6,771 results · Clear filters · Feed
-
Medium max 6.2openSUSE-SU-2025:14817-1 1 CVE
kubernetes1.30-apiserver-1.30.10-1.1 on GA media
These are all security issues fixed in the kubernetes1.30-apiserver-1.30.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 18, 2025 -
Medium max 5.3openSUSE-SU-2022:0098-1 2 CVEs
Security update for nextcloud
This update for nextcloud fixes the following issues: nextcloud was updated to 21.0.9: - CVE-2021-41239 (CWE-200): user enumeration setting not obeyed in User Status API (boo#1196905) - CVE-2021-41241 (CWE-863): groupfolders advanced permissions is not obeyed…
first Mar 31, 2022 -
Medium max 5.5openSUSE-SU-2024:13145-1 2 CVEs
kernel-devel-6.4.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.4.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3openSUSE-SU-2022:0334-1 5 CVEs
Security update for containerd, docker
This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015). - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434). - CVE-2021-41092: Fixed exposed use…
first Feb 4, 2022 -
Medium max 6.4openSUSE-SU-2024:13290-1 1 CVE
php-composer2-2.6.4-1.1 on GA media
These are all security issues fixed in the php-composer2-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2024:2186-1 1 CVE
Security update for gnome-settings-daemon
This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423).
first Jun 24, 2024 -
Medium max 5.5SUSE-SU-2022:1417-1 2 CVEs
Security update for ant
This update for ant fixes the following issues: - CVE-2021-36373: Fixed an excessive memory allocation when reading a specially crafted TAR archive (bsc#1188468). - CVE-2021-36374: Fixed an excessive memory allocation when reading a specially crafted ZIP arch…
first Apr 27, 2022 -
Medium max 6.5SUSE-SU-2025:02366-2 1 CVE
Security update for docker
This update for docker fixes the following issues: Update to Docker 28.2.2-ce (bsc#1243833, bsc#1242114): - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241830). O…
first Jul 30, 2025 -
Medium max 6.7SUSE-SU-2020:2196-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).
first Aug 11, 2020 -
Medium max 5.9SUSE-SU-2023:0071-1 1 CVE
Security update for openstack-barbican
This update for openstack-barbican contains the following fix: Security fix included on this update: openstack-barbican: - CVE-2022-3100: Fixed an access policy bypass via query string injection (bsc#1203873). Update for openstack-barbican: - Add patch for CV…
first Jan 11, 2023 -
Medium max 5.8SUSE-SU-2019:0553-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#11…
first Apr 4, 2019 -
Medium max 6.5openSUSE-SU-2019:2341-1 1 CVE
Security update for dhcp
This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called …
first Oct 19, 2019 -
Medium max 6.5SUSE-RU-2024:2684-1 1 CVE
Recommended update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Fixed startup crash of Firefox when using FIPS-mode (bsc#1223724). - Added 'Provides: nss' so other RPMs that require 'nss' can be installed (jira PED-6358). - FIPS: added safe memsets (bsc#1222811) - …
first Jul 31, 2024 -
Medium max 5.9SUSE-SU-2025:02773-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Aug 13, 2025 -
Medium max 6.5SUSE-SU-2022:4295-1 3 CVEs
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed a potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-…
first Nov 29, 2022 -
Medium max 5.5SUSE-SU-2017:0585-1 3 CVEs
Security update for openssl
This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334) - …
first Mar 1, 2017 -
Medium max 4.3SUSE-SU-2023:4965-1 1 CVE
Security update for ppp
This update for ppp fixes the following issues: - CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).
first Dec 22, 2023 -
Medium max 6.5openSUSE-SU-2024:13061-1 1 CVE
libvirt-9.5.0-2.1 on GA media
These are all security issues fixed in the libvirt-9.5.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:3856-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 2, 2022 -
Medium max 6.7SUSE-SU-2020:2576-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14331: Fixed a missing ch…
first Sep 9, 2020 -
Medium max 6.3SUSE-SU-2020:1944-1 1 CVE
Security update for ant
This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696).
first Jul 17, 2020 -
Medium max 5.3SUSE-SU-2023:2979-1 1 CVE
Security update for mysql-connector-java
This update for mysql-connector-java fixes the following issues: - CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection() method when used with untrusted inputs (bsc#1211247).
first Jul 26, 2023 -
Medium max 5.5SUSE-SU-2025:0937-1 1 CVE
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_30 fixes one issue. The following security issue was fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452).
first Mar 19, 2025 -
Medium max 5.1SUSE-SU-2025:03298-1 2 CVEs
Security update for rustup
This update for rustup fixes the following issues: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode (bsc#1243862) - CVE-2025-3416: Fixed use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate (bsc#1242617)
first Sep 23, 2025 -
Medium max 5.5SUSE-SU-2020:3917-1 1 CVE
Security update for groovy
This update for groovy fixes the following issues: - groovy was updated to 2.4.21 - CVE-2020-17521: Fixed an information disclosure vulnerability (bsc#1179729).
first Dec 22, 2020 -
Medium max 5.9openSUSE-SU-2024:13642-1 1 CVE
python310-aiohttp-3.9.3-1.1 on GA media
These are all security issues fixed in the python310-aiohttp-3.9.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2SUSE-SU-2024:1439-2 1 CVE
Security update for python-idna
This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842).
first Apr 25, 2024 -
Medium max 5.5openSUSE-SU-2024:11840-1 4 CVEs
ucode-intel-20220207-1.1 on GA media
These are all security issues fixed in the ucode-intel-20220207-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2018:3768-1 1 CVE
Security update for openssh-openssl1
This update for openssh-openssl1 fixes the following issues: Security issues fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS2 is in use…
first Nov 14, 2018 -
Medium max 6.5openSUSE-SU-2024:10303-1 32 CVEs
curl-7.51.0-1.1 on GA media
These are all security issues fixed in the curl-7.51.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.7SUSE-SU-2023:4390-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoi…
first Nov 9, 2023 -
Medium max 4.1SUSE-SU-2025:1341-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - Update to docker-buildx v0.22.0 - CVE-2025-0495: Fixed an integer overflow in User ID handling in containerd. (bsc#1239765)
first Apr 17, 2025 -
Medium max 5.6SUSE-SU-2018:0383-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.114 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may a…
first Feb 7, 2018 -
Medium max 5.5SUSE-SU-2023:1690-1 1 CVE
Security update for testng
This update for testng fixes the following issues: - CVE-2022-4065: Fixed a path traversal in zip files (bsc#1205628).
first Mar 29, 2023 -
Medium max 6.5SUSE-SU-2022:2350-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524). - Update to version 2.14.0
first Jul 11, 2022 -
Medium max 6.8SUSE-SU-2019:0132-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wou…
first Jan 21, 2019 -
Medium max 6.1SUSE-SU-2020:2606-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus to version 2.18.0 fixes the following issues: - Fixed some building issues (bsc#1175478) - prometheus components systemd units should depend on network target (bsc#1143913). Update to 2.18.0 + Features * Tra…
first Sep 11, 2020 -
Medium max 5.5SUSE-SU-2022:1256-1 19 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391). - CVE-2022-1016: Fixed a vulnerability in the …
first Apr 19, 2022 -
Medium max 5.5SUSE-SU-2018:1377-2 1 CVE
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Varia…
first Oct 18, 2018 -
Medium max 6.5SUSE-SU-2022:0131-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573) You can reenable via systemctl setting /proc/sys/kernel/unprivil…
first Jan 19, 2022