6,765 results · Clear filters · Feed
-
Medium max 5.3openSUSE-SU-2024:12813-1 1 CVE
dino-0.4.2-1.1 on GA media
These are all security issues fixed in the dino-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2017:1868-1 1 CVE
Security update for xorg-x11-libXdmcp
This update for xorg-x11-libXdmcp fixes the following issues: - CVE-2017-2625: The generation of session key in XDM using libXdmcp might have used weak entropy, making the session keys predictable (bsc#1025046)
first Jul 14, 2017 -
Medium max 5.9openSUSE-SU-2024:11565-1 1 CVE
containerd-1.4.11-1.1 on GA media
These are all security issues fixed in the containerd-1.4.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:2962-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 25, 2023 -
Medium max 6.5openSUSE-SU-2024:13552-1 1 CVE
libjpeg-turbo-3.0.1-77.1 on GA media
These are all security issues fixed in the libjpeg-turbo-3.0.1-77.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:4337-1 2 CVEs
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2023-42795: Fixed a potential information leak due to insufficient cleanup (bsc#1216119). - CVE-2023-45648: Fixed a request smuggling issue due to an incorrect parsing of HTTP trailer headers (bsc#12161…
first Nov 2, 2023 -
Medium max 6.2SUSE-SU-2024:3061-1 1 CVE
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-39884: Fixed source code disclosure with handlers configured via AddType (bsc#1227353)
first Aug 29, 2024 -
Medium max 6.5openSUSE-SU-2023:0111-1 1 CVE
Security update for qt6-svg
This update for qt6-svg fixes the following issues: - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm (boo#1211298)
first May 22, 2023 -
Medium max 6.7SUSE-SU-2022:2077-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated. The following security bugs were fixed: - CVE-2022-28390: Fixed a double free in drivers/net/can/usb/ems_usb.c vulnerability in the Linux kernel (bnc#1198031). - CVE-2022-28388: Fixed a double free in drive…
first Jun 14, 2022 -
Medium max 5.5SUSE-SU-2024:0135-1 1 CVE
Security update for rear27a
This update for rear27a fixes the following issues: - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUB_RESCUE=Y. (bsc#1218728)
first Jan 18, 2024 -
Medium max 4.6openSUSE-SU-2024:12422-1 1 CVE
exim-4.96-3.1 on GA media
These are all security issues fixed in the exim-4.96-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5openSUSE-SU-2024:12388-1 2 CVEs
jettison-1.5.1-1.1 on GA media
These are all security issues fixed in the jettison-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.0SUSE-SU-2025:1528-1 1 CVE
Security update for freetype2
This update for freetype2 fixes the following issues: - CVE-2025-23022: signed integer overflow in cf2_doFlex in cff/cf2intrp.c. (bsc#1235670)
first May 9, 2025 -
Medium max 5.9SUSE-SU-2023:1683-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
first Mar 29, 2023 -
Medium max 6.5SUSE-SU-2022:2327-1 2 CVEs
Security update for curl
This update for curl fixes the following issues: - CVE-2022-32206: HTTP compression denial of service (bsc#1200735) - CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)
first Jul 7, 2022 -
Medium max 6.5SUSE-SU-2023:2223-1 1 CVE
Security update for libheif
This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero (bsc#1211174).
first May 16, 2023 -
Medium max 6.8openSUSE-SU-2025:14994-1 2 CVEs
gitoxide-0.42.0-1.1 on GA media
These are all security issues fixed in the gitoxide-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 15, 2025 -
Medium max 5.5openSUSE-SU-2024:12874-1 2 CVEs
redis-7.0.11-1.1 on GA media
These are all security issues fixed in the redis-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2022:1884-1 2 CVEs
Security update for openstack-neutron
This update for openstack-neutron fixes the following issues: - CVE-2021-40797: Fixed routes middleware memory leak for nonexistent controllers (bsc#1190339). - CVE-2021-40085: Fixed arbitrary dnsmasq reconfiguration via extra_dhcp_opts (bsc#1189794).
first May 31, 2022 -
Medium max 6.6SUSE-SU-2025:03260-1 1 CVE
Security update for net-tools
This update for net-tools fixes the following issues: Security issues fixed: - CVE-2025-46836: missing bounds check in `get_name` may lead to a stack buffer overflow (bsc#1243581). - Avoid unsafe use of `memcpy` in `ifconfig` (bsc#1248687). - Prevent overflow…
first Sep 18, 2025 -
Medium max 6.3SUSE-SU-2024:2930-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)
first Aug 15, 2024 -
Medium max 5.5SUSE-SU-2024:3428-1 1 CVE
Security update for apr
This update for apr fixes the following issues: - CVE-2023-49582: Fixed an unexpected lax shared memory permissions. (bsc#1229783)
first Sep 24, 2024 -
Medium max 5.4openSUSE-SU-2019:0329-1 3 CVEs
Security update for obs-service-tar_scm
This update for obs-service-tar_scm fixes the following issues: Security vulnerabilities addressed: - CVE-2018-12473: Fixed a path traversal issue, which allowed users to access files outside of the repository using relative paths (bsc#1105361) - CVE-2018-124…
first Mar 15, 2019 -
Medium max 4.4SUSE-SU-2024:2180-1 1 CVE
Security update for vte
This update for vte fixes the following issues: - CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)
first Jun 24, 2024 -
Medium max 5.3SUSE-SU-2023:1794-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878). - CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).
first Apr 7, 2023 -
Medium max 5.5SUSE-SU-2022:1686-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28748: Fixed memory lead over the network by ax88179_178a devices (bsc#1196018). - CVE-2022-28356: Fixed a refcoun…
first May 16, 2022 -
Medium max 6.5SUSE-SU-2020:3500-1 5 CVEs
Security update for mariadb
This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15…
first Nov 24, 2020 -
Medium max 6.2openSUSE-SU-2024:12340-1 1 CVE
python310-3.10.7-1.2 on GA media
These are all security issues fixed in the python310-3.10.7-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4openSUSE-SU-2020:0696-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentati…
first May 22, 2020 -
Medium max 5.9SUSE-SU-2021:1554-1 2 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.11+9 (April 2021 CPU) * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055) * CVE-2021-2161: Fixed incorrect handling of par…
first May 11, 2021 -
Medium max 4.3openSUSE-SU-2024:13520-1 1 CVE
jbigkit-2.1-5.1 on GA media
These are all security issues fixed in the jbigkit-2.1-5.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:12955-1 2 CVEs
libQt5Bootstrap-devel-static-32bit-5.15.9+kde154-1.1 on GA media
These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.9+kde154-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.8SUSE-SU-2019:1360-1 3 CVEs
Security update for php72
This update for php72 fixes the following issues: Security issues fixed: - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-11036:…
first May 27, 2019 -
Medium max 6.5SUSE-SU-2022:1375-1 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for…
first Apr 25, 2022 -
Medium max 4.5SUSE-SU-2024:2074-1 1 CVE
Security update for ntfs-3g_ntfsprogs
This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2023-52890: Fixed use-after-free in 'ntfs_uppercase_mbs' in unistr.c (bsc#1226007).
first Jun 18, 2024 -
Medium max 6.5SUSE-SU-2019:2727-2 1 CVE
Security update for dhcp
This update for dhcp fixes the following issues: Secuirty issue fixed: - CVE-2019-6470: Fixed DHCPv6 server crashes (bsc#1134078). Bug fixes: - Add compile option --enable-secs-byteorder to avoid duplicate lease warnings (bsc#1089524). - Use IPv6 when called …
first Nov 12, 2019 -
Medium max 6.4openSUSE-SU-2020:1280-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). Thi…
first Aug 29, 2020 -
Medium max 5.3SUSE-RU-2021:0351-1 3 CVEs
Recommended update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark
This update for ardana-horizon, ardana-logging, ardana-monasca, ardana-mq, ardana-osconfig, crowbar-ha, crowbar-openstack, kibana, openstack-neutron, openstack-nova, python-Django, release-notes-suse-openstack-cloud, sleshammer, spark fixes the following issu…
first Feb 9, 2021 -
Medium max 5.3SUSE-SU-2022:1829-1 1 CVE
Security update for go1.18
This update for go1.18 fixes the following issues: - CVE-2022-29526: Fixed faccessat() system call operation that checked the wrong group (bsc#1199413). - go1.18.2 (released 2022-05-10) (bsc#1193742).
first May 24, 2022 -
Medium max 5.9SUSE-SU-2024:0974-1 1 CVE
Security update for jsch-agent-proxy
This update for jsch-agent-proxy fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#1218198).
first Mar 22, 2024