6,765 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2024:2546-1 2 CVEs
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2024-28835: Fixed a certtool crash when verifying a certificate chain (bsc#1221747). - CVE-2024-28834: Fixed a side-channel attack in the deterministic ECDSA (bsc#1221746). Other fixes: - Fixed a memory…
first Jul 17, 2024 -
Medium max 5.9SUSE-SU-2023:4902-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950). the following non-security bug was fixed: - Fix the 'no route to host' error when connecting via ProxyJump
first Dec 19, 2023 -
Medium max 5.7openSUSE-SU-2025:14784-1 11 CVEs
kernel-firmware-media-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-media-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.6SUSE-SU-2021:2862-1 1 CVE
Security update for spectre-meltdown-checker
This update for spectre-meltdown-checker fixes the following issues: spectre-meltdown-checker was updated to version 0.44 (bsc#1189477) - feat: add support for SRBDS related vulnerabilities - feat: add zstd kernel decompression (#370) - enh: arm: add experime…
first Aug 27, 2021 -
Medium max 5.3SUSE-SU-2023:4463-1 1 CVE
Security update for libnbd
This update for libnbd fixes the following issues: - CVE-2023-5871: Fixed an assertion problem in ext-mode BLOCK_STATUS (bsc#1216769).
first Nov 16, 2023 -
Medium max 5.5openSUSE-SU-2024:12373-1 1 CVE
kernel-devel-5.19.12-1.1 on GA media
These are all security issues fixed in the kernel-devel-5.19.12-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2019:13948-1 1 CVE
Security update for fuse
This update for fuse fixes the following issues: Security issue fixed: - CVE-2018-10906: Fix a bypass of the user_allow_other restriction (bsc#1101797)
first Feb 8, 2019 -
Medium max 4.4openSUSE-SU-2024:13722-1 1 CVE
c-ares-devel-1.27.0-1.1 on GA media
These are all security issues fixed in the c-ares-devel-1.27.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:2480-1 1 CVE
Security update for xen
This update for xen fixes the following security issue: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker…
first Aug 22, 2018 -
Medium max 5.4openSUSE-SU-2024:14390-1 2 CVEs
podman-5.2.4-1.1 on GA media
These are all security issues fixed in the podman-5.2.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 8, 2024 -
Medium max 4.2SUSE-SU-2023:4467-1 1 CVE
Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).
first Nov 16, 2023 -
Medium max 4.3SUSE-SU-2025:4389-1 2 CVEs
Security update for python
This update for python fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the …
first Dec 12, 2025 -
Medium max 5.5SUSE-SU-2025:0910-1 1 CVE
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP4)
This update for the Linux Kernel 5.14.21-150400_24_147 fixes one issue. The following security issue was fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452).
first Mar 18, 2025 -
Medium max 6.3SUSE-SU-2024:3301-1 1 CVE
Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: - CVE-2024-7055: Fixed a heap-based buffer overflow in pnmdec. (bsc#1229026)
first Sep 18, 2024 -
Medium max 5.3SUSE-SU-2023:1871-1 1 CVE
Security update for nodejs10
This update for nodejs10 fixes the following issues: - CVE-2022-25881: Fixed regular expression denial of service vulnerability (bsc#1208744).
first Apr 17, 2023 -
Medium max 4.7SUSE-SU-2018:0262-1 2 CVEs
Security update for rubygem-passenger
This update for rubygem-passenger fixes several issues. These security issues were fixed: - CVE-2017-16355: When Passenger was running as root it was possible to list the contents of arbitrary files on a system by symlinking a file named REVISION from the app…
first Jan 29, 2018 -
Medium max 5.5SUSE-RU-2024:4008-1 1 CVE
Security update for SUSE Manager Server 5.0
This update fixes the following issues: uyuni-storage-setup: - Version 5.0.3-0 * Do not create partition on extra storage disk - Version 5.0.2-0 * Do not build debuginfo package uyuni-tools: - Security issues fixed: * Version 0.1.24-0 + CVE-2024-22037: Use po…
first Nov 18, 2024 -
Medium max 4.3SUSE-SU-2022:2586-1 5 CVEs
Security update for ldb, samba
This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031:…
first Jul 29, 2022 -
Medium max 5.9SUSE-SU-2017:0715-1 1 CVE
Security update for jsch
This update for jsch to version 0.1.54 fixes the following issues: Security issues fixed: - CVE-2016-5725: recursive sftp get client-side windows path traversal (bsc#997542). Bugfixes: - sftp-put may send the garbage data in some rare case. - fixed a deadlock…
first Mar 17, 2017 -
Medium max 5.9SUSE-SU-2020:3762-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491). - Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673). - Fixed a test failure in apache_ssl in fips mode (…
first Dec 11, 2020 -
Medium max 4.7SUSE-SU-2023:0103-1 1 CVE
Security update for postgresql-jdbc
This update for postgresql-jdbc fixes the following issues: - CVE-2022-41946: Fixed a local information disclosure issue due to improper handling of temporary files (bsc#1206921).
first Jan 19, 2023 -
Medium max 5.0SUSE-SU-2019:1060-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]
first Apr 27, 2019 -
Medium max 5.6SUSE-SU-2018:1699-2 4 CVEs
Security update for xen
This update for xen fixes several issues. This feature was added: - Added support for qemu monitor command These security issues were fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka…
first Oct 18, 2018 -
Medium max 5.9SUSE-SU-2018:3924-1 1 CVE
Security update for python-oslo.cache, python-oslo.concurrency, python-oslo.db, python-oslo.log, python-oslo.messaging, python-oslo.middleware, python-oslo.serialization, python-oslo.service, python-oslo.utils, python-oslo.versionedobjects, python-oslo.vmware, python-oslotest
This update for python-oslo.cache, python-oslo.concurrency, python-oslo.db, python-oslo.log, python-oslo.messaging, python-oslo.middleware, python-oslo.serialization, python-oslo.service, python-oslo.utils, python-oslo.versionedobjects, python-oslo.vmware, py…
first Nov 27, 2018 -
Medium max 6.5SUSE-SU-2022:3477-1 3 CVEs
Security update for slurm_20_02
This update for slurm_20_02 fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to ex…
first Sep 30, 2022 -
Medium max 5.1SUSE-SU-2019:2781-1 1 CVE
Security update for nfs-utils
This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)
first Oct 25, 2019 -
Medium max 5.3SUSE-SU-2024:2632-1 5 CVEs
Security update for espeak-ng
This update for espeak-ng fixes the following issues: - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c (bsc#1218010) - CVE-2023-49991: Fixed stack-buffer-underflow exists in the function CountVowelPosition in synthdata.c (b…
first Jul 30, 2024 -
Medium max 6.5SUSE-SU-2022:3544-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
first Oct 6, 2022 -
Medium max 6.1openSUSE-SU-2024:0017-1 1 CVE
Security update for python-django-grappelli
This update for python-django-grappelli fixes the following issues: Update to 2.14.4: - CVE-2021-46898: Fixed views/switch.py vulnerable to protocol-relative URL attacks (boo#1216481) - Fixed: Redirect with switch user. - Improved: Remove extra filtering in A…
first Jan 11, 2024 -
Medium max 5.3SUSE-SU-2024:3646-1 1 CVE
Security update for unbound
This update for unbound fixes the following issues: - CVE-2024-8508: Fixed unbounded name compression that could lead to denial of service (bsc#1231284)
first Oct 16, 2024 -
Medium max 4.3SUSE-SU-2018:2329-1 1 CVE
Security update for samba
This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-10858: Insufficient input validation on client directory listing in libsmbclient (bsc#1103411). The following other bugs were fixed: - s3:winbindd: allow a …
first Aug 14, 2018 -
Medium max 6.9openSUSE-SU-2024:14440-1 1 CVE
cargo-audit-advisory-db-20241030-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20241030-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 30, 2024 -
Medium max 4.3openSUSE-SU-2019:1814-1 52 CVEs
Security update for virtualbox
This update for virtualbox to version 6.0.10 fixes the following issues: Security issues fixed: - CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-201…
first Jul 30, 2019 -
Medium max 5.6SUSE-SU-2020:1623-1 2 CVEs
Security update for nodejs6
This update for nodejs6 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-7598: Fixed an issue which could have tricked minimist into adding or modifying properties of Object.p…
first Jun 15, 2020 -
Medium max 6.8SUSE-SU-2022:2713-1 3 CVEs
Security update for bind
This update for bind fixes the following issues: - CVE-2021-25219: Fixed flaw that allowed abusing lame cache to severely degrade resolver performance (bsc#1192146). - CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders (bsc#1197135). - C…
first Aug 9, 2022 -
Medium max 6.3SUSE-SU-2024:2269-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
first Jul 2, 2024 -
Medium max 6.4openSUSE-SU-2019:2159-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: Security issues fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections (bsc#1144065). This update was imported from the SUSE:SLE-15:Update update project.
first Sep 24, 2019 -
Medium max 4.3openSUSE-SU-2024:12010-1 1 CVE
mutt-2.2.3-1.1 on GA media
These are all security issues fixed in the mutt-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8openSUSE-SU-2021:1480-1 10 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: Update to 11.0.13+8 (October 2021 CPU) - CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference - CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session c…
first Nov 17, 2021 -
Medium max 5.0openSUSE-SU-2024:14373-1 1 CVE
OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media
These are all security issues fixed in the OpenIPMI-2.0.36.4+git.c114912-1.1 package on the GA media of openSUSE Tumbleweed.
first Sep 29, 2024