6,771 results · Clear filters · Feed
-
Medium max 4.4SUSE-SU-2024:2879-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request header is not stripped during cross-origin redirects (bsc#1226469)
first Aug 12, 2024 -
Medium max 5.5openSUSE-SU-2024:13656-1 1 CVE
libopenssl-1_0_0-devel-1.0.2u-24.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-24.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2024:0841-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 12, 2024 -
Medium max 5.8SUSE-SU-2019:0936-1 1 CVE
Security update for libvirt
This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1…
first Apr 12, 2019 -
Medium max 5.9SUSE-SU-2024:0558-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Always add the KEX pseudo-methods 'ext-info-c' and 'kex-strict-c-v00@openssh.com' when configuring custom method list. [bsc#1218971, CVE-2023-48795] * The strict-kex extension is announced in the list …
first Feb 20, 2024 -
Medium max 6.1SUSE-SU-2023:3122-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: python-tornado: - Security fixes: * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741) kiwi-desc-saltboot: - Update to version 0.1.1687520761.cefb248 * Add osimage cert package to boot…
first Aug 2, 2023 -
Medium max 4.3openSUSE-SU-2024:14382-1 7 CVEs
opensc-0.25.1-2.1 on GA media
These are all security issues fixed in the opensc-0.25.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 2, 2024 -
Medium max 6.4openSUSE-SU-2020:0377-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: Update to skopeo v0.1.41 (bsc#1165715): - Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1 - Bump gopkg.in/yaml.v2 from 2.2.7 to 2.2.8 - Bump github.com/containers/common from 0.0.7 to 0.1.4 - Remove t…
first Mar 25, 2020 -
Medium max 5.4SUSE-SU-2024:1864-1 2 CVEs
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722)
first May 30, 2024 -
Medium max 5.1SUSE-SU-2019:2782-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)
first Oct 25, 2019 -
Medium max 5.3SUSE-SU-2023:4593-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 28, 2023 -
Medium max 5.9SUSE-SU-2024:3964-1 1 CVE
Security update for python-wxPython
This update for python-wxPython fixes the following issues: Security issue fixed: - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XML_ResumeParser function (bsc#1232590). Non-security issues fixed: - rebuilt for python 3.11 (bsc#1228252…
first Nov 9, 2024 -
Medium max 4.7SUSE-SU-2023:1654-1 1 CVE
Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP4)
This update for the Linux Kernel 4.12.14-95_108 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).
first Mar 28, 2023 -
Medium max 6.2SUSE-SU-2024:1014-1 2 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594). - CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).
first Mar 27, 2024 -
Medium max 6.5SUSE-SU-2022:3029-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470). Non-security fixes: - Update to version 1.4.4.19~git46.c900a28c8: * CI…
first Sep 5, 2022 -
Medium max 6.5SUSE-SU-2021:2664-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - Provide and reload firewalld configuration only for: + openSUSE Leap 15.0, 15.1, 15.2 + SUSE SLE15, SLE15 SP1, SLE15 SP2 - Upgrade to upstream version 2.27.1 (jsc#SLE-18254) + B…
first Aug 12, 2021 -
Medium max 5.3SUSE-SU-2025:01523-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-32873: Fixed denial-of-service possibility in `strip_tags()` (bsc#1242210)
first May 25, 2025 -
Medium max 4.3openSUSE-SU-2024:12821-1 1 CVE
tomcat-9.0.43-15.1 on GA media
These are all security issues fixed in the tomcat-9.0.43-15.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:14354-1 1 CVE
rage-encryption-0.10.0+0-3.1 on GA media
These are all security issues fixed in the rage-encryption-0.10.0+0-3.1 package on the GA media of openSUSE Tumbleweed.
first Sep 20, 2024 -
Medium max 5.5SUSE-SU-2022:0727-1 2 CVEs
Security update for libeconf, shadow and util-linux
This security update for libeconf, shadow and util-linux fix the following issues: libeconf: - Add libeconf to SLE-Module-Basesystem_15-SP3 because needed by 'util-linux' and 'shadow' to fix autoyast handling of security related parameters (bsc#1192954, jsc#S…
first Mar 4, 2022 -
Medium max 6.5SUSE-SU-2023:0075-1 2 CVEs
Security update for net-snmp
This update for net-snmp fixes the following issues: - CVE-2022-44793: Fixed a NULL pointer dereference issue that could allow a remote attacker with write access to crash the server instance (bsc#1205148). - CVE-2022-44792: Fixed a NULL pointer dereference i…
first Jan 12, 2023 -
Medium max 5.9SUSE-SU-2021:0062-1 4 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - New upstream LTS version 12.20.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…
first Jan 11, 2021 -
Medium max 5.5SUSE-SU-2023:2413-1 1 CVE
Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_151 fixes one issue. The following security issue was fixed: - CVE-2023-23454: Fixed a type-confusion in the CBQ network scheduler (bsc#1207188).
first Jun 6, 2023 -
Medium max 6.1SUSE-SU-2024:2970-1 1 CVE
Security update for python-WebOb
This update for python-WebOb fixes the following issues: - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header (bsc#1229221)
first Aug 19, 2024 -
Medium max 6.9SUSE-SU-2022:3586-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount race…
first Oct 14, 2022 -
Medium max 6.5SUSE-SU-2017:2312-1 3 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service (bsc#1051644) - CVE-2017-7407: ourWriteOut function problem could lead to a heap buffer over-read (bsc#1032309) - CVE…
first Aug 31, 2017 -
Medium max 5.3SUSE-SU-2023:2961-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 25, 2023 -
Medium max 6.5SUSE-SU-2023:2153-1 1 CVE
Security update for docker-distribution
This update for docker-distribution fixes the following issues: - CVE-2023-2253: Catalog Endpoint can lead to OOM by user input (bsc#1207705).
first May 9, 2023 -
Medium max 6.3openSUSE-SU-2024:14344-1 1 CVE
ffmpeg-6-6.1.1-9.1 on GA media
These are all security issues fixed in the ffmpeg-6-6.1.1-9.1 package on the GA media of openSUSE Tumbleweed.
first Sep 18, 2024 -
Medium max 4.0openSUSE-SU-2025:14976-1 2 CVEs
libpoppler-cpp2-25.04.0-1.1 on GA media
These are all security issues fixed in the libpoppler-cpp2-25.04.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 8, 2025 -
Medium max 5.5SUSE-SU-2016:0739-1 1 CVE
Security update for openstack-trove
This update for openstack-trove fixes the following issues: - Fix multiple insecure /tmp file usage issues (bsc#929535, CVE-2015-3156).
first Mar 14, 2016 -
Medium max 5.9SUSE-SU-2024:2062-1 1 CVE
Security update for booth
This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)
first Jun 18, 2024 -
Medium max 5.5SUSE-SU-2022:4277-1 10 CVEs
Security update for binutils
This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579). - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-dema…
first Nov 29, 2022 -
Medium max 5.3SUSE-SU-2021:0126-1 1 CVE
Security update for php74
This update for php74 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706).
first Jan 14, 2021 -
Medium max 5.4SUSE-SU-2019:1477-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194). Non-security issue fixed: - Create directory to download and cache GPOs (…
first Jun 12, 2019 -
Medium max 5.3openSUSE-SU-2024:13491-1 3 CVEs
go1.20-1.20.12-1.1 on GA media
These are all security issues fixed in the go1.20-1.20.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2016:1355-1 2 CVEs
Security update for python-Pillow
This update for python-Pillow fixes the following security issues: * CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. (bsc#965582) * CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary am…
first May 19, 2016 -
Medium max 6.1SUSE-SU-2024:2685-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
first Jul 31, 2024 -
Medium max 4.4SUSE-SU-2025:1007-1 1 CVE
Security update for helm
This update for helm fixes the following issues: - CVE-2025-22870: Fixed proxy bypass using IPv6 zone IDs (bsc#1238688). Other fixes: - Updated to version 3.17.2 - Updated to 0.37.0 for x/net
first Mar 25, 2025 -
Medium max 5.9SUSE-SU-2024:1947-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548). - CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388).
first Jun 7, 2024