6,765 results · Clear filters · Feed
-
Medium max 6.0SUSE-SU-2026:0643-1 6 CVEs
Security update for python39
This update for python39 fixes the following issues: - CVE-2025-11468: Fixed a header injection when folding a long comment in an email header containing exclusively unfoldable characters. (bsc#1257029) - CVE-2026-0672: Fixed a HTTP header injection via user-…
first Feb 25, 2026 -
Medium max 6.0SUSE-SU-2026:0642-1 5 CVEs
Security update for python313
This update for python313 fixes the following issues: Update to Python 3.13.12 - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel. (bsc#1257031) - CVE-2026-0865: Fixed a bug where a u…
-
Medium max 6.8SUSE-SU-2026:0620-1 3 CVEs
Security update for snpguest
This update for snpguest fixes the following issues: Update to version 0.10.0. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927). - CVE-2025-3416: openssl: Use-…
first Feb 24, 2026 -
Medium max 6.5SUSE-SU-2026:0619-1 1 CVE
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2024-2182: Fixed insufficient validation of incoming BFD packets may lead to denial of service (bsc#1255435)
first Feb 24, 2026 -
Medium max 6.0SUSE-SU-2026:0613-1 6 CVEs
Security update for python310
This update for python310 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cook…
first Feb 24, 2026 -
Medium max 6.0SUSE-SU-2026:0612-1 6 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cooki…
first Feb 24, 2026 -
Medium max 6.5SUSE-SU-2026:0577-1 3 CVEs
Security update for avahi
This update for avahi fixes the following issues: - CVE-2025-68276: Fixed refuse to create wide-area record browsers when wide-area is off (bsc#1256498) - CVE-2025-68471: Fixed DoS bug by changing assert to return (bsc#1256500) - CVE-2025-68468: Fixed DoS bug…
first Feb 18, 2026 -
Medium max 6.2SUSE-SU-2026:0570-1 5 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…
first Feb 17, 2026 -
Medium max 5.3SUSE-SU-2026:0479-1 2 CVEs
Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container, virt-synchronization-controller-container
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…
first Feb 12, 2026 -
Medium max 6.8SUSE-SU-2026:0481-1 1 CVE
Security update for openCryptoki
This update for openCryptoki fixes the following issues: - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).
first Feb 12, 2026 -
Medium max 6.8SUSE-SU-2026:0453-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Feb 11, 2026 -
Medium max 6.8SUSE-SU-2026:0452-1 1 CVE
Security update for rust-keylime
This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…
first Feb 11, 2026 -
Medium max 6.9openSUSE-SU-2026:20182-1 1 CVE
Security update for cockpit
This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026 -
Medium max 6.9openSUSE-SU-2026:20181-1 1 CVE
Security update for cockpit-subscriptions
This update for cockpit-subscriptions fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).
first Feb 6, 2026 -
Medium max 6.9openSUSE-SU-2026:10155-1 1 CVE
cockpit-podman-119.1-2.1 on GA media
These are all security issues fixed in the cockpit-podman-119.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:0395-1 1 CVE
Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to v3.51.2: - CVE-2025-7709: Fixed an integer overflow in the FTS5 extension. (bsc#1254670)
first Feb 6, 2026 -
Medium max 5.9openSUSE-SU-2026:10158-1 1 CVE
nginx-1.29.5-1.1 on GA media
These are all security issues fixed in the nginx-1.29.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
Medium max 6.9openSUSE-SU-2026:10154-1 1 CVE
cockpit-354-3.1 on GA media
These are all security issues fixed in the cockpit-354-3.1 package on the GA media of openSUSE Tumbleweed.
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:0397-1 1 CVE
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324)
first Feb 6, 2026 -
Medium max 6.9SUSE-SU-2026:0396-1 1 CVE
Security update for cockpit-machines
This update for cockpit-machines fixes the following issues: - CVE-2025-13465: Update the lodash dependencie to avoid prototype pollution. (bsc#1257324)
first Feb 6, 2026 -
Medium max 5.3SUSE-SU-2025:02991-1 1 CVE
Security update for firebird
This update for firebird fixes the following issues: - CVE-2025-54989: Fixed NULL pointer dereference in XDR message parsing leading to denial-of-service (ZDI-CAN-26486, bsc#1248143)
first Aug 27, 2025 -
Medium max 6.2openSUSE-SU-2025:15134-1 7 CVEs
gnuplot-6.0.2-3.1 on GA media
These are all security issues fixed in the gnuplot-6.0.2-3.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 5.9openSUSE-SU-2025:15140-1 1 CVE
postgresql16-16.9-1.1 on GA media
These are all security issues fixed in the postgresql16-16.9-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 4.6SUSE-SU-2025:4180-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)
first Nov 24, 2025 -
Medium max 5.6openSUSE-SU-2025:15142-1 1 CVE
xen-4.20.0_12-1.1 on GA media
These are all security issues fixed in the xen-4.20.0_12-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 5.9openSUSE-SU-2025:15137-1 1 CVE
postgresql13-13.21-1.1 on GA media
These are all security issues fixed in the postgresql13-13.21-1.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 5.9openSUSE-SU-2025:15141-1 1 CVE
python314-3.14.0~b1-3.1 on GA media
These are all security issues fixed in the python314-3.14.0~b1-3.1 package on the GA media of openSUSE Tumbleweed.
first May 20, 2025 -
Medium max 4.6openSUSE-SU-2025:15039-1 1 CVE
cmctl-2.2.0-1.1 on GA media
These are all security issues fixed in the cmctl-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 30, 2025 -
Medium max 4.5SUSE-SU-2025:0722-1 6 CVEs
Security update for vim
This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command (bsc#1229685). - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer …
first Feb 26, 2025 -
Medium max 5.5SUSE-SU-2018:1374-1 3 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive several security fixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Variant 4' …
first May 22, 2018 -
Medium max 6.3SUSE-SU-2023:3813-1 1 CVE
Security update for rubygem-actionview-5_1
This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2023-23913: Fixed DOM Based Cross-site Scripting in rails-ujs (bsc#1209826).
first Sep 27, 2023 -
Medium max 6.5openSUSE-SU-2025:14866-1 1 CVE
libtinyxml2-10-10.1.0-1.1 on GA media
These are all security issues fixed in the libtinyxml2-10-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 10, 2025 -
Medium max 5.0openSUSE-SU-2019:1751-1 1 CVE
Security update for fence-agents
This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Added aliyun fence agent (bsc#1139913). This update was i…
first Jul 20, 2019 -
Medium max 6.5openSUSE-SU-2020:0845-1 3 CVEs
Security update for chromium
This update for chromium fixes the following issues: Update to version 83.0.4103.106 (boo#1173029): * CVE-2020-6505: Use after free in speech * CVE-2020-6506: Insufficient policy enforcement in WebView * CVE-2020-6507: Out of bounds write in V8 - Enforce to n…
first Jun 22, 2020 -
Medium max 6.3SUSE-SU-2023:1931-1 3 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2023-1992: Fixed RPCoRDMA dissector crash (bsc#1210405). - CVE-2023-1993: Fixed LISP dissector large loop (bsc#1210404). - CVE-2023-1994: Fixed GQUIC dissector crash (bsc#1210403). Update to 3.6.13: …
first Apr 20, 2023 -
Medium max 5.5SUSE-SU-2017:0661-1 11 CVEs
Security update for qemu
This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows…
first Mar 10, 2017 -
Medium max 5.3openSUSE-SU-2024:14147-1 1 CVE
python-marshmallow-doc-3.20.2-2.2 on GA media
These are all security issues fixed in the python-marshmallow-doc-3.20.2-2.2 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 5.5SUSE-SU-2020:2331-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Esc…
first Aug 26, 2020 -
Medium max 6.5SUSE-SU-2016:2699-1 11 CVEs
Security update for curl
This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646) - CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645) - CVE-2016-8622: URL unescape heap overflow via integer truncation (bsc#1005…
first Nov 2, 2016 -
Medium max 5.5SUSE-SU-2024:2468-1 1 CVE
Security update for traceroute
This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).
first Jul 12, 2024