6,771 results · Clear filters · Feed
-
Medium max 5.1SUSE-SU-2022:2649-1 2 CVEs
Security update for pcre2
This update for pcre2 fixes the following issues: - CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384). - CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235).
first Aug 3, 2022 -
Medium max 6.5SUSE-SU-2020:0860-1 6 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2018-17581: Fixed an excessive stack consumption in CiffDirectory:readDirectory() which might have led to denial of service (bsc#1110282). - CVE-2019-13110: Fixed an integer overflow and an out of bounds…
first Apr 3, 2020 -
Medium max 6.1SUSE-SU-2023:3131-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (b…
first Aug 2, 2023 -
Medium max 5.4SUSE-SU-2024:1419-1 1 CVE
Security Beta update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-alertmanager: - Use %patch -P N instead of deprecated %patchN golang-github-prometheus-node_exporter: - Add `device_error` label for filesystem metrics. - Update rtnetlink library to fix errors …
first Apr 24, 2024 -
Medium max 5.9SUSE-RU-2022:2355-1 1 CVE
Recommended update for python-cryptography
This update for python-cryptography fixes the following issues: python-cryptography was updated to 3.3.2. update to 3.3.0: * BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit to 1024-bit (8 byte to 128 byte) initialization vectors. This change is …
first Jul 11, 2022 -
Medium max 5.5SUSE-SU-2022:0727-2 2 CVEs
Security update for libeconf, shadow and util-linux
This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#S…
first Apr 19, 2022 -
Medium max 4.3SUSE-SU-2025:02460-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2025-6069: Fixed worst case quadratic complexity that can lead to amplified DoS. (bsc#1244705)
first Jul 22, 2025 -
Medium max 4.3SUSE-SU-2024:3596-1 1 CVE
Security update for apache-commons-io
This update for apache-commons-io fixes the following issues: Upgrade to 2.17.0: - CVE-2024-47554: Fixed untrusted input to XmlStreamReader can lead to uncontrolled resource consumption (bsc#1231298) Other changes: - https://commons.apache.org/proper/commons-…
first Oct 11, 2024 -
Medium max 4.3SUSE-SU-2025:02523-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2025-6069: Fixed worst case quadratic complexity that can lead to amplified DoS. (bsc#1244705)
first Jul 25, 2025 -
Medium max 6.5SUSE-SU-2022:2172-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1012: Fixed a small table perturb size in the TCP source port generation algorithm which could leads to information leak. (bsc#1199482). - CVE-2022-20141: …
first Jun 24, 2022 -
Medium max 4.0SUSE-SU-2021:0956-1 1 CVE
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Update zypper to version 1.14.43: - doc: give more details about creating versioned package locks (bsc#1181622) - man: Document synonymously used patch categories (bsc#1179847) - Fix source-download …
first Mar 25, 2021 -
Medium max 5.3SUSE-SU-2019:1935-1 1 CVE
Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP3)
This update for the Linux Kernel 4.4.180-94_97 fixes one issue. The following security issue was fixed: This update contains a regression fix for CVE-2019-11478 (bsc#1140747).
first Jul 23, 2019 -
Medium max 4.3SUSE-SU-2018:2320-2 1 CVE
Security update for samba
This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow (bsc#1103411) The following other bugs were fixed: - Fix libnss_wins.so.2 link l…
first Oct 18, 2018 -
Medium max 5.9SUSE-SU-2025:01749-1 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.13: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first May 29, 2025 -
Medium max 5.5SUSE-SU-2024:3429-1 1 CVE
Security update for apr
This update for apr fixes the following issues: - CVE-2023-49582: Fixed an unexpected lax shared memory permissions. (bsc#1229783)
first Sep 24, 2024 -
Medium max 6.5
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254)…
first Feb 11, 2022 -
Medium max 6.7SUSE-SU-2023:4412-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: - Update to SUSE Manager 4.3.9 * Debian 12 support as client * New Update Notification (jsc#SUMA-111) * Monitoring: Grafana upgraded to 9.5.8 * Update 'saltkey' endpoints to accept GET instead of POST * CVEs fixed: CVE-…
first Nov 9, 2023 -
Medium max 6.0openSUSE-SU-2024:13058-1 2 CVEs
qemu-8.0.3-1.1 on GA media
These are all security issues fixed in the qemu-8.0.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1SUSE-RU-2025:4131-1 1 CVE
Recommended update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor
This update for suse-migration-sle16-activation, SLES16-Migration, SLES16-SAP_Migration, suse-migration-services, suse-migration-rpm, wicked2nm, image-janitor fixes the following issues: Changes for suse-migration-sle16-activation: - Simplify interface naming…
first Nov 18, 2025 -
Medium max 6.2SUSE-SU-2023:0426-1 2 CVEs
Security update for git
This update for git fixes the following issues: - CVE-2023-22490: Fixed incorrectly usable local clone optimization even when using a non-local transport (bsc#1208027). - CVE-2023-23946: Fixed issue where a path outside the working tree can be overwritten as …
first Feb 15, 2023 -
Medium max 5.5SUSE-SU-2022:1668-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018). - CVE-2022-28356: Fixed a refc…
first May 16, 2022 -
Medium max 5.5SUSE-SU-2023:0872-1 1 CVE
Security update for libplist
This update for libplist fixes the following issues: - CVE-2015-10082: Fixed XXEsecurity vulnerability with XML plists (bsc#1208546).
first Mar 22, 2023 -
Medium max 4.7SUSE-SU-2023:1579-1 1 CVE
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100_197_123 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
first Mar 27, 2023 -
Medium max 6.9SUSE-SU-2024:4401-1 2 CVEs
Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)
first Dec 20, 2024 -
Medium max 5.9SUSE-SU-2025:0310-1 1 CVE
Security update for python-pydantic
This update for python-pydantic fixes the following issues: - CVE-2024-3772: Fixed Regular expression DoS (bsc#1222806)
first Jan 31, 2025 -
Medium max 6.1SUSE-SU-2018:3118-1 1 CVE
Security update for axis
This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting (XSS) attack in the default servlet/services (bsc#1103658).
first Oct 12, 2018 -
Medium max 5.5
Security update for samba
This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …
first Sep 25, 2020 -
Medium max 6.2SUSE-SU-2024:1569-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38472: Fix reachable assertion in avahi_rdata_parse() (bsc#1216853).
first May 9, 2024 -
Medium max 5.3SUSE-SU-2023:4489-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 20, 2023 -
Medium max 6.5SUSE-SU-2019:2987-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode on…
first Nov 15, 2019 -
Medium max 4.3SUSE-SU-2024:2168-1 1 CVE
Security update for gnome-settings-daemon
This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423).
first Jun 21, 2024 -
Medium max 5.9openSUSE-SU-2024:13539-1 1 CVE
proftpd-1.3.8b-1.1 on GA media
These are all security issues fixed in the proftpd-1.3.8b-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.6SUSE-SU-2025:1346-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749) Other fixes: - Update to containerd v1.7.27.
first Apr 17, 2025 -
Medium max 6.1SUSE-SU-2023:2244-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382) - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:--…
first May 18, 2023 -
Medium max 5.3openSUSE-SU-2019:2442-1 3 CVEs
Security update for samba
This update for provides the following fixes: Following security issues were fixed: - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code could have returned filename…
first Nov 5, 2019 -
Medium max 5.5SUSE-SU-2022:3892-1 3 CVEs
Security update for exiv2
This update for exiv2 fixes the following issues: - CVE-2019-13111: Fixed nteger overflow in WebPImage:decodeChunks (bsc#1142679). - CVE-2021-29463: Fixed out-of-bounds read (bsc#1185913). - CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter …
first Nov 7, 2022 -
Medium max 6.5SUSE-SU-2022:1040-2 1 CVE
Security update for protobuf
This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).
first Apr 19, 2022 -
Medium max 5.5openSUSE-SU-2024:12331-1 1 CVE
cosign-1.12.0-1.1 on GA media
These are all security issues fixed in the cosign-1.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2024:2435-1 1 CVE
Security update for python3-setuptools
This update for python3-setuptools fixes the following issues: - CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).
first Jul 12, 2024 -
Medium max 6.5SUSE-SU-2019:3297-1 15 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307). - CVE-2019-19582: Fixed a potential infinite loop when x86 accesses to bitmaps with a compile time known size of 64 (bsc#115…
first Dec 13, 2019