6,771 results · Clear filters · Feed
-
Medium max 6.5SUSE-SU-2024:3204-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)
first Sep 11, 2024 -
Medium max 6.5SUSE-SU-2024:3203-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093)
first Sep 11, 2024 -
Medium max 5.3SUSE-SU-2024:4390-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2024-53008: Fixed HTTP/3 request smuggling via malformed HTTP headers forwarded to a HTTP/1.1 non-compliant back-end server (bsc#1233973) Other fixes: - Update to version 2.8.11
first Dec 20, 2024 -
Medium max 5.3SUSE-SU-2024:4225-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: Fixed Avahi Wide-Area DNS Predictable Transaction IDs (bsc#1233420)
first Dec 6, 2024 -
Medium max 5.9SUSE-SU-2024:3997-1 1 CVE
Security update for python3-wxPython
This update for python3-wxPython fixes the following issues: - CVE-2024-50602: Fixed a denial of service in the vendored libexpat's XML_ResumeParser function (bsc#1232590).
first Nov 15, 2024 -
Medium max 5.3SUSE-SU-2024:3750-1 1 CVE
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097)
first Oct 23, 2024 -
Medium max 4.4SUSE-SU-2024:2151-1 1 CVE
Security update for vte
This update for vte fixes the following issues: - CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)
first Jun 21, 2024 -
Medium max 5.2SUSE-SU-2024:3208-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - Hardening of the patch for the previously fixed CVE-2024-34397. The previous patch introduced a regression which might lead to a use-after-free bug. (bsc#1224044).
first Sep 11, 2024 -
Medium max 5.2SUSE-SU-2024:1833-1 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
first May 29, 2024 -
Medium max 5.9SUSE-SU-2024:2251-1 1 CVE
Security update for booth
This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)
first Jul 1, 2024 -
Medium max 5.3SUSE-SU-2024:1271-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746) - CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747) Other fixes: - jitterentropy: Releas…
first Apr 12, 2024 -
Medium max 6.5SUSE-SU-2024:1453-1 2 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2024-27913: Fixed a denial of service issue via a malformed OSPF LSA packet (bsc#1220548). - CVE-2024-31948: Fixed denial of service due to malformed Prefix SID attribute in BGP Update packet (bsc#1222518).
first Apr 26, 2024 -
Medium max 5.8SUSE-SU-2024:1131-1 3 CVEs
Security update for rubygem-rack
This update for rubygem-rack fixes the following issues: - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). - CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#12202…
first Apr 8, 2024 -
Medium max 4.8SUSE-SU-2025:0435-1 4 CVEs
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u442 build 06 with OpenJ9 0.49.0 virtual machine. - CVE-2024-21235: unauthorized read/write access to data through the Hotspot component. (bsc#1231719) - CVE-2024-21217: partial …
first Feb 11, 2025 -
Medium max 4.8SUSE-SU-2024:3802-1 4 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Updated to version 11.0.25+9 (October 2024 CPU): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702) - CVE-2024-21210: Fixed unauthorized read/write access to data in component …
first Oct 30, 2024 -
Medium max 6.3SUSE-SU-2025:0861-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).
first Mar 14, 2025 -
Medium max 6.3SUSE-SU-2024:4169-1 1 CVE
Security update for python36
This update for python36 fixes the following issues: - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307) Bug fixes: - Remove -IVendor/ from python-config. (bsc#1231795)
first Dec 4, 2024 -
Medium max 5.5SUSE-SU-2024:1906-1 1 CVE
Security update for 389-ds
This update for 389-ds fixes the following issues: - Update to version 2.2.8~git65.347aae6: - CVE-2024-1062: Resolved possible denial of service when audit logging is enabled. (bsc#1219836)
first Jun 3, 2024 -
Medium max 5.5SUSE-SU-2024:0840-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 12, 2024 -
Medium max 5.5SUSE-SU-2024:0813-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 8, 2024 -
Medium max 5.5SUSE-SU-2023:4987-1 1 CVE
Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2023-5752: Fixed injection of arbitrary configuration through Mercurial parameter (bsc#1217353).
first Dec 28, 2023 -
Medium max 5.3SUSE-SU-2023:4519-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 21, 2023 -
Medium max 6.2SUSE-SU-2023:4050-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)
first Oct 11, 2023 -
Medium max 6.5SUSE-SU-2024:0819-1 1 CVE
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).
first Mar 8, 2024 -
Medium max 6.5SUSE-SU-2024:0596-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-51385: Limit the use of shell metacharacters in host- and user names to avoid command injection. (bsc#1218215)
first Feb 22, 2024 -
Medium max 5.9SUSE-SU-2023:4843-1 1 CVE
Security update for python3-cryptography
This update for python3-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
first Dec 14, 2023 -
Medium max 6.5SUSE-SU-2024:0934-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2023-46841: Fixed shadow stack vs exceptions from emulation stubs (XSA-451) (bsc#1219885).
first Mar 19, 2024 -
Medium max 5.3SUSE-SU-2024:0266-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851) - CVE-2023-46840: Fixed VT-d: Failure to quarantine devices in !HVM builds (XSA-450) (bsc#1219080)
first Jan 30, 2024 -
Medium max 6.5SUSE-SU-2023:4653-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573). - CVE-2023-46219: HSTS long file name clears contents (bsc#1217574).
first Dec 6, 2023 -
Medium max 4.2SUSE-SU-2024:1196-1 1 CVE
Security update for xfig
This update for xfig fixes the following issues: - CVE-2023-45920: Fixed NULL pointer dereference when calling XGetWMHints() (bsc#1222057).
first Apr 10, 2024 -
Medium max 4.2SUSE-SU-2023:4468-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).
first Nov 16, 2023 -
Medium max 5.8SUSE-SU-2025:0690-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).
first Feb 24, 2025 -
Medium max 5.9SUSE-SU-2023:4426-1 1 CVE
Security update for python-Django1
This update for python-Django1 fixes the following issues: - CVE-2023-43665: Fixed a denial of service in django.utils.text.Truncator (bsc#1215978).
first Nov 13, 2023 -
Medium max 4.4SUSE-SU-2023:3431-1 1 CVE
Security update for gawk
This update for gawk fixes the following issues: - CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025)
first Aug 24, 2023 -
Medium max 6.6SUSE-SU-2023:4104-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-40660: Fixed a PIN bypass that could be triggered when cards tracked their own login state (bsc#1215762). - CVE-2023-40661: Fixed several memory safety issues that could happen during the card enro…
first Oct 17, 2023 -
Medium max 6.2SUSE-SU-2024:0070-2 1 CVE
Security update for tar
This update for tar fixes the following issues: - CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).
first Jan 9, 2024 -
Medium max 5.9SUSE-SU-2024:1845-1 6 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 25 (bsc#1223470): - CVE-2023-38264: Fixed Object Request Broker (ORB) denial of service (bsc#1224164). - CVE-2024-21094: Fixed C2 compilation fails with '…
first May 29, 2024 -
Medium max 5.3SUSE-SU-2023:3308-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 14, 2023 -
Medium max 5.3SUSE-SU-2023:3244-2 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 23, 2023 -
Medium max 5.3SUSE-SU-2023:3160-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Aug 2, 2023