6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2024:4252-1 5 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU (bsc#1232064): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702,JDK-8328286) - CVE-2024-21210:…
first Dec 6, 2024 -
Medium max 5.4SUSE-SU-2020:2943-1 2 CVEs
Security update for php72
This update for php72 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-e…
first Oct 16, 2020 -
Medium max 5.5SUSE-SU-2023:0611-1 1 CVE
Security update for pkgconf
This update for pkgconf fixes the following issues: - CVE-2023-24056: Fixed unbounded string expansion due to incorrect checks in libpkgconf/tuple.c (bsc#1207394).
first Mar 3, 2023 -
Medium max 6.5openSUSE-SU-2024:13660-1 3 CVEs
kernel-devel-6.7.4-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-FU-2024:2078-1 5 CVEs
Feature update for rabbitmq-server313, erlang26, elixir115
This update for rabbitmq-server313, erlang26, elixir115 fixes the following issues: rabbitmq-server was implemented with a parallel versioned RPM package at version 3.13.1 (jsc#PED-8414): - Security issues fixed: * CVE-2021-22116: Fixed improper input validat…
first Jun 19, 2024 -
Medium max 5.5SUSE-SU-2023:2356-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2023-2700: Fixed a memory leak that could be triggered by repeatedly querying an SR-IOV PCI device's capabilities (bsc#1211390). Non-security fixes: - Fixed a potential crash during driver cleanup (bsc…
first Jun 2, 2023 -
Medium max 5.5SUSE-SU-2020:2240-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Esc…
first Aug 25, 2020 -
Medium max 5.9SUSE-SU-2023:0223-1 1 CVE
Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).
first Feb 1, 2023 -
Medium max 5.5SUSE-SU-2023:0295-1 2 CVEs
Security update for redis
This update for redis fixes the following issues: - CVE-2022-35977: Fixed an integer overflow that could allow authenticated users to cause a crash (bsc#1207202). - CVE-2023-22458: Fixed a missing check that could allow authenticated users to cause a crash (b…
first Feb 7, 2023 -
Medium max 6.5SUSE-SU-2024:0917-1 5 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20240312 release. (bsc#1221323) - CVE-2023-39368: Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potent…
first Mar 18, 2024 -
Medium max 6.5SUSE-SU-2019:1398-2 2 CVEs
Security update for libpng16
This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211). - CVE-2018-13785: Fixed a wrong calculation of …
first Jul 5, 2019 -
Medium max 6.5SUSE-SU-2022:3593-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
first Oct 14, 2022 -
Medium max 6.3openSUSE-SU-2024:13206-1 2 CVEs
libopenvswitch-3_1-0-3.1.0-15.1 on GA media
These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-15.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2019:2960-1 6 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core…
first Nov 12, 2019 -
Medium max 6.3SUSE-SU-2024:3861-1 1 CVE
Security update for uwsgi
This update for uwsgi fixes the following issues: - CVE-2024-24795: Fixed HTTP Response Splitting in multiple modules (bsc#1222332)
first Nov 1, 2024 -
Medium max 5.9openSUSE-SU-2021:1390-1 1 CVE
Security update for ssh-audit
This update for ssh-audit fixes the following issues: ssh-audit was updated to version 2.5.0 * Fixed crash when running host key tests. * Handles server connection failures more gracefully. * Now prints JSON with indents when -jj is used (useful for debugging…
first Oct 20, 2021 -
Medium max 5.3openSUSE-SU-2024:13006-1 2 CVEs
libQt5Bootstrap-devel-static-32bit-5.15.10+kde129-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.10+kde129-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:12966-1 1 CVE
libopenssl-1_0_0-devel-1.0.2u-16.1 on GA media
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-16.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.7SUSE-SU-2025:1452-1 1 CVE
Security update for libva
This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: - CVE-2023-39929: Uncontrolled search path may allow an authenticated user to escalate privilege via local access (bsc#1224413, jsc#PED-11066) T…
first May 5, 2025 -
Medium max 5.9openSUSE-SU-2024:14444-1 1 CVE
gama-2.31-1.1 on GA media
These are all security issues fixed in the gama-2.31-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 31, 2024 -
Medium max 5.8openSUSE-SU-2019:2499-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666). This update was imported from the SUSE:SLE-15-SP1:Update update project.
first Nov 13, 2019 -
Medium max 5.0SUSE-SU-2019:0471-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: Security issue fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks…
first Feb 22, 2019 -
Medium max 5.5openSUSE-SU-2024:13494-1 1 CVE
libtiff-devel-32bit-4.6.0-3.1 on GA media
These are all security issues fixed in the libtiff-devel-32bit-4.6.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2023:2541-1 2 CVEs
Security update for kubernetes1.18
This update for kubernetes1.18 fixes the following issues: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin (bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy imposed by the ServiceAcco…
first Jun 19, 2023 -
Medium max 5.5SUSE-SU-2018:1614-2 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through (bsc#1092885)
first Oct 18, 2018 -
Medium max 5.3openSUSE-SU-2025:14711-1 1 CVE
hauler-1.1.1-2.1 on GA media
These are all security issues fixed in the hauler-1.1.1-2.1 package on the GA media of openSUSE Tumbleweed.
first Jan 29, 2025 -
Medium max 4.8openSUSE-SU-2024:14263-1 3 CVEs
java-17-openj9-17.0.12.0-1.1 on GA media
These are all security issues fixed in the java-17-openj9-17.0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 13, 2024 -
Medium max 6.7openSUSE-SU-2020:1379-1 1 CVE
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14386: Fixed an overflow in tpacket_rcv in af_packet that could lead to a local privilege escalation ( bsc#1176069). The fol…
first Sep 7, 2020 -
Medium max 6.3SUSE-SU-2023:1762-1 1 CVE
Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2023-1161: Fixed crash in ISO 15765 and ISO 10681 dissector (bsc#1208914). Update to 3.6.12: * https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html
first Apr 4, 2023 -
Medium max 6.5openSUSE-SU-2024:12926-1 1 CVE
distribution-registry-2.8.2-1.1 on GA media
These are all security issues fixed in the distribution-registry-2.8.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2023:1571-1 1 CVE
Security update for helm
This update for helm fixes the following issues: Update to version 3.11.1 (bsc#1208084): - CVE-2023-25165: Fixed a information disclosure problem via getHostByName injection inside a chart to get values to a malicious DNS server.
first Mar 24, 2023 -
Medium max 4.3SUSE-SU-2022:2582-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031: Fixe…
first Jul 29, 2022 -
Medium max 5.0SUSE-SU-2019:14098-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets)
first Jun 21, 2019 -
Medium max 6.2SUSE-SU-2022:1297-1 1 CVE
Security update for swtpm
This update for swtpm fixes the following issues: - Update to version 0.5.3 - CVE-2022-23645: Check header size indicator against expected size (bsc#1196240).
first Apr 21, 2022 -
Medium max 5.3openSUSE-SU-2024:12720-1 2 CVEs
java-15-openjdk-15.0.10.0-1.1 on GA media
These are all security issues fixed in the java-15-openjdk-15.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1SUSE-SU-2023:2638-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).
first Jun 26, 2023 -
Medium max 6.5openSUSE-SU-2020:0801-1 25 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores oth…
first Jun 12, 2020 -
Medium max 6.5SUSE-SU-2024:2258-1 1 CVE
Security update for libreoffice
This update for libreoffice fixes the following issues: Libreoffice was updated to version 24.2.4.2: - Release notes: * https://wiki.documentfoundation.org/Releases/24.2.1/RC1 * https://wiki.documentfoundation.org/Releases/24.2.1/RC2 - Security issues fixed: …
first Jul 2, 2024 -
Medium max 6.0SUSE-SU-2025:02016-1 1 CVE
Security update for screen
This update for screen fixes the following issues: Security issues fixed: - CVE-2025-46802: temporary `chmod` of a user's TTY to mode 0666 when attempting to attach to a multi-user session allows for TTY hijacking (bsc#1242269). Other issues fixed: - Use TTY …
first Jun 19, 2025 -
Medium max 6.8SUSE-SU-2022:0908-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135).
first Mar 21, 2022