6,771 results · Clear filters · Feed
-
Medium max 5.5openSUSE-SU-2024:12717-1 1 CVE
binutils-2.40-1.1 on GA media
These are all security issues fixed in the binutils-2.40-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5openSUSE-SU-2024:12176-1 3 CVEs
libtiff-devel-32bit-4.4.0-2.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.4.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:1271-3 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746) - CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747) Other fixes: - jitterentropy: Releas…
first Apr 12, 2024 -
Medium max 6.5SUSE-SU-2019:0586-1 5 CVEs
Security update for ceph
This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE…
first Mar 12, 2019 -
Medium max 6.6openSUSE-SU-2025:15111-1 2 CVEs
ruby3.4-rubygem-actiontext-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-actiontext-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 5.5openSUSE-SU-2023:0043-1 1 CVE
Security update for pkgconf
This update for pkgconf fixes the following issues: - CVE-2023-24056: FIxed variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c (boo#1207394).
first Feb 9, 2023 -
Medium max 6.6SUSE-SU-2025:1009-1 1 CVE
Security update for grafana
This update for grafana fixes the following issues: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerability (bsc#1237671)
first Mar 25, 2025 -
Medium max 5.3SUSE-SU-2023:0681-1 1 CVE
Security update for python-py
This update for python-py fixes the following issues: Bugfixes: - Fixed bugs introduced with the fix for CVE-2022-42969 (bsc#1204364, bsc#1208181).
first Mar 8, 2023 -
Medium max 5.5SUSE-SU-2022:1728-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. (bsc#1199423) Updated to Intel CPU Microcode 20220419 release. (bsc#1198717) - CVE-2022-21151: Processor optimization removal or modification of security-…
first May 18, 2022 -
Medium max 5.5SUSE-SU-2020:3713-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain p…
first Dec 8, 2020 -
Medium max 5.9SUSE-SU-2021:0060-1 3 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - New upstream LTS version 10.23.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…
first Jan 11, 2021 -
Medium max 4.1openSUSE-SU-2024:14288-1 1 CVE
element-desktop-1.11.75-1.1 on GA media
These are all security issues fixed in the element-desktop-1.11.75-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 27, 2024 -
Medium max 5.5openSUSE-SU-2024:13081-1 2 CVEs
ghostscript-9.56.1-5.1 on GA media
These are all security issues fixed in the ghostscript-9.56.1-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.2SUSE-SU-2025:01758-1 1 CVE
Security update for slurm_23_02
This update for slurm_23_02 fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).
first May 29, 2025 -
Medium max 5.3SUSE-SU-2022:0873-1 13 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u322 (icedtea-3.22.0) Including the following security fixes: - CVE-2022-21248, bsc#1194926: Enhance cross VM serialization - CVE-2022-21283, bsc#1194937: Better String match…
first Mar 16, 2022 -
Medium max 5.9SUSE-SU-2025:01782-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.9: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first May 30, 2025 -
Medium max 5.4SUSE-SU-2020:2896-1 2 CVEs
Security update for php74
This update for php74 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-e…
first Oct 13, 2020 -
Medium max 4.2SUSE-SU-2023:1761-1 1 CVE
Security update for aws-efs-utils.11048
This update for aws-efs-utils.11048 fixes the following issues: - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file (bsc#1206737).
first Apr 4, 2023 -
Medium max 4.8SUSE-SU-2023:0837-1 1 CVE
Security update for python-cffi
This update for python-cffi fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to immutable python object being changed (bsc#1208036).
first Mar 21, 2023 -
Medium max 5.3SUSE-SU-2021:0652-1 2 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 25 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or …
first Feb 26, 2021 -
Medium max 6.3openSUSE-SU-2024:14384-1 1 CVE
ffmpeg-7-7.1-1.1 on GA media
These are all security issues fixed in the ffmpeg-7-7.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 4, 2024 -
Medium max 5.9openSUSE-SU-2019:0155-1 2 CVEs
Security update for python3
This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) - CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644) Th…
first Mar 23, 2019 -
Medium max 5.9SUSE-SU-2021:0794-1 2 CVEs
Security update for python
This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
first Mar 16, 2021 -
Medium max 5.3SUSE-SU-2020:0968-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699).
first Apr 9, 2020 -
Medium max 5.7openSUSE-SU-2021:4002-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).
first Dec 13, 2021 -
Medium max 5.9openSUSE-SU-2024:11038-1 65 CVEs
libmariadbd-devel-10.6.4-2.1 on GA media
These are all security issues fixed in the libmariadbd-devel-10.6.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:13577-1 1 CVE
libpng16-16-1.6.40-2.1 on GA media
These are all security issues fixed in the libpng16-16-1.6.40-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2024:0518-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-6129: Fixed vector register clobbering on PowerPC. (bsc#1218690) - CVE-2023-6237: Fixed excessive time spent checking invalid RSA public keys. (bsc#1218810) - CVE-2024-0727: Denial of service wh…
first Feb 15, 2024 -
Medium max 5.9openSUSE-SU-2024:13416-1 1 CVE
postfix-3.8.3-1.1 on GA media
These are all security issues fixed in the postfix-3.8.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3SUSE-SU-2025:0553-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2025-0938: functions `urllib.parse.urlsplit` and `urlparse` accept domain names including square brackets (bsc#1236705).
first Feb 14, 2025 -
Medium max 5.3SUSE-SU-2024:1416-1 1 CVE
Security update for cockpit-wicked
This update for cockpit-wicked fixes the following issues: - CVE-2023-26364: Fixed denial of service due to improper input validation during CSS parsing (bsc#1217325) Other fixes: - Upgrade to version 4.5
first Apr 24, 2024 -
Medium max 4.8SUSE-SU-2022:4292-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39318: Fixed division by zero in urbdrc (bsc#1205563). - CVE-2022-39319: Fixed missing input buffer length check in urbdrc (bsc#1205564).
first Nov 29, 2022 -
Medium max 6.5openSUSE-SU-2025:14803-1 4 CVEs
ucode-intel-20250211-1.1 on GA media
These are all security issues fixed in the ucode-intel-20250211-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.5openSUSE-SU-2022:0727-1 2 CVEs
Security update for libeconf, shadow and util-linux
This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#S…
first Mar 4, 2022 -
Medium max 6.1SUSE-SU-2023:3139-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (b…
first Aug 2, 2023 -
Medium max 5.9SUSE-SU-2023:2227-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-28320: Fixed siglongjmp race condition (bsc#1211231). - CVE-2023-28321: Fixed IDN wildcard matching (bsc#1211232). - CVE-2023-28322: Fixed POST-after-PUT confusion (bsc#1211233).
first May 17, 2023 -
Medium max 6.5openSUSE-SU-2019:2506-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core…
first Nov 14, 2019 -
Medium max 5.3SUSE-SU-2024:4386-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420) Other fixes: - no longer supply bogus services to callbacks (bsc#1226586).
first Dec 19, 2024 -
Medium max 5.3SUSE-SU-2024:4306-1 5 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU (bsc#1232064): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702,JDK-8328286) - CVE-2024-21210:…
first Dec 12, 2024 -
Medium max 6.2SUSE-SU-2024:2400-1 1 CVE
Security update for python-zipp
This update for python-zipp fixes the following issues: - CVE-2024-5569: Fixed DoS vulnerability when processing a specially crafted zip file (bsc#1227547).
first Jul 11, 2024