6,771 results · Clear filters · Feed
-
Medium max 5.9openSUSE-SU-2024:14609-1 1 CVE
libparaview5_12-5.12.1-2.1 on GA media
These are all security issues fixed in the libparaview5_12-5.12.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Dec 22, 2024 -
Medium max 6.3SUSE-SU-2024:1925-1 1 CVE
Security update for python-PyMySQL
This update for python-PyMySQL fixes the following issues: - CVE-2024-36039: Fixed SQL injection when used with untrusted JSON input (bsc#1225070).
first Jun 5, 2024 -
Medium max 6.7SUSE-SU-2022:2461-1 3 CVEs
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_112 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privil…
first Jul 21, 2022 -
Medium max 6.9SUSE-SU-2025:03240-1 4 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.1.1629. - CVE-2025-53905: Fixed a path traversal issue in tar.vim plugin that may allow for file overwriting when opening specially crafted tar files (bsc#1246604). - CVE-2025-53906: Fixed a …
first Sep 16, 2025 -
Medium max 6.5SUSE-SU-2024:0603-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-51385: Fixed command injection via user name or host name metacharacters (bsc#1218215).
first Feb 23, 2024 -
Medium max 6.5SUSE-SU-2023:2223-2 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero (bsc#1211174).
first Jul 18, 2023 -
Medium max 5.3SUSE-SU-2023:4152-1 1 CVE
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Upgraded to JDK 11.0.21+9 (October 2023 CPU): - CVE-2023-22081: Fixed a partial denial of service issue that could be triggered via HTTPS (bsc#1216374). Please visit the Oracle Release Notes page f…
first Oct 20, 2023 -
Medium max 6.7SUSE-SU-2021:2387-1 2 CVEs
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_29 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges neede…
first Jul 16, 2021 -
Medium max 5.9openSUSE-SU-2021:1383-1 1 CVE
Security update for ssh-audit
This update for ssh-audit fixes the following issues: ssh-audit was updated to version 2.5.0 * Fixed crash when running host key tests. * Handles server connection failures more gracefully. * Now prints JSON with indents when -jj is used (useful for debugging…
first Oct 18, 2021 -
Medium max 5.5openSUSE-SU-2024:0147-1 1 CVE
Security update for libredwg
This update for libredwg fixes the following issues: Update to tag 0.12.5.6924: - CVE-2023-26157: Fixed out-of-bound read involving section->num_pages in decode_r2007.c (boo#1218473)
first May 29, 2024 -
Medium max 6.9SUSE-SU-2024:4429-1 2 CVEs
Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)
first Dec 27, 2024 -
Medium max 5.5SUSE-SU-2023:0145-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664) - CV…
first Jul 6, 2023 -
Medium max 6.6
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2022-0516: Fixed KVM s390 return error on SIDA memop on normal guest (bsc#1195947). - CVE-2021-0920: Fixed a local privilege escalation due to an …
first Mar 1, 2022 -
Medium max 5.9SUSE-SU-2024:0006-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (Terrapin Attack) (bsc#1218127).
first Jan 2, 2024 -
Medium max 5.6SUSE-SU-2018:1465-1 1 CVE
Security update for HA kernel modules
This update provides rebuilds of HA kernel modules with retpoline support to mitigate Spectre Variant 2 (CVE-2017-5715 bsc#1068032) Also fixed a problem in ocfs2: - backport patch to fix dlmglue false deadlock (bsc#962257)
first May 29, 2018 -
Medium max 6.2SUSE-SU-2023:0467-1 1 CVE
Security update for prometheus-ha_cluster_exporter
This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047).
first Feb 21, 2023 -
Medium max 5.9SUSE-SU-2025:3699-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5 as very old protocol supported quite a number of ciphers tha…
first Oct 21, 2025 -
Medium max 6.1SUSE-SU-2018:3121-1 1 CVE
Security update for axis
This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting (XSS) attack in the default servlet/services (bsc#1103658).
first Oct 12, 2018 -
Medium max 5.9openSUSE-SU-2021:1605-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - Update to 2.17.0 - CVE-2021-45105: Apache Log4j2 does not always protect from infinite recursion in lookup evaluation. (bsc#1193887, bsc#1193888) This update was imported from the SUSE:SLE-15-SP2:Update upda…
first Dec 22, 2021 -
Medium max 6.1SUSE-SU-2023:2360-1 4 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). - CVE-2022-32166: Fixed a out of…
first Jun 2, 2023 -
Medium max 6.5SUSE-SU-2019:2955-1 6 CVEs
Security update for qemu
This update for qemu fixes the following issues: qemu was updated to v3.1.1.1, a stable, bug-fix-only release, which includes 2 fixes we already carry, as well as one additional use- after-free fix in slirp. (CVE-2018-20126 bsc#1119991, CVE-2019-14378 bsc#114…
first Nov 12, 2019 -
Medium max 6.5SUSE-SU-2022:1300-1 9 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for…
first Apr 22, 2022 -
Medium max 5.5SUSE-SU-2023:0399-1 5 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512). - CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512). - CVE-2022-39320: Fixed heap buffer overflow in urbdrc chan…
first Feb 13, 2023 -
Medium max 6.5SUSE-SU-2023:2328-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
first May 30, 2023 -
Medium max 6.7SUSE-SU-2021:2460-1 1 CVE
Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5)
This update for the Linux Kernel 4.12.14-122_66 fixes one issue. The following security issue was fixed: - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unpr…
first Jul 23, 2021 -
Medium max 5.3openSUSE-SU-2024:13825-1 1 CVE
libnghttp2-14-1.61.0-1.1 on GA media
These are all security issues fixed in the libnghttp2-14-1.61.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.0openSUSE-SU-2021:0059-1 1 CVE
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: Update zypper to version 1.14.41 Update libzypp to 17.25.4 - CVE-2017-9271: Fixed information leak in the log file (bsc#1050625 bsc#1177583) - RepoManager: Force refresh if repo url has changed (bsc#…
first Jan 14, 2021 -
Medium max 5.6SUSE-SU-2019:14157-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14284: The drivers/block/floppy.c allowed a denial of service by setup_format_params division-by-zero. Two consecu…
first Aug 29, 2019 -
Medium max 6.5SUSE-SU-2020:1546-1 3 CVEs
Security update for php72
This update for php72 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). - CV…
first Jun 5, 2020 -
Medium max 6.4openSUSE-SU-2019:2137-1 1 CVE
Security update for buildah
This update for buildah fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065) This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Sep 15, 2019 -
Medium max 4.8SUSE-SU-2019:2503-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095). Non-secur…
first Oct 1, 2019 -
Medium max 4.3SUSE-SU-2019:2114-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
first Aug 12, 2019 -
Medium max 5.5openSUSE-SU-2024:14316-1 1 CVE
nqptp-1.2.4-1.1 on GA media
These are all security issues fixed in the nqptp-1.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 5, 2024 -
Medium max 5.9SUSE-SU-2018:3910-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15473: OpenSSH was prone to a user existance oracle vulnerability due to not delaying bailout for an invalid authenticating user until after the packet c…
first Nov 26, 2018 -
Medium max 6.4openSUSE-SU-2024:10824-1 11 CVEs
grub2-2.06-7.1 on GA media
These are all security issues fixed in the grub2-2.06-7.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.7SUSE-SU-2021:4051-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).
first Dec 14, 2021 -
Medium max 5.3openSUSE-SU-2024:14402-1 1 CVE
haproxy-3.0.5+git0.8e879a52e-2.1 on GA media
These are all security issues fixed in the haproxy-3.0.5+git0.8e879a52e-2.1 package on the GA media of openSUSE Tumbleweed.
first Oct 15, 2024 -
Medium max 6.5SUSE-SU-2023:2096-2 3 CVEs
Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for…
first Jun 21, 2023 -
Medium max 5.3SUSE-SU-2022:4039-1 4 CVEs
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-1882: Fixed a use-after-free flaw in free_pipe_info() that could allow a local user to crash or potentially escalate their privile…
first Nov 16, 2022 -
Medium max 5.1SUSE-SU-2020:3281-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race…
first Nov 14, 2020