6,771 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2024:1530-1 2 CVEs
Security update for grafana and mybatis
This update for grafana and mybatis fixes the following issues: grafana was updated to version 9.5.18: - Grafana now requires Go 1.20 - Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Ad…
first May 6, 2024 -
Medium max 6.7SUSE-SU-2024:1154-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: - CVE-2024-28219: Fixed buffer overflow in _imagingcms.c (bsc#1222262)
first Apr 8, 2024 -
Medium max 5.9SUSE-SU-2025:02719-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Aug 7, 2025 -
Medium max 6.2SUSE-SU-2023:1826-1 2 CVEs
Security update for containerd
This update for containerd fixes the following issues: Update to containerd v1.6.19: Security fixes: - CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423). - CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).
first Apr 13, 2023 -
Medium max 5.5SUSE-SU-2024:1590-2 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852).
first Jun 18, 2024 -
Medium max 6.5openSUSE-SU-2024:13928-1 2 CVEs
python310-python-jose-3.3.0-3.1 on GA media
These are all security issues fixed in the python310-python-jose-3.3.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:3647-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2024-8508: Fixed unbounded name compression that could lead to denial of service (bsc#1231284)
first Oct 16, 2024 -
Medium max 5.3
Security update for java-1_6_0-ibm
This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…
first Nov 26, 2015 -
Medium max 6.5openSUSE-SU-2019:1530-1 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211). - CVE-2018-13785: Fixed a wrong calculation of …
first Jun 7, 2019 -
Medium max 5.9openSUSE-SU-2024:12253-1 6 CVEs
nim-1.6.6-3.1 on GA media
These are all security issues fixed in the nim-1.6.6-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1openSUSE-SU-2024:11307-1 1 CVE
rpmlint-2.1+git20210924.ad0cf53-1.1 on GA media
These are all security issues fixed in the rpmlint-2.1+git20210924.ad0cf53-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8openSUSE-SU-2023:0419-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping (boo#1218199)
first Dec 27, 2023 -
Medium max 5.3openSUSE-SU-2025:14666-1 1 CVE
helmfile-0.170.0-1.1 on GA media
These are all security issues fixed in the helmfile-0.170.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 21, 2025 -
Medium max 6.0openSUSE-SU-2024:11664-1 1 CVE
runc-1.0.3-1.1 on GA media
These are all security issues fixed in the runc-1.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4SUSE-SU-2020:0750-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094).
first Mar 23, 2020 -
Medium max 5.9SUSE-SU-2025:01765-1 1 CVE
Security update for postgresql17
This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first May 30, 2025 -
Medium max 6.1SUSE-SU-2024:4010-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency (bsc#1213933) - Other changes and issues fixed: * Delete unpackaged debug files for RHEL * Do no…
first Nov 18, 2024 -
Medium max 5.9SUSE-SU-2017:1675-1 1 CVE
Security update for xorg-x11-server
This update for xorg-x11-server provides the following fixes: - Remove unused function with use-after-free issue. (bsc#1025035) - Use arc4random to generate cookies. (bsc#1025084) - Prevent timing attack against MIT cookie. (bsc#1025029, CVE-2017-2624) - XDra…
first Jun 26, 2017 -
Medium max 5.7SUSE-SU-2025:4134-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2025-11411: Fixed possible domain hijacking attack. (bsc#1252525)
first Nov 18, 2025 -
Medium max 5.9openSUSE-SU-2024:13628-1 1 CVE
tinyssh-20240101-1.1 on GA media
These are all security issues fixed in the tinyssh-20240101-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2025:14726-1 1 CVE
cargo-audit-advisory-db-20250204-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20250204-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 4, 2025 -
Medium max 6.1SUSE-SU-2022:4075-1 2 CVEs
Security update for rubygem-loofah
This update for rubygem-loofah fixes the following issues: - CVE-2019-15587: Fixed issue in sanitization of crafted SVG elements (bsc#1154751).
first Nov 18, 2022 -
Medium max 5.5SUSE-SU-2025:3695-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Oct 21, 2025 -
Medium max 5.9openSUSE-SU-2020:2298-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513). - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000) - Fixed an i…
first Dec 20, 2020 -
Medium max 5.7openSUSE-SU-2025:14775-1 11 CVEs
kernel-firmware-bnx2-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-bnx2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.3openSUSE-SU-2024:12285-1 2 CVEs
corepack16-16.17.0-2.1 on GA media
These are all security issues fixed in the corepack16-16.17.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.9openSUSE-SU-2025:15031-1 2 CVEs
python311-grpcio-1.69.0-2.1 on GA media
These are all security issues fixed in the python311-grpcio-1.69.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2025 -
Medium max 5.3SUSE-SU-2023:3291-2 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Oct 4, 2023 -
Medium max 4.8SUSE-SU-2023:0838-1 1 CVE
Security update for python-cffi
This update for python-cffi fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to immutable python object being changed (bsc#1208036).
first Mar 21, 2023 -
Medium max 6.5openSUSE-SU-2020:0010-1 21 CVEs
Security update for chromium, re2
This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privile…
first Jan 13, 2020 -
Medium max 6.5SUSE-SU-2022:3794-1 1 CVE
Security update for rubygem-puppet
This update for rubygem-puppet fixes the following issues: - CVE-2021-27023: Fixed an unsafe HTTP redirect (bsc#1192797).
first Oct 27, 2022 -
Medium max 5.5SUSE-SU-2022:3486-1 1 CVE
Security update for cosign
This update for cosign fixes the following issues: Updated to version 1.12.0 (jsc#SLE-23879): - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430).
first Oct 1, 2022 -
Medium max 6.2openSUSE-SU-2024:13796-1 1 CVE
libvirt-10.1.0-2.1 on GA media
These are all security issues fixed in the libvirt-10.1.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2018:1969-1 1 CVE
Security update for singularity
This update for singularity fixes the following issues: - CVE-2018-12021: A race condition might have allowed malicious users to bypass directory image restrictions, like mounting the host root filesystem as a container image (boo#1100333)
first Jul 16, 2018 -
Medium max 6.5SUSE-SU-2024:0172-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) - CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810)
first Jan 22, 2024 -
Medium max 5.3SUSE-SU-2024:3543-1 1 CVE
Security update for json-lib
This update for json-lib fixes the following issues: - CVE-2024-47855: Fixed mishandled unbalanced comment string (bsc#1231295)
first Oct 8, 2024 -
Medium max 5.9SUSE-SU-2024:2041-1 1 CVE
Security update for booth
This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)
first Jun 17, 2024 -
Medium max 5.3openSUSE-SU-2024:11603-1 1 CVE
libssh-config-0.9.6-2.1 on GA media
These are all security issues fixed in the libssh-config-0.9.6-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4openSUSE-SU-2023:0154-1 2 CVEs
Security update for phpMyAdmin
This update for phpMyAdmin fixes the following issues: Update to 4.9.11: - CVE-2023-25727: Fixed XSS vulnerability in drag-and-drop upload (boo#1208186).
first Jun 27, 2023 -
Medium max 5.3openSUSE-SU-2024:12980-1 1 CVE
libQt6Concurrent6-6.5.1-2.1 on GA media
These are all security issues fixed in the libQt6Concurrent6-6.5.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024