6,771 results · Clear filters · Feed
-
Medium max 5.6SUSE-SU-2018:0285-1 3 CVEs
Security update for SUSE Manager Server 3.0
This update fixes the following issues: !!!NOTE: For PostgreSQL, schema migrations could take a long time (hours), depending on the number of synced !!! !!!packages and number of rows which requires cleanup. Please refer to the release notes for more informat…
first Jan 30, 2018 -
Medium max 6.5openSUSE-SU-2024:13844-1 1 CVE
libQt6Concurrent6-6.7.0-1.1 on GA media
These are all security issues fixed in the libQt6Concurrent6-6.7.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:1875-1 1 CVE
Security update for nodejs14
This update for nodejs14 fixes the following issues: - CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
first Apr 18, 2023 -
Medium max 6.3openSUSE-SU-2024:12471-1 1 CVE
go1.18-1.18.8-1.1 on GA media
These are all security issues fixed in the go1.18-1.18.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.8openSUSE-SU-2025:14651-1 1 CVE
python311-Django4-4.2.18-1.1 on GA media
These are all security issues fixed in the python311-Django4-4.2.18-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 15, 2025 -
Medium max 4.7SUSE-SU-2025:1511-1 1 CVE
Security update for apparmor
This update for apparmor fixes the following issues: - Add dac_read_search capability for unix_chkpwd to allow it to read the shadow file even if it has 000 permissions. This is needed after the CVE-2024-10041 fix in PAM. (bsc#1241678)
first May 7, 2025 -
Medium max 4.1openSUSE-SU-2025:14886-1 1 CVE
stalld-1.19.8-1.1 on GA media
These are all security issues fixed in the stalld-1.19.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 12, 2025 -
Medium max 5.5SUSE-SU-2022:2647-2 3 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2022-2056: Fixed a division by zero denial of service (bsc#1201176). - CVE-2022-2057: Fixed a division by zero denial of service (bsc#1201175). - CVE-2022-2058: Fixed a division by zero denial of service …
first Aug 3, 2022 -
Medium max 6.1SUSE-SU-2025:3779-1 2 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-43718: fixed uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files (bsc#1250908) - CVE-2025-52885: improved pointer handling that could have led to …
first Oct 24, 2025 -
Medium max 6.6SUSE-SU-2023:4089-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-40660: Fixed a PIN bypass that could be triggered when cards tracked their own login state (bsc#1215762). - CVE-2023-40661: Fixed several memory safety issues that could happen during the card enro…
first Oct 16, 2023 -
Medium max 5.5SUSE-RU-2020:2204-1 1 CVE
Bugfixes on cilium, gangway and skuba and security fix for Kubernetes (cve-2020-8557)
= Required Actions == Kubernetes (Security fix) This fix will be applied to the kubelet daemon running on the nodes by `skuba-update`. See https://documentation.suse.com/suse-caasp/4.2/html/caasp-admin/_cluster_updates.html#_base_os_updates for more details. …
first Aug 11, 2020 -
Medium max 6.1SUSE-SU-2015:2064-1 2 CVEs
Security update for openstack-dashboard
This update provides fixes and enhancements for openstack-dashboard, crowbar-barclamp-nova_dashboard and python-django_openstack_auth. openstack-dashboard: - Reset flavors for other than 'Boot from Image' source type. (bsc#945515) - Add deactivated status for…
first Nov 20, 2015 -
Medium max 5.7openSUSE-SU-2025:14795-1 11 CVEs
kernel-firmware-radeon-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-radeon-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.5openSUSE-SU-2024:11990-1 3 CVEs
kernel-devel-5.17.2-1.1 on GA media
These are all security issues fixed in the kernel-devel-5.17.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2018:2809-1 1 CVE
Security update for python-Django1
This update for python-Django1 to version 1.11.15 fixes the following issues: The following security vulnerability was fixed: - CVE-2018-14574: Fixed an open redirect possibility in CommonMiddleware (boo#1102680) The following other bugs were fixed: - Fixed W…
first Aug 16, 2018 -
Medium max 4.2SUSE-SU-2019:1195-1 1 CVE
Security update for samba
This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user (bsc#1131060). Non-security issue fixed: - Backport changes to support quotas with SMB2 (bsc#1106119).
first May 8, 2019 -
Medium max 5.3SUSE-SU-2021:14707-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).
first Apr 28, 2021 -
Medium max 4.8openSUSE-SU-2019:1573-1 16 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of ren…
first Jun 18, 2019 -
Medium max 5.3openSUSE-SU-2024:12603-1 1 CVE
cmctl-1.10.2-1.1 on GA media
These are all security issues fixed in the cmctl-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4SUSE-SU-2024:4358-1 1 CVE
Security update for python-urllib3_1
This update for python-urllib3_1 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request header not stripped during cross-origin redirects (bsc#1226469)
first Dec 17, 2024 -
Medium max 6.5openSUSE-SU-2020:0642-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). This …
first May 9, 2020 -
Medium max 5.3SUSE-SU-2023:1876-1 1 CVE
Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
first Apr 18, 2023 -
Medium max 6.8openSUSE-SU-2024:12905-1 1 CVE
gvim-9.0.1504-1.1 on GA media
These are all security issues fixed in the gvim-9.0.1504-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2025:4352-1 2 CVEs
Security update for python310
This update for python310 fixes the following issues: Update to 3.10.19: - CVE-2025-6075: Fixed simple quadratic complexity vulnerabilities of os.path.expandvars(). (bsc#1252974) - CVE-2025-8291: Check the validity the ZIP64 End of Central Directory (EOCD). (…
first Dec 10, 2025 -
Medium max 4.0SUSE-SU-2025:4323-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)
first Dec 8, 2025 -
Medium max 5.9openSUSE-SU-2025:15786-1 2 CVEs
postgresql17-17.7-1.1 on GA media
These are all security issues fixed in the postgresql17-17.7-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 28, 2025 -
Medium max 4.6SUSE-SU-2025:4309-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)
first Nov 28, 2025 -
Medium max 5.9SUSE-SU-2025:3918-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
first Nov 3, 2025 -
Medium max 4.7SUSE-SU-2025:03368-1 2 CVEs
Security update for libssh
This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference whe…
-
Medium max 5.9SUSE-SU-2025:03270-1 1 CVE
Security update for krb5
This update for krb5 fixes the following issues: - CVE-2025-3576: weakness in the MD5 checksum design allows for spoofing of GSSAPI-protected messages that are using RC4-HMAC-MD5 (bsc#1241219). Krb5 as very old protocol supported quite a number of ciphers tha…
-
Medium max 5.1SUSE-SU-2025:02586-1 1 CVE
Security update for rav1e
This update for rav1e fixes the following issues: - CVE-2024-12224: Fixed improper validation of unsafe equivalence in punycode. (bsc#1243855)
-
Medium max 5.9SUSE-SU-2025:01783-2 1 CVE
Security update for postgresql17
This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…
first Jul 21, 2025 -
Medium max 5.5SUSE-SU-2025:02324-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-52886: Fixed an integer overflow that can lead to a use-after-free. (bsc#1245625)
-
Medium max 5.3SUSE-SU-2025:02205-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-47081: fixes netrc credential leak (bsc#1244039).
first Jul 2, 2025 -
Medium max 5.9SUSE-SU-2025:01748-2 1 CVE
Security update for postgresql15
This update for postgresql15 fixes the following issues: Upgrade to 15.13: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.or…
first Jun 12, 2025 -
Medium max 6.5SUSE-SU-2025:01888-1 2 CVEs
Security update for nbdkit
This update for nbdkit fixes the following issues: Update to version 1.40.6. Security fixes: - CVE-2025-47712: integer overflow in blocksize filter when processing client block status requests larger than 2**32 will trigger an assertion failure and cause a de…
-
Medium max 6.5SUSE-SU-2025:01776-2 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
first Jun 9, 2025 -
Medium max 4.2SUSE-SU-2025:01760-1 1 CVE
Security update for slurm
This update for slurm fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).
first May 29, 2025 -
Medium max 5.9openSUSE-SU-2025:15139-1 1 CVE
postgresql15-15.13-1.1 on GA media
These are all security issues fixed in the postgresql15-15.13-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 5.9openSUSE-SU-2025:15138-1 1 CVE
postgresql14-14.18-1.1 on GA media
These are all security issues fixed in the postgresql14-14.18-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025