6,771 results · Clear filters · Feed
-
Medium max 5.9openSUSE-SU-2019:1402-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first May 16, 2019 -
Medium max 5.7SUSE-SU-2023:0844-1 1 CVE
Security update for openstack-cinder, openstack-glance, openstack-neutron-gbp, openstack-nova, python-oslo.utils
This update for openstack-cinder, openstack-glance, openstack-neutron-gbp, openstack-nova, python-oslo.utils contains the following fixes: Security fixes included on this update: openstack-cinder, openstack-glance, openstack-nova: - CVE-2022-47951: Fixed file…
first Mar 21, 2023 -
Medium max 6.5openSUSE-SU-2024:10920-1 1 CVE
libXdmcp-devel-1.1.3-1.11 on GA media
These are all security issues fixed in the libXdmcp-devel-1.1.3-1.11 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:0525-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow u…
first Feb 22, 2018 -
Medium max 5.1SUSE-RU-2025:02204-1 1 CVE
Recommended update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243859) - Update to version 1.4.2 - Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6 - Update…
first Jul 2, 2025 -
Medium max 6.3SUSE-SU-2024:4135-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2024-11168: Improper validation of IPv6 and IPvFuture addresses (bsc#1233307). Bug fixes: - Remove -IVendor/ from python-config (bsc#1231795).
first Dec 2, 2024 -
Medium max 4.7SUSE-SU-2024:1007-1 2 CVEs
Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). - CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806). The following non-security bugs were fixe…
first Mar 27, 2024 -
Medium max 5.6SUSE-SU-2018:2331-2 3 CVEs
Security update to ucode-intel
ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is part of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal fault). (bsc#1104134 bsc#1087082 bsc#1087083 bsc#1…
first Oct 18, 2018 -
Medium max 5.6SUSE-SU-2018:1784-1 1 CVE
Security update for kernel modules packages
The following kernel modules were rebuild with 'retpoline' enablement to allow full mitigation of the Spectre Variant 2 (CVE-2017-5715, bsc#1068032) OFED was adjusted to add an entry to control the loading/unloading of cxgb4 to /etc/sysconf/infiniband (bsc#92…
first Jun 22, 2018 -
Medium max 4.3SUSE-SU-2021:1125-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters were mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348)
first Apr 9, 2021 -
Medium max 5.6SUSE-RU-2024:3600-1 1 CVE
Recommended update for python-requests
This update for python-requests fixes the following issue: - Update CVE-2024-35195.patch to allow the usage of 'verify' parameter as a directory (bsc#1225912)
first Oct 11, 2024 -
Medium max 5.5SUSE-SU-2020:3093-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permi…
first Oct 29, 2020 -
Medium max 5.6SUSE-SU-2018:2362-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarm_timer_nsleep function in kernel/time/alarmtimer.c had an integer overflow via a large relativ…
first Aug 16, 2018 -
Medium max 4.3SUSE-SU-2024:2754-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: Update to version 1.14.4: - CVE-2024-3727: Fixed a vulnerability that allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, resource exhaustion, local path travers…
first Aug 5, 2024 -
Medium max 6.5SUSE-SU-2017:3080-1 1 CVE
Security update for openstack-nova
This update for openstack-nova brings the latest version provided by the OpenStack upstream project including the following security fix: - CVE-2017-16239: Filter Scheduler bypass through rebuild action (bsc#1066198).
first Nov 24, 2017 -
Medium max 5.6SUSE-SU-2018:1498-1 1 CVE
Security update for gcc43
This update for gcc43 fixes the following issues: This update adds support for 'expolines' on s390x, allowing fixing CVE-2017-5715 in a more lightweight fashion. (bsc#1086069) The option flags are the same as for the x86 retpolines. A compiler crash when buil…
first Jun 5, 2018 -
Medium max 5.1SUSE-SU-2020:3326-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race cond…
first Nov 13, 2020 -
Medium max 6.5openSUSE-SU-2024:0413-1 1 CVE
Security update for python-python-sql
This update for python-python-sql fixes the following issues: - CVE-2024-9774: Fixed that unary operators does not escape non-Expression (boo#1234653).
first Dec 21, 2024 -
Medium max 5.4SUSE-SU-2019:1352-1 1 CVE
Security update for python3
This update for python3 to version 3.6.8 fixes the following issues: Security issue fixed: - CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840). Non-security issue fixed: - Fixed broken…
first May 24, 2019 -
Medium max 6.5SUSE-SU-2022:3454-1 3 CVEs
Security update for slurm_18_08
This update for slurm_18_08 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbit…
first Sep 28, 2022 -
Medium max 4.7openSUSE-SU-2024:14043-1 1 CVE
python310-scikit-learn-1.5.0-1.1 on GA media
These are all security issues fixed in the python310-scikit-learn-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2023:2122-1 3 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2022-36021: Fixed possible integer overflow via specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands (bsc#1208790). - CVE-2023-28856: Fixed possible DoS when using HINCRBYFLOAT to create a…
first May 8, 2023 -
Medium max 4.3SUSE-SU-2018:2321-1 4 CVEs
Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally (bsc#1081741). - CVE-2017-14746: Fixed use-after-free vulnerability (bsc#1060427). - CVE-2017-15275:…
first Aug 14, 2018 -
Medium max 6.1SUSE-SU-2023:3144-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: python-tornado: - Security fixes: * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741) prometheus-blackbox_exporter: - Use obscpio for go modules service - Set version number - Set bui…
first Aug 2, 2023 -
Medium max 5.3SUSE-SU-2023:0133-1 1 CVE
Security update for rust1.65
This update for rust1.65 fixes the following issues: - CVE-2022-46176: Fixed missing SSH host key verification in cargo when cloning indexes and dependencies via SSH (bsc#1206930).
first Jan 24, 2023 -
Medium max 5.6SUSE-SU-2019:2070-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib…
first Aug 6, 2019 -
Medium max 5.7openSUSE-SU-2021:4001-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).
first Dec 13, 2021 -
Medium max 4.7SUSE-SU-2022:3543-1 2 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733). - CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic…
first Oct 6, 2022 -
Medium max 5.5SUSE-SU-2025:03271-1 3 CVEs
Security update for busybox, busybox-links
This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 (jsc#PED-13039): - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580) - CVE-2023-42364: Fixed use-after-free in…
first Sep 23, 2025 -
Medium max 4.8SUSE-SU-2020:0267-1 4 CVEs
Security update for php72
This update for php72 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#1159…
first Jan 30, 2020 -
Medium max 5.5openSUSE-SU-2020:1811-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permi…
first Nov 1, 2020 -
Medium max 5.3SUSE-SU-2022:4033-1 4 CVEs
Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_87 fixes several issues. The following security issues were fixed: - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (…
first Nov 16, 2022 -
Medium max 5.6SUSE-SU-2024:1773-1 1 CVE
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
first May 24, 2024 -
Medium max 5.5SUSE-SU-2024:0136-2 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475). - Check localtime_r() return value to fix crashing (bsc#1217000)
first Jan 18, 2024 -
Medium max 4.3openSUSE-SU-2021:0545-1 3 CVEs
Security update for hostapd
This update for hostapd fixes the following issues: - CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348) - CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP …
first Apr 12, 2021 -
Medium max 5.9openSUSE-SU-2020:1559-1 1 CVE
Security update for conmon, fuse-overlayfs, libcontainers-common, podman
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 (bsc#1175821) - install missing systemd units for the new Rest API (bsc#1175957) and a few man-pages that where missing before - Drop…
first Sep 28, 2020 -
Medium max 5.0openSUSE-SU-2024:14450-1 1 CVE
libnss_slurm2-24.05.4-1.1 on GA media
These are all security issues fixed in the libnss_slurm2-24.05.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 1, 2024 -
Medium max 6.6openSUSE-SU-2025:15109-1 1 CVE
ruby3.4-rubygem-actionmailer-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-actionmailer-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 5.3SUSE-SU-2023:3243-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 8, 2023 -
Medium max 6.7SUSE-SU-2023:4749-1 1 CVE
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for auto…
first Dec 13, 2023