
Medium max 6.9SUSE-SU-2020:2373-1 1 CVE
Security update for SUSE Manager Server 4.1
This update fixes the following issues: cobbler: - More old modules naming fixes (bsc#1169553) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use defa…
first Aug 28, 2020 -
Medium max 5.5SUSE-SU-2020:1693-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10768: The prctl() function could be used to enable indirect branch speculation even after it has been disabled. (…
first Jun 19, 2020 -
Medium max 6.1openSUSE-SU-2024:12145-1 5 CVEs
ruby3.1-rubygem-rails-html-sanitizer-1.4.3-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-rails-html-sanitizer-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2021:0955-2 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the security issue: * CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extensi…
first Jul 13, 2022 -
Medium max 6.2SUSE-SU-2024:1296-1 1 CVE
Security update for texlive
This update for texlive fixes the following issues: - CVE-2023-46048: Fixed null pointer dereference in texk/web2c/pdftexdir/writet1.c (bsc#1222126)
first Apr 15, 2024 -
Medium max 5.9SUSE-SU-2020:0527-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: MariaDB was updated to version 10.0.40-3 (bsc#1162388). Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388). - CVE-20…
first Feb 28, 2020 -
Medium max 5.5SUSE-SU-2022:4629-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723).
first Dec 28, 2022 -
Medium max 6.5SUSE-SU-2022:3981-1 2 CVEs
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-43400: Fixed use-after-free in gatt-database.c (bsc#1192394). - CVE-2021-3658: Fixed adapter incorrectly restoring discoverable state after powered down (bsc#1188859).
first Nov 15, 2022 -
Medium max 6.1openSUSE-SU-2019:2389-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fi…
first Oct 27, 2019 -
Medium max 6.5SUSE-SU-2022:4332-1 17 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482) - CVE-202…
first Dec 6, 2022 -
Medium max 5.5SUSE-SU-2018:2565-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: These security issues were fixed: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count valu…
first Aug 30, 2018 -
Medium max 5.5SUSE-SU-2024:3200-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780) Other fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999) - Stop using %%defa…
first Sep 11, 2024 -
Medium max 6.1SUSE-SU-2018:2317-1 2 CVEs
Security update for grafana, kafka, logstash, openstack-monasca-installer
This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues: Security issues fixed: - CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985). - CVE-2018-3817: logstash: Fix inadvertently logging …
first Aug 14, 2018 -
Medium max 6.5SUSE-SU-2023:2784-1 1 CVE
Security update for libdwarf
This update for libdwarf fixes the following issues: - CVE-2020-27545: Fixed corrupted line table being able to crash calling app (bsc#1193102).
first Jul 5, 2023 -
Medium max 5.3SUSE-SU-2022:4290-1 6 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - CVE-2022-21626: An unauthenticated attacker with network access via HTTPS can compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1204471). - CVE-2022-21618: An unauthenticated attacke…
first Nov 29, 2022 -
Medium max 4.8SUSE-SU-2023:3640-1 1 CVE
Security update for gcc12
This update for gcc12 fixes the following issues: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052).
first Sep 18, 2023 -
Medium max 4.8openSUSE-SU-2024:14449-1 4 CVEs
java-23-openjdk-23.0.1.0-1.1 on GA media
These are all security issues fixed in the java-23-openjdk-23.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2024 -
Medium max 4.4SUSE-SU-2025:02228-1 2 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776). - CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).
first Jul 4, 2025 -
Medium max 5.9SUSE-SU-2024:3926-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
first Nov 6, 2024 -
Medium max 5.3SUSE-SU-2016:0598-1 2 CVEs
Security update for rubygem-activerecord-4_1
This update for rubygem-activerecord-4_1 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention (bsc#963334) - CVE-2015-7577: Nested attributes rejection proc bypass (bsc#963330)
first Feb 26, 2016 -
Medium max 4.3SUSE-RU-2018:3638-1 1 CVE
Recommended update for ardana-ansible
This update for ardana-ansible fixes the following issues: ardana-ansible: - Initial checkin of info capture tool - Rename dayzero-site.yml (bsc#1111886) - Switch to non-legacy media layout by default. - Add Keystone Fernet master node monitoring. (bsc#109724…
first Nov 6, 2018 -
Medium max 5.5SUSE-SU-2018:1362-1 1 CVE
Security update for qemu
This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memo…
first May 21, 2018 -
Medium max 6.5SUSE-SU-2022:3928-1 24 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2021-28689: Fixed speculative vulnerabilities with bare…
first Nov 10, 2022 -
Medium max 5.5SUSE-SU-2024:1005-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2024-2496: Fixed NULL pointer dereference in udevConnectListAllInterfaces() (bsc#1221468). - CVE-2024-1441: Fix off-by-one error in udevListInterfacesByStatus (bsc#1221237)
first Mar 27, 2024 -
Medium max 4.3SUSE-SU-2024:3445-1 7 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076) - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075) - CVE-2024-45618…
first Sep 25, 2024 -
Medium max 6.5SUSE-SU-2019:3091-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel to version fixes the following issues: - Updated to 20191115 official security release (bsc#1157004 and bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-201…
first Nov 28, 2019 -
Medium max 4.0openSUSE-SU-2020:0302-1 2 CVEs
Security update for permissions
This update for permissions fixes the following issues: Security issues fixed: - CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788) - CVE-2020-8013: Fixed an issue where c…
first Mar 4, 2020 -
Medium max 5.7openSUSE-SU-2025:14780-1 11 CVEs
kernel-firmware-intel-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-intel-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.5SUSE-SU-2019:1211-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts …
first May 10, 2019 -
Medium max 6.3SUSE-SU-2024:4077-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions (bsc#1233447)
first Nov 27, 2024 -
Medium max 6.5SUSE-SU-2020:1118-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry …
first Apr 27, 2020