6,771 results · Clear filters · Feed
-
Medium max 5.7SUSE-SU-2023:1949-1 1 CVE
Security update for openstack-cinder, openstack-nova, python-oslo.utils
This update for openstack-cinder, openstack-nova, python-oslo.utils contains the following fixes: Security fixes included on this update: openstack-cinder, openstack-nova: - CVE-2022-47951: Fixed file access control through custom VMDK flat descriptor. (bsc#1…
first Apr 21, 2023 -
Medium max 5.9SUSE-SU-2020:3763-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
first Dec 11, 2020 -
Medium max 6.5SUSE-SU-2024:0597-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: - CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
first Feb 22, 2024 -
Medium max 5.5openSUSE-SU-2024:14347-1 1 CVE
apr-devel-1.7.5-1.1 on GA media
These are all security issues fixed in the apr-devel-1.7.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 19, 2024 -
Medium max 4.7SUSE-SU-2019:1351-2 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: Security issue fixed: - CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087). Non-security issue fixed: - Explicitly require libnettle 3.4.1 to prevent miss…
first Jul 1, 2019 -
Medium max 5.3openSUSE-SU-2024:10482-1 2 CVEs
python3-requests-2.11.1-1.2 on GA media
These are all security issues fixed in the python3-requests-2.11.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2023:4946-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (Terrapin Attack) (bsc#1218127).
first Dec 21, 2023 -
Medium max 5.4SUSE-SU-2020:2715-1 1 CVE
Security update for grafana
This update for grafana fixes the following issues: - CVE-2020-11110: Fixed a stored XSS in dashboard snapshot original dashboard link (bsc#1174583).
first Sep 22, 2020 -
Medium max 5.5SUSE-SU-2019:1772-1 1 CVE
Security update for python-Pillow
This update for python-Pillow fixes the following issues: Security issue fixed: - CVE-2016-9189: Fixed a integer overflows leading to memory disclosure in PyImaging_MapBuffer() (bsc#1008845).
first Jul 8, 2019 -
Medium max 6.5openSUSE-SU-2024:13816-1 5 CVEs
freerdp2-devel-2.11.5-1.1 on GA media
These are all security issues fixed in the freerdp2-devel-2.11.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2020:1007-1 4 CVEs
Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-201…
first Jul 19, 2020 -
Medium max 6.3openSUSE-SU-2024:11760-1 1 CVE
mailman3-3.3.5-2.1 on GA media
These are all security issues fixed in the mailman3-3.3.5-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2024:1872-1 1 CVE
Security update for python-tqdm
This update for python-tqdm fixes the following issues: Update to version 4.66.4: * rich: fix completion * cli: eval safety (CVE-2024-34062, bsc#1223880) * pandas: add DataFrame.progress_map * notebook: fix HTML padding * keras: fix resuming training when ver…
first May 30, 2024 -
Medium max 5.3SUSE-SU-2023:1924-1 1 CVE
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics (bsc#1208744). Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - …
first Apr 20, 2023 -
Medium max 5.3SUSE-SU-2021:3773-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance (bsc#1192146).
first Nov 23, 2021 -
Medium max 4.3SUSE-SU-2024:3444-1 7 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076) - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075) - CVE-2024-45618…
first Sep 25, 2024 -
Medium max 4.8SUSE-SU-2023:0722-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object (bsc#1208036).
first Mar 14, 2023 -
Medium max 6.3SUSE-SU-2025:03521-1 3 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow (bsc#1250627) - CVE-2024-37894: fixed denial of service in ESI processing (bsc#1227086) - CVE-2024-33427: fixed possible buffer overread leading to denial of service (bs…
first Oct 10, 2025 -
Medium max 4.0openSUSE-SU-2025:14844-1 1 CVE
bsdtar-3.7.7-2.1 on GA media
These are all security issues fixed in the bsdtar-3.7.7-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 27, 2025 -
Medium max 4.4SUSE-SU-2024:3217-1 2 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034) - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)
first Sep 12, 2024 -
Medium max 6.5openSUSE-SU-2024:12255-1 1 CVE
libvarnishapi3-7.1.1-1.1 on GA media
These are all security issues fixed in the libvarnishapi3-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2020:2090-1 5 CVEs
Security update for mariadb-connector-c
This update for mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15180 - Update…
first Dec 10, 2020 -
Medium max 6.5openSUSE-SU-2024:14418-1 1 CVE
buildah-1.37.5-1.1 on GA media
These are all security issues fixed in the buildah-1.37.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 21, 2024 -
Medium max 6.2openSUSE-SU-2024:14167-1 1 CVE
python310-zipp-3.19.2-2.1 on GA media
These are all security issues fixed in the python310-zipp-3.19.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 5.7openSUSE-SU-2025:14783-1 11 CVEs
kernel-firmware-marvell-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-marvell-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 6.5openSUSE-SU-2019:2425-1 21 CVEs
Security update for chromium, re2
This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo#1154806: * CVE-2019-13699: Use-after-free in media * CVE-2019-13700: Buffer overrun in Blink * CVE-2019-13701: URL spoof in navigation * CVE-2019-13702: Privile…
first Nov 3, 2019 -
Medium max 6.1SUSE-SU-2016:0391-1 3 CVEs
Security update for rubygem-rails-html-sanitizer
This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2015-7579: XSS vulnerability in rails-html-sanitizer (bsc#963327) - CVE-2015-7578: XSS vulnerability via attributes (bsc#963326) - CVE-2015-7580: XSS via whitelist sanitizer (bsc#9…
first Feb 9, 2016 -
Medium max 5.5SUSE-SU-2022:2998-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file (bsc#1202250). - CVE-2022-28463: Fixed a buffer overflow that could be triggered by a crafted input fi…
first Sep 2, 2022 -
Medium max 5.1SUSE-RU-2025:02203-1 1 CVE
Recommended update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - Fix idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243859) - Update to version 1.4.2 - Update aws-nitro-enclaves-sdk-bootstrap to version f718dea6 - Update…
first Jul 2, 2025 -
Medium max 5.0openSUSE-SU-2024:10952-1 7 CVEs
libjpeg-turbo-2.1.1-65.2 on GA media
These are all security issues fixed in the libjpeg-turbo-2.1.1-65.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2021:0530-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).
first Feb 19, 2021 -
Medium max 6.1SUSE-SU-2025:01658-1 1 CVE
Security update for open-vm-tools
This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling (bsc#1243106) Other fixes: - Fixed GCC 15 compile time error (bsc#1241938) - Fixed building with containerd 1.7.25+ (bsc…
first May 22, 2025 -
Medium max 5.5
Security update for the Linux Kernel (Live Patch 62 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_234 fixes one issue. The following security issue was fixed: - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
first Mar 17, 2025 -
Medium max 6.5SUSE-SU-2019:0057-2 9 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…
first Apr 27, 2019 -
Medium max 5.3SUSE-SU-2016:0458-1 2 CVEs
Security update for rubygem-activerecord-4_2
This update for rubygem-activerecord-4_2 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention (bsc#963334) - CVE-2015-7577: Nested attributes rejection proc bypass (bsc#963330)
first Feb 15, 2016 -
Medium max 6.8openSUSE-SU-2021:0845-1 1 CVE
Security update for inn
This update for inn fixes the following issues: - CVE-2021-31998: change user to news before calling innupgrade, which could have allow local privilege escalation. [boo#1182321] This update was imported from the openSUSE:Leap:15.2:Update update project.
first Jun 6, 2021 -
Medium max 6.3openSUSE-SU-2025:14761-1 1 CVE
python314-3.14.0~a4-1.1 on GA media
These are all security issues fixed in the python314-3.14.0~a4-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 9, 2025 -
Medium max 5.1openSUSE-SU-2019:2408-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733) This update was imported from the SUSE:SLE-15:Update update project.
first Oct 29, 2019 -
Medium max 6.5openSUSE-SU-2024:12956-1 1 CVE
libmariadbd-devel-10.11.3-1.1 on GA media
These are all security issues fixed in the libmariadbd-devel-10.11.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:13428-1 1 CVE
libopenssl-1_0_0-devel-1.0.2u-23.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-23.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024