6,771 results · Clear filters · Feed
-
Medium max 6.7openSUSE-SU-2020:1182-1 1 CVE
Security update for libX11
This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project.
first Aug 12, 2020 -
Medium max 6.5SUSE-SU-2023:2298-1 1 CVE
Security update for distribution
This update for distribution fixes the following issues: Update to verison 2.8.2: - Revert registry/client: set `Accept: identity` header when getting layers - Parse `http` forbidden as denied - Fix CVE-2023-2253 runaway allocation on /v2/_catalog (bsc#120770…
first May 25, 2023 -
Medium max 5.3SUSE-SU-2022:0166-1 11 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 5 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods…
first Jan 24, 2022 -
Medium max 4.2SUSE-SU-2019:0785-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-20…
first Mar 28, 2019 -
Medium max 5.3SUSE-SU-2018:3219-1 1 CVE
Security update for fuse
This update for fuse fixes the following security issue: - CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whet…
first Oct 18, 2018 -
Medium max 6.1openSUSE-SU-2024:12322-1 1 CVE
deluge-2.1.1-3.1 on GA media
These are all security issues fixed in the deluge-2.1.1-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:2078-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472) - CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to un…
first Jun 14, 2022 -
Medium max 6.1SUSE-SU-2019:0394-1 2 CVEs
Security update for rubygem-loofah
This update for rubygem-loofah fixes the following issues: Security issues fixed: - CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969). - CVE-2018-8048: Fixed XSS vulnerability due to unescaped characters b…
first Feb 14, 2019 -
Medium max 4.9SUSE-SU-2024:1985-1 2 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). - CVE-2023-22084: Fixed a vulnerability allows high privileged attacker with network access via multiple protocols to compromise the…
first Jun 11, 2024 -
Medium max 6.7SUSE-SU-2023:4387-1 1 CVE
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoi…
first Nov 9, 2023 -
Medium max 5.5openSUSE-SU-2024:11282-1 2 CVEs
libblkid-devel-2.36.2-3.2 on GA media
These are all security issues fixed in the libblkid-devel-2.36.2-3.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2025:02772-1 1 CVE
Recommended update for grub2
This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959) Other fixes: - Fix test -f and -s do not work properly over the network files served via tftp …
first Aug 12, 2025 -
Medium max 5.5SUSE-SU-2023:1956-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).
first Apr 24, 2023 -
Medium max 6.1SUSE-SU-2025:0280-1 2 CVEs
Security update for go1.23
This update for go1.23 fixes the following issues: - Update to go1.23.5 (bsc#1229122) - CVE-2024-45341: Properly check for IPv6 hosts in URIs (bsc#1236045) - CVE-2024-45336: Persist header stripping across repeated redirects (bsc#1236046)
first Jan 29, 2025 -
Medium max 4.8SUSE-SU-2025:0675-1 2 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 40 (bsc#1236470): - CVE-2025-21502: unauthenticated attacker can obtain unauthorized read and write access to data through the Hotspot component API (bsc#…
first Feb 24, 2025 -
Medium max 5.9SUSE-SU-2025:01786-1 1 CVE
Security update for postgresql14
This update for postgresql14 fixes the following issues: Upgrade to 14.18: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931)
first May 30, 2025 -
Medium max 6.5SUSE-SU-2020:1604-1 24 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read val…
first Jun 10, 2020 -
Medium max 5.3openSUSE-SU-2021:0305-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: - CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Feb 18, 2021 -
Medium max 6.5SUSE-SU-2021:3251-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following security issue: - CVE-2020-26137: A CRLF injection via HTTP request method was fixed (bsc#1177120) Note that this was fixed in a previous version update to 1.25.9, this update just complements the tracking.
first Sep 29, 2021 -
Medium max 6.5SUSE-SU-2019:1206-2 1 CVE
Security update for bzip2
This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).
first Jul 3, 2019 -
Medium max 6.5SUSE-SU-2023:2342-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
first Jun 1, 2023 -
Medium max 4.0SUSE-SU-2025:01952-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-48432: log injection or forgery due to unescaped control characters being added into logs (bsc#1244095).
first Jun 13, 2025 -
Medium max 5.0openSUSE-SU-2024:11619-1 1 CVE
trivy-0.20.2-1.1 on GA media
These are all security issues fixed in the trivy-0.20.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:13509-1 2 CVEs
curl-8.5.0-1.1 on GA media
These are all security issues fixed in the curl-8.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4SUSE-SU-2020:2728-1 1 CVE
Security update for cifs-utils
This update for cifs-utils fixes the following issues: - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs (bsc#1174477).
first Sep 23, 2020 -
Medium max 6.5SUSE-SU-2024:2576-1 2 CVEs
Security update for gnome-shell
This update for gnome-shell fixes the following issues: - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)
first Jul 22, 2024 -
Medium max 6.5openSUSE-SU-2024:14492-1 1 CVE
wget-1.25.0-1.1 on GA media
These are all security issues fixed in the wget-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 13, 2024 -
Medium max 4.8SUSE-SU-2025:02167-1 2 CVEs
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2025-6052: Fixed integer overflow in g_string_maybe_expand() leads to potential buffer overflow in GString (bsc#1244596). - CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via function g_str…
first Jun 30, 2025 -
Medium max 5.3openSUSE-SU-2024:13278-1 1 CVE
libnbd-1.18.0-1.1 on GA media
These are all security issues fixed in the libnbd-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2019:2002-1 9 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file proto…
first Jul 29, 2019 -
Medium max 5.9openSUSE-SU-2025:15784-1 2 CVEs
postgresql15-15.15-1.1 on GA media
These are all security issues fixed in the postgresql15-15.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2025 -
Medium max 5.8openSUSE-SU-2020:0036-1 1 CVE
Security update for rubygem-excon
This update for rubygem-excon fixes the following issues: CVE-2019-16779 (boo#1159342): Fix a race condition around persistent connections, where a connection, which was interrupted, would leave data on the socket. Subsequent requests would then read this dat…
first Jan 13, 2020 -
Medium max 5.3openSUSE-SU-2024:13017-1 1 CVE
cups-2.4.2-6.1 on GA media
These are all security issues fixed in the cups-2.4.2-6.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2021:2809-1 2 CVEs
Security update for systemd
This update for systemd fixes the following issues: - Updated to version 246.15 - CVE-2021-33910: Fixed a denial of service issue in systemd. (bsc#1188063) - CVE-2020-13529: Fixed an issue that allows crafted DHCP FORCERENEW packet can cause a server running …
first Aug 23, 2021 -
Medium max 6.5SUSE-SU-2023:3495-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-20569: Fixed x86/AMD Speculative Return Stack Overflow (XSA-434) (bsc#1214082). - CVE-2022-40982: Fixed x86/Intel Gather Data Sampling (XSA-435) (bsc#1214083). - CVE-2023-20593: Fixed x86/AMD Zenbleed…
first Aug 30, 2023 -
Medium max 4.3SUSE-SU-2019:14163-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: mgr-cfg: - Ensure bytes type when using hashlib to avoid traceback (bsc#1138822) mgr-daemon: - Fix systemd timer configuration on SLE12 (bsc#1142038) mgr-osad: - Fix obsolete for old osad packages, to allow installing m…
first Sep 5, 2019 -
Medium max 6.0openSUSE-SU-2024:14211-1 1 CVE
gh-2.53.0-1.1 on GA media
These are all security issues fixed in the gh-2.53.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 22, 2024 -
Medium max 5.0SUSE-SU-2019:1813-1 1 CVE
Security update for fence-agents
This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Included timestamps when logging (bsc#1049852).
first Jul 10, 2019 -
Medium max 5.3SUSE-SU-2023:4930-1 3 CVEs
Security update for go1.20-openssl
This update for go1.20-openssl fixes the following issues: Update to version 1.20.12.1: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834). - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Wind…
first Dec 20, 2023 -
Medium max 6.1SUSE-SU-2024:4019-1 1 CVE
Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-lusitaniae-apache_exporter was updated from version 1.0.1 to 1.0.8: - Security issues fixed: * CVE-2023-3978: Fixed security bug in x/net dependency in version 1.0.2 (bsc#1213933) - Bugs fixed: * Require G…
first Nov 18, 2024