6,771 results · Clear filters · Feed
-
Medium max 5.5openSUSE-SU-2024:14549-1 1 CVE
netty-4.1.115-1.1 on GA media
These are all security issues fixed in the netty-4.1.115-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 5, 2024 -
Medium max 5.6SUSE-SU-2025:0044-1 1 CVE
Security update for openjpeg2
This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c (bsc#1235029)
first Jan 9, 2025 -
Medium max 6.5SUSE-SU-2018:3318-1 2 CVEs
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following security issue: - CVE-2018-8036: A crafted file could have triggered an infinite loop which lead to DoS (bsc#1099721). - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running compu…
first Oct 23, 2018 -
Medium max 6.5openSUSE-SU-2019:2211-1 1 CVE
Security update for phpMyAdmin
This update for phpMyAdmin to 4.9.1 fixes the following issues: Security issue fixed: - CVE-2019-12922: Fixed CSRF issue that allowed deletion of any server in the Setup page. (boo#1150914)
first Sep 28, 2019 -
Medium max 6.9SUSE-SU-2025:03422-1 1 CVE
Security update for apache2-mod_security2
This update for apache2-mod_security2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure (bsc#1247674)
first Sep 29, 2025 -
Medium max 6.7SUSE-SU-2018:3240-1 2 CVEs
Security update for nagios
This update for nagios fixes the following issues: - CVE-2016-8641 / CVE-2016-10089: fixed possible symlink attacks for files/directories created by root (bsc#1011630 / bsc#1018047)
first Oct 19, 2018 -
Medium max 5.6SUSE-SU-2018:2344-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to…
first Aug 16, 2018 -
Medium max 5.5SUSE-SU-2024:1134-1 1 CVE
Security update for indent
This update for indent fixes the following issues: - CVE-2024-0911: Fixed heap-based buffer overflow in set_buf_break() (bsc#1219210).
first Apr 8, 2024 -
Medium max 6.1openSUSE-SU-2024:14413-1 3 CVEs
python3-virtualbox-7.1.4-1.1 on GA media
These are all security issues fixed in the python3-virtualbox-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 18, 2024 -
Medium max 4.0openSUSE-SU-2020:0320-1 1 CVE
Security update for yast2-rmt
This update for yast2-rmt to version 1.3.0 fixes the following issues: Security issue fixed: - CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835). Non-security issue fixed: - Add support for forwarding registratio…
first Mar 8, 2020 -
Medium max 6.8SUSE-SU-2022:1616-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders (bsc#1197135).
first May 31, 2022 -
Medium max 6.8SUSE-SU-2019:0941-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…
first Apr 12, 2019 -
Medium max 6.1openSUSE-SU-2019:2393-1 3 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fi…
first Oct 27, 2019 -
Medium max 5.1openSUSE-SU-2019:2435-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733) This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Nov 5, 2019 -
Medium max 5.5SUSE-SU-2022:2960-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …
first Aug 31, 2022 -
Medium max 5.9SUSE-SU-2025:4325-1 2 CVEs
Security update for postgresql13
This update for postgresql13 fixes the following issues: Upgraded to 13.23: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 8, 2025 -
Medium max 6.5SUSE-SU-2015:1515-1 1 CVE
Security update for openstack and python-oslo.utils
This update provides the following fixes provided from the upstream OpenStack-project: - openstack-suse: + do not copy upstream python requirements to the package, we rely on Requires; upstream requirements.txt introduce version caps which we do not follow (b…
first Aug 25, 2015 -
Medium max 5.8SUSE-SU-2019:0948-1 2 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#112…
first Apr 15, 2019 -
Medium max 5.9openSUSE-SU-2022:0045-1 1 CVE
Security update for jaw
jawn was updated to fix: * CVE-2022-21653: DoS caused by a hash collision in SimpleFacade and MutableFacade (bsc#1194358)
first Feb 20, 2022 -
Medium max 4.0SUSE-SU-2020:0432-1 1 CVE
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763). Bug fixes - Fixed removing orphaned packages dropped by to-be-installed products (bsc#…
first Feb 21, 2020 -
Medium max 6.4SUSE-SU-2020:0712-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: Update to skopeo v0.1.41 (bsc#1165715): - Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1 - Bump gopkg.in/yaml.v2 from 2.2.7 to 2.2.8 - Bump github.com/containers/common from 0.0.7 to 0.1.4 - Remove t…
first Mar 18, 2020 -
Medium max 4.3SUSE-SU-2022:3878-1 3 CVEs
Security update for SUSE Manager Server 4.2
This update fixes the following issues: hub-xmlrpc-api: - Use golang(API) = 1.18 for building on SUSE (bsc#1203599) This source fails to build with the current go1.19 on SUSE and we need to use go1.18 instead. inter-server-sync: - Version 0.2.4 * Improve memo…
first Nov 4, 2022 -
Medium max 5.3openSUSE-SU-2024:11810-1 15 CVEs
java-13-openjdk-13.0.10.0-1.1 on GA media
These are all security issues fixed in the java-13-openjdk-13.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3SUSE-SU-2025:0756-1 1 CVE
Security update for python
This update for python fixes the following issues: - Reference to no longer used 'bracketed_host' variable in the fix for CVE-2025-0938 (bsc#1236705, bsc#1223694).
first Feb 28, 2025 -
Medium max 5.5SUSE-SU-2017:0605-1 3 CVEs
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1…
first Mar 3, 2017 -
Medium max 5.5SUSE-SU-2020:3748-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to g…
first Dec 10, 2020 -
Medium max 6.8openSUSE-SU-2021:0278-1 3 CVEs
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969). - CVE-2021-21284: potential privilege escalation wh…
first Feb 12, 2021 -
Medium max 4.0openSUSE-SU-2020:0253-1 1 CVE
Security update for yast2-rmt
This update for yast2-rmt fixes the following issues: yast2-rmt was updated to release version 1.2.2: - CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (boo#1119835)
first Feb 27, 2020 -
Medium max 5.3SUSE-SU-2025:0764-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).
first Mar 3, 2025 -
Medium max 5.0SUSE-SU-2019:1819-1 1 CVE
Security update for fence-agents
This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Added aliyun fence agent (bsc#1139913).
first Jul 11, 2019 -
Medium max 5.3openSUSE-SU-2024:14584-1 1 CVE
MozillaThunderbird-128.5.2-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Dec 16, 2024 -
Medium max 5.9SUSE-SU-2025:01766-1 1 CVE
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgrade to 16.9: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first May 30, 2025 -
Medium max 5.6SUSE-SU-2018:0012-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). - CVE-201…
first Jan 4, 2018 -
Medium max 5.5openSUSE-SU-2020:0398-1 1 CVE
Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman
This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues: podman was updated to 1.8.0: - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that includ…
first Mar 28, 2020 -
Medium max 6.5SUSE-RU-2019:0341-1 1 CVE
Security update for SUSE Manager Server 3.2
This update fixes the following issues: branch-network-formula: - Netconfig update requires bind directory to exists for bind forward, ensure it (bsc#1116365) - Rework network update in branch-network formula (bsc#1116365) py26-compat-salt: - Remove arch from…
first Feb 13, 2019 -
Medium max 6.5SUSE-SU-2020:1141-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus i…
first Apr 29, 2020 -
Medium max 4.1SUSE-SU-2019:0805-1 1 CVE
Recommended update for adcli, sssd
This update for adcli and sssd provides the following improvement: Security vulnerability fixed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other fixes: - Add an option to disable checking for trusted domains …
first Mar 29, 2019 -
Medium max 6.2openSUSE-SU-2024:13874-1 1 CVE
python310-idna-3.7-1.1 on GA media
These are all security issues fixed in the python310-idna-3.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.7openSUSE-SU-2024:12531-1 2 CVEs
grafana-8.5.15-1.1 on GA media
These are all security issues fixed in the grafana-8.5.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2020:2800-1 4 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (b…
first Sep 30, 2020