6,767 results · Clear filters · Feed
-
Medium max 6.8SUSE-SU-2025:0605-1 1 CVE
Security update for openssh
This update for openssh fixes the following issues: - CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040).
first Feb 20, 2025 -
Medium max 4.3SUSE-SU-2022:2580-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).
first Jul 28, 2022 -
Medium max 6.5openSUSE-SU-2024:0412-1 1 CVE
Security update for python-python-sql
This update for python-python-sql fixes the following issues: - CVE-2024-9774: Fixed that unary operators does not escape non-Expression (boo#1234653).
first Dec 21, 2024 -
Medium max 5.1SUSE-SU-2020:0145-1 1 CVE
Security update for Mesa
This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).
first Jan 21, 2020 -
Medium max 5.0SUSE-SU-2024:1304-1 1 CVE
Security update for eclipse, maven-surefire, tycho
This update for eclipse, maven-surefire, tycho fixes the following issues: eclipse received the following security fix: - CVE-2023-4218: Fixed a bug where parsing files with xml content laeds to XXE attacks. (bsc#1216992) maven-sunfire was updated from versio…
first Apr 16, 2024 -
Medium max 5.5SUSE-SU-2018:1935-2 2 CVEs
Recommended update for ucode-intel
The Intel CPU microcode bundle was updated to the 20180703 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083). More information on: https://download…
first Oct 18, 2018 -
Medium max 6.7SUSE-SU-2024:1491-1 1 CVE
Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-150500_11 fixes one issue. The following security issue was fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079).
first May 4, 2024 -
Medium max 5.9SUSE-SU-2021:2082-1 1 CVE
Security update for go1.15
This update for go1.15 fixes the following issues: - Updated go to upstream version 1.15.12 (released 2021-05-06) (bsc#1175132). - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest (bsc#1185790).
first Jun 18, 2021 -
Medium max 4.1openSUSE-SU-2025:14980-1 1 CVE
docker-stable-24.0.9_ce-9.1 on GA media
These are all security issues fixed in the docker-stable-24.0.9_ce-9.1 package on the GA media of openSUSE Tumbleweed.
first Apr 10, 2025 -
Medium max 5.5SUSE-SU-2018:1935-1 2 CVEs
Recommended update for ucode-intel
The Intel CPU microcode bundle was updated to the 20180703 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083). More information on: https://download…
first Jul 12, 2018 -
Medium max 5.5SUSE-SU-2022:1676-1 16 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-27835: Fixed a use after free vulnerability in infiniband hfi1 driver in the way user calls Ioctl after open dev f…
first May 16, 2022 -
Medium max 5.3openSUSE-SU-2024:14133-1 1 CVE
python310-bjoern-3.2.2-1.10 on GA media
These are all security issues fixed in the python310-bjoern-3.2.2-1.10 package on the GA media of openSUSE Tumbleweed.
first Jul 12, 2024 -
Medium max 6.3SUSE-SU-2024:4153-1 1 CVE
Security update for python310
This update for python310 fixes the following issues: - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307) Bug fixes: - Remove -IVendor/ from python-config. (bsc#1231795) - Include renaming :noindex: option to :no-index: in Sph…
first Dec 3, 2024 -
Medium max 5.6SUSE-SU-2018:0114-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous u…
first Jan 16, 2018 -
Medium max 6.5SUSE-SU-2024:0577-1 4 CVEs
Security update for python-aiohttp, python-time-machine
This update for python-aiohttp, python-time-machine fixes the following issues: python-aiohttp was updated to version 3.9.3: * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter when set outside of ``ClientSession`` (e.g. directly in ``TCP…
first Feb 21, 2024 -
Medium max 5.5SUSE-SU-2018:1389-1 1 CVE
Security update for kvm
This update for kvm fixes the following issues: This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of…
first May 23, 2018 -
Medium max 6.5SUSE-SU-2020:0510-1 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service …
first Feb 27, 2020 -
Medium max 5.5openSUSE-SU-2021:1370-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa() on a path (bsc#1188063). - logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018). - Adopting BFQ to control I/O (jsc#SLE-21032, bsc#1134353). - Rules weren't appl…
first Oct 18, 2021 -
Medium max 5.3SUSE-SU-2021:14644-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…
first Feb 25, 2021 -
Medium max 6.1SUSE-SU-2023:2259-1 3 CVEs
Security update for openvswitch
This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). - CVE-2022-32166: Fixed out of b…
first May 22, 2023 -
Medium max 4.4SUSE-SU-2020:2870-1 1 CVE
Security update for nodejs8
This update for nodejs8 fixes the following issues: - CVE-2020-15095: Fixed information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686).
first Oct 6, 2020 -
Medium max 4.3openSUSE-SU-2025:14813-1 1 CVE
keylime-config-7.12.1-1.1 on GA media
These are all security issues fixed in the keylime-config-7.12.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 16, 2025 -
Medium max 5.9SUSE-SU-2020:3740-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
first Dec 10, 2020 -
Medium max 4.3SUSE-SU-2025:02384-1 1 CVE
Security update for jq
This update for jq fixes the following issues: - CVE-2024-23337: Fixed signed integer overflow in jv.c:jvp_array_write (bsc#1243450).
first Jul 18, 2025 -
Medium max 6.5SUSE-SU-2025:4254-1 1 CVE
Security update for dpdk
This update for dpdk fixes the following issues: - Update to version 22.11.10 - CVE-2025-23259: Fixed an out-of-order completions in ordinary Rx burst. (bsc#1254161)
first Nov 26, 2025 -
Medium max 5.5SUSE-SU-2020:2216-1 2 CVEs
Security update for python36
This update for python36 fixes the following issues: - CVE-2019-20907, bsc#1174091: avoiding possible infinite loop in specifically crafted tarball. - CVE-2020-14422, bsc#1173274: where hash collisions in IPv4Interface and IPv6Interface could lead to DOS.
first Aug 12, 2020 -
Medium max 5.9SUSE-SU-2019:14048-1 4 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Micr…
first May 14, 2019 -
Medium max 6.7SUSE-SU-2019:0480-1 4 CVEs
Security update for supportutils
This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes (bsc#1118463). - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#11…
first Feb 25, 2019 -
Medium max 5.3SUSE-SU-2023:1788-1 1 CVE
Security update for libgit2
This update for libgit2 fixes the following issues: - CVE-2023-22742: Verify ssh remote host keys (bsc#1207364)
first Apr 6, 2023 -
Medium max 6.3openSUSE-SU-2025:14903-1 1 CVE
assimp-devel-5.4.3-4.1 on GA media
These are all security issues fixed in the assimp-devel-5.4.3-4.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2025 -
Medium max 5.5SUSE-SU-2024:3156-1 1 CVE
Security update for python312-pip
This update for python312-pip fixes the following issues: - CVE-2023-5752: Avoiding injection of arbitrary configuration through Mercurial parameter. (bsc#1217353)
first Sep 6, 2024 -
Medium max 5.3SUSE-SU-2021:0019-1 8 CVEs
Security update for java-1_7_1-ibm
This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * …
first Jan 4, 2021 -
Medium max 5.9SUSE-SU-2020:3592-1 1 CVE
Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption (bsc#1178168).
first Dec 2, 2020 -
Medium max 6.5SUSE-SU-2018:2318-1 5 CVEs
Security update for samba
This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048) - CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escap…
first Aug 14, 2018 -
Medium max 5.3openSUSE-SU-2024:13357-1 2 CVEs
java-21-openjdk-21.0.1.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.9SUSE-SU-2024:4400-1 2 CVEs
Security update for grpc
This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)
first Dec 20, 2024 -
Medium max 6.5openSUSE-SU-2024:11400-1 10 CVEs
libsqlite3-0-3.36.0-1.2 on GA media
These are all security issues fixed in the libsqlite3-0-3.36.0-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2019:1348-1 5 CVEs
Security update for xen
This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…
first May 24, 2019 -
Medium max 5.3SUSE-SU-2023:3958-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)
first Oct 4, 2023 -
Medium max 5.9openSUSE-SU-2024:11102-1 18 CVEs
ntp-4.2.8p15-7.2 on GA media
These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024