6,771 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2023:2616-1 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).
first Jun 22, 2023 -
Medium max 5.6SUSE-SU-2024:1937-1 1 CVE
Security update for python-docker
This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (bsc#1224788).
first Jun 7, 2024 -
Medium max 5.3SUSE-SU-2023:1922-1 2 CVEs
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
first Apr 19, 2023 -
Medium max 5.5SUSE-SU-2025:0750-1 1 CVE
Security update for python-azure-identity
This update for python-azure-identity fixes the following issues: - CVE-2024-35255: race condition leading to privilege escalation and unauthorized access to sensitive information in Azure Identity libraries (bsc#1230100).
first Feb 28, 2025 -
Medium max 6.5openSUSE-SU-2024:12464-1 4 CVEs
java-17-openj9-17.0.5.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2025:15034-1 1 CVE
subfinder-2.7.0-3.1 on GA media
These are all security issues fixed in the subfinder-2.7.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Apr 26, 2025 -
Medium max 6.2SUSE-SU-2023:1858-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in Prometheus Exporter Toolkit (bsc#1208049).
first Apr 14, 2023 -
Medium max 5.5SUSE-SU-2020:2879-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to creat…
first Oct 8, 2020 -
Medium max 4.0SUSE-SU-2025:1349-1 1 CVE
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues: - CVE-2025-32460: Fixed a heap-based buffer over-read in ReadJXLImage. (bsc#1241150)
first Apr 18, 2025 -
Medium max 5.3SUSE-SU-2023:1907-1 2 CVEs
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
first Apr 19, 2023 -
Medium max 6.5SUSE-SU-2023:4611-1 15 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - CVE-2023-39350: Fixed incorrect offset calculation leading to DoS (bsc#1214856). - CVE-2023-39351: Fixed Null Pointer Dereference leading DoS in RemoteFX (bsc#1214857). - CVE-2023-39352: Fixed Invalid offs…
first Nov 29, 2023 -
Medium max 4.8SUSE-SU-2020:2405-1 1 CVE
Security update for php72
This update for php72 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
first Sep 1, 2020 -
Medium max 6.6openSUSE-SU-2024:14473-1 1 CVE
ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-actiontext-7.0-7.0.8.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 7, 2024 -
Medium max 6.2openSUSE-SU-2020:0124-1 2 CVEs
Security update for apt-cacher-ng
This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localh…
first Jan 29, 2020 -
Medium max 5.3SUSE-SU-2024:4196-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)
first Dec 5, 2024 -
Medium max 5.5SUSE-SU-2017:1135-1 10 CVEs
Security update for kvm
This update for kvm fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows …
first Apr 28, 2017 -
Medium max 5.5SUSE-SU-2025:3777-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2025-11626: fixed MONGO dissector infinite loop (bsc#1251933).
first Oct 24, 2025 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jul 2, 2021 -
Medium max 6.5SUSE-SU-2024:1530-2 2 CVEs
Security update for grafana and mybatis
This update for grafana and mybatis fixes the following issues: grafana was updated to version 9.5.18: - Grafana now requires Go 1.20 - Security issues fixed: * CVE-2024-1313: Require same organisation when deleting snapshots (bsc#1222155) * CVE-2023-6152: Ad…
first Jun 24, 2024 -
Medium max 6.8SUSE-SU-2023:1814-1 1 CVE
Security update for podman
This update for podman fixes the following issues: Update to version 4.4.4: * libpod: always use direct mapping * macos pkginstaller: do not fail when podman-mac-helper fails * podman-mac-helper: install: do not error if already installed - podman.spec: Bump …
first Apr 11, 2023 -
Medium max 4.9openSUSE-SU-2025:14826-1 1 CVE
libmariadbd-devel-11.7.2-1.1 on GA media
These are all security issues fixed in the libmariadbd-devel-11.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 20, 2025 -
Medium max 6.7SUSE-SU-2022:2629-1 33 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak…
first Aug 2, 2022 -
Medium max 6.1openSUSE-SU-2021:0176-1 1 CVE
Security update for python-autobahn
This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570). This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Upda…
first Jan 27, 2021 -
Medium max 6.5SUSE-SU-2020:0557-1 2 CVEs
Security update for python36
This update for python36 fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of servic…
first Mar 2, 2020 -
Medium max 6.7openSUSE-SU-2024:11101-1 6 CVEs
libntfs-3g-devel-2021.8.22-1.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2021.8.22-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2019:1806-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first Jul 24, 2019 -
Medium max 5.3SUSE-SU-2023:4506-1 3 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed certificate path validation issue du…
first Nov 21, 2023 -
Medium max 6.1SUSE-SU-2018:3119-1 1 CVE
Security update for axis
This update for axis fixes the following security issue: - CVE-2018-8032: Prevent cross-site scripting (XSS) attack in the default servlet/services (bsc#1103658).
first Oct 12, 2018 -
Medium max 5.6SUSE-SU-2024:1880-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
first May 31, 2024 -
Medium max 6.8SUSE-SU-2019:3180-1 2 CVEs
Security update for permissions
This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privile…
first Dec 5, 2019 -
Medium max 5.7openSUSE-SU-2025:14788-1 11 CVEs
kernel-firmware-network-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-network-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 6.1SUSE-SU-2023:3094-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2023-32681: fixed unintended leak of Proxy-Authorization header (bsc#1211674).
first Aug 1, 2023 -
Medium max 5.6openSUSE-SU-2021:1212-1 1 CVE
Security update for spectre-meltdown-checker
This update for spectre-meltdown-checker fixes the following issues: spectre-meltdown-checker was updated to version 0.44 (bsc#1189477) - feat: add support for SRBDS related vulnerabilities - feat: add zstd kernel decompression (#370) - enh: arm: add experime…
first Aug 30, 2021 -
Medium max 5.3openSUSE-SU-2021:3942-1 1 CVE
Security update for brotli
This update for brotli fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first Dec 6, 2021 -
Medium max 5.5SUSE-SU-2022:3857-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 2, 2022 -
Medium max 5.3openSUSE-SU-2024:13184-1 4 CVEs
libwireshark16-4.0.8-2.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.8-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4openSUSE-SU-2024:10683-1 16 CVEs
cifs-utils-6.13-1.3 on GA media
These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:2272-1 1 CVE
Security update for python-Js2Py
This update for python-Js2Py fixes the following issues: - CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code (bsc#1226660).
first Jul 2, 2024 -
Medium max 5.9SUSE-SU-2023:4232-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2023-43665: Fixed a Denial-of-service in django.utils.text.Truncator. (bsc#1215978)
first Oct 27, 2023 -
Medium max 5.6SUSE-SU-2018:0437-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow un…
first Feb 13, 2018