6,771 results · Clear filters · Feed
-
Medium max 4.3SUSE-SU-2022:2659-1 5 CVEs
Security update for ldb, samba
This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031:…
first Aug 3, 2022 -
Medium max 5.5SUSE-SU-2020:3082-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permi…
first Oct 29, 2020 -
Medium max 6.5SUSE-SU-2016:1195-1 1 CVE
Security update for python-tornado
The python-tornado module was updated to version 4.2.1, which brings several fixes, enhancements and new features. The following security issues have been fixed: - A path traversal vulnerability in StaticFileHandler, in which files whose names started with th…
first May 2, 2016 -
Medium max 6.5SUSE-SU-2024:3211-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)
first Sep 11, 2024 -
Medium max 4.6SUSE-SU-2025:0356-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
first Feb 4, 2025 -
Medium max 5.9SUSE-SU-2019:1296-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: ucode-intel was updated to official QSR 2019.1 microcode release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) ---- new platforms ---------------------------------------- VLV …
first May 21, 2019 -
Medium max 5.3SUSE-SU-2021:0607-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…
first Feb 25, 2021 -
Medium max 6.5openSUSE-SU-2024:10869-1 38 CVEs
jasper-2.0.33-1.2 on GA media
These are all security issues fixed in the jasper-2.0.33-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2024:3959-1 1 CVE
Security update for python312
This update for python312 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).
first Nov 8, 2024 -
Medium max 5.5openSUSE-SU-2024:13397-1 1 CVE
ruby3.2-rubygem-activesupport-7.0-7.0.8-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-activesupport-7.0-7.0.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2020:0793-1 9 CVEs
Security update for libexif
This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exi…
first Jun 11, 2020 -
Medium max 5.5openSUSE-SU-2024:12254-1 1 CVE
ucode-intel-20220809-1.1 on GA media
These are all security issues fixed in the ucode-intel-20220809-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2021:0519-1 3 CVEs
Security update for hostapd
This update for hostapd fixes the following issues: - CVE-2021-30004: forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (boo#1184348) - CVE-2020-12695: UPnP SUBSCRIBE misbehavior in hostapd WPS AP …
first Apr 8, 2021 -
Medium max 5.9SUSE-SU-2024:0972-1 1 CVE
Security update for jbcrypt, trilead-ssh2
This update for jbcrypt, trilead-ssh2 fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).
first Mar 22, 2024 -
Medium max 5.5openSUSE-SU-2024:12523-1 2 CVEs
freerdp-2.9.0-1.1 on GA media
These are all security issues fixed in the freerdp-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2025:0066-1 1 CVE
Security update for apptainer
This update for apptainer fixes the following issues: - Update to version 1.3.6 - CVE-2024-28180: Fixed an improper handling of highly compressed data in go-jose. (bsc#1235211)
first Jan 10, 2025 -
Medium max 6.5SUSE-SU-2024:1152-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-28746: Register File Data Sampling (bsc#1221332) - CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334)
first Apr 8, 2024 -
Medium max 4.3SUSE-SU-2020:2996-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582) - Don't give write permissions for the tomcat group on files and directories where it's not needed (bsc#1172562) - Use %tmpfiles_create macro in %po…
first Oct 22, 2020 -
Medium max 5.5SUSE-SU-2023:0560-1 1 CVE
Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_112 fixes one issue. The following security issue was fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314).
first Feb 28, 2023 -
Medium max 6.5SUSE-SU-2023:2470-1 3 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - Update to version 3.0.8 (bsc#1207541). - CVE-2022-40735: Fixed remote trigger of expensive server-side DHE modular-exponentiation with long exponents in Diffie-Hellman Key Agreement Protocol (bsc#1205476…
first Jun 8, 2023 -
Medium max 4.0SUSE-SU-2025:4158-1 3 CVEs
Security update for cups-filters
This update for cups-filters fixes the following issues: - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374) - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373) - CVE-2025-64524: Fixed out-of-bounds w…
first Nov 21, 2025 -
Medium max 6.5SUSE-SU-2024:1446-1 2 CVEs
Security update for php8
This update for php8 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checked…
first Apr 26, 2024 -
Medium max 6.0openSUSE-SU-2024:10689-1 1 CVE
cni-plugins-0.9.1-1.3 on GA media
These are all security issues fixed in the cni-plugins-0.9.1-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2024:11407-1 1 CVE
ssh-audit-2.5.0-1.2 on GA media
These are all security issues fixed in the ssh-audit-2.5.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2025:14725-1 1 CVE
helm-3.17.0-2.1 on GA media
These are all security issues fixed in the helm-3.17.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 3, 2025 -
Medium max 5.9openSUSE-SU-2021:4118-1 1 CVE
Security update for log4j
This update for log4j fixes the following issues: - Update to 2.17.0 - CVE-2021-45105: Apache Log4j2 does not always protect from infinite recursion in lookup evaluation. (bsc#1193887, bsc#1193888)
first Dec 20, 2021 -
Medium max 4.3SUSE-SU-2022:2621-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
first Aug 2, 2022 -
Medium max 4.0SUSE-SU-2021:3530-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify soc…
first Oct 27, 2021 -
Medium max 5.0openSUSE-SU-2021:2412-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. (bsc#1188282)
first Jul 20, 2021 -
Medium max 6.5openSUSE-SU-2024:14253-1 2 CVEs
python39-3.9.19-6.1 on GA media
These are all security issues fixed in the python39-3.9.19-6.1 package on the GA media of openSUSE Tumbleweed.
first Aug 9, 2024 -
Medium max 5.5SUSE-SU-2023:0199-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image (bsc#1207413).
first Jan 27, 2023 -
Medium max 5.3openSUSE-SU-2024:13430-1 1 CVE
python-Twisted-doc-22.10.0-9.1 on GA media
These are all security issues fixed in the python-Twisted-doc-22.10.0-9.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2023:4064-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).
first Oct 12, 2023 -
Medium max 6.5openSUSE-SU-2024:13285-1 1 CVE
screen-4.9.1-1.1 on GA media
These are all security issues fixed in the screen-4.9.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.0SUSE-SU-2024:3062-1 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed sensitive information disclosure in log files in go-retryablehttp (bsc#1227052)
first Aug 30, 2024 -
Medium max 5.5
sca-patterns-sle15-1.0.8-2.2 on GA media
These are all security issues fixed in the sca-patterns-sle15-1.0.8-2.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2019:1405-1 8 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 host information, which can be considered…
first May 17, 2019 -
Medium max 5.5SUSE-SU-2023:0201-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2022-4415: Fixed an issue where users could access coredumps with changed uid, gid or capabilities (bsc#1205000). Non-security fixes: - Enabled the pstore service (jsc#PED-2663). - Fixed an issue acces…
first Jan 27, 2023 -
Medium max 6.7SUSE-SU-2022:2116-1 17 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) -…
first Jun 20, 2022 -
Medium max 4.7SUSE-SU-2024:2785-1 2 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update to version 20240728: * amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351 * Revert 'iwlwifi: update ty/So/Ma firmwares for core89-58 release' * linux-firmware: update firmware for MT7922 …
first Aug 6, 2024