6,771 results · Clear filters · Feed
-
Medium max 6.4openSUSE-SU-2024:13714-1 1 CVE
helm-3.14.2-2.1 on GA media
These are all security issues fixed in the helm-3.14.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2023:4352-1 3 CVEs
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377). - CVE-2018-25091: Fixed a potential leak of the Authorization header during a cross-origin …
first Nov 2, 2023 -
Medium max 4.0SUSE-SU-2025:03460-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)
first Oct 7, 2025 -
Medium max 5.1SUSE-SU-2020:1709-2 1 CVE
Security update for mercurial
This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035).
first Jul 15, 2020 -
Medium max 5.7SUSE-SU-2023:3691-1 2 CVEs
Security update for mdadm
This update for mdadm fixes the following issues: - CVE-2023-28736: Fixed a buffer overflow (bsc#1214244). - CVE-2023-28938: Fixed uncontrolled resource consumption (bsc#1214245).
first Sep 19, 2023 -
Medium max 6.1SUSE-SU-2023:1795-1 2 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524). - CVE-2022-32166: Fixed a out of bounds read in minimask_equal() (bsc#1203865).
first Apr 7, 2023 -
Medium max 6.3SUSE-SU-2021:2125-1 9 CVEs
Security update for wireshark
This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can …
first Jun 22, 2021 -
Medium max 5.3openSUSE-SU-2024:14478-1 1 CVE
httpcomponents-client-4.5.14-1.1 on GA media
These are all security issues fixed in the httpcomponents-client-4.5.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2024 -
Medium max 5.9SUSE-SU-2025:0143-1 1 CVE
Security update for apache2-mod_jk
This update for apache2-mod_jk fixes the following issues: - Update to version 1.2.50: - CVE-2024-46544: Fixed incorrect default permissions vulnerabilitymay that could lead to information disclosure and/or denial of service. (bsc#1230916)
first Jan 16, 2025 -
Medium max 5.5SUSE-SU-2024:0292-1 1 CVE
Security update for rear1172a
This update for rear1172a fixes the following issues: - CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).
first Jan 31, 2024 -
Medium max 5.5SUSE-SU-2023:2693-1 1 CVE
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a regular rexpression that is vulnerable to ReDOS (bsc#1210617).
first Jun 28, 2023 -
Medium max 5.3SUSE-SU-2023:4708-1 3 CVEs
Security update for go1.20
This update for go1.20 fixes the following issues: Update to go1.20.12: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834). - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4…
first Dec 11, 2023 -
Medium max 4.7SUSE-SU-2025:3956-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62594: Fixed unsigned underflow and division-by-zero that can lead to OOB pointer arithmetic and process crash. (bsc#1252749)
first Nov 5, 2025 -
Medium max 5.3openSUSE-SU-2022:10091-1 1 CVE
Security update for canna
This update for canna fixes the following issues: - CVE-2022-21950: Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets (boo#1199280).
first Aug 16, 2022 -
Medium max 5.3SUSE-SU-2025:0728-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).
first Feb 26, 2025 -
Medium max 6.5openSUSE-SU-2025:15036-1 1 CVE
glow-2.1.0-2.1 on GA media
These are all security issues fixed in the glow-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Apr 27, 2025 -
Medium max 5.5openSUSE-SU-2024:13418-1 1 CVE
traceroute-2.1.3-1.1 on GA media
These are all security issues fixed in the traceroute-2.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2025:1512-1 1 CVE
Security update for apparmor
This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
first May 7, 2025 -
Medium max 6.5SUSE-SU-2022:2367-1 2 CVEs
Security update for squid
This update for squid fixes the following issues: - CVE-2021-46784: Fixed DoS when processing gopher server responses. (bsc#1200907) - CVE-2021-33620: Fixed DoS in HTTP Response processing (bsc#1185923, bsc#1186654)
first Jul 12, 2022 -
Medium max 5.5SUSE-SU-2022:2960-2 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …
first Aug 31, 2022 -
Medium max 6.6openSUSE-SU-2025:0080-1 1 CVE
Security update for trivy
This update for trivy fixes the following issues: Update to version 0.59.1: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerable to Denial of Service (boo#1237618).
first Mar 3, 2025 -
Medium max 4.8SUSE-SU-2019:1724-1 2 CVEs
Security update for php72
This update for php72 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode(…
first Jul 2, 2019 -
Medium max 5.7openSUSE-SU-2025:14797-1 11 CVEs
kernel-firmware-serial-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-serial-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 6.5SUSE-SU-2025:02158-1 1 CVE
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 128.11.1 - CVE-2025-5986: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (MFSA 2025-49) (bsc#1244468).
first Jun 27, 2025 -
Medium max 5.6SUSE-SU-2018:0020-1 1 CVE
Security update for qemu
This update for qemu fixes the following issues: A mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction f…
first Jan 4, 2018 -
Medium max 4.8SUSE-SU-2025:0339-1 1 CVE
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.14+7 (January 2025 CPU): Security fixes: - CVE-2025-21502: Enhance array handling (JDK-8330045, bsc#1236278) Other changes: - JDK-7093691: Nimbus LAF: disabled JComboB…
first Feb 3, 2025 -
Medium max 5.5SUSE-SU-2020:1710-1 5 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: mariadb was updated to version 10.2.32 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue which could …
first Jun 23, 2020 -
Medium max 6.2openSUSE-SU-2025:14816-1 1 CVE
kubernetes1.29-apiserver-1.29.14-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 18, 2025 -
Medium max 6.1openSUSE-SU-2020:0651-1 1 CVE
Security update for python-markdown2
This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379)
first May 11, 2020 -
Medium max 6.8SUSE-SU-2019:13931-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wou…
first Jan 18, 2019 -
Medium max 6.5SUSE-SU-2019:0049-2 13 CVEs
Security update for java-1_7_0-openjdk
This update for java-1_7_0-openjdk to version 7u201 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…
first Apr 12, 2019 -
Medium max 5.5openSUSE-SU-2020:1586-1 9 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0404: In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. Th…
first Oct 1, 2020 -
Medium max 5.5SUSE-SU-2025:02222-1 1 CVE
Security update for libgepub
This update for libgepub fixes the following issues: - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash. (bsc#1244704)
first Jul 4, 2025 -
Medium max 4.5SUSE-SU-2019:1364-2 4 CVEs
Security update for systemd
This update for systemd fixes the following issues: Security issues fixed: - CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348). - CVE-2019-6454: Fixed a denial of service via crafted D-Bus messag…
first Jul 15, 2019 -
Medium max 5.6SUSE-SU-2018:0416-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.114 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may a…
first Feb 9, 2018 -
Medium max 4.3SUSE-SU-2018:3968-1 1 CVE
Security update for tomcat
This update for tomcat to 9.0.12 fixes the following issues: See the full changelog at: http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.12_(markt) Security issues fixed: - CVE-2018-11784: When the default servlet in Apache Tomcat returned a …
first Dec 3, 2018 -
Medium max 6.6SUSE-SU-2023:1873-1 1 CVE
Security update for wayland
This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)
first Apr 18, 2023 -
Medium max 5.3openSUSE-SU-2024:12185-1 4 CVEs
java-11-openj9-11.0.15.0-1.1 on GA media
These are all security issues fixed in the java-11-openj9-11.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2018:1479-1 1 CVE
Security update for kvm
This update for kvm fixes one security issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of …
first May 30, 2018 -
Medium max 5.8SUSE-SU-2022:2993-1 2 CVEs
Security update for freerdp
This update for freerdp fixes the following issues: - Fixed two input validation issues (bsc#1191895): - CVE-2021-41159: Fixed an improper validation of client input for gateway connections. - CVE-2021-41160: Fixed improper region checks that could lead to me…
first Sep 2, 2022