6,771 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2022:4276-1 11 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678). - CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata …
first Nov 29, 2022 -
Medium max 4.8SUSE-SU-2023:3686-1 1 CVE
Security update for gcc7
This update for gcc7 fixes the following issues: Security issue fixed: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Other fixes: - Fixed KASAN kernel compile. [bsc#1205145] - Fixed ICE with C++17 code as reported in …
first Sep 19, 2023 -
Medium max 6.1SUSE-SU-2022:3460-1 1 CVE
Security update for python3-lxml
This update for python3-lxml fixes the following issues: - CVE-2020-27783: Fixed XSS due to the use of improper parser (bsc#1179534).
first Sep 29, 2022 -
Medium max 6.8SUSE-SU-2021:3671-1 10 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Update to 11.0.13+8 (October 2021 CPU) - CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference - CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session c…
first Nov 16, 2021 -
Medium max 5.6SUSE-SU-2024:1937-2 1 CVE
Security update for python-docker
This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (bsc#1224788).
first Jul 8, 2024 -
Medium max 6.1SUSE-SU-2024:3116-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header (bsc#1229221)
first Sep 3, 2024 -
Medium max 4.4openSUSE-SU-2024:14284-1 1 CVE
libvte-2_91-0-0.76.3-3.1 on GA media
These are all security issues fixed in the libvte-2_91-0-0.76.3-3.1 package on the GA media of openSUSE Tumbleweed.
first Aug 22, 2024 -
Medium max 5.3openSUSE-SU-2024:10915-1 1 CVE
lftp-4.9.2-1.7 on GA media
These are all security issues fixed in the lftp-4.9.2-1.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2025:15028-1 1 CVE
distrobuilder-3.2-2.1 on GA media
These are all security issues fixed in the distrobuilder-3.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 25, 2025 -
Medium max 5.9SUSE-SU-2019:0243-2 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) - CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644)
first Apr 27, 2019 -
Medium max 5.3SUSE-SU-2025:03266-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
first Sep 18, 2025 -
Medium max 6.5SUSE-SU-2022:3491-1 3 CVEs
Security update for slurm_20_02
This update for slurm_20_02 fixes the following issues: - CVE-2022-31251: Fixed security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed architectural flaw that can be exploited to allow an unprivileged user to execute arbitrary proce…
first Oct 3, 2022 -
Medium max 4.9openSUSE-SU-2025:15816-1 1 CVE
ImageMagick-7.1.2.10-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.2.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 12, 2025 -
Medium max 4.4SUSE-SU-2023:3822-1 1 CVE
Security update for supportutils
This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords (bsc#1207598). Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory (bsc#1210950) + A Cleartext Stor…
first Sep 27, 2023 -
Medium max 5.8SUSE-SU-2022:2891-1 1 CVE
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2021-41159: Fixed improper validation of client input (bsc#1191895). - CVE-2022-41160: Fixed improper region checks (bsc#1191895).
first Aug 25, 2022 -
Medium max 6.5openSUSE-SU-2019:2298-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137). This update was imported from the SUSE:SLE-15:Update update project.
first Oct 8, 2019 -
Medium max 6.5SUSE-SU-2020:1250-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). Non-security issues fixed: - apparmor: avoid copying empty profile name (bsc#1149100). - loggi…
first May 11, 2020 -
Medium max 5.5SUSE-SU-2022:3911-1 1 CVE
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
first Nov 8, 2022 -
Medium max 5.9SUSE-SU-2019:1452-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…
first Jun 7, 2019 -
Medium max 5.9openSUSE-SU-2025:15782-1 2 CVEs
postgresql13-13.23-1.1 on GA media
These are all security issues fixed in the postgresql13-13.23-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2025 -
Medium max 5.5openSUSE-SU-2022:10045-1 1 CVE
Security update for chafa
This update for chafa fixes the following issues: - CVE-2022-2301: Fixed buffer over-read (boo#1201211)
first Jul 8, 2022 -
Medium max 5.0openSUSE-SU-2025:14908-1 1 CVE
python311-Django4-4.2.20-1.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.20-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2025 -
Medium max 4.8openSUSE-SU-2019:2271-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095). Non-secur…
first Oct 6, 2019 -
Medium max 5.9SUSE-SU-2025:01783-1 1 CVE
Security update for postgresql17
This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first May 30, 2025 -
Medium max 6.2openSUSE-SU-2024:13030-1 1 CVE
ImageMagick-7.1.1.12-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.1.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2SUSE-SU-2025:02803-1 3 CVEs
Security update for Mesa
This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040) - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041) - CVE-2023-45922: Fixed se…
first Aug 14, 2025 -
Medium max 4.3openSUSE-SU-2024:12243-1 5 CVEs
ctdb-4.16.4+git.297.1497eb221ed-1.1 on GA media
These are all security issues fixed in the ctdb-4.16.4+git.297.1497eb221ed-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:1156-1 1 CVE
Security update for nghttp2
This update for nghttp2 fixes the following issues: - CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)
first Apr 8, 2024 -
Medium max 5.3openSUSE-SU-2024:14012-1 1 CVE
system-user-velociraptor-1.0.0-9.1 on GA media
These are all security issues fixed in the system-user-velociraptor-1.0.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.2SUSE-SU-2025:01761-1 1 CVE
Security update for slurm_24_11
This update for slurm_24_11 fixes the following issues: Update to version 24.11.5. Security issues fixed: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator…
first May 29, 2025 -
Medium max 5.3SUSE-SU-2023:4289-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: - Updated to JDK 17.0.9+9 (October 2023 CPU): - CVE-2023-22081: Fixed a partial denial of service issue that could be triggered via HTTPS (bsc#1216374). - CVE-2023-22025: Fixed a memory corruption is…
first Oct 31, 2023 -
Medium max 6.8openSUSE-SU-2019:0307-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…
first Mar 23, 2019 -
Medium max 5.3SUSE-SU-2022:2908-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2022-2309: Fixed NULL pointer dereference due to state leak between parser runs (bsc#1201253).
first Aug 26, 2022 -
Medium max 5.5SUSE-SU-2017:1241-1 13 CVEs
Security update for qemu
This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows…
first May 11, 2017 -
Medium max 6.7SUSE-SU-2023:4748-1 1 CVE
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for auto…
first Dec 13, 2023 -
Medium max 5.9openSUSE-SU-2024:13523-1 1 CVE
python-paramiko-doc-3.3.1-2.3 on GA media
These are all security issues fixed in the python-paramiko-doc-3.3.1-2.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2025:01565-1 1 CVE
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling (bsc#1243106) Other fixes: - Fixed GCC 15 compile time error (bsc#1241938) - Fix building with containerd 1.7.25+ (bsc#1…
first May 29, 2025 -
Medium max 4.4SUSE-SU-2024:2320-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request header not stripped during cross-origin redirects (bsc#1226469).
first Jul 8, 2024 -
Medium max 5.9SUSE-SU-2019:1954-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first Jul 23, 2019 -
Medium max 5.9SUSE-SU-2021:3797-1 9 CVEs
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk fixes the following issues: Update to OpenJDK 7u321 (October 2021 CPU): - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in RTFParse…
first Nov 24, 2021