6,767 results · Clear filters · Feed
-
Medium max 4.3openSUSE-SU-2024:13059-1 11 CVEs
chromedriver-115.0.5790.98-1.1 on GA media
These are all security issues fixed in the chromedriver-115.0.5790.98-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4SUSE-SU-2020:2812-1 3 CVEs
Security update for nodejs12
This update for nodejs12 fixes the following issues: - nodejs12 was updated to 12.18.4 LTS: - CVE-2020-8201: Fixed an HTTP Request Smuggling due to CR-to-Hyphen conversion (bsc#1176605). - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CV…
first Oct 1, 2020 -
Medium max 5.5SUSE-SU-2018:1582-1 1 CVE
Security update for xen
This update for xen fixes one issue. This security issue was fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4 (bsc#1092631).
first Jun 7, 2018 -
Medium max 5.5SUSE-SU-2017:0570-1 13 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025188). - C…
first Feb 27, 2017 -
Medium max 6.5SUSE-SU-2025:02739-1 2 CVEs
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: - CVE-2025-6442: Fixed read_header HTTP Request Smuggling Vulnerability in WEBrick (bsc#1245254) - CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805)
first Aug 8, 2025 -
Medium max 5.3SUSE-SU-2023:1625-1 1 CVE
Security update for docker
This update for docker fixes the following issues: - CVE-2022-36109: Fixed a supplementary group permissions bypass (bsc#1205375). Update to 20.10.23-ce (https://docs.docker.com/engine/release-notes/#201023). - drop kubic flavor as kubic is EOL. Update to Doc…
first Mar 28, 2023 -
Medium max 5.9openSUSE-SU-2024:11377-1 1 CVE
libsha1detectcoll-devel-1.0.3-4.12 on GA media
These are all security issues fixed in the libsha1detectcoll-devel-1.0.3-4.12 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.4SUSE-SU-2025:02362-1 1 CVE
Security update for coreutils
This update for coreutils fixes the following issues: - CVE-2025-5278: Fixed heap buffer under-read may lead to a crash or leak sensitive data (bsc#1243767)
first Jul 18, 2025 -
Medium max 6.3SUSE-SU-2021:3217-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488). - CVE-2…
first Sep 23, 2021 -
Medium max 6.1
Security update for roundcubemail
This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…
first Jul 9, 2021 -
Medium max 6.5openSUSE-SU-2020:2332-1 8 CVEs
Security update for python3
This update for python3 fixes the following issues: - Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support calls eval() on content retrieved via HTTP. - Change setuptools and pip version numbers according to new wheels - Handful of change…
first Dec 28, 2020 -
Medium max 5.3SUSE-SU-2024:4282-1 1 CVE
Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52616: sequential increment of DNS transaction IDs allows DNS spoofing. (bsc#1233420)
first Dec 10, 2024 -
Medium max 5.3SUSE-SU-2023:4709-1 3 CVEs
Security update for go1.21
This update for go1.21 fixes the following issues: Update to go1.21.5: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834). - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windows in Go 1.21.4 …
first Dec 11, 2023 -
Medium max 5.9SUSE-SU-2024:3644-1 2 CVEs
Security update for rubygem-puma
This update for rubygem-puma fixes the following issues: - CVE-2024-45614: Prevent underscores from clobbering hyphen headers (bsc#1230848). - CVE-2024-21647: Fixed DoS when parsing chunked Transfer-Encoding bodies (bsc#1218638).
first Oct 16, 2024 -
Medium max 4.4SUSE-SU-2023:3440-1 1 CVE
Security update for gawk
This update for gawk fixes the following issues: - CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025)
first Aug 28, 2023 -
Medium max 5.3SUSE-SU-2019:14202-1 1 CVE
Security update for samba
This update for samba fixes the following issue: - CVE-2019-10218: Fixed a path injection caused by filenames containing path separators (bso#14071) (bsc#1144902).
first Oct 29, 2019 -
Medium max 6.7SUSE-SU-2022:2082-1 29 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose i…
first Jun 14, 2022 -
Medium max 4.8SUSE-SU-2023:0737-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed a memory corruption inside Cipher.update_into via immutable objects (bsc#1208036).
first Mar 15, 2023 -
Medium max 5.9openSUSE-SU-2024:13646-1 1 CVE
cosign-2.2.3-1.1 on GA media
These are all security issues fixed in the cosign-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5openSUSE-SU-2024:10823-1 1 CVE
groovy-2.4.21-2.3 on GA media
These are all security issues fixed in the groovy-2.4.21-2.3 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2018:0651-1 2 CVEs
Security update for python-Django
This update for python-Django fixes the following issues: Update to 1.11.11 * Fixes CVE-2018-7536, CVE-2018-7537
first Mar 9, 2018 -
Medium max 4.3openSUSE-SU-2024:14392-1 1 CVE
trivy-0.56.1-1.1 on GA media
These are all security issues fixed in the trivy-0.56.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 9, 2024 -
Medium max 5.4SUSE-SU-2022:4000-1 1 CVE
Security update for python-Twisted
This update for python-Twisted fixes the following issues: - CVE-2022-39348: Fixed NameVirtualHost Host header injection (bsc#1204781).
first Nov 15, 2022 -
Medium max 6.5openSUSE-SU-2024:12972-1 1 CVE
libopenssl-1_1-devel-1.1.1u-1.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1u-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2023:2330-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).
first May 30, 2023 -
Medium max 6.1openSUSE-SU-2020:1611-1 4 CVEs
Security update for grafana
This update for grafana fixes the following issues: grafana was updated to version 7.1.5: * Features / Enhancements - Stats: Stop counting the same user multiple times. - Field overrides: Filter by field name using regex. - AzureMonitor: map more units. - Exp…
first Oct 4, 2020 -
Medium max 5.6SUSE-SU-2018:0472-1 10 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks (bsc#1074562, bsc#1068032) - C…
first Feb 19, 2018 -
Medium max 5.8SUSE-SU-2025:0608-1 2 CVEs
Security update for ovmf
This update for ovmf fixes the following issues: - PXE boot is failing due to patches applied to fix CVE-2023-45236 and CVE-2023-45237 (bsc#1237084).
first Feb 21, 2025 -
Medium max 6.5openSUSE-SU-2024:14420-1 1 CVE
podman-5.2.4-3.1 on GA media
These are all security issues fixed in the podman-5.2.4-3.1 package on the GA media of openSUSE Tumbleweed.
first Oct 22, 2024 -
Medium max 6.5openSUSE-SU-2019:2451-1 9 CVEs
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox: Security issues fixed: - CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). - CVE-2019-11757: Fixed a use-after-free when…
first Nov 9, 2019 -
Medium max 6.7SUSE-SU-2024:3873-1 1 CVE
Security update for rubygem-bundler
This update for rubygem-bundler fixes the following issues: - CVE-2021-43809: Fixed remote execution via Gemfile argument injection (bsc#1193578)
first Nov 1, 2024 -
Medium max 5.1SUSE-SU-2021:0098-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20669: Fixed an improper check i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c (bsc…
first Jan 12, 2021 -
Medium max 5.4SUSE-SU-2023:4065-1 2 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2021-42782: Fixed several stack buffer overflows (bsc#1191957). - CVE-2023-40661: Fixed several memory safety issues that could happen during the card enrollment process using pkcs15-init (bsc#1215761).
first Oct 12, 2023 -
Medium max 6.5SUSE-SU-2023:2969-1 2 CVEs
Security update for libqt5-qtsvg
This update for libqt5-qtsvg fixes the following issues: - CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654). - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#121129…
first Jul 25, 2023 -
Medium max 4.3openSUSE-SU-2024:12668-1 1 CVE
helmfile-0.150.0-2.1 on GA media
These are all security issues fixed in the helmfile-0.150.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2024:2974-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: Security issue fixed: - CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780) Non-security issues fixed: - Improve python reproducible builds (bsc#1227999) - Make pip and moder…
first Aug 20, 2024 -
Medium max 6.5SUSE-SU-2022:2349-2 1 CVE
Security update for ignition
This update for ignition fixes the following issues: - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524). - Update to version 2.14.0
first Jul 11, 2022 -
Medium max 6.3SUSE-SU-2025:0551-1 1 CVE
Security update for python311
This update for python311 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705) Other fixes: - Update to version 3.11.11. - Remove -IVendor/ from python-config. (bsc#123…
first Feb 14, 2025 -
Medium max 5.9openSUSE-SU-2020:0219-1 1 CVE
Security update for docker-runc
This update for docker-runc fixes the following issues: - CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452). This update was imported from the SUSE:SLE-15:Update update project.
first Feb 13, 2020 -
Medium max 5.9openSUSE-SU-2024:13580-1 1 CVE
jsch-0.2.15-1.1 on GA media
These are all security issues fixed in the jsch-0.2.15-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024