6,767 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2025:02785-1 1 CVE
Security update for apache-commons-lang3
This update for apache-commons-lang3 fixes the following issues: - CVE-2025-48924: Fixed an uncontrolled recursion vulnerability that may lead to a DoS. (bsc#1246397)
first Aug 13, 2025 -
Medium max 5.6SUSE-SU-2022:2379-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…
first Jul 13, 2022 -
Medium max 5.6SUSE-SU-2019:0765-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20669: Missing access control checks in ioctl of gpu/drm/i915 driver were fixed which might have lead to informati…
first Mar 26, 2019 -
Medium max 5.3openSUSE-SU-2024:12431-1 6 CVEs
java-11-openjdk-11.0.17.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.17.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2023:4488-1 1 CVE
Security update for openssl1
This update for openssl1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).
first Nov 20, 2023 -
Medium max 6.5SUSE-SU-2023:29171-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this …
first Jun 20, 2023 -
Medium max 4.4openSUSE-SU-2025:14867-1 1 CVE
amazon-ssm-agent-3.3.1957.0-2.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.1957.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Mar 11, 2025 -
Medium max 5.6SUSE-SU-2024:1402-1 1 CVE
Security update for opensc
This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)
first Apr 23, 2024 -
Medium max 6.2SUSE-SU-2023:1859-1 1 CVE
Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in Prometheus Exporter Toolkit (bsc#1208049).
first Apr 14, 2023 -
Medium max 5.3SUSE-SU-2017:3230-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server (bsc#1065000). Bug fixes: - FIPS: Startup selfchecks (bsc#1068310). - FIPS: Silent complaints about un…
first Dec 7, 2017 -
Medium max 5.3openSUSE-SU-2021:2838-1 1 CVE
Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: - Update to version 9.4.43.v20210629 - CVE-2021-34429: URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. (bsc#118…
first Aug 25, 2021 -
Medium max 6.5SUSE-SU-2020:14289-1 6 CVEs
Security update for php53
This update for php53 fixes the following issues: Security issues fixed: - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2019-11045: Fixed an issue with the PHP DirectoryIterator class that accepts filenames with embedde…
first Feb 24, 2020 -
Medium max 6.1SUSE-SU-2019:3270-1 4 CVEs
Security update for caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, crowbar-ui, etcd, flannel, galera-3, mariadb, mariadb-connector-c, openstack-dashboard-theme-SUSE, openstack-heat-templates, openstack-neutron, openstack-nova, openstack-quickstart, patterns-cloud, python-oslo.messaging, python-oslo.utils, python-pysaml2
This update for caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, crowbar-ui, etcd, flannel, galera-3, mariadb, mariadb-connector-c, openstack-dashboard-theme-SUSE, openstack-heat-templates, openstack-neutron, openstack-nova, openstack-quicksta…
first Dec 11, 2019 -
Medium max 5.9openSUSE-SU-2024:14477-1 1 CVE
expat-2.6.4-1.1 on GA media
These are all security issues fixed in the expat-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 8, 2024 -
Medium max 4.3SUSE-SU-2024:3532-1 1 CVE
Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2024-28882: Fix multiple exit notifications from authenticated clients will extend the validity of a closing session (bsc#1227546)
first Oct 4, 2024 -
Medium max 5.3SUSE-SU-2018:1690-1 10 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u171 fixes the following issues: These security issues were fixed: - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More…
first Jun 14, 2018 -
Medium max 5.0openSUSE-SU-2021:1081-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. (bsc#1188282) This update was imported from the SUSE:SLE-15:Update update project.
first Jul 23, 2021 -
Medium max 6.3SUSE-SU-2024:4110-1 1 CVE
Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions (bsc#1233447)
first Nov 29, 2024 -
Medium max 4.7SUSE-SU-2023:4060-1 1 CVE
Security update for rage-encryption
This update for rage-encryption fixes the following issues: -CVE-2023-42811: chosen ciphertext attack possible against aes-gcm (bsc#1215657) * update vendor.tar.zst to contain aes-gcm >= 0.10.3 - Update to version 0.9.2+0: * CI: Ensure `apt` repository is up-…
first Oct 12, 2023 -
Medium max 5.5SUSE-SU-2018:2973-1 3 CVEs
Security update for qemu
This update for qemu fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the l…
first Oct 2, 2018 -
Medium max 6.3SUSE-SU-2025:0552-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)
first Feb 14, 2025 -
Medium max 5.1SUSE-SU-2020:3522-1 12 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UD…
first Nov 25, 2020 -
Medium max 5.5SUSE-SU-2023:2628-1 2 CVEs
Security update for cloud-init
This update for cloud-init fixes the following issues: - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277) - CVE-2022-2084: Fixed a bug which caused logging schema failures can include password hashes. (bsc#1210652) - Update to …
first Jun 23, 2023 -
Medium max 4.0openSUSE-SU-2024:14282-1 1 CVE
velociraptor-0.7.0.4.git97.675e45f9-12.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git97.675e45f9-12.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2024 -
Medium max 6.5SUSE-SU-2022:2349-1 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524). - Update to version 2.14.0
first Jul 11, 2022 -
Medium max 6.7SUSE-SU-2021:2344-1 3 CVEs
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-197_48 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed…
first Jul 14, 2021 -
Medium max 5.3SUSE-SU-2023:1850-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 (bsc#1208480): * Security fixes: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21835: Fixed handshake DoS atta…
first Apr 14, 2023 -
Medium max 5.4SUSE-SU-2018:2386-1 1 CVE
Security update for perl-Archive-Zip
This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could…
first Aug 16, 2018 -
Medium max 5.3SUSE-SU-2018:3156-1 1 CVE
Security update for python
This update for python fixes the following issue: - CVE-2018-14647: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an …
first Oct 16, 2018 -
Medium max 5.8SUSE-SU-2024:0946-1 3 CVEs
Security update for rubygem-rack-1_4
This update for rubygem-rack-1_4 fixes the following issues: - CVE-2024-25126: Fixed a Denial of Service Vulnerability in Rack Content-Type Parsing (bsc#1220239) - CVE-2024-26141: Fixed a Denial of Service Vulnerability in Range request header parsing (bsc#12…
first Mar 20, 2024 -
Medium max 5.5SUSE-SU-2024:0014-1 1 CVE
Security update for w3m
This update for w3m fixes the following issues: - CVE-2023-4255: Fixed out-of-bounds write in function checkType() in etc.c (bsc#1218226).
first Jan 2, 2024 -
Medium max 5.3openSUSE-SU-2024:13380-1 1 CVE
libQt6Concurrent6-6.6.0-3.1 on GA media
These are all security issues fixed in the libQt6Concurrent6-6.6.0-3.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2025:02325-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471) - CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)
first Jul 16, 2025 -
Medium max 5.5SUSE-SU-2021:1863-1 1 CVE
Security update for umoci
This update for umoci fixes the following issues: Update to v0.4.7 (bsc#1184147). - CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).
first Jun 4, 2021 -
Medium max 5.5SUSE-SU-2024:0190-1 1 CVE
Security update for rear118a
This update for rear118a fixes the following issues: - CVE-2024-23301: Corrected world-readable permissions for initrd, which could be an issue if it contains sensitive information (bsc#1218728).
first Jan 23, 2024 -
Medium max 6.3SUSE-SU-2024:2270-1 1 CVE
Security update for squid
This update for squid fixes the following issues: - CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)
first Jul 2, 2024 -
Medium max 5.3SUSE-SU-2022:4030-1 2 CVEs
Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-150200_24_126 fixes several issues. The following security issues were fixed: - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vm…
first Nov 16, 2022 -
Medium max 6.7SUSE-SU-2022:3930-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel RT was updated. The following security bugs were fixed: - CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868). - CVE-2021-4037: Fixed function logic vulnerability t…
first Nov 10, 2022 -
Medium max 6.5SUSE-SU-2019:0224-1 13 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. This update brings following features: - Support for Enhanced-IBRS on new Intel CPUs (fate#326564) The following security bugs were fixed: - CVE-2018-9568: In sk_clone_l…
first Feb 1, 2019 -
Medium max 5.9openSUSE-SU-2024:13665-1 1 CVE
libsystemd0-254.8-4.1 on GA media
These are all security issues fixed in the libsystemd0-254.8-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024