6,771 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2023:0437-1 2 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Updated to version jdk8u362 (icedtea-3.26.0): - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#120724…
first Feb 16, 2023 -
Medium max 6.5SUSE-SU-2022:4241-1 20 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2021-28689: Fixed speculative vulnerabilities with bare…
first Nov 28, 2022 -
Medium max 6.3SUSE-SU-2022:4054-1 1 CVE
Security update for go1.19
This update for go1.19 fixes the following issues: Update to go 1.19.3 (released 2022-11-01) (bsc#1200441): Security fixes: - CVE-2022-41716: Fixed unsanitized NUL in environment variables in syscalls, os/exec (go#56327) (bsc#1204941). Bugfixes: - runtime: lo…
first Nov 17, 2022 -
Medium max 5.4openSUSE-SU-2024:10043-1 1 CVE
pam-modules-12.1-27.4 on GA media
These are all security issues fixed in the pam-modules-12.1-27.4 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:3778-1 4 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - Wireshark update to v3.6.16. - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. (bsc#1214561) - CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop.…
first Sep 26, 2023 -
Medium max 5.5openSUSE-SU-2023:0071-1 1 CVE
Security update for peazip
This update for peazip fixes the following issues: peazip was updated to 9.1.0: * Major restyle in application's look & feel and themes, and many usability improvements for the file manager, and archiving / extraction screens. * The scripting engine was refin…
first Mar 14, 2023 -
Medium max 6.7SUSE-SU-2021:2361-1 2 CVEs
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_49 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges neede…
first Jul 15, 2021 -
Medium max 5.9SUSE-SU-2024:0963-1 1 CVE
Security update for dav1d
This update for dav1d fixes the following issues: - CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).
first Mar 21, 2024 -
Medium max 6.5SUSE-SU-2023:4371-1 9 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589). - CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590). - CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273…
first Nov 6, 2023 -
Medium max 5.5SUSE-SU-2023:3965-1 2 CVEs
Security update for libXpm
This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686). - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687).
first Oct 4, 2023 -
Medium max 6.5SUSE-SU-2023:2543-1 2 CVEs
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin (bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy imposed by the ServiceAcco…
first Jun 19, 2023 -
Medium max 6.3openSUSE-SU-2024:12389-1 1 CVE
apptainer-1.1.2-1.1 on GA media
These are all security issues fixed in the apptainer-1.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2024:0247-1 1 CVE
Security update for rear23a
This update for rear23a fixes the following issues: - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUB_RESCUE=Y. (bsc#1218728)
first Jan 26, 2024 -
Medium max 4.3SUSE-SU-2025:4297-1 2 CVEs
Security update for python311
This update for python311 fixes the following issues: Update to 3.11.14: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars() (bsc#1252974) - CVE-2025-8291: Fixed validity of the ZIP64 End of Central Directory (EOCD) not …
first Nov 28, 2025 -
Medium max 4.7SUSE-SU-2019:1351-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: Security issue fixed: - CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087). Non-security issue fixed: - Explicitly require libnettle 3.4.1 to prevent miss…
first May 24, 2019 -
Medium max 4.2SUSE-SU-2025:01759-1 1 CVE
Security update for slurm
This update for slurm fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).
first May 29, 2025 -
Medium max 5.5SUSE-SU-2022:1418-1 2 CVEs
Security update for ant
This update for ant fixes the following issues: - CVE-2021-36373: Fixed an excessive memory allocation when reading a specially crafted TAR archive (bsc#1188468). - CVE-2021-36374: Fixed an excessive memory allocation when reading a specially crafted ZIP arch…
first Apr 27, 2022 -
Medium max 5.5SUSE-FU-2023:3283-1 2 CVEs
Feature update for cloud-init
This update for cloud-init fixes the following issues: - Default route is not configured (bsc#1212879) - cloud-final service failing in powerVS (bsc#1210273) - Randomly generated passwords logged in clear-text to world-readable file (bsc#1184758, CVE-2021-342…
first Aug 11, 2023 -
Medium max 5.3SUSE-SU-2026:0073-1 3 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821). - CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822). - CVE-2025-692…
first Jan 8, 2026 -
Medium max 5.0openSUSE-SU-2025:14913-1 1 CVE
python311-Django-5.1.7-1.1 on GA media
These are all security issues fixed in the python311-Django-5.1.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 20, 2025 -
Medium max 4.9SUSE-SU-2024:0825-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)
first Mar 11, 2024 -
Medium max 6.0openSUSE-SU-2021:1625-1 1 CVE
Security update for runc
This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixe…
first Dec 26, 2021 -
Medium max 5.5SUSE-SU-2024:0965-1 1 CVE
Security update for indent
This update for indent fixes the following issues: - CVE-2024-0911: Fixed heap-based buffer overflow in set_buf_break() (bsc#1219210).
first Mar 21, 2024 -
Medium max 6.5SUSE-SU-2022:2396-1 1 CVE
Security update for logrotate
This update for logrotate fixes the following issues: Security issues fixed: - CVE-2022-1348: Fixed insecure permissions for state file creation (bsc#1199652). - Improved coredump handing for SUID binaries (bsc#1192449). Non-security issues fixed: - Fixed 'lo…
first Jul 14, 2022 -
Medium max 4.9SUSE-SU-2023:4908-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2023-22084: Fixed an easily exploitable vulnerability that allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server (bsc#1217405).
first Dec 19, 2023 -
Medium max 6.8openSUSE-SU-2024:12771-1 1 CVE
podman-4.4.2-1.1 on GA media
These are all security issues fixed in the podman-4.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3SUSE-SU-2025:0406-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)
first Feb 10, 2025 -
Medium max 5.3SUSE-SU-2023:1898-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873). - Update further expiring c…
first Apr 18, 2023 -
Medium max 4.8SUSE-SU-2022:4224-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39318: Fixed division by zero in urbdrc (bsc#1205563). - CVE-2022-39319: Fixed missing input buffer length check in urbdrc (bsc#1205564).
first Nov 25, 2022 -
Medium max 6.3SUSE-SU-2025:0419-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)
first Feb 11, 2025 -
Medium max 7.4openSUSE-SU-2025:14802-1 1 CVE
libopenssl-3-devel-3.2.4-1.1 on GA media
These are all security issues fixed in the libopenssl-3-devel-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 4.2openSUSE-SU-2024:12639-1 1 CVE
aws-efs-utils-1.34.5-1.1 on GA media
These are all security issues fixed in the aws-efs-utils-1.34.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.0SUSE-SU-2017:0641-1 1 CVE
Security update for dracut
This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets sto…
first Mar 9, 2017 -
Medium max 5.9openSUSE-SU-2024:12515-1 2 CVEs
freerdp-2.8.1-1.1 on GA media
These are all security issues fixed in the freerdp-2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2024:0008-1 2 CVEs
Security update for proftpd
This update for proftpd fixes the following issues: proftpd was updated to 1.3.8b - released 19-Dec-2023 - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (boo#1218144) - CVE-2023-51713: Fixed Out-of-bounds buffer read when handling FTP…
first Jan 3, 2024 -
Medium max 5.9SUSE-SU-2023:4844-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
first Dec 14, 2023 -
Medium max 5.2SUSE-SU-2024:1830-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
first May 29, 2024 -
Medium max 6.5SUSE-SU-2024:0864-1 2 CVEs
Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2024-25081: Fixed command injection via crafted filenames (bsc#1220404). - CVE-2024-25082: Fixed command injection via crafted archives or compressed files (bsc#1220405).
first Mar 13, 2024 -
Medium max 6.5SUSE-SU-2023:3525-1 1 CVE
Security update for keylime
This update for keylime fixes the following issues: - CVE-2023-38201: Fixed a bug to avoid leaks of the authorization tag. (bsc#1213314)
first Sep 5, 2023 -
Medium max 6.1SUSE-SU-2023:3987-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-41080: Fixed URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature (bsc#1214666).
first Oct 5, 2023