6,771 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2019:14058-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: Security issues fixed: - CVE-2018-10846: Improve mitigations against Lucky 13 class of attacks (PRIME + PROBE) (bsc#1105460). - CVE-2017-10790: Fixed a denial of service in the _asn1_check_identifier() functi…
first May 21, 2019 -
Medium max 4.6SUSE-SU-2023:1718-2 1 CVE
Security update for glibc
This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975) Other issues fixed: - Fix avx2 strncmp offset compare condition check (bsc#1208358) - elf: Allow dlopen of filter obje…
first Apr 27, 2023 -
Medium max 5.5openSUSE-SU-2024:14546-1 1 CVE
ansible-core-2.16-2.16.14-1.1 on GA media
These are all security issues fixed in the ansible-core-2.16-2.16.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 5, 2024 -
Medium max 5.3openSUSE-SU-2024:0149-1 1 CVE
Security update for python-python-jose
This update for python-python-jose fixes the following issues: - CVE-2024-33664: Fixed a denial of service via decoding of a JSON Web Encryption token with a high compression ratio (boo#1223422)
first Jun 3, 2024 -
Medium max 6.5openSUSE-SU-2024:12321-1 1 CVE
python-2.7.18-23.1 on GA media
These are all security issues fixed in the python-2.7.18-23.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2024:12033-1 1 CVE
ruby3.1-rubygem-sinatra-2.2.0-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-sinatra-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2025:14695-1 2 CVEs
go1.23-1.23.5-1.1 on GA media
These are all security issues fixed in the go1.23-1.23.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 25, 2025 -
Medium max 6.1SUSE-SU-2019:2034-1 1 CVE
Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2019-12308: Fixed an improper validatation of the clickable 'Current URL' link in AdminURLFieldWidget which could have allowed attackers to perform XSS attacks (bsc#1136468).
first Aug 1, 2019 -
Medium max 5.6SUSE-SU-2018:1386-1 2 CVEs
Security update for qemu
This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memo…
first May 23, 2018 -
Medium max 5.1SUSE-SU-2020:0146-1 1 CVE
Security update for Mesa
This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).
first Jan 21, 2020 -
Medium max 5.6SUSE-SU-2018:0609-1 10 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks (bsc#1074562, bsc#1068032) - C…
first Mar 5, 2018 -
Medium max 5.9SUSE-SU-2023:4905-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).
first Dec 19, 2023 -
Medium max 6.5SUSE-SU-2022:3960-1 17 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let xenstored run out of memory (bsc#1204482) - CVE-202…
first Nov 11, 2022 -
Medium max 4.3SUSE-SU-2018:2319-1 1 CVE
Security update for samba
This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: Fixed insufficient input validation on client directory listing in libsmbclient; (bsc#1103411); The following other change was made: - s3: winb…
first Aug 14, 2018 -
Medium max 5.3SUSE-SU-2024:2039-1 1 CVE
Security update for php8
This update for php8 fixes the following issues: - CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073)
first Jun 17, 2024 -
Medium max 5.5SUSE-SU-2022:3999-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 0cd50eedcc0692c1f907b24424215f8db7d3b428 * 0469b9f2bc pstore: do not try to load all known pstore modules * …
first Nov 15, 2022 -
Medium max 5.9SUSE-SU-2023:4157-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).
first Oct 23, 2023 -
Medium max 5.9SUSE-SU-2019:14052-1 6 CVEs
Security update for kvm
This update for kvm fixes the following issues: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091: Adde…
first May 17, 2019 -
Medium max 6.5SUSE-SU-2024:2257-1 1 CVE
Security update for libreoffice
This update for libreoffice fixes the following issues: Libreoffice was updated to version 24.2.4.2: - Release notes: * https://wiki.documentfoundation.org/Releases/24.2.1/RC1 * https://wiki.documentfoundation.org/Releases/24.2.1/RC2 - Security issues fixed: …
first Jul 2, 2024 -
Medium max 6.3openSUSE-SU-2025:14742-1 3 CVEs
chromedriver-133.0.6943.53-1.1 on GA media
These are all security issues fixed in the chromedriver-133.0.6943.53-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 7, 2025 -
Medium max 4.8SUSE-SU-2023:3662-1 4 CVEs
Security update for gcc7
This update for gcc7 fixes the following issues: Security issues fixed: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). - CVE-2019-15847: Fixed POWER9 DARN miscompilation. (bsc#1149145) - CVE-2019-14250: Includes fix fo…
first Sep 18, 2023 -
Medium max 5.5openSUSE-SU-2024:14490-1 2 CVEs
libvirt-10.9.0-3.1 on GA media
These are all security issues fixed in the libvirt-10.9.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 13, 2024 -
Medium max 6.1openSUSE-SU-2024:11216-1 1 CVE
python38-autobahn-21.3.1-1.3 on GA media
These are all security issues fixed in the python38-autobahn-21.3.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2019:2459-1 9 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox: Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixed a use-after-free when…
first Nov 9, 2019 -
Medium max 5.0openSUSE-SU-2025:0090-1 1 CVE
Security update for ark
This update for ark fixes the following issues: - CVE-2024-57966: Disable extraction to absolute path from an archive (boo#1236737)
first Mar 12, 2025 -
Medium max 5.5openSUSE-SU-2024:11915-1 1 CVE
libblkid-devel-2.37.4-1.1 on GA media
These are all security issues fixed in the libblkid-devel-2.37.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2024:0892-1 1 CVE
Security update for python36-pip
This update for python36-pip fixes the following issues: - CVE-2023-5752: Fixed possible injection of arbitrary configuration through Mercurial parameter. (bsc#1217353)
first Mar 14, 2024 -
Medium max 5.3SUSE-SU-2022:2878-1 1 CVE
Security update for python-lxml
This update for python-lxml fixes the following issues: - CVE-2022-2309: Fixed NULL pointer dereference due to state leak between parser runs (bsc#1201253).
first Aug 23, 2022 -
Medium max 5.3SUSE-SU-2022:14927-1 17 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: Update Java 7.1 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-20…
first Mar 23, 2022 -
Medium max 5.3openSUSE-SU-2025:14907-1 1 CVE
kured-1.17.1-1.1 on GA media
These are all security issues fixed in the kured-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2025 -
Medium max 5.9SUSE-SU-2024:1539-1 1 CVE
Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: - CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)
first May 7, 2024 -
Medium max 5.7SUSE-SU-2021:2441-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).
first Jul 21, 2021 -
Medium max 5.6SUSE-SU-2018:0180-1 26 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 realtime kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). …
first Jan 23, 2018 -
Medium max 5.5SUSE-SU-2017:2869-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.90 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000252: The KVM subsystem in the Linux kernel allowed guest OS users to cause a denial of service (asse…
first Oct 27, 2017 -
Medium max 6.8SUSE-SU-2021:3728-1 2 CVEs
Security update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma
This update for ardana-ansible, ardana-monasca, documentation-suse-openstack-cloud, openstack-ec2-api, openstack-heat-templates, python-Django, python-monasca-common, rubygem-redcarpet, rubygem-puma contains the following fixes: Security fixes included in thi…
first Nov 19, 2021 -
Medium max 6.5SUSE-SU-2019:0541-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.175 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled reference counting because of a race co…
first Mar 4, 2019 -
Medium max 6.5SUSE-SU-2023:2877-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).
first Jul 19, 2023 -
Medium max 6.6SUSE-SU-2023:1864-1 1 CVE
Security update for wayland
This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
first Apr 17, 2023 -
Medium max 5.7SUSE-SU-2022:0942-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).
first Mar 24, 2022 -
Medium max 5.6SUSE-SU-2018:2222-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usag…
first Aug 6, 2018