6,765 results · Clear filters · Feed
-
Medium max 5.5SUSE-SU-2023:3438-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-38559: Fixed out-of-bounds read in devn_pcx_write_rle() that could result in DoS (bsc#1213637).
first Aug 28, 2023 -
Medium max 6.5openSUSE-SU-2024:11911-1 1 CVE
etcd-3.5.2-1.1 on GA media
These are all security issues fixed in the etcd-3.5.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2023:1752-1 1 CVE
Security update for terraform-provider-helm
This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure in helm embedded in the package (bsc#1208086).
first Apr 4, 2023 -
Medium max 5.3openSUSE-SU-2020:2063-1 1 CVE
Security update for podman
This update for podman fixes the following issues: Security issue fixed: - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API (bsc#1176804). Non-security issues fixed: - add de…
first Nov 27, 2020 -
Medium max 5.3SUSE-SU-2023:1912-1 1 CVE
Security update for compat-openssl098
This update for compat-openssl098 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
first Apr 19, 2023 -
Medium max 6.4SUSE-SU-2016:2893-1 2 CVEs
Security update for sudo
This update for sudo fixes the following issues: - fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, b…
first Nov 23, 2016 -
Medium max 5.3SUSE-SU-2024:1140-1 1 CVE
Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-27351: Align the patch with the upstream one and make it more robust. (bsc#1220358)
first Apr 8, 2024 -
Medium max 5.9SUSE-SU-2021:0955-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the security issue: * CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extensi…
first Mar 25, 2021 -
Medium max 6.5SUSE-SU-2021:2462-1 4 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…
first Jul 23, 2021 -
Medium max 6.1SUSE-SU-2020:1970-1 4 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: cobbler: - Calculate relative path for kernel and inited when generating grub entry (bsc#1170231) Added: fix-grub2-entry-paths.diff - Fix os-release version detection for SUSE Modified: sles15.patch - Jinja2 template li…
first Jul 21, 2020 -
Medium max 6.5openSUSE-SU-2025:14927-1 1 CVE
kubernetes1.32-apiserver-1.32.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.32-apiserver-1.32.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 25, 2025 -
Medium max 5.9SUSE-SU-2025:3796-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder (bsc#1252282).
first Oct 27, 2025 -
Medium max 5.2SUSE-SU-2025:1321-1 1 CVE
Security update for Multi-Linux Manager 4.3: Server
This update fixes the following issues: spacewalk-java: - Version 4.3.85-0: * CVE-2025-23392: Filter user input in systems list page. (bsc#1239826)
first Apr 16, 2025 -
Medium max 5.5openSUSE-SU-2025:15699-1 1 CVE
python311-djangorestframework-simplejwt-5.5.1-1.1 on GA media
These are all security issues fixed in the python311-djangorestframework-simplejwt-5.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 3, 2025 -
Medium max 5.5openSUSE-SU-2020:2260-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to g…
first Dec 15, 2020 -
Medium max 5.5SUSE-SU-2021:2405-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063) - Fixed a regression with hostnamectl and timedatectl (bsc#1184761) - Fixed permissions for /usr/lib/udev/comp…
first Jul 20, 2021 -
Medium max 5.5openSUSE-SU-2024:12456-1 1 CVE
kernel-devel-6.0.5-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:2599-1 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…
first Jul 29, 2022 -
Medium max 5.9SUSE-SU-2025:02740-1 1 CVE
Security update for tgt
This update for tgt fixes the following issues: - CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework (bsc#1230360)
first Aug 8, 2025 -
Medium max 5.9openSUSE-SU-2024:13592-1 1 CVE
erlang-26.2.1-1.1 on GA media
These are all security issues fixed in the erlang-26.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:3244-1 1 CVE
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Aug 8, 2023 -
Medium max 6.0SUSE-SU-2023:3015-1 3 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-4207: Fixed double fetch in qxl_cursor() that could lead to heap buffer overflow (bsc#1198037). - CVE-2023-0330: Fixed DMA reentrancy issue that could lead to stack overflow (bsc#1207205). - CVE-2023…
first Jul 28, 2023 -
Medium max 4.9openSUSE-SU-2024:14036-1 1 CVE
python310-social-auth-app-django-5.4.1-1.1 on GA media
These are all security issues fixed in the python310-social-auth-app-django-5.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5
Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initia…
first Mar 19, 2025 -
Medium max 6.5SUSE-SU-2023:1877-1 1 CVE
Security update for pgadmin4
This update for pgadmin4 fixes the following issues: - CVE-2023-0241: Fixed a directory traversal vulnerability (bsc#1207464).
first Apr 18, 2023 -
Medium max 5.6openSUSE-SU-2020:0802-1 3 CVEs
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (b…
first Jun 12, 2020 -
Medium max 6.6openSUSE-SU-2025:14840-1 2 CVEs
trivy-0.59.1-1.1 on GA media
These are all security issues fixed in the trivy-0.59.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 26, 2025 -
Medium max 4.9SUSE-SU-2023:4907-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2023-22084: Fixed an easily exploitable vulnerability that allowed high privileged attacker with network access via multiple protocols to compromise MySQL Server (bsc#1217405).
first Dec 19, 2023 -
Medium max 6.3SUSE-SU-2023:0343-1 7 CVEs
Security update for wireshark
This update for wireshark fixes the following issues: - Updated to version 3.6.11 (bsc#1207447): - CVE-2023-0417: Fixed a memory leak in the NFS dissector (bsc#1207669). - CVE-2023-0413: Fixed a crash in the dissection engine (bsc#1207665). - CVE-2023-0416: F…
first Feb 10, 2023 -
Medium max 5.3SUSE-SU-2019:2036-2 8 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol h…
first Aug 1, 2019 -
Medium max 5.3SUSE-SU-2019:1458-1 16 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 60.7.0. * Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut These security issues were fixed (MFSA 2019-15 bsc#11…
first Jun 11, 2019 -
Medium max 6.1SUSE-SU-2024:3228-1 2 CVEs
Security update for clamav
This update for clamav fixes the following issues: - Update to version 0.103.12 - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162) - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file …
first Sep 12, 2024 -
Medium max 4.3SUSE-SU-2024:3502-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session (bsc#1227546)
first Oct 1, 2024 -
Medium max 6.2SUSE-SU-2025:4115-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2025-9714: Fixed inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c (bsc#1249076) - CVE-2025-8732: Fixed infinite recursion in catalog parsing functions when processing malformed…
first Nov 17, 2025 -
Medium max 5.6SUSE-SU-2018:0008-1 1 CVE
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) This new firmware disables branch prediction on AMD family 17h processor to mitigate a attack on the branch predictor that could lead to inf…
first Jan 3, 2018 -
Medium max 6.1SUSE-SU-2019:2748-2 2 CVEs
Security update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-16056: Fixed a parser issue in the email module (bsc#1149955). - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
first Nov 12, 2019 -
Medium max 6.1openSUSE-SU-2023:0384-1 1 CVE
Security update for python-django-grappelli
This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in A…
first Nov 30, 2023 -
Medium max 5.9SUSE-SU-2019:1121-1 3 CVEs
Security update for gnutls
This update for gnutls fixes to version 3.6.7 the following issues: Security issued fixed: - CVE-2019-3836: Fixed an invalid pointer access via malformed TLS1.3 async messages (bsc#1130682). - CVE-2019-3829: Fixed a double free vulnerability in the certificat…
first Apr 30, 2019 -
Medium max 5.3SUSE-SU-2023:1911-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
first Apr 19, 2023 -
Medium max 6.6SUSE-SU-2023:2097-1 1 CVE
Security update for maven and recommended update for antlr3, minlog, sbt, xmvn
This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver sessio…
first May 4, 2023