6,767 results · Clear filters · Feed
-
Medium max 5.5SUSE-SU-2024:1892-1 1 CVE
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233)
first Jun 3, 2024 -
Medium max 4.3SUSE-SU-2018:3393-1 1 CVE
Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2018-11784: When the default servlet in Apache Tomcat returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the r…
first Oct 24, 2018 -
Medium max 6.5SUSE-RU-2024:2564-1 1 CVE
Recommended update for mozilla-nss
This update for mozilla-nss fixes the following issues: - Fixed startup crash of Firefox when using FIPS-mode (bsc#1223724). - Added 'Provides: nss' so other RPMs that require 'nss' can be installed (jira PED-6358). - FIPS: added safe memsets (bsc#1222811) - …
first Jul 19, 2024 -
Medium max 5.9openSUSE-SU-2021:0719-1 2 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.11+9 (April 2021 CPU) * CVE-2021-2163: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055) * CVE-2021-2161: Fixed incorrect handling of par…
first May 13, 2021 -
Medium max 6.5SUSE-SU-2020:2156-1 32 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2…
first Aug 6, 2020 -
Medium max 5.5openSUSE-SU-2021:3348-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa() on a path (bsc#1188063). - logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018). - Adopting BFQ to control I/O (jsc#SLE-21032, bsc#1134353). - Rules weren't appl…
first Oct 12, 2021 -
Medium max 5.5SUSE-SU-2024:4407-1 1 CVE
Security update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative
This update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative fixes the following issues: - CVE-2024-47535: Fixed unsafe reading of large environment files when Netty is loaded by a java application can lead to a crash due to the J…
first Dec 23, 2024 -
Medium max 5.5SUSE-SU-2018:2340-1 3 CVEs
Security update for qemu
This update for qemu to version 2.11.2 fixes the following issues: Security issue fixed: - CVE-2018-11806: Fix heap buffer overflow issue that can happen while reassembling fragmented datagrams (bsc#1096223). - CVE-2018-3639: Mitigation functionality for Spec…
first Aug 15, 2018 -
Medium max 5.6SUSE-SU-2018:1822-1 1 CVE
Security update for gcc43
This update for gcc43 fixes the following issues: This update adds support for 'expolines' on s390x, allowing fixing CVE-2017-5715 in a more lightweight fashion. (bsc#1086069) The option flags are the same as for the x86 retpolines. A compiler crash when buil…
first Jun 27, 2018 -
Medium max 5.9SUSE-SU-2019:0482-2 2 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191). - CVE-2018-14647: Fixed a denial-of-service vulnerability in Expat (bsc#1109847). …
first Apr 26, 2019 -
Medium max 6.6openSUSE-SU-2025:0129-1 6 CVEs
Security update for rubygem-rexml
rubygem-rexml was updated to 3.3.9: - fixes CVE-2024-49761, CVE-2024-43398, CVE-2024-41946, CVE-2024-41123, CVE-2024-39908, CVE-2024-35176 - bsc#1232440, bsc#1229673, bsc#1228799, bsc#1228794, bsc#1228072, bsc#1224390
first Apr 17, 2025 -
Medium max 5.3openSUSE-SU-2021:0933-1 1 CVE
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u292 (icedtea 3.19.0). - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055). This update was imported from the SUSE:SLE-15:Update …
first Jun 27, 2021 -
Medium max 6.5SUSE-SU-2020:0260-1 1 CVE
Security update for rmt-server
This update for rmt-server to version 2.5.2 fixes the following issues: Security issue fixed: - CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922). Non-security issue fixed: - Relaxed systemd units dependencies (bsc#1160673) - Ad…
first Jan 30, 2020 -
Medium max 5.5
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)
This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initializ…
first Mar 19, 2025 -
Medium max 6.3SUSE-SU-2024:2276-1 3 CVEs
Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2024-29510: Fixed an arbitrary path traversal when running in a permitted path (bsc#1226945). - CVE-2024-33870: Fixed a format string injection that could lead to command execution (bsc#1226944). -…
first Jul 2, 2024 -
Medium max 5.4SUSE-SU-2024:1986-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.17 - CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997)
first Jun 11, 2024 -
Medium max 5.4openSUSE-SU-2024:14196-1 1 CVE
exim-4.98-1.1 on GA media
These are all security issues fixed in the exim-4.98-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 16, 2024 -
Medium max 5.5SUSE-SU-2020:3083-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
first Oct 29, 2020 -
Medium max 5.9SUSE-SU-2021:0886-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).
first Mar 19, 2021 -
Medium max 5.5SUSE-SU-2017:0647-1 14 CVEs
Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025188) - CV…
first Mar 9, 2017 -
Medium max 6.2openSUSE-SU-2024:13983-1 1 CVE
python-2.7.18-47.1 on GA media
These are all security issues fixed in the python-2.7.18-47.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.6SUSE-SU-2018:1570-1 2 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files to fix ethernet flow control vulnerability in SRIOV devices (bsc#1077355) - CVE-2017-5715: Prevent unauthorized disclosure of information to an a…
first Jun 7, 2018 -
Medium max 4.4openSUSE-SU-2025:14906-1 1 CVE
helm-3.17.2-1.1 on GA media
These are all security issues fixed in the helm-3.17.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Mar 18, 2025 -
Medium max 5.3SUSE-SU-2023:1960-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
first Apr 24, 2023 -
Medium max 6.5SUSE-SU-2019:14220-1 2 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode …
first Nov 15, 2019 -
Medium max 6.1openSUSE-SU-2025:0008-1 1 CVE
Security update for python-django-ckeditor
This update for python-django-ckeditor fixes the following issues: - Update to 6.7.2 * Deprecated the package. * Added a new ckeditor/fixups.js script which disables the version check again (if something slips through by accident) and which disables the behav…
first Jan 7, 2025 -
Medium max 5.5openSUSE-SU-2024:12430-1 1 CVE
docker-compose-2.12.2-1.1 on GA media
These are all security issues fixed in the docker-compose-2.12.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2025:02027-1 1 CVE
Security update for perl
This update for perl fixes the following issues: - CVE-2025-40909: Do not change the current directory when cloning an open directory handle (bsc#1244079).
first Jun 19, 2025 -
Medium max 6.9openSUSE-SU-2024:14437-1 1 CVE
python310-Werkzeug-3.0.6-1.1 on GA media
These are all security issues fixed in the python310-Werkzeug-3.0.6-1.1 package on the GA media of openSUSE Tumbleweed.
first Oct 29, 2024 -
Medium max 5.8SUSE-SU-2019:2934-1 1 CVE
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-14857: Fixed an open redirect issue that exists in URLs with trailing slashes (bsc#1153666).
first Nov 8, 2019 -
Medium max 5.5openSUSE-SU-2024:12492-1 1 CVE
velero-1.9.2-1.1 on GA media
These are all security issues fixed in the velero-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3SUSE-SU-2024:3443-1 7 CVEs
Security update for opensc
This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076) - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075) - CVE-2024-45618…
first Sep 25, 2024 -
Medium max 5.5SUSE-SU-2020:1711-1 5 CVEs
Security update for mariadb
This update for mariadb to version 10.2.32 fixes the following issues: mariadb was updated to version 10.2.32 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an…
first Jun 23, 2020 -
Medium max 6.5openSUSE-SU-2024:14530-1 2 CVEs
xen-4.19.0_06-1.1 on GA media
These are all security issues fixed in the xen-4.19.0_06-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 26, 2024 -
Medium max 5.0SUSE-SU-2019:14031-1 1 CVE
Security update for libssh2_org
This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] - Store but don't use keys of unsupported types in the known_hosts file [bsc#1091236]
first Apr 27, 2019 -
Medium max 5.9SUSE-SU-2019:1238-1 8 CVEs
Security update for qemu
This update for qemu fixes the following issues: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 host information, which can be considered a security issue (bsc#…
first May 14, 2019 -
Medium max 6.7SUSE-SU-2020:2582-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14331: Fixed a missing check…
first Sep 9, 2020 -
Medium max 6.5openSUSE-SU-2021:2675-1 5 CVEs
Security update for SUSE Manager Client Tools
This update fixes the following issues: ansible: - The support level for ansible is l2, not l3 dracut-saltboot: - Force installation of libexpat.so.1 (bsc#1188846) - Use kernel parameters from PXE formula also for local boot golang-github-prometheus-prometheu…
first Aug 12, 2021 -
Medium max 6.8SUSE-SU-2019:14016-1 2 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…
first Apr 11, 2019 -
Medium max 5.6SUSE-SU-2025:01703-1 1 CVE
Security update for xen
This update for xen fixes the following issues: Update to Xen 4.18.5: Security fixes: - CVE-2024-28956: Fixed Intel CPU Indirect Target Selection (ITS) (bsc#1243117) Other fixes: - Fixed boot failing with XEN kernel on DL580 Gen12 (bsc#1242490) - Added missin…
first May 25, 2025