6,765 results · Clear filters · Feed
-
Medium max 5.6SUSE-SU-2023:2171-1 4 CVEs
Security update for ntp
This update for ntp fixes the following issues: Fixed multiple out of bound writes: CVE-2023-26551 (bsc#1210386), CVE-2023-26552 (bsc#1210388), CVE-2023-26553 (bsc#1210387), CVE-2023-26554 (bsc#1210389).
first May 11, 2023 -
Medium max 4.3openSUSE-SU-2019:1921-1 3 CVEs
Security update for pdns
This update for pdns fixes the following issues: Security issues fixed: - CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#114…
first Aug 15, 2019 -
Medium max 4.0SUSE-SU-2020:0087-1 1 CVE
Security update for libsolv, libzypp, zypper
This update for libsolv, libzypp, zypper fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763). Bug fixes - Fixed removing orphaned packages dropped by to-be-installed products (bsc#…
first Jan 13, 2020 -
Medium max 4.8openSUSE-SU-2024:14465-1 4 CVEs
java-1_8_0-openjdk-1.8.0.432-1.1 on GA media
These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.432-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 6, 2024 -
Medium max 5.3SUSE-SU-2023:1926-1 2 CVEs
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
first Apr 20, 2023 -
Medium max 6.5SUSE-SU-2023:4650-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2023-38546: Fixed a cookie injection with none file (bsc#1215889). - CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).
first Dec 6, 2023 -
Medium max 5.5SUSE-SU-2023:4869-1 5 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478). - CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231). - CVE-2023-26965: Fix heap-based use after free in loadI…
first Dec 14, 2023 -
Medium max 5.7SUSE-SU-2022:3576-1 2 CVEs
Security update for icinga
This update for icinga fixes the following issues: - CVE-2016-9566: Fixed root privilege escalation (bsc#1014637). - CVE-2019-3698: Fixed symbolic link vulnerability that can cause DoS or potentially escalate privileges (bsc#1156309).
first Oct 13, 2022 -
Medium max 5.3openSUSE-SU-2024:14497-1 1 CVE
MozillaThunderbird-128.4.3-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 15, 2024 -
Medium max 5.6SUSE-SU-2018:0068-1 1 CVE
Security update for microcode_ctl
Update to Intel microcode version 20180108 (bsc#1075262 CVE-2017-5715) - The pre-released microcode fixing some important security issues is now officially published (and included in the added tarball). Among other updates it contains: - IVT C0 (06-3e-04:ed) …
first Jan 11, 2018 -
Medium max 6.5openSUSE-SU-2024:13831-1 1 CVE
grafana-10.3.5-1.1 on GA media
These are all security issues fixed in the grafana-10.3.5-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3openSUSE-SU-2024:12785-1 1 CVE
libwireshark16-4.0.4-2.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.4-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2024:0543-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Always add the KEX pseudo-methods 'ext-info-c' and 'kex-strict-c-v00@openssh.com' when configuring custom method list. [bsc#1218971, CVE-2023-48795] * The strict-kex extension is announced in the list …
first Feb 20, 2024 -
Medium max 5.5SUSE-SU-2025:01994-1 1 CVE
Security update 4.3.15.2 SUSE Manager Server 4.3
This update fixes the following issues: netty: - Security issues fixed: * CVE-2024-47535: Decorate InputStream to throw an exception once the data read limit is reached (bsc#1233297) - Other changes: * Replace AlgorithmId.sha256WithRSAEncryption_oid usage wit…
first Jun 18, 2025 -
Medium max 6.1SUSE-SU-2023:3137-1 1 CVE
Security update for SUSE Manager Salt Bundle
This update fixes the following issues: venv-salt-minion: - CVE-2023-28370: Tornado: Fix an open redirect issue in the static file handler (bsc#1211741) - Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994) - Fix ModuleNotF…
first Aug 2, 2023 -
Medium max 5.9SUSE-SU-2017:1175-1 29 CVEs
Security update for MozillaFirefox, mozilla-nss, mozilla-nspr
Mozilla Firefox was updated to the Firefox ESR release 45.9. Mozilla NSS was updated to support TLS 1.3 (close to release draft) and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes. Security issues fixed in Firefox (bsc#103…
first May 4, 2017 -
Medium max 6.5SUSE-SU-2023:2327-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
first May 30, 2023 -
Medium max 5.3openSUSE-SU-2020:0958-1 1 CVE
Security update for hylafax+
This update for hylafax+ fixes the following issues: Security issue fixed: - CVE-2020-8024 boo#1172731 hylafax+ was updated to version 7.0.2: * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019) * prevent SSL_accept() from blocking (5…
first Jul 14, 2020 -
Medium max 5.9SUSE-SU-2020:3882-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513). - Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted (bsc#1148566).
first Dec 18, 2020 -
Medium max 5.5openSUSE-SU-2024:13251-1 1 CVE
gnome-extensions-45.0-2.1 on GA media
These are all security issues fixed in the gnome-extensions-45.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:11660-1 1 CVE
bind-9.16.20-3.1 on GA media
These are all security issues fixed in the bind-9.16.20-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.3openSUSE-SU-2024:10651-1 106 CVEs
binutils-2.37-1.3 on GA media
These are all security issues fixed in the binutils-2.37-1.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2022:2173-1 4 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (b…
first Jun 24, 2022 -
Medium max 4.4SUSE-SU-2024:3516-1 2 CVEs
Security update for libpcap
This update for libpcap fixes the following issues: - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034) - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)
first Oct 3, 2024 -
Medium max 6.7openSUSE-SU-2024:12115-1 3 CVEs
libntfs-3g-devel-2022.5.17-1.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2022.5.17-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2020:1799-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582) This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Nov 1, 2020 -
Medium max 4.3openSUSE-SU-2022:10020-1 2 CVEs
Security update for neomutt
This update for neomutt fixes the following issues: neomutt was updated to 20220429: * Bug Fixes * Do not crash on an invalid use_threads/sort combination * Fix: stuck browser cursor * Resolve (move) the cursor after <edit-label> * Index: fix menu size on new…
first Jun 21, 2022 -
Medium max 5.3openSUSE-SU-2021:0776-1 1 CVE
Security update for java-1_8_0-openj9
This update for java-1_8_0-openj9 fixes the following issues: - Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual machine. - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055). This update was imported from …
first May 23, 2021 -
Medium max 6.2openSUSE-SU-2024:12650-1 1 CVE
golang-github-prometheus-prometheus-2.41.0-1.1 on GA media
These are all security issues fixed in the golang-github-prometheus-prometheus-2.41.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2023:0421-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982). - CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).
first Feb 15, 2023 -
Medium max 5.5SUSE-SU-2022:3862-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 3, 2022 -
Medium max 5.9openSUSE-SU-2020:1552-1 1 CVE
Security update for conmon, fuse-overlayfs, libcontainers-common, podman
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 (bsc#1175821) - install missing systemd units for the new Rest API (bsc#1175957) and a few man-pages that where missing before - Drop…
first Sep 27, 2020 -
Medium max 5.3openSUSE-SU-2024:14209-1 1 CVE
python310-sentry-sdk-2.10.0-1.1 on GA media
These are all security issues fixed in the python310-sentry-sdk-2.10.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 19, 2024 -
Medium max 4.0SUSE-SU-2025:0985-1 2 CVEs
Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c (bsc#1237606) - CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610)
first Mar 21, 2025 -
Medium max 5.9SUSE-SU-2024:3968-1 1 CVE
Security update for expat
This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).
first Nov 11, 2024 -
Medium max 6.5SUSE-SU-2022:3462-1 3 CVEs
Security update for slurm_18_08
This update for slurm_18_08 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed an architectural flaw can be exploited to allow an unprivileged user to execute arbit…
first Sep 29, 2022 -
Medium max 6.8openSUSE-SU-2022:0946-1 1 CVE
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135).
first Mar 24, 2022 -
Medium max 5.5
Security update for samba
This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…
first Sep 23, 2020 -
Medium max 5.5SUSE-SU-2023:4291-1 1 CVE
Security update for poppler
This update for poppler fixes the following issues: - CVE-2023-34872: Fixed a remote denial-of-service in Outline.cc. (bsc#1213888)
first Oct 31, 2023 -
Medium max 5.4SUSE-SU-2018:1760-1 1 CVE
Security update for pam-modules
This update for pam-modules fixes the following security issue: - CVE-2011-3172: Ensure that unix2_chkpwd calls pam_acct_mgmt to prevent usage of locked accounts (bsc#707645).
first Jun 20, 2018