6,771 results · Clear filters · Feed
-
Medium max 5.9openSUSE-SU-2024:13472-1 1 CVE
python310-cryptography-41.0.7-1.1 on GA media
These are all security issues fixed in the python310-cryptography-41.0.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2025:0992-1 1 CVE
Security update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce (bsc#1237335): - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089).
first Mar 24, 2025 -
Medium max 6.2openSUSE-SU-2024:14315-1 1 CVE
libvirt-10.7.0-1.1 on GA media
These are all security issues fixed in the libvirt-10.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 5, 2024 -
Medium max 6.5SUSE-SU-2020:2832-1 1 CVE
Security update for SUSE Manager Server 4.1
This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Pin Golang version to 1.14 golang-github-prometheus-node_exporter: - Update to 1.0.1 * Changes to build specification + Modify spec: update golang version to 1.14 + Remov…
first Oct 2, 2020 -
Medium max 6.5SUSE-SU-2020:1142-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus i…
first Apr 29, 2020 -
Medium max 5.3SUSE-SU-2025:03333-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).
first Sep 24, 2025 -
Medium max 5.5SUSE-SU-2023:0484-1 1 CVE
Security update for pesign
This update for pesign fixes the following issues: - CVE-2022-3560: Fixed pesign-authorize ExecStartPost script allowing privilege escalation from pesign to root (bsc#1202933).
first Feb 23, 2023 -
Medium max 5.3openSUSE-SU-2024:11708-1 1 CVE
cargo-audit-advisory-db-20220105-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20220105-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2023:3145-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (b…
first Aug 2, 2023 -
Medium max 5.4openSUSE-SU-2023:0090-1 5 CVEs
Security update for nextcloud-desktop
This update for nextcloud-desktop fixes the following issues: nextcloud-desktop was updated to 3.8.0: - Resize WebView widget once the loginpage rendered - Feature/secure file drop - Check German translation for wrong wording - L10n: Correct word - Fix displa…
first Apr 12, 2023 -
Medium max 5.9SUSE-SU-2024:3966-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).
first Nov 11, 2024 -
Medium max 5.3openSUSE-SU-2018:4175-1 2 CVEs
Security update for pdns
This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157). - CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169). This upd…
first Dec 18, 2018 -
Medium max 6.0SUSE-SU-2024:3229-1 2 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-3447: Fix heap buffer overflow in sdhci_write_dataport(). (bsc#1218485) - CVE-2023-6693: Fix stack buffer overflow in virtio_net_flush_tx(). (bsc#1218484)
first Sep 12, 2024 -
Medium max 5.5SUSE-SU-2024:2028-2 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233)
first Jun 13, 2024 -
Medium max 6.4openSUSE-SU-2024:12470-1 3 CVEs
kernel-devel-6.0.6-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.4SUSE-SU-2019:2274-1 1 CVE
Security update for ansible
This update for ansible fixes the following issues: Security issue fixed: - CVE-2019-10206: Fixed ansible cli tools that prompt passwords by expanding them from templates as they could contain special characters (bsc#1142690).
first Sep 3, 2019 -
Medium max 6.5SUSE-SU-2019:2961-1 8 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core…
first Nov 12, 2019 -
Medium max 5.3openSUSE-SU-2024:12719-1 2 CVEs
java-13-openjdk-13.0.14.0-1.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8openSUSE-SU-2024:14150-1 1 CVE
python310-oic-1.5.0-1.8 on GA media
These are all security issues fixed in the python310-oic-1.5.0-1.8 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 5.6SUSE-SU-2022:2549-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…
first Jul 26, 2022 -
Medium max 6.2SUSE-SU-2023:4910-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419). - CVE-2023-38470: Fixed that each label is at least one byte long (bsc#1215947).
first Dec 19, 2023 -
Medium max 6.7openSUSE-SU-2024:10709-1 2 CVEs
cyrus-sasl-2.1.27-5.7 on GA media
These are all security issues fixed in the cyrus-sasl-2.1.27-5.7 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2023:2243-2 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382). - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:…
first Jul 17, 2023 -
Medium max 5.1SUSE-SU-2025:0845-1 1 CVE
Security update for iniparser
This update for iniparser fixes the following issues: - CVE-2025-0633: string copy into buffer without previous size validation leads to heap buffer overflow in iniparser_dumpsection_ini() of iniparser (bsc#1237377).
first Mar 12, 2025 -
Medium max 5.4SUSE-SU-2019:1476-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194). Non-security issues fixed: - Allow defaults sudoRole without sudoUser att…
first Aug 22, 2019 -
Medium max 5.3openSUSE-SU-2020:0847-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999). This update was imported from the SUSE:SLE-15:Update update project.
first Jun 22, 2020 -
Medium max 5.5SUSE-SU-2023:3357-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624).
first Aug 18, 2023 -
Medium max 5.7SUSE-SU-2022:1094-1 1 CVE
Security update for python36
This security update for python36 fixes the following issues: - CVE-2021-3572: Update bundled pip wheel - pip incorrectly handled unicode separators in git references (bsc#1186819).
first Apr 4, 2022 -
Medium max 5.9SUSE-SU-2017:1043-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: These security issues were fixed: - CVE-2016-9586: libcurl printf floating point buffer overflow (bsc#1015332) - CVE-2017-7407: The ourWriteOut function in tool_writeout.c in curl might have allowed physically …
first Apr 18, 2017 -
Medium max 5.7openSUSE-SU-2025:14781-1 11 CVEs
kernel-firmware-iwlwifi-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-iwlwifi-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.3SUSE-SU-2019:2021-1 8 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol h…
first Jul 30, 2019 -
Medium max 5.5openSUSE-SU-2024:12381-1 8 CVEs
exiv2-0.27.5-3.1 on GA media
These are all security issues fixed in the exiv2-0.27.5-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.2SUSE-SU-2020:3938-1 1 CVE
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969). Non-security issues fixed: - Update to containerd v…
first Dec 28, 2020 -
Medium max 5.7openSUSE-SU-2025:14800-1 11 CVEs
kernel-firmware-ueagle-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-ueagle-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.9SUSE-SU-2018:2825-2 4 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: This update for gnutls fixes the following issues: Security issues fixed: - Improved mitigations against Lucky 13 class of attacks - 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to pl…
first Oct 18, 2018 -
Medium max 5.9SUSE-SU-2021:0947-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
first Mar 24, 2021 -
Medium max 5.3SUSE-SU-2022:0730-1 15 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926) - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930) -…
first Mar 4, 2022 -
Medium max 5.0SUSE-SU-2025:0959-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-26699: Fixed potential denial-of-service in django.utils.text.wrap() (bsc#1239052).
first Mar 19, 2025 -
Medium max 6.5openSUSE-SU-2025:14924-1 1 CVE
kubernetes1.29-apiserver-1.29.15-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2025 -
Medium max 4.3SUSE-SU-2022:1478-1 1 CVE
Security update for mutt
This update for mutt fixes the following issues: - CVE-2022-1328: Fixed an invalid memory access when reading untrusted uuencoded data. This could result in including private memory in replies (bsc#1198518).
first Apr 29, 2022