6,771 results · Clear filters · Feed
-
Medium max 6.5
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162) - CVE-2021-33098: Fixed a potent…
first Jan 13, 2022 -
Medium max 5.3SUSE-SU-2023:4523-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 21, 2023 -
Medium max 6.7SUSE-SU-2023:3073-1 2 CVEs
Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that a…
first Jul 31, 2023 -
Medium max 5.3SUSE-SU-2023:3863-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache director…
first Sep 28, 2023 -
Medium max 6.4SUSE-SU-2023:0613-1 1 CVE
Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access (bsc#1207325).
first Mar 3, 2023 -
Medium max 4.8SUSE-SU-2019:1461-1 16 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of ren…
first Jun 11, 2019 -
Medium max 5.9SUSE-SU-2018:3776-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS…
first Nov 16, 2018 -
Medium max 6.5SUSE-SU-2024:0915-1 4 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686). - CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590). - CVE-2023-40745: Fixed integer overflow in tiffcp…
first Mar 18, 2024 -
Medium max 6.5openSUSE-SU-2025:14911-1 1 CVE
tomcat-9.0.102-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.102-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 19, 2025 -
Medium max 5.9SUSE-SU-2019:1823-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP 2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces f…
first Jul 12, 2019 -
Medium max 4.7SUSE-SU-2025:1517-1 1 CVE
Security update for apparmor
This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
first May 8, 2025 -
Medium max 6.5SUSE-SU-2018:3080-1 3 CVEs
Security update for libxml2
This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xz_decomp function allowed remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bs…
first Oct 9, 2018 -
Medium max 4.9SUSE-SU-2021:2634-1 4 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…
first Aug 6, 2021 -
Medium max 6.5SUSE-SU-2023:2620-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM (bsc#1210714). - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers (bsc#1211430).
first Jun 23, 2023 -
Medium max 4.8openSUSE-SU-2020:0676-1 1 CVE
Security update for autoyast2
This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands (bsc#1140711). Non-security issue fixed: - Fix desktop files updating some icons …
first May 22, 2020 -
Medium max 5.4SUSE-SU-2024:3545-1 2 CVEs
Security update for buildah
This update for buildah fixes the following issues: - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208). - CVE-2024-9341: Fixed FIPS Crypto-Policy Directory Mounting Issue in containe…
first Oct 8, 2024 -
Medium max 5.6SUSE-SU-2018:1699-1 4 CVEs
Security update for xen
This update for xen fixes several issues. This feature was added: - Added support for qemu monitor command These security issues were fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka…
first Jun 15, 2018 -
Medium max 6.3openSUSE-SU-2024:14343-1 1 CVE
ffmpeg-4-4.4.4-14.1 on GA media
These are all security issues fixed in the ffmpeg-4-4.4.4-14.1 package on the GA media of openSUSE Tumbleweed.
first Sep 18, 2024 -
Medium max 5.3openSUSE-SU-2025:14747-1 4 CVEs
java-11-openj9-11.0.26.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.26.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 8, 2025 -
Medium max 5.9SUSE-SU-2023:2633-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case…
first Jun 26, 2023 -
Medium max 5.4SUSE-SU-2019:1480-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194) Non-security issues fixed: - Missing GPOs directory could have led to logi…
first Jun 12, 2019 -
Medium max 4.2openSUSE-SU-2019:1180-1 1 CVE
Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). ldb was updated to version 1.2.4 (b…
first Apr 10, 2019 -
Medium max 6.2SUSE-SU-2023:4008-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)
first Oct 9, 2023 -
Medium max 6.1SUSE-SU-2023:1739-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2023-22298: Fixed an open redirect vulnerability (bsc#1207238).
first Apr 3, 2023 -
Medium max 6.1SUSE-SU-2020:2152-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth may have allowed an unauthenticat…
first Aug 6, 2020 -
Medium max 5.9SUSE-SU-2025:3698-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5 as very old protocol supported quite a number of ciphers tha…
first Oct 21, 2025 -
Medium max 5.5openSUSE-SU-2024:12779-1 1 CVE
kernel-devel-6.2.4-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2025:02233-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-4373: integer overflow in the `g_string_insert_unichar()` function can lead to buffer underwrite and memory corruption (bsc#1242844).
first Jul 7, 2025 -
Medium max 5.3openSUSE-SU-2024:13351-1 2 CVEs
java-17-openjdk-17.0.9.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2024:2618-1 1 CVE
Security update for gnome-shell
This update for gnome-shell fixes the following issues: - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)
first Jul 30, 2024 -
Medium max 4.3SUSE-SU-2020:2894-1 1 CVE
Security update for php5
This update for php5 fixes the following issues: - CVE-2020-7070: Fixed an issue where percent-encoded cookies could have been used to overwrite existing prefixed cookie names (bsc#1177352).
first Oct 12, 2020 -
Medium max 6.5SUSE-SU-2018:4064-1 8 CVEs
Security update for java-1_8_0-ibm
java-1_8_0-ibm was updated to Java 8.0 Service Refresh 5 Fix Pack 25 (bsc#1116574) * Class Libraries: - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10930 CVE-2018-3183 - IJ10933 CV…
first Dec 10, 2018 -
Medium max 5.5SUSE-SU-2023:4429-1 1 CVE
Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed
This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security issues fixed: - CVE-2023-31022: Fixed NULL ptr deref in kernel module layer Changes in kernel-firmware-nvidia-gspx-G06: - update firmware to ve…
first Nov 13, 2023 -
Medium max 6.5openSUSE-SU-2022:0058-1 2 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. (bsc#1194215) - CVE-2021-44538: Matrix chat library libolm bundled with Thunderb…
first Jan 12, 2022 -
Medium max 6.4openSUSE-SU-2024:14104-1 1 CVE
sops-3.9.0-1.1 on GA media
These are all security issues fixed in the sops-3.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 4, 2024 -
Medium max 4.0SUSE-SU-2025:02248-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-48432: Add an additional hardening for CVE-2025-48432 (bsc#1244095)
first Jul 8, 2025 -
Medium max 6.1openSUSE-SU-2024:14557-1 1 CVE
python310-django-ckeditor-6.7.2-1.1 on GA media
These are all security issues fixed in the python310-django-ckeditor-6.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 6, 2024 -
Medium max 5.3SUSE-SU-2024:3523-1 1 CVE
Security update for cups-filters
This update for cups-filters fixes the following issues: - cups-browsed would bind on UDP INADDR_ANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request to an attacker controlled URL. This patch removes support for the leg…
first Oct 4, 2024 -
Medium max 5.5openSUSE-SU-2024:13432-1 1 CVE
ruby3.2-rubygem-activerecord-7.0-7.0.8-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-activerecord-7.0-7.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.8SUSE-SU-2020:0688-1 3 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15-SP1 kernel-RT was updated to 4.12.14 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: Fixed an issue in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attacke…
first Mar 13, 2020