6,771 results · Clear filters · Feed
-
Medium max 6.1SUSE-SU-2020:1553-2 9 CVEs
Security update for libexif
This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exi…
first Jul 8, 2020 -
Medium max 6.1openSUSE-SU-2024:13073-1 1 CVE
apptainer-1.2.1-1.1 on GA media
These are all security issues fixed in the apptainer-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2openSUSE-SU-2025:15105-1 1 CVE
python311-suds-1.2.0-2.4 on GA media
These are all security issues fixed in the python311-suds-1.2.0-2.4 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 6.5SUSE-SU-2016:0935-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following security issues: * CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. (bsc#965582) * CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary am…
first Apr 1, 2016 -
Medium max 5.7openSUSE-SU-2025:14787-1 11 CVEs
kernel-firmware-mwifiex-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-mwifiex-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.3SUSE-SU-2023:4521-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 21, 2023 -
Medium max 5.4SUSE-SU-2020:1339-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentati…
first May 19, 2020 -
Medium max 5.7openSUSE-SU-2025:14774-1 11 CVEs
kernel-firmware-bluetooth-20250208-1.1 on GA media
These are all security issues fixed in the kernel-firmware-bluetooth-20250208-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.8SUSE-SU-2020:2053-1 1 CVE
Security update for rubygem-excon
This update for rubygem-excon fixes the following issues: - CVE-2019-16779: Fixed an information leak in the socket handling for persistent connections (bsc#1159342)
first Jul 27, 2020 -
Medium max 5.5openSUSE-SU-2024:12428-1 2 CVEs
xwayland-22.1.3-2.1 on GA media
These are all security issues fixed in the xwayland-22.1.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3SUSE-SU-2022:4259-1 5 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641). - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643). - CVE-2022-3626:…
first Nov 28, 2022 -
Medium max 6.5SUSE-SU-2023:2974-1 1 CVE
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: Upgrade to upstream version 4.1.94: - CVE-2023-34462: Allow to limit the maximum lenght of the ClientHello (bsc#1212637).
first Jul 26, 2023 -
Medium max 5.0openSUSE-SU-2021:2795-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).
first Aug 20, 2021 -
Medium max 5.9SUSE-SU-2024:0327-1 1 CVE
Security update for bouncycastle, jsch
This update for bouncycastle, jsch fixes the following issues: - Updated jsch to version 0.2.15: - CVE-2023-48795: Fixed a prefix truncation issue that could lead to disclosure of sensitive information (bsc#1218134). - Updated bouncycastle to version 1.77.
first Feb 5, 2024 -
Medium max 4.8SUSE-SU-2019:1832-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode()…
first Jul 12, 2019 -
Medium max 5.6SUSE-SU-2018:1486-1 1 CVE
Security update for HA kernel modules
This update provides rebuilds of HA kernel modules with retpoline support to mitigate Spectre Variant 2 (CVE-2017-5715 bsc#1068032) cluster fs also received these bugfixes: - backport patch to fix dlmglue false deadlock (bnc#962257) - Fix for online increase …
first Jun 1, 2018 -
Medium max 6.8openSUSE-SU-2019:0091-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issues fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wo…
first Mar 23, 2019 -
Medium max 6.3SUSE-SU-2024:4166-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Remove -IVendor/ from python-config (bsc#1231795)
first Dec 4, 2024 -
Medium max 5.9SUSE-SU-2023:2618-1 1 CVE
Security update for dav1d
This update for dav1d fixes the following issues: - CVE-2023-32570: Fixed possible crash when decoding a frame (bsc#1211262).
first Jun 23, 2023 -
Medium max 4.7SUSE-SU-2018:2165-1 1 CVE
Security update for polkit
This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-1116: Fix uid comparison lacking in polkit_backend_interactive_authority_check_authorization (bsc#1099031).
first Aug 1, 2018 -
Medium max 5.6SUSE-SU-2018:0920-1 3 CVEs
Security update for libvirt
This update for libvirt and virt-manager fixes the following issues: Security issues fixed: - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869). - CVE-2018-6764: Fixed guest executable code injection via libnss…
first Apr 11, 2018 -
Medium max 6.5SUSE-SU-2022:0500-1 1 CVE
Security update for xerces-j2
This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
first Feb 18, 2022 -
Medium max 6.1SUSE-SU-2020:1553-1 9 CVEs
Security update for libexif
This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exi…
first Jun 8, 2020 -
Medium max 5.9SUSE-SU-2024:2409-1 3 CVEs
Security update for libvpx
This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large parameters (bsc#1225879). - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensio…
first Jul 11, 2024 -
Medium max 5.2SUSE-SU-2024:2247-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
first Jun 30, 2024 -
Medium max 6.4
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…
first Mar 30, 2022 -
Medium max 4.3openSUSE-SU-2024:13222-1 2 CVEs
mutt-2.2.12-1.1 on GA media
These are all security issues fixed in the mutt-2.2.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2022:4477-1 1 CVE
Security update for zabbix
This update for zabbix fixes the following issues: - CVE-2022-43515: X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode (bsc#1206083).
first Dec 14, 2022 -
Medium max 6.5SUSE-SU-2020:0278-1 1 CVE
Security update for rmt-server
This update for rmt-server to version 2.5.2 fixes the following issues: Security issue fixed: - CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922). Non-security issue fixed: - Relaxed systemd units dependencies (bsc#1160673) - Ad…
first Jan 31, 2020 -
Medium max 5.1SUSE-SU-2020:3766-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20669: Fixed an improper check i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c (bsc#11…
first Dec 11, 2020 -
Medium max 5.3openSUSE-SU-2024:14430-1 1 CVE
python313-3.13.0-3.1 on GA media
These are all security issues fixed in the python313-3.13.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 27, 2024 -
Medium max 6.5openSUSE-SU-2022:0500-1 1 CVE
Security update for xerces-j2
This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).
first Feb 18, 2022 -
Medium max 5.0openSUSE-SU-2021:1126-1 3 CVEs
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - CVE-2020-2875: Unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors. (bsc#1173600) - CVE-2020-2934: Fixed a vulnerability which could cause a par…
first Aug 10, 2021 -
Medium max 5.6SUSE-SU-2018:1503-1 1 CVE
Security update for oracleasm kmp
This update provides rebuilt kernel modules for SUSE Linux Enterprise 12 SP3 products with retpoline enablement to address Spectre Variant 2 (CVE-2017-5715 bsc#1068032). Following modules have been rebuilt: - drbd - oracleasm - crash - lttng-modules
first Jun 5, 2018 -
Medium max 6.5SUSE-SU-2022:3468-1 3 CVEs
Security update for slurm
This update for slurm fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbitrary p…
first Sep 29, 2022 -
Medium max 6.0openSUSE-SU-2020:1050-1 1 CVE
Security update for cni-plugins
This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com…
first Jul 23, 2020 -
Medium max 6.2openSUSE-SU-2024:12698-1 2 CVEs
git-2.39.2-1.1 on GA media
These are all security issues fixed in the git-2.39.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2021:2876-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2020-8622: A truncated TSIG response can lead to an assertion failure (bsc#1175443).
first Aug 30, 2021 -
Medium max 5.5SUSE-SU-2018:1846-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This new feature was added: - Btrfs: Remove empty block groups in the background The following security bugs were fixed: - : Prevent disclosure of FPU registers (inc…
first Jun 29, 2018 -
Medium max 6.5openSUSE-SU-2019:2340-1 1 CVE
Security update for dhcp
This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called …
first Oct 19, 2019