6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2020:14587-1 8 CVEs
Security update for java-1_7_0-ibm
This update for java-1_7_0-ibm fixes the following issues: - Update to Java 7.0 Service Refresh 10 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 *…
first Dec 22, 2020 -
Medium max 5.8SUSE-SU-2020:0649-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12-SP4 kernel-RT was updated to 4.12.14 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8992: Fixed an issue in ext4_protect_reserved_inode in fs/ext4/block_validity.c that allowed attacke…
first Mar 12, 2020 -
Medium max 5.5SUSE-SU-2024:1590-1 1 CVE
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852).
first May 10, 2024 -
Medium max 5.6SUSE-SU-2018:0171-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous u…
first Jan 22, 2018 -
Medium max 5.9openSUSE-SU-2024:14000-1 1 CVE
traefik-3.0.1-1.1 on GA media
These are all security issues fixed in the traefik-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.7SUSE-SU-2019:3064-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199).
first Nov 25, 2019 -
Medium max 5.3SUSE-SU-2023:3865-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache director…
first Sep 28, 2023 -
Medium max 6.9SUSE-SU-2024:4393-1 2 CVEs
Security update for python-grpcio
This update for python-grpcio fixes the following issues: - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821) - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919)
first Dec 20, 2024 -
Medium max 5.5SUSE-SU-2017:2326-1 7 CVEs
Security update for xen
This update for xen to version 4.7.3 fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information (XSA-226, bs…
first Sep 1, 2017 -
Medium max 6.5openSUSE-SU-2019:2527-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode on…
first Nov 18, 2019 -
Medium max 5.3openSUSE-SU-2021:1502-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance (bsc#1192146). This update was imported from the SUSE:SLE-15:Update update project.
first Nov 24, 2021 -
Medium max 4.3openSUSE-SU-2019:1988-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853). This update was imported from the SUSE:SLE-15:Update update pr…
first Aug 23, 2019 -
Medium max 4.8SUSE-SU-2020:2404-1 1 CVE
Security update for php74
This update for php74 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).
first Sep 1, 2020 -
Medium max 5.3SUSE-SU-2023:4490-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588)
first Nov 20, 2023 -
Medium max 5.9SUSE-SU-2024:0601-1 1 CVE
Security update for python-pycryptodome
This update for python-pycryptodome fixes the following issues: - CVE-2023-52323: Fixed side-channel leakage in RSA decryption by using constant-time (faster) padding decoding for OAEP (bsc#1218564).
first Feb 23, 2024 -
Medium max 5.5SUSE-SU-2019:1211-2 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts …
first Jul 1, 2019 -
Medium max 5.9openSUSE-SU-2021:0448-1 1 CVE
Security update for netty
This update for netty fixes the following issues: - CVE-2021-21295: Fixed an improper Content-Length header field validation (bsc#1183262). : This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Mar 19, 2021 -
Medium max 5.9SUSE-SU-2020:0944-1 1 CVE
Security update for runc
This update for runc fixes the following issues: runc was updated to v1.0.0~rc10 - CVE-2019-19921: Fixed a mount race condition with shared mounts (bsc#1160452). - Fixed an issue where podman run hangs when spawned by salt-minion process (bsc#1149954).
first Apr 7, 2020 -
Medium max 6.9SUSE-SU-2024:4436-1 2 CVEs
Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)
first Dec 30, 2024 -
Medium max 5.3SUSE-SU-2023:3013-1 2 CVEs
Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-2975: Fixed AES-SIV implementation ignores empty associated data entries (bsc#1213383). - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 28, 2023 -
Medium max 5.3openSUSE-SU-2024:14428-1 1 CVE
python39-3.9.20-4.1 on GA media
These are all security issues fixed in the python39-3.9.20-4.1 package on the GA media of openSUSE Tumbleweed.
first Oct 25, 2024 -
Medium max 4.0openSUSE-SU-2021:1426-1 2 CVEs
Security update for dnsmasq
This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify soc…
first Oct 31, 2021 -
Medium max 6.7SUSE-SU-2022:4130-1 2 CVEs
Security update for frr
This update for frr fixes the following issues: - CVE-2022-37035: Fixed a possible use-after-free due to a race condition related to bgp_notify_send_with_data() and bgp_process_packet() (bsc#1202085). - CVE-2022-42917: Fixed a privilege escalation from frr to…
first Nov 18, 2022 -
Medium max 6.5SUSE-SU-2024:1475-1 1 CVE
Security update for frr
This update for frr fixes the following issues: - CVE-2024-31948: Fixed denial of service due to malformed Prefix SID attribute in BGP Update packet (bsc#1222518)
first Apr 30, 2024 -
Medium max 5.5SUSE-SU-2022:2838-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …
first Aug 18, 2022 -
Medium max 4.9SUSE-SU-2024:2032-1 1 CVE
Security update for mariadb
This update for mariadb fixes the following issues: - CVE-2024-21096: Fixed mysqldump unspecified vulnerability (bsc#1225983). - Update to 10.11.8.
first Jun 14, 2024 -
Medium max 5.5openSUSE-SU-2024:11688-1 2 CVEs
ant-1.10.12-1.1 on GA media
These are all security issues fixed in the ant-1.10.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.1openSUSE-SU-2024:13262-1 1 CVE
cargo1.72-1.72.1-1.1 on GA media
These are all security issues fixed in the cargo1.72-1.72.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2SUSE-SU-2025:0510-1 1 CVE
Security update for glibc
This update for glibc fixes the following issue: - CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282, BZ #32582)) - s390x-wcsncmp patch: s390x: Fix segfault in wcsncmp (bsc#1228044).
first Feb 13, 2025 -
Medium max 5.0openSUSE-SU-2019:1719-1 1 CVE
Security update for fence-agents
This update for fence-agents version 4.4.0 fixes the following issues: Security issue fixed: - CVE-2019-10153: Fixed a denial of service via guest VM comments (bsc#1137314). Non-security issue fixed: - Included timestamps when logging (bsc#1049852). This upda…
first Jul 19, 2019 -
Medium max 5.1SUSE-SU-2025:0821-1 1 CVE
Security update for iniparser
This update for iniparser fixes the following issues: - CVE-2025-0633: string copy into buffer without previous size validation leads to heap buffer overflow in iniparser_dumpsection_ini() of iniparser (bsc#1237377).
first Mar 10, 2025 -
Medium max 5.5SUSE-SU-2022:1669-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29156: Fixed a double free related to rtrs_clt_dev_release (bnc#1198515). - CVE-2022-28893: Ensuring that socke…
first May 16, 2022 -
Medium max 4.6openSUSE-SU-2023:0126-1 1 CVE
Security update for syncthing
This update for syncthing fixes the following issues: - Update to 1.13.5 * This release fixes CVE-2022-46165 “Cross-site Scripting (XSS) in Web GUI” * Bugfixes: #8503: 'syncthing cli config devices add' reflect error when using --addresses flag #8764: Ignore …
first Jun 12, 2023 -
Medium max 4.8openSUSE-SU-2019:1778-1 2 CVEs
Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode()…
first Jul 21, 2019 -
Medium max 5.5SUSE-SU-2020:2605-1 8 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14356: Fixed a null…
first Sep 11, 2020 -
Medium max 5.5SUSE-SU-2018:1926-1 2 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: The microcode bundles was updated to the 20180703 release For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1…
first Jul 11, 2018 -
Medium max 6.2SUSE-SU-2024:0071-1 1 CVE
Security update for tar
This update for tar fixes the following issues: - CVE-2023-39804: Incorrectly handled extension attributes in PAX archives can lead to a crash (bsc#1217969)
first Jan 10, 2024 -
Medium max 5.5openSUSE-SU-2020:1236-1 7 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. This update is signed with the new UEFI signing key for openSUSE. It contains rebuilds of all available KMP packages also rebuilt with the new UEFi signing key. (boo#1174543) …
first Aug 20, 2020 -
Medium max 6.5SUSE-SU-2022:3355-1 1 CVE
Security update for puppet
This update for puppet fixes the following issues: - CVE-2021-27023: Fixed unsafe HTTP redirect (bsc#1192797).
first Sep 23, 2022 -
Medium max 5.6SUSE-SU-2019:13999-1 1 CVE
Security update for various KMPs
This update rebuilds missing kernel modules (KMP) to use 'retpolines' mitigations for Spectre Variant 2 (CVE-2017-5715). Rebuilt KMP packages: - cluster-network - drbd - gfs2 - iscsitarget - ocfs2 - ofed - oracleasm
first Mar 29, 2019