6,771 results · Clear filters · Feed
-
Medium max 5.5openSUSE-SU-2022:0574-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …
first Feb 25, 2022 -
Medium max 6.5SUSE-SU-2022:3940-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // BaseHTTPServer (bsc#1202624).
first Nov 10, 2022 -
Medium max 6.5openSUSE-SU-2024:11845-1 1 CVE
xerces-j2-2.12.2-1.1 on GA media
These are all security issues fixed in the xerces-j2-2.12.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:12790-1 1 CVE
docker-20.10.23_ce-2.1 on GA media
These are all security issues fixed in the docker-20.10.23_ce-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2023:3702-1 2 CVEs
Security update for mutt
This update for mutt fixes the following issues: - CVE-2023-4874: Fixed NULL pointer dereference when composing an email (bsc#1215189). - CVE-2023-4875: Fixed NULL pointer dereference when receiving an email (bsc#1215191).
first Sep 20, 2023 -
Medium max 5.5SUSE-SU-2018:3064-2 5 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple prot…
first Oct 18, 2018 -
Medium max 6.5SUSE-SU-2024:0578-1 1 CVE
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: - CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)
first Feb 21, 2024 -
Medium max 5.9openSUSE-SU-2021:0330-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947). This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Feb 22, 2021 -
Medium max 6.5SUSE-SU-2022:3830-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure co…
first Nov 1, 2022 -
Medium max 5.5openSUSE-SU-2022:10044-1 1 CVE
Security update for chafa
This update for chafa fixes the following issues: - CVE-2022-2301: Fix buffer over-read (boo#1201211)
first Jul 8, 2022 -
Medium max 5.9SUSE-SU-2019:2769-1 16 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fixed an issue in ls…
first Oct 24, 2019 -
Medium max 6.3SUSE-SU-2025:0814-1 1 CVE
Security update for python
This update for python fixes the following issues: - Reference to no longer used 'bracketed_host' variable in the fix for CVE-2025-0938 (bsc#1236705, bsc#1223694).
first Mar 10, 2025 -
Medium max 4.9openSUSE-SU-2024:13320-1 1 CVE
matrix-synapse-1.94.0-2.1 on GA media
These are all security issues fixed in the matrix-synapse-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.0openSUSE-SU-2025:14745-1 1 CVE
go1.22-1.22.12-1.1 on GA media
These are all security issues fixed in the go1.22-1.22.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 8, 2025 -
Medium max 6.5SUSE-SU-2023:2096-1 3 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for…
first May 4, 2023 -
Medium max 5.3SUSE-SU-2021:0032-1 7 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * Class libraries:…
first Jan 5, 2021 -
Medium max 5.3SUSE-SU-2018:3146-1 2 CVEs
Security update for libtirpc
This update for libtirpc fixes the following issues: Security issues fixed: - CVE-2018-14621: libtirpc: Infinite loop in EMFILE case in svc_vc.c (bsc#1106519) - CVE-2018-14622: libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c (bsc#1106517)
first Oct 15, 2018 -
Medium max 4.8SUSE-SU-2024:3875-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Updated to version 11.0.25+9 (October 2024 CPU): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702) - CVE-2024-21210: Fixed unauthorized read/write access to data in component …
first Nov 1, 2024 -
Medium max 5.3SUSE-SU-2023:2490-1 1 CVE
Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212).
first Jun 13, 2023 -
Medium max 5.3SUSE-SU-2023:4222-1 1 CVE
Security update for libnbd
This update for libnbd fixes the following issues: - Updated to version 1.18.1 - Updated to version 1.18.0: - CVE-2023-5215: Fixed an issue where an NBD server returning an unexpected block size might crash an application (bsc#1215799).
first Oct 27, 2023 -
Medium max 6.1openSUSE-SU-2024:14131-1 1 CVE
python310-XStatic-jquery-ui-1.13.0.1-1.15 on GA media
These are all security issues fixed in the python310-XStatic-jquery-ui-1.13.0.1-1.15 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 5.8SUSE-SU-2024:0765-1 3 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). - CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#12202…
first Mar 5, 2024 -
Medium max 5.8SUSE-SU-2025:0149-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-56374: Fixed lack of upper bound limit enforcement in strings when performing IPv6 validation that could lead to denial of service (bsc#1235856)
first Jan 16, 2025 -
Medium max 6.5openSUSE-SU-2019:0043-1 9 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…
first Mar 23, 2019 -
Medium max 6.5SUSE-SU-2025:01941-1 1 CVE
Security update for kubernetes1.24
This update for kubernetes1.24 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Jun 13, 2025 -
Medium max 6.2SUSE-SU-2023:0465-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047).
first Feb 20, 2023 -
Medium max 6.0openSUSE-SU-2020:1049-1 1 CVE
Security update for cni-plugins
This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com…
first Jul 23, 2020 -
Medium max 5.6SUSE-SU-2022:2478-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…
first Jul 21, 2022 -
Medium max 6.8SUSE-SU-2019:1524-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…
first Jun 17, 2019 -
Medium max 5.3openSUSE-SU-2024:13135-1 1 CVE
python-2.7.18-37.1 on GA media
These are all security issues fixed in the python-2.7.18-37.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:3012-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 28, 2023 -
Medium max 5.3SUSE-SU-2020:1625-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: mariadb was updated to version 10.0.44 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue which could …
first Jun 16, 2020 -
Medium max 4.2openSUSE-SU-2024:12890-1 1 CVE
grafana-9.5.1-1.1 on GA media
These are all security issues fixed in the grafana-9.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2017:1145-1 3 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in …
first May 2, 2017 -
Medium max 5.7SUSE-RU-2025:0270-1 1 CVE
Recommended update for hplip
This update for hplip fixes the following issues: This update for hplip fixes the following issues: Update to hplip 3.24.4 (jsc#PED-5846) - Added support for new printers: * HP OfficeJet 8120 All-in-One series * HP OfficeJet Pro 8120 All-in-One series * HP Of…
first Jan 28, 2025 -
Medium max 6.5openSUSE-SU-2024:12300-1 1 CVE
python38-3.8.13-4.1 on GA media
These are all security issues fixed in the python38-3.8.13-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.9SUSE-SU-2024:3163-1 1 CVE
Security update for gradle
This update for gradle fixes the following issues: - CVE-2023-35946: Fixed a dependency issue leading the cache to write files into an unintended location. (bsc#1212930)
first Sep 6, 2024 -
Medium max 5.1SUSE-SU-2020:3122-1 3 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c could be used by local attackers to corrup…
first Nov 3, 2020 -
Medium max 4.3SUSE-SU-2024:4422-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. (bsc#1234795)
first Dec 24, 2024 -
Medium max 6.4openSUSE-SU-2020:0395-1 7 CVEs
Recommended update for ruby2.5
This update for ruby2.5 toversion 2.5.7 fixes the following issues: ruby 2.5 was updated to version 2.5.7 - CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804). - CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and S…
first Mar 28, 2020