6,771 results · Clear filters · Feed
-
Medium max 5.3openSUSE-SU-2024:13749-1 1 CVE
python310-Django-4.2.11-1.1 on GA media
These are all security issues fixed in the python310-Django-4.2.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2019:0184-1 1 CVE
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) This update was imported from the SUSE:SLE-15:Update update project.
first Mar 23, 2019 -
Medium max 5.5SUSE-SU-2024:0239-1 1 CVE
Security update for rear23a
This update for rear23a fixes the following issues: - CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).
first Jan 26, 2024 -
Medium max 5.3SUSE-SU-2024:0264-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)
first Jan 30, 2024 -
Medium max 4.8SUSE-SU-2020:3922-1 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - jetty-minimal was upgraded to version 9.4.35.v20201120 - CVE-2020-27218: Fixed an issue where buffer not correctly recycled in Gzip Request inflation (bsc#1179727).
first Dec 22, 2020 -
Medium max 5.3SUSE-SU-2025:03367-1 3 CVEs
Security update for jasper
This update for jasper fixes the following issues: - CVE-2025-8835: missing range check in the JPEG-2000 (JPC) Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid `cblkwidth` parameter (bsc#1247904). - CVE-2…
first Sep 26, 2025 -
Medium max 5.6SUSE-SU-2024:1625-1 1 CVE
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-5992: Fixed a side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
first May 13, 2024 -
Medium max 5.5SUSE-SU-2023:4363-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2022-37052: Fixed a crash that could be triggered when opening a crafted file (bsc#1214726). - CVE-2023-34872: Fixed a remote denial-of-service in Outline.cc (bsc#1213888).
first Nov 3, 2023 -
Medium max 6.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…
first Mar 30, 2022 -
Medium max 5.3openSUSE-SU-2024:0077-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a denial-of-service in regular expression of django.utils.text.Truncator.words() (boo#1220358).
first Mar 11, 2024 -
Medium max 6.5openSUSE-SU-2024:14562-1 1 CVE
skopeo-1.16.1-2.1 on GA media
These are all security issues fixed in the skopeo-1.16.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024 -
Medium max 6.5openSUSE-SU-2020:0069-1 1 CVE
Security update for uftpd
This update for uftpd to version 2.11 fixes the following issues: - CVE-2020-5204: Fixed a buffer overflow in FTP PORT parser (boo#1160199). - Fixed additional bugs which could have security implications.
first Jan 18, 2020 -
Medium max 6.5SUSE-SU-2021:2673-1 5 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-prometheus: - Provide and reload firewalld configuration only for: + openSUSE Leap 15.0, 15.1, 15.2 + SUSE SUSE Linux Enterprise 15, SP1, SP2 - Upgrade to upstream version 2.27.1 (jsc#SLE-18254)…
first Aug 12, 2021 -
Medium max 5.9SUSE-SU-2025:4386-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgraded to 16.11: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 12, 2025 -
Medium max 6.5SUSE-SU-2025:1771-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: Security fixes: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300). Other bug fixes: - Fixed incorrect IPV4 TTL value when using SOCK_DGRAM on big endian…
first Oct 31, 2025 -
Medium max 6.5SUSE-SU-2024:1139-1 5 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20240312 release. (bsc#1221323) - CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potent…
first Apr 8, 2024 -
Medium max 5.9openSUSE-SU-2024:0353-1 1 CVE
Security update for kmail-account-wizard
This update for kmail-account-wizard fixes the following issues: - CVE-2024-50624: Fixed that plaintext HTTP was used for URLs when retrieving configuration files (boo#1232454, kde#487882)
first Nov 6, 2024 -
Medium max 6.1SUSE-SU-2023:4423-1 3 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-42795: Fixed a potential information leak due to insufficient cleanup (bsc#1216119). - CVE-2023-45648: Fixed a request smuggling issue due to an incorrect parsing of HTTP trailer headers (bsc#12161…
first Nov 13, 2023 -
Medium max 5.2openSUSE-SU-2024:12694-1 1 CVE
apptainer-1.1.6-1.1 on GA media
These are all security issues fixed in the apptainer-1.1.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2025:14616-1 1 CVE
libpoppler-cpp1-24.12.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp1-24.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 3, 2025 -
Medium max 5.3openSUSE-SU-2024:14086-1 1 CVE
python310-Js2Py-0.74-3.1 on GA media
These are all security issues fixed in the python310-Js2Py-0.74-3.1 package on the GA media of openSUSE Tumbleweed.
first Jul 1, 2024 -
Medium max 4.9openSUSE-SU-2021:2605-1 3 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…
first Aug 4, 2021 -
Medium max 5.5openSUSE-SU-2020:1257-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project.
first Aug 24, 2020 -
Medium max 6.1SUSE-SU-2023:2866-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
first Jul 18, 2023 -
Medium max 5.4openSUSE-SU-2024:11566-1 1 CVE
docker-20.10.9_ce-1.1 on GA media
These are all security issues fixed in the docker-20.10.9_ce-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2022:0056-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094) - CVE-2021-45486: Fixed an informati…
first Jan 11, 2022 -
Medium max 6.5SUSE-SU-2022:3724-1 1 CVE
Security update for libosip2
This update for libosip2 fixes the following issues: - CVE-2022-41550: Fixed an integer overflow in osip_body_parse_header (bsc#1204225).
first Oct 25, 2022 -
Medium max 5.1SUSE-SU-2019:2975-1 12 CVEs
Security update for squid
This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN pro…
first Nov 14, 2019 -
Medium max 6.5SUSE-SU-2020:1123-1 10 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plu…
first Apr 28, 2020 -
Medium max 6.1SUSE-SU-2018:0193-1 2 CVEs
Security update for libexif
This update for libexif fixes several issues. These security issues were fixed: - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file (bsc#1055857) - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exif_data_save_…
first Jan 24, 2018 -
Medium max 5.5openSUSE-SU-2024:12740-1 1 CVE
obs-service-go_modules-0.6.1-1.1 on GA media
These are all security issues fixed in the obs-service-go_modules-0.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4SUSE-SU-2022:4478-1 1 CVE
Security update for capnproto
This update for capnproto fixes the following issues: - CVE-2022-46149: Fixed out of bounds read when handling a list of lists (bsc#1205968).
first Dec 14, 2022 -
Medium max 4.4openSUSE-SU-2020:1616-1 3 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - nodejs12 was updated to 12.18.4 LTS: - CVE-2020-8201: Fixed an HTTP Request Smuggling due to CR-to-Hyphen conversion (bsc#1176605). - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CV…
first Oct 5, 2020 -
Medium max 6.8openSUSE-SU-2024:11583-1 7 CVEs
java-13-openjdk-13.0.9.0-1.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1SUSE-SU-2020:1842-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436). - Renamed the persistent link for ATA devices (bsc#1164538) - shared/install: try harder to find enablement sym…
first Jul 3, 2020 -
Medium max 5.6SUSE-RU-2024:3598-1 1 CVE
Recommended update for python-requests
This update for python-requests fixes the following issue: - Update CVE-2024-35195.patch to allow the usage of 'verify' parameter as a directory (bsc#1225912)
first Oct 11, 2024 -
Medium max 4.0SUSE-SU-2020:0547-1 2 CVEs
Security update for permissions
This update for permissions fixes the following issues: Security issues fixed: - CVE-2019-3687: Fixed a privilege escalation which could allow a local user to read network traffic if wireshark is installed (bsc#1148788) - CVE-2020-8013: Fixed an issue where c…
first Feb 28, 2020 -
Medium max 4.2SUSE-SU-2024:2462-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).
first Jul 12, 2024 -
Medium max 5.9SUSE-SU-2020:14560-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
first Dec 9, 2020 -
Medium max 5.6SUSE-SU-2024:2068-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
first Jun 18, 2024