6,767 results · Clear filters · Feed
-
Medium max 6.7SUSE-SU-2022:2520-1 49 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).…
first Jul 21, 2022 -
Medium max 4.4openSUSE-SU-2021:0024-1 1 CVE
Security update for python-notebook
This update for python-notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458).
first Jan 7, 2021 -
Medium max 6.6SUSE-SU-2025:0772-1 1 CVE
Security update for skopeo
This update for skopeo fixes the following issues: - CVE-2025-27144: excessive memory consumption by Go JOSE when parsing compact JWS or JWE input containing a large number of '.' characters (bsc#1237613).
first Mar 3, 2025 -
Medium max 6.0openSUSE-SU-2024:12005-1 1 CVE
libgit2-1_4-1.4.3-1.1 on GA media
These are all security issues fixed in the libgit2-1_4-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3SUSE-SU-2020:1545-1 1 CVE
Security update for php7
This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).
first Jun 5, 2020 -
Medium max 4.2SUSE-SU-2025:01753-1 1 CVE
Security update for slurm_20_11
This update for slurm_20_11 fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).
first May 29, 2025 -
Medium max 5.5SUSE-SU-2023:2692-1 1 CVE
Security update for iniparser
This update for iniparser fixes the following issues: - CVE-2023-33461: Fixed NULL pointer dereference in iniparser_getboolean() (bsc#1211889).
first Jun 28, 2023 -
Medium max 5.2SUSE-SU-2024:1830-2 1 CVE
Security update for glib2
This update for glib2 fixes the following issues: - CVE-2024-34397: Fixed signal subscription unicast spoofing vulnerability (bsc#1224044).
first May 29, 2024 -
Medium max 5.5SUSE-SU-2022:2600-1 10 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…
first Jul 29, 2022 -
Medium max 5.9SUSE-SU-2023:1944-1 1 CVE
Security update for libmicrohttpd
This update for libmicrohttpd fixes the following issues: - CVE-2023-27371: Fixed parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745).
first Apr 21, 2023 -
Medium max 6.1SUSE-SU-2023:2770-1 1 CVE
Security update for python-tornado
This update for python-tornado fixes the following issues: - CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741).
first Jul 4, 2023 -
Medium max 5.9openSUSE-SU-2024:13301-1 1 CVE
python310-urllib3-2.0.6-1.1 on GA media
These are all security issues fixed in the python310-urllib3-2.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.7SUSE-SU-2021:2384-1 1 CVE
Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-57 fixes one issue. The following security issue was fixed: - CVE-2021-23133: Fixed a race condition in the SCTP sockets that can lead to kernel privilege escalation from the context of a network service or an unprivile…
first Jul 16, 2021 -
Medium max 5.6SUSE-SU-2018:0115-1 14 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). - CVE…
first Jan 16, 2018 -
Medium max 5.6SUSE-SU-2018:0113-1 2 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update…
first Jan 16, 2018 -
Medium max 4.3openSUSE-SU-2024:12682-1 1 CVE
k9s-0.27.3-1.1 on GA media
These are all security issues fixed in the k9s-0.27.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:14230-1 3 CVEs
espeak-ng-1.51.1-1.1 on GA media
These are all security issues fixed in the espeak-ng-1.51.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 1, 2024 -
Medium max 5.9SUSE-SU-2023:3945-1 1 CVE
Security update for postfix
This update for postfix fixes the following issues: Security fixes: - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196). Other fixes: - postfix: config.postfix causes too tight permission on main.cf (bsc#1…
first Oct 3, 2023 -
Medium max 5.6SUSE-SU-2025:02472-1 3 CVEs
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues: - CVE-2025-47808: Fixed NULL-pointer dereference in TMPlayer subtitle parser (bsc#1244404). - CVE-2025-47807: Fixed NULL-pointer dereference in SubRip subtitle parser (bsc#1244403). - CVE-2025…
first Jul 23, 2025 -
Medium max 4.4SUSE-SU-2024:1136-1 1 CVE
Security update for c-ares
This update for c-ares fixes the following issues: - CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
first Apr 8, 2024 -
Medium max 4.4SUSE-SU-2024:1136-2 1 CVE
Security update for c-ares
This update for c-ares fixes the following issues: - CVE-2024-25629: Fixed out of bounds read in ares__read_line() (bsc#1220279).
first Apr 8, 2024 -
Medium max 5.3SUSE-SU-2025:01762-1 1 CVE
Security update for brotli
This update for brotli fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825).
first May 29, 2025 -
Medium max 5.5SUSE-SU-2023:3962-1 2 CVEs
Security update for libXpm
This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686). - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687).
first Oct 4, 2023 -
Medium max 6.5SUSE-SU-2023:0428-1 2 CVEs
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982). - CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).
first Feb 15, 2023 -
Medium max 6.7SUSE-SU-2020:14447-1 1 CVE
Security update for xorg-x11-libX11
This update for xorg-x11-libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).
first Aug 11, 2020 -
Medium max 5.3openSUSE-SU-2019:1534-1 17 CVEs
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14): * CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext * CVE-2019-11691: Use-after-free in XMLHttpRequest *…
first Jun 10, 2019 -
Medium max 5.5SUSE-SU-2018:2556-1 3 CVEs
Security update for qemu
This update for qemu fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the l…
first Aug 30, 2018 -
Medium max 5.9SUSE-SU-2023:4986-1 1 CVE
Security update for gnutls
This update for gnutls fixes the following issues: - CVE-2023-5981: Fixed timing side-channel inside RSA-PSK key exchange (bsc#1217277).
first Dec 28, 2023 -
Medium max 5.7openSUSE-SU-2024:11878-1 1 CVE
python36-3.6.15-10.1 on GA media
These are all security issues fixed in the python36-3.6.15-10.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2019:0585-1 4 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122…
first Mar 12, 2019 -
Medium max 6.5openSUSE-SU-2025:14968-1 4 CVEs
cyradm-3.8.4-1.1 on GA media
These are all security issues fixed in the cyradm-3.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Apr 4, 2025 -
Medium max 5.3SUSE-SU-2023:3093-1 1 CVE
Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Aug 1, 2023 -
Medium max 6.5SUSE-SU-2020:0334-1 13 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host (bsc#1161181). - CVE-2019-19579: Device quarantine for alternate pci assignment methods (bsc#1157888). - CVE-20…
first Feb 6, 2020 -
Medium max 6.7SUSE-SU-2022:2615-1 48 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657).…
first Aug 1, 2022 -
Medium max 5.3openSUSE-SU-2024:13392-1 1 CVE
matrix-synapse-1.95.1-1.1 on GA media
These are all security issues fixed in the matrix-synapse-1.95.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.7openSUSE-SU-2025:14771-1 11 CVEs
kernel-firmware-ath11k-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-ath11k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 5.5openSUSE-SU-2019:2432-1 28 CVEs
Security update for binutils
This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - C…
first Nov 5, 2019 -
Medium max 6.3SUSE-SU-2025:0386-1 1 CVE
Security update for python39
This update for python39 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)
first Feb 7, 2025 -
Medium max 5.9openSUSE-SU-2021:1277-1 4 CVEs
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2021-32785: format string bug via hiredis (bsc#1188638) - CVE-2021-32786: open redirect in logout functionality (bsc#1188639) - CVE-2021-32791: Hardcoded static IV and AAD with a reuse…
first Sep 16, 2021 -
Medium max 5.5
Feature update for SCA patterns
This update for SCA patterns fixes the following issues: sca-patterns-base: - Version update from 1.3.1 to 1.5.0 to implement the conversion of SCA Tool to Python3 (jsc#SLE-25064, jsc#SLE-24335): * Convert SCA Tool from Python2 to Python3 (bsc#1191005, SLE-21…
first Dec 15, 2022