6,771 results · Clear filters · Feed
-
Medium max 6.5openSUSE-SU-2022:10036-1 9 CVEs
Security update for chromium
This update for chromium fixes the following issues: Chromium 103.0.5060.53 (boo#1200783) * CVE-2022-2156: Use after free in Base * CVE-2022-2157: Use after free in Interest groups * CVE-2022-2158: Type Confusion in V8 * CVE-2022-2160: Insufficient policy enf…
first Jun 29, 2022 -
Medium max 5.9openSUSE-SU-2024:13638-1 3 CVEs
libssh-config-0.10.6-1.1 on GA media
These are all security issues fixed in the libssh-config-0.10.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.0openSUSE-SU-2024:14102-1 1 CVE
podman-5.1.1-2.1 on GA media
These are all security issues fixed in the podman-5.1.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2024 -
Medium max 4.8SUSE-SU-2020:2456-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
first Sep 2, 2020 -
Medium max 4.3SUSE-SU-2023:3238-1 1 CVE
Security update for bluez
This update for bluez fixes the following issues: - CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760)
first Aug 8, 2023 -
Medium max 5.5SUSE-SU-2018:2076-1 2 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: The Intel CPU Microcode bundle was updated to the 20180703 release For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#10…
first Jul 26, 2018 -
Medium max 5.9SUSE-SU-2025:4372-1 2 CVEs
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgraded to 15.15: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 11, 2025 -
Medium max 6.1SUSE-SU-2021:0197-1 1 CVE
Security update for permissions
This update for permissions fixes the following issues: - Update to version 20181224: * pcp: remove no longer needed / conflicting entries (bsc#1171883, CVE-2020-8025)
first Jan 22, 2021 -
Medium max 6.0SUSE-SU-2023:3806-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_13_11 fixes one issue. The following security issue was fixed: - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#12…
first Sep 27, 2023 -
Medium max 6.2SUSE-SU-2023:1847-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)
first Apr 14, 2023 -
Medium max 5.3SUSE-SU-2020:3359-1 8 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage…
first Nov 17, 2020 -
Medium max 6.8SUSE-SU-2019:14237-1 1 CVE
Security update for permissions
This update for permissions fixes the following issues: - CVE-2019-3690: Fixed a privilege escalation through untrusted symlinks (bsc#1150734).
first Dec 5, 2019 -
Medium max 4.2SUSE-SU-2019:1037-1 1 CVE
Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). Non-security issues fixed: - Fix vf…
first Apr 25, 2019 -
Medium max 4.4SUSE-SU-2024:2153-1 1 CVE
Security update for vte
This update for vte fixes the following issues: - CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)
first Jun 21, 2024 -
Medium max 6.4SUSE-SU-2020:2306-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
first Aug 25, 2020 -
Medium max 5.5SUSE-SU-2017:0554-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security iss…
first Feb 23, 2017 -
Medium max 5.9SUSE-SU-2020:1823-1 4 CVEs
Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-201…
first Jul 2, 2020 -
Medium max 5.3SUSE-SU-2019:1405-1 13 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Security issues fixed: - CVE-2019-11691: Use-after-free in XMLHttpRequest - CVE-2019-11692: Use-after-free removing listeners in the event listener manager - CVE-2019-11693: Buffer overflow in WebGL b…
first Jun 3, 2019 -
Medium max 5.5SUSE-SU-2018:2304-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885). Bug fixes: - bsc#1094325: En…
first Aug 10, 2018 -
Medium max 5.3SUSE-SU-2025:02705-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)
first Aug 5, 2025 -
Medium max 5.3openSUSE-SU-2024:12572-1 3 CVEs
helm-3.10.3-2.1 on GA media
These are all security issues fixed in the helm-3.10.3-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8SUSE-SU-2025:0585-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040). - CVE-2025-26466: Fixed DoS attack against OpenSSH's client and server (bsc#1237041).
first Feb 18, 2025 -
Medium max 5.9SUSE-SU-2025:01748-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.13: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 29, 2025 -
Medium max 5.3SUSE-SU-2022:4035-1 5 CVEs
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-1882: Fixed a use-after-free flaw in fre…
first Nov 16, 2022 -
Medium max 6.8SUSE-SU-2025:0233-1 2 CVEs
Security update for nodejs18
This update for nodejs18 fixes the following issues: Update to 18.20.6: - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) - CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipa…
first Jan 24, 2025 -
Medium max 5.5SUSE-SU-2022:2557-1 7 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (…
first Jul 27, 2022 -
Medium max 5.5openSUSE-SU-2025:15114-1 3 CVEs
ruby3.4-rubygem-activesupport-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-activesupport-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 6.5SUSE-SU-2022:2553-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907) - CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
first Jul 26, 2022 -
Medium max 4.1openSUSE-SU-2024:14289-1 1 CVE
element-web-1.11.75-1.1 on GA media
These are all security issues fixed in the element-web-1.11.75-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2024 -
Medium max 6.2SUSE-SU-2024:1939-1 1 CVE
Security update for python-idna
This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed a denial of service via resource consumption through specially crafted inputs to idna.encode() (bsc#1222842)
first Jun 7, 2024 -
Medium max 6.5SUSE-SU-2025:02520-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)
first Jul 25, 2025 -
Medium max 5.3SUSE-SU-2023:4524-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 21, 2023 -
Medium max 5.9openSUSE-SU-2023:0390-1 1 CVE
Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2023-43665: Fixed Denial-of-service vulnerability in django.utils.text.Truncator (boo#1215978).
first Dec 4, 2023 -
Medium max 4.3SUSE-SU-2022:1376-1 1 CVE
Security update for mutt
This update for mutt fixes the following issues: - CVE-2022-1328: Fixed an invalid memory access when reading untrusted uuencoded data. This could result in including private memory in replies (bsc#1198518).
first Apr 25, 2022 -
Medium max 6.5SUSE-SU-2020:14444-1 16 CVEs
Security update for xen
This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1163019 - CVE-2020-8608: potential OOB access due to unsafe snprintf() usages - bsc#1169392 - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy - bsc#1168…
first Aug 4, 2020 -
Medium max 6.5openSUSE-SU-2021:1206-1 1 CVE
Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3
This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream releas…
first Aug 27, 2021 -
Medium max 4.8SUSE-SU-2023:1767-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption in Cipher.update_into (bsc#1208036).
first Apr 5, 2023 -
Medium max 4.2openSUSE-SU-2024:13863-1 2 CVEs
cosign-2.2.4-1.1 on GA media
These are all security issues fixed in the cosign-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4SUSE-SU-2024:2002-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365)
first Jun 12, 2024 -
Medium max 4.9openSUSE-SU-2020:0014-1 1 CVE
Security update for php7-imagick
This update for php7-imagick fixes the following issues: Upgrade to version 3.4.4: Added: * function Imagick::optimizeImageTransparency() * METRIC_STRUCTURAL_SIMILARITY_ERROR * METRIC_STRUCTURAL_DISSIMILARITY_ERROR * COMPRESSION_ZSTD - https://github.com/face…
first Jan 13, 2020