6,771 results · Clear filters · Feed
-
Medium max 6.9SUSE-SU-2025:03299-1 4 CVEs
Security update for vim
This update for vim fixes the following issues: Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vim’s tar.vim plugin (bsc#1246604) - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in…
first Sep 23, 2025 -
Medium max 5.4SUSE-SU-2022:3834-1 1 CVE
Security update for python-Flask-Security
This update for python-Flask-Security fixes the following issues: - CVE-2021-23385: Fixed open redirect (bsc#1202105).
first Nov 1, 2022 -
Medium max 6.5SUSE-SU-2021:3236-1 1 CVE
Security update for gd
This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).
first Sep 27, 2021 -
Medium max 6.1openSUSE-SU-2025:15004-1 1 CVE
subfinder-2.7.0-2.1 on GA media
These are all security issues fixed in the subfinder-2.7.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 16, 2025 -
Medium max 4.3SUSE-SU-2023:1669-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622).
first Mar 29, 2023 -
Medium max 4.4SUSE-SU-2024:1135-1 1 CVE
Security update for libcares2
This update for libcares2 fixes the following issues: - CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
first Apr 8, 2024 -
Medium max 4.9SUSE-SU-2024:0238-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571).
first Jan 26, 2024 -
Medium max 6.5openSUSE-SU-2024:13860-1 1 CVE
frr-8.4-10.1 on GA media
These are all security issues fixed in the frr-8.4-10.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2018:1690-2 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u171 fixes the following issues: These security issues were fixed: - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More…
first Oct 18, 2018 -
Medium max 6.2openSUSE-SU-2024:13298-1 1 CVE
ImageMagick-7.1.1.19-1.1 on GA media
These are all security issues fixed in the ImageMagick-7.1.1.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2020:2455-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). - Do not install outdated README.SUSE (bsc#1174010). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1…
first Sep 2, 2020 -
Medium max 6.8SUSE-SU-2019:14030-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…
first Apr 25, 2019 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_153 fixes several issues. The following security issues were fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463). - CVE-2021-28688: Fixed XSA-365 that inc…
first Mar 2, 2022 -
Medium max 5.3SUSE-SU-2022:1026-1 17 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-20…
first Mar 29, 2022 -
Medium max 6.4SUSE-SU-2017:1964-1 1 CVE
Security update for containerd, docker, runc
This update for - containerd - docker to 1.12.6 - runc fixes the two issues. This security issue was fixed: - CVE-2016-9962: A difficult to exploit race condition caused by passing a file descriptor from the host's filesystem into the container could have all…
first Feb 6, 2017 -
Medium max 5.9SUSE-SU-2024:1633-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).
first May 14, 2024 -
Medium max 5.3SUSE-SU-2023:1872-1 1 CVE
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
first Apr 17, 2023 -
Medium max 5.9openSUSE-SU-2024:14429-1 1 CVE
Botan-3.6.0-1.1 on GA media
These are all security issues fixed in the Botan-3.6.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 27, 2024 -
Medium max 5.1openSUSE-SU-2019:2540-1 12 CVEs
Security update for squid
This update for squid to version 4.9 fixes the following issues: Security issues fixed: - CVE-2019-13345: Fixed multiple cross-site scripting vulnerabilities in cachemgr.cgi (bsc#1140738). - CVE-2019-12526: Fixed potential remote code execution during URN pro…
first Nov 21, 2019 -
Medium max 5.8SUSE-SU-2019:1042-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#11…
first Apr 26, 2019 -
Medium max 5.3SUSE-SU-2024:2481-1 1 CVE
Security update for python-black
This update for python-black fixes the following issues: Updated to version 24.3.0: - CVE-2024-21503: Fixed a performance downgrade on docstrings that contain large numbers of leading tab characters (bsc#1221530).
first Jul 15, 2024 -
Medium max 5.4SUSE-SU-2022:4057-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-39348: Fixed NameVirtualHost Host header injection (bsc#1204781).
first Nov 17, 2022 -
Medium max 6.0SUSE-SU-2024:3546-1 2 CVEs
Security update for podman
This update for podman fixes the following issues: - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library (bsc#1231230)
first Oct 8, 2024 -
Medium max 4.6openSUSE-SU-2025:15757-1 2 CVEs
curl-8.17.0-1.1 on GA media
These are all security issues fixed in the curl-8.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 21, 2025 -
Medium max 6.5SUSE-SU-2023:0068-1 2 CVEs
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2022-44793: Fixed a NULL pointer dereference issue that could allow a remote attacker with write access to crash the server instance (bsc#1205148). - CVE-2022-44792: Fixed a NULL pointer dereference i…
first Jan 11, 2023 -
Medium max 5.7SUSE-SU-2023:1566-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - Re-build containerd to use updated golang-packaging (jsc#1342). - Update to containerd v1.6.16 for Do…
first Mar 24, 2023 -
Medium max 4.3SUSE-SU-2025:02232-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705).
first Jul 7, 2025 -
Medium max 4.5SUSE-SU-2024:2187-1 1 CVE
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issue: - CVE-2023-52890: fix a use after free in ntfs_uppercase_mbs (bsc#1226007)
first Jun 24, 2024 -
Medium max 5.1openSUSE-SU-2022:2649-1 2 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384). - CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
first Aug 3, 2022 -
Medium max 5.3SUSE-SU-2023:1869-1 1 CVE
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2023-27539: Fixed denial of service in header parsing (bsc#1209503).
first Apr 17, 2023 -
Medium max 6.8SUSE-SU-2023:0353-1 6 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: dracut-saltboot: - Update to version 0.1.1673279145.e7616bd * Add failsafe stop file when salt-minion does not stop (bsc#1172110) * Copy existing wicked config instead of generating new (bsc#1205599) grafana: - Update t…
first Feb 10, 2023 -
Medium max 6.8openSUSE-SU-2024:12304-1 3 CVEs
phoronix-test-suite-10.8.4-1.1 on GA media
These are all security issues fixed in the phoronix-test-suite-10.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.9SUSE-SU-2023:4939-1 1 CVE
Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: - CVE-2023-46118: Introduce HTTP request body limit for definition uploads (bsc#1216582).
first Dec 20, 2023 -
Medium max 6.5openSUSE-SU-2024:13694-1 1 CVE
wpa_supplicant-2.10-6.1 on GA media
These are all security issues fixed in the wpa_supplicant-2.10-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2024:13054-1 1 CVE
element-desktop-1.11.36-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.36-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1SUSE-SU-2021:2163-1 1 CVE
Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2020-15522: Fixed a timing issue within the EC math library (bsc#1186328).
first Jun 25, 2021 -
Medium max 6.1SUSE-SU-2026:0117-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).
first Jan 13, 2026 -
Medium max 5.3openSUSE-SU-2024:13456-1 3 CVEs
java-17-openj9-17.0.9.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2020:2134-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticat…
first Aug 5, 2020 -
Medium max 5.7openSUSE-SU-2020:0500-1 5 CVEs
Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309) - CVE-2018-18245: Fixed XSS v…
first Apr 11, 2020