6,771 results · Clear filters · Feed
-
Medium max 5.6SUSE-SU-2025:1439-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551) - CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)
first May 2, 2025 -
Medium max 5.3SUSE-SU-2025:0548-1 1 CVE
Security update for libtasn1
This update for libtasn1 fixes the following issues: - CVE-2024-12133: the processing of input DER data containing a large number of SEQUENCE OF or SET OF elements takes quadratic time to complete. (bsc#1236878)
first Feb 14, 2025 -
Medium max 6.3SUSE-SU-2025:1043-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).
first Mar 27, 2025 -
Medium max 5.3SUSE-SU-2021:0512-1 2 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 80 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or …
first Feb 18, 2021 -
Medium max 5.3openSUSE-SU-2021:1989-1 1 CVE
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u292 (icedtea 3.19.0). - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).
first Jul 10, 2021 -
Medium max 6.6openSUSE-SU-2024:14479-1 4 CVEs
ruby3.3-rubygem-rails-7.0-7.0.8.6-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-rails-7.0-7.0.8.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2024 -
Medium max 5.3openSUSE-SU-2024:14455-1 1 CVE
python311-3.11.10-3.1 on GA media
These are all security issues fixed in the python311-3.11.10-3.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2024 -
Medium max 6.4SUSE-SU-2022:3212-1 1 CVE
Security update for rubygem-rake
This update for rubygem-rake fixes the following issues: - CVE-2020-8130: Fixed a command injection when supplying a filename that began with the pipe character (bsc#1164804).
first Sep 8, 2022 -
Medium max 4.3openSUSE-SU-2019:1904-1 3 CVEs
Security update for pdns
This update for pdns fixes the following issues: Security issues fixed: - CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#114…
first Aug 15, 2019 -
Medium max 6.3SUSE-SU-2025:0049-1 2 CVEs
Security update for python310
This update for python310 fixes the following issues: - Update to 3.10.16
first Jan 9, 2025 -
Medium max 6.5openSUSE-SU-2020:2282-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2020-26137: Fixed a CRLF injection via HTTP request method (bsc#1177120). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Dec 18, 2020 -
Medium max 5.4SUSE-SU-2022:3868-1 1 CVE
Security update for rubygem-loofah
This update for rubygem-loofah fixes the following issues: - CVE-2019-15587: Fixed issue in sanitization of crafted SVG elements (bsc#1154751).
first Nov 4, 2022 -
Medium max 5.9openSUSE-SU-2025:15789-1 2 CVEs
libecpg6-18.1-1.1 on GA media
These are all security issues fixed in the libecpg6-18.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 1, 2025 -
Medium max 5.6SUSE-SU-2018:1363-1 2 CVEs
Security update for qemu
This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memo…
first May 22, 2018 -
Medium max 5.4openSUSE-SU-2020:1767-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-en…
first Oct 29, 2020 -
Medium max 6.5SUSE-SU-2026:0087-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2025-68431: Fixed heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF that exercises the overlay image item (bsc#1255735)
first Jan 9, 2026 -
Medium max 6.9openSUSE-SU-2024:14531-1 2 CVEs
libjxl-devel-0.11.1-1.1 on GA media
These are all security issues fixed in the libjxl-devel-0.11.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 27, 2024 -
Medium max 6.1openSUSE-SU-2024:14148-1 2 CVEs
python310-mistune-3.0.2-2.5 on GA media
These are all security issues fixed in the python310-mistune-3.0.2-2.5 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 6.2SUSE-SU-2023:4901-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38472: Fixed reachable assertion in avahi_rdata_parse (bsc#1216853).
first Dec 19, 2023 -
Medium max 5.3
Security update for java-1_7_1-ibm
The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4…
first Dec 14, 2015 -
Medium max 4.3SUSE-SU-2022:3880-1 3 CVEs
Security update for spacewalk-java
This update for spacewalk-java fixes the following issues: - CVE-2022-31255: Fix directory path traversal vulnerability (bsc#1204543) - CVE-2022-43754: Fix reflected cross site scripting vulnerability (bsc#1204741) - CVE-2022-43753: Fix arbitrary file disclos…
first Nov 4, 2022 -
Medium max 5.9SUSE-SU-2023:1682-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
first Mar 29, 2023 -
Medium max 4.9SUSE-SU-2024:3018-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - Updated to 10.5.26 - Updated to 10.5.25: - CVE-2024-21096: Fixed a vulnerability that would allow unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL S…
first Aug 27, 2024 -
Medium max 6.3SUSE-SU-2023:0095-1 1 CVE
Security update for libzypp-plugin-appdata
This update for libzypp-plugin-appdata fixes the following issues: - CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836).
first Jan 17, 2023 -
Medium max 6.5SUSE-SU-2022:1541-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2022-0959: Fixed an unrestricted file upload (bsc#1197143).
first May 4, 2022 -
Medium max 5.5SUSE-SU-2022:0576-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …
first Feb 25, 2022 -
Medium max 6.5SUSE-SU-2024:3351-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-5642: buffer overread when NPN is used and invalid values are sent to the OpenSSL API. (bsc#1227233)
first Sep 20, 2024 -
Medium max 5.3SUSE-SU-2022:4373-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u352 (icedtea-3.25.0): - CVE-2022-21619,CVE-2022-21624: Fixed difficult to exploit vulnerability allows unauthenticated attacker with network access and can cause unauthorize…
first Dec 8, 2022 -
Medium max 5.3SUSE-SU-2023:0795-2 1 CVE
Security update for docker
This update for docker fixes the following issues: Docker was updated to 20.10.23-ce. See upstream changelog at https://docs.docker.com/engine/release-notes/#201023 Docker was updated to 20.10.21-ce (bsc#1206065) See upstream changelog at https://docs.docker.…
first Apr 27, 2023 -
Medium max 4.8SUSE-SU-2024:3954-1 4 CVEs
Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: - Update to upstream tag jdk-21.0.5+13 (October 2024 CPU) * Security fixes + JDK-8307383: Enhance DTLS connections + JDK-8311208: Improve CDS Support + JDK-8328286, CVE-2024-21208, bsc#1231702: Enhan…
first Nov 8, 2024 -
Medium max 6.5SUSE-SU-2021:3215-1 28 CVEs
Security update for sqlite3
This update for sqlite3 fixes the following issues: sqlite3 is sync version 3.36.0 from Factory (jsc#SLE-16032). The following CVEs have been fixed in upstream releases up to this point, but were not mentioned in the change log so far: * bsc#1173641, CVE-2020…
first Sep 23, 2021 -
Medium max 5.3SUSE-SU-2024:0829-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-21733: Fixed leaking of unrelated request bodies in default error page (bsc#1219023, bsc#1220503).
first Mar 11, 2024 -
Medium max 5.5openSUSE-SU-2024:12070-1 1 CVE
ucode-intel-20220510-1.1 on GA media
These are all security issues fixed in the ucode-intel-20220510-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:3760-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906)
first Oct 28, 2024 -
Medium max 4.8openSUSE-SU-2024:13234-1 1 CVE
cpp13-13.2.1+git7813-1.1 on GA media
These are all security issues fixed in the cpp13-13.2.1+git7813-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2023:0405-1 2 CVEs
Security update for libbpf
This update for libbpf fixes the following issues: - CVE-2022-3534: Fixed use-after-free in btf_dump_name_dups (bsc#1204391). - CVE-2022-3606: Fixed null pointer dereference in find_prog_by_sec_insn() (bsc#1204502).
first Feb 14, 2023 -
Medium max 6.1SUSE-SU-2024:3305-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: - Update to version 0.103.12 - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162) - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file …
first Sep 18, 2024 -
Medium max 6.4SUSE-SU-2024:2265-1 3 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: Update to version 3.6.22: - CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274) - CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning o…
first Jul 2, 2024 -
Medium max 6.8SUSE-SU-2026:0070-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-6505: Fixed queue index out-of-bounds access in software RSS (bsc#1227397) - CVE-2023-1544: Fixed out-of-bounds read in pvrdma_ring_next_elem_read() (bsc#1209554)
first Jan 8, 2026 -
Medium max 5.9SUSE-SU-2023:3179-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (…
first Aug 3, 2023