6,771 results · Clear filters · Feed
-
Medium max 5.9SUSE-SU-2024:0585-1 1 CVE
Security update for python-pycryptodome
This update for python-pycryptodome fixes the following issues: - CVE-2023-52323: Fixed side-channel leakage in RSA decryption by using constant-time (faster) padding decoding for OAEP (bsc#1218564).
first Feb 22, 2024 -
Medium max 5.5SUSE-SU-2023:0693-1 2 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands (bsc#1208790). - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion (bsc#1208793).
first Mar 10, 2023 -
Medium max 5.3SUSE-SU-2022:4078-1 6 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to jdk-11.0.17+8 (October 2022 CPU) - CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480) - CVE-2022-21628: Better HttpServer service (bsc#1204472) - CVE-2022-21624: Enhance icon presen…
first Nov 18, 2022 -
Medium max 5.9SUSE-SU-2022:1447-1 1 CVE
Security update for python-paramiko
This update for python-paramiko fixes the following issues: - CVE-2022-24302: Fixed a race condition between creation and chmod when writing private keys. (bsc#1197279)
first Apr 28, 2022 -
Medium max 5.9SUSE-SU-2025:0072-1 2 CVEs
Security update for logback
This update for logback fixes the following issues: - CVE-2024-12798: Fixed arbitrary code execution via JaninoEventEvaluator (bsc#1234742) - CVE-2024-12801: Fixed Server-Side Request Forgery in SaxEventRecorder (bsc#1234743)
first Jan 10, 2025 -
Medium max 5.3SUSE-SU-2023:3339-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 17, 2023 -
Medium max 6.5openSUSE-SU-2024:13667-1 3 CVEs
pgadmin4-8.2-1.1 on GA media
These are all security issues fixed in the pgadmin4-8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2020:1146-1 7 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus i…
first Apr 29, 2020 -
Medium max 6.0openSUSE-SU-2024:12003-1 1 CVE
git-2.35.3-1.1 on GA media
These are all security issues fixed in the git-2.35.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2024:1174-1 1 CVE
Security update for qt6-base
This update for qt6-base fixes the following issues: - CVE-2024-30161: Fixed QNetworkReply header data access via a dangling pointer (bsc#1221926).
first Apr 9, 2024 -
Medium max 6.5SUSE-SU-2023:2981-1 2 CVEs
Security update for libqt5-qtsvg
This update for libqt5-qtsvg fixes the following issues: - CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654). - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#121129…
first Jul 26, 2023 -
Medium max 6.1SUSE-SU-2022:1509-1 1 CVE
Security update for pcp
This update for pcp fixes the following issues: - CVE-2020-8025: Fixed outdated entries in permissions profiles for /var/lib/pcp/tmp/* (bsc#1171883).
first May 3, 2022 -
Medium max 4.5SUSE-SU-2019:14101-1 2 CVEs
Security update for netpbm
This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). -…
first Jun 21, 2019 -
Medium max 4.4SUSE-SU-2025:02227-1 2 CVEs
Security update for vim
This update for vim fixes the following issues: - CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776). - CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).
first Jul 4, 2025 -
Medium max 5.5SUSE-SU-2024:0253-1 1 CVE
Security update for rear27a
This update for rear27a fixes the following issues: - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUB_RESCUE=Y. (bsc#1218728)
first Jan 26, 2024 -
Medium max 5.1openSUSE-SU-2025:14753-1 1 CVE
fq-0.14.0-1.1 on GA media
These are all security issues fixed in the fq-0.14.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 9, 2025 -
Medium max 6.7openSUSE-SU-2023:0069-1 2 CVEs
Security update for amanda
This update for amanda fixes the following issues: - CVE-2022-37704: fix privilege escalation via rundump (boo#1208033, gh#zmanda/amanda#195) - CVE-2022-37705: fix privilege escalation via runtar suid binary (boo#1208032, gh#zmanda/amanda#194)
first Mar 14, 2023 -
Medium max 5.9openSUSE-SU-2019:1805-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…
first Jul 24, 2019 -
Medium max 6.8SUSE-SU-2023:2334-1 10 CVEs
Security update for tiff
This update for tiff fixes the following issues: Fixed multiple out of bounds read/write security issues: CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023…
first May 31, 2023 -
Medium max 5.9openSUSE-SU-2024:14058-1 1 CVE
kubevirt-container-disk-1.2.2-2.1 on GA media
These are all security issues fixed in the kubevirt-container-disk-1.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 20, 2024 -
Medium max 5.4openSUSE-SU-2019:1589-1 1 CVE
Security update for sssd
This update for sssd fixes the following issues: Security issue fixed: - CVE-2018-16838: Fixed an authentication bypass related to the Group Policy Objects implementation (bsc#1124194). Non-security issues fixed: - Allow defaults sudoRole without sudoUser att…
first Jun 19, 2019 -
Medium max 6.5openSUSE-SU-2019:1128-1 1 CVE
Security update for pdns
This update for pdns fixes the following issue: Security issue fixed: - CVE-2019-3871: Fixed an insufficient validation in the HTTP remote backend which could allow a remote user to cause the HTTP backend to connect to an attacker-specified host instead of th…
first Apr 3, 2019 -
Medium max 5.3SUSE-SU-2023:1942-1 1 CVE
Security update for nodejs16
This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics (bsc#1208744). Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - …
first Apr 21, 2023 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jun 29, 2021 -
Medium max 5.0SUSE-SU-2019:1059-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]
first Apr 27, 2019 -
Medium max 5.9SUSE-SU-2024:0210-1 1 CVE
Security update for erlang
This update for erlang fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218192)
first Jan 24, 2024 -
Medium max 6.2SUSE-SU-2024:3548-1 3 CVEs
Security update for Mesa
This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040) - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041) - CVE-2023-45922: Fixed se…
first Oct 8, 2024 -
Medium max 4.6SUSE-SU-2025:0387-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).
first Feb 7, 2025 -
Medium max 6.1SUSE-SU-2023:2865-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
first Jul 18, 2023 -
Medium max 5.5SUSE-SU-2022:3264-1 15 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upon b…
first Sep 14, 2022 -
Medium max 5.5SUSE-SU-2023:0637-1 2 CVEs
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics whe…
first Mar 7, 2023 -
Medium max 5.9SUSE-SU-2025:0050-1 5 CVEs
Security update for libmfx
This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. (bsc#1226897) - CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898) - CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899) - CVE-20…
first Jan 9, 2025 -
Medium max 4.3SUSE-SU-2024:4423-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc (bsc#1234795)
first Dec 26, 2024 -
Medium max 5.5SUSE-SU-2024:0137-1 1 CVE
Security update for pam
This update for pam fixes the following issues: - CVE-2024-22365: Fixed a local denial of service during PAM login due to a missing check during path manipulation (bsc#1218475).
first Jan 18, 2024 -
Medium max 6.5SUSE-SU-2020:0152-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888).
first Jan 21, 2020 -
Medium max 5.5openSUSE-SU-2024:13001-1 1 CVE
guava-32.0.1-1.1 on GA media
These are all security issues fixed in the guava-32.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1openSUSE-SU-2024:14304-1 1 CVE
libmbedcrypto7-2.28.9-1.1 on GA media
These are all security issues fixed in the libmbedcrypto7-2.28.9-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 3, 2024 -
Medium max 5.9SUSE-SU-2020:14415-1 4 CVEs
Security update for ntp
This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-201…
first Jul 1, 2020 -
Medium max 5.3SUSE-SU-2020:0967-1 1 CVE
Security update for libssh
This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699).
first Apr 9, 2020 -
Medium max 6.5SUSE-SU-2023:1584-1 3 CVEs
Security update for ceph
This update for ceph fixes the following issues: Security issues fixed: - CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837). - CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#…
first Mar 27, 2023