6,771 results · Clear filters · Feed
-
Medium max 6.1openSUSE-SU-2019:1760-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks (bsc#1137825). This update was imported from the SUSE:S…
first Jul 21, 2019 -
Medium max 6.1SUSE-SU-2019:2209-1 1 CVE
Security update for rubygem-loofah
This update for rubygem-loofah fixes the following issues: - Security issue fixed: - CVE-2018-8048: Update fix to make Loofah::HTML5::Scrub.force_correct_attribute_escaping! callable from other gems (bsc#1086598).
first Aug 23, 2019 -
Medium max 5.9openSUSE-SU-2021:0435-1 1 CVE
Security update for python
This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379). This update was i…
first Mar 17, 2021 -
Medium max 4.7SUSE-SU-2023:4024-1 1 CVE
Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806).
first Oct 10, 2023 -
Medium max 4.2SUSE-SU-2019:1040-1 1 CVE
Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). ldb was updated to version 1.2.4 (b…
first Apr 25, 2019 -
Medium max 6.2openSUSE-SU-2024:12342-1 1 CVE
python39-3.9.14-1.1 on GA media
These are all security issues fixed in the python39-3.9.14-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:0575-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …
first Feb 25, 2022 -
Medium max 5.9SUSE-SU-2018:3781-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: Following security issues have been fixed: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS…
first Nov 16, 2018 -
Medium max 4.0SUSE-SU-2024:2080-1 1 CVE
Security update for libzypp, zypper
This update for libzypp, zypper fixes the following issues: - CVE-2017-9271: Fixed proxy credentials written to log files (bsc#1050625). The following non-security bugs were fixed: - clean: Do not report an error if no repos are defined at all (bsc#1223971)
first Jun 19, 2024 -
Medium max 4.7SUSE-SU-2023:4023-1 1 CVE
Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806).
first Oct 10, 2023 -
Medium max 6.5openSUSE-SU-2022:2173-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (b…
first Jun 24, 2022 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jun 27, 2021 -
Medium max 5.3SUSE-SU-2022:4034-1 3 CVEs
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_90 fixes several issues. The following security issues were fixed: - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma…
first Nov 16, 2022 -
Medium max 5.5SUSE-SU-2022:4394-1 1 CVE
Security update for nautilus
This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives (bsc#1205418).
first Dec 9, 2022 -
Medium max 5.9SUSE-SU-2019:1347-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…
first May 24, 2019 -
Medium max 5.9openSUSE-SU-2019:2265-1 1 CVE
Security update for bind
This update for bind fixes the following issues: Security issue fixed: - CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687) Non-security issue fixed: - bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368) This update was …
first Oct 6, 2019 -
Medium max 6.5SUSE-SU-2020:1119-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry …
first Apr 27, 2020 -
Medium max 5.5SUSE-SU-2018:0571-1 1 CVE
Security update for puppet
This update for puppet fixes the following issues: - CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files were unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easily creat…
first Mar 1, 2018 -
Medium max 4.3openSUSE-SU-2025:14734-1 1 CVE
weechat-4.5.1-1.1 on GA media
These are all security issues fixed in the weechat-4.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 5, 2025 -
Medium max 5.6SUSE-RU-2024:3599-1 1 CVE
Recommended update for python-requests
This update for python-requests fixes the following issue: - Update CVE-2024-35195.patch to allow the usage of 'verify' parameter as a directory (bsc#1225912)
first Oct 11, 2024 -
Medium max 6.5openSUSE-SU-2024:13745-1 1 CVE
xen-4.18.0_06-2.1 on GA media
These are all security issues fixed in the xen-4.18.0_06-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.1SUSE-SU-2019:2771-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)
first Oct 24, 2019 -
Medium max 6.2SUSE-SU-2025:0562-1 1 CVE
Security update for glibc
This update for glibc fixes the following issues: - CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282)
first Feb 17, 2025 -
Medium max 6.1SUSE-SU-2019:2066-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks (bsc#1137825).
first Aug 6, 2019 -
Medium max 6.5SUSE-SU-2019:2959-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0…
first Nov 12, 2019 -
Medium max 5.3openSUSE-SU-2024:11601-1 1 CVE
java-1_8_0-openj9-1.8.0.312-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openj9-1.8.0.312-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.7SUSE-SU-2018:4193-1 1 CVE
Security update for libnettle
This update for libnettle fixes the following issues: Security issues fixed: - CVE-2018-16869: Fixed a leaky data conversion exposing a manager oracle (bsc#1118086)
first Dec 19, 2018 -
Medium max 5.3SUSE-SU-2023:4083-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: Updated to version 3.6.17: - CVE-2023-5371: Fixed a memory leak issue in the RTPS dissector (bsc#1215959).
first Oct 16, 2023 -
Medium max 5.9SUSE-SU-2019:1854-1 6 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces fo…
first Jul 15, 2019 -
Medium max 5.6SUSE-SU-2018:1077-1 4 CVEs
Security update for kvm
This update for kvm fixes the following issues: - This update has the next round of Spectre v2 related patches, which now integrates with corresponding changes in libvirt. A January 2018 release of qemu initially addressed the Spectre v2 vulnerability for KVM…
first Apr 25, 2018 -
Medium max 5.5SUSE-SU-2025:03595-1 1 CVE
Security update for libxslt
This update for libxslt fixes the following issues: - last fix caused a regression, patch was temporary disabled [bsc#1250553]
first Oct 14, 2025 -
Medium max 6.7SUSE-SU-2022:2080-1 18 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266) - CVE-2022-1975: Fixed a sl…
first Jun 14, 2022 -
Medium max 6.3SUSE-SU-2025:0502-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)
first Feb 13, 2025 -
Medium max 5.0SUSE-SU-2024:3717-1 1 CVE
Security update for OpenIPMI
This update for OpenIPMI fixes the following issues: - CVE-2024-42934: Fixed missing check on the authorization type on incoming LAN messages in IPMI simulator (bsc#1229910)
first Oct 18, 2024 -
Medium max 6.5openSUSE-SU-2024:11204-1 1 CVE
python36-CherryPy-18.6.1-1.2 on GA media
These are all security issues fixed in the python36-CherryPy-18.6.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2025:1550-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security: - CVE-2025-27587: Timing side channel vulnerability in the P-384 implementation when used with ECDSA in the PPC architecture (bsc#1240366). - Missing null pointer check before accessing handshake…
first May 16, 2025 -
Medium max 4.0openSUSE-SU-2023:0259-1 1 CVE
Security update for python-GitPython
This update for python-GitPython fixes the following issues: - CVE-2023-41040: Fixed directory traversal attack vulnerability (boo#1214810)
first Sep 25, 2023 -
Medium max 6.0SUSE-SU-2024:2273-2 1 CVE
Security update for podman
This update for podman fixes the following issues: - CVE-2024-6104: Fixed a potential leak of sensitive information on HTTP log file (bsc#1227052).
first Aug 6, 2024 -
Medium max 6.4openSUSE-SU-2024:12997-1 1 CVE
ntp-4.2.8p17-1.1 on GA media
These are all security issues fixed in the ntp-4.2.8p17-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2019:1284-1 5 CVEs
Security update for ceph
This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE…
first Apr 27, 2019