6,767 results · Clear filters · Feed
-
Medium max 5.3SUSE-SU-2019:0643-1 1 CVE
Security update for lftp
This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code det…
first Mar 19, 2019 -
Medium max 5.3openSUSE-SU-2019:1912-1 8 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol h…
first Aug 15, 2019 -
Medium max 5.3openSUSE-SU-2024:14184-1 1 CVE
exiv2-0.28.3-1.1 on GA media
These are all security issues fixed in the exiv2-0.28.3-1.1 package on the GA media of openSUSE Tumbleweed.
first Jul 14, 2024 -
Medium max 5.4SUSE-SU-2020:1748-1 1 CVE
Security update for ceph
This is a version update for ceph to version 12.2.13: Security issue fixed: - CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag (bsc#1171921). - Notable changes in this update for ceph: * mgr: telemetry: backported and now available on …
first Jun 25, 2020 -
Medium max 6.5SUSE-SU-2024:0863-1 2 CVEs
Security update for fontforge
This update for fontforge fixes the following issues: - CVE-2024-25081: Fixed command injection via crafted filenames (bsc#1220404). - CVE-2024-25082: Fixed command injection via crafted archives or compressed files (bsc#1220405).
first Mar 13, 2024 -
Medium max 6.2SUSE-SU-2024:1843-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854).
first May 29, 2024 -
Medium max 4.0SUSE-SU-2020:1178-1 1 CVE
Security update for rubygem-actionview-5_1
This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240).
first May 5, 2020 -
Medium max 5.9SUSE-SU-2025:02756-1 1 CVE
Security update for libgcrypt
This update for libgcrypt fixes the following issues: - CVE-2024-2236: timing-based side-channel flaw in RSA implementation can lead to decryption of RSA ciphertexts (bsc#1221107).
first Aug 12, 2025 -
Medium max 6.5SUSE-SU-2023:2879-1 1 CVE
Security update for dbus-1
This update for dbus-1 fixes the following issues: - CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).
first Jul 19, 2023 -
Medium max 6.5SUSE-SU-2024:3979-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) Non-security issue fixed:…
first Nov 12, 2024 -
Medium max 5.5SUSE-SU-2023:1734-1 1 CVE
Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)
first Apr 3, 2023 -
Medium max 5.9SUSE-SU-2024:2042-1 1 CVE
Security update for booth
This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)
first Jun 17, 2024 -
Medium max 6.2openSUSE-SU-2024:13804-1 2 CVEs
avahi-0.8-33.1 on GA media
These are all security issues fixed in the avahi-0.8-33.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.5SUSE-SU-2022:1267-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-0812: Fixed an incorrect header size calculations which could lead to a memory leak. (bsc#1196639) - CVE-2021-39713: Fixed a race condition in the network …
first Apr 19, 2022 -
Medium max 5.3openSUSE-SU-2024:13310-1 1 CVE
libwireshark16-4.0.10-1.1 on GA media
These are all security issues fixed in the libwireshark16-4.0.10-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.2SUSE-SU-2024:1486-2 2 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments (bsc#1222835) - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts…
first Jun 18, 2024 -
Medium max 6.5SUSE-SU-2023:3998-1 5 CVEs
Security update for poppler
This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denia…
first Oct 6, 2023 -
Medium max 5.3SUSE-SU-2023:2515-1 1 CVE
Security update for rekor
This update for rekor fixes the following issues: - updated to rekor 1.2.1 (jsc#SLE-23476): - CVE-2023-33199: Fixed that malformed proposed intoto v0.0.2 entries can cause a panic (bsc#1211790).
first Jun 15, 2023 -
Medium max 4.4SUSE-SU-2023:3803-1 1 CVE
Security update for supportutils
This update for supportutils fixes the following issues: Security Fixes: - CVE-2022-45154: Removed iSCSI passwords (bsc#1207598). Other fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory (bsc#1210950) + A Cleartext Stor…
first Sep 27, 2023 -
Medium max 5.6SUSE-SU-2018:0010-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). - CVE-201…
first Jan 4, 2018 -
Medium max 6.5SUSE-SU-2018:2630-1 1 CVE
Security update for apache-pdfbox
This update for apache-pdfbox fixes the following issues: Security issue fixed: - CVE-2018-8036: Fix infinite loop while parsing files that leads to an out of memory issue (bsc#1099721).
first Sep 6, 2018 -
Medium max 5.3SUSE-SU-2023:0435-1 2 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: Updated to version jdk-17.0.6.0+10: - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248). Bugfixes: …
first Feb 16, 2023 -
Medium max 5.3SUSE-SU-2024:3864-1 1 CVE
Security update for apache2
This update for apache2 fixes the following issues: - CVE-2024-40725: Fixed source code disclosure of local content (bsc#1228097)
first Nov 1, 2024 -
Medium max 5.3openSUSE-SU-2024:10162-1 1 CVE
python3-Twisted-16.4.1-1.2 on GA media
These are all security issues fixed in the python3-Twisted-16.4.1-1.2 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2024:3927-2 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
first Dec 19, 2024 -
Medium max 5.5openSUSE-SU-2020:0870-1 5 CVEs
Security update for mariadb
This update for mariadb to version 10.2.32 fixes the following issues: mariadb was updated to version 10.2.32 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an…
first Jun 26, 2020 -
Medium max 5.3SUSE-SU-2023:0161-1 1 CVE
Security update for python-py
This update for python-py fixes the following issues: - CVE-2022-42969: Fixed an excessive resource consumption that could be triggered when interacting with a Subversion repository containing crated data (bsc#1204364).
first Jan 26, 2023 -
Medium max 5.3SUSE-SU-2023:1908-1 2 CVEs
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2023-0465: Fixed ignored invalid certificate policies in leaf certificates (bsc#1209878). - CVE-2023-0466: Fixed disabled certificate policy check (bsc#1209873).
first Apr 19, 2023 -
Medium max 6.5SUSE-SU-2022:0058-1 2 CVEs
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: - Mozilla Thunderbird 91.4.1 - CVE-2021-4126: OpenPGP signature status doesn't consider additional message content. (bsc#1194215) - CVE-2021-44538: Matrix chat library libolm bundled with Thunderb…
first Jan 12, 2022 -
Medium max 4.8SUSE-SU-2020:0101-1 4 CVEs
Security update for php7
This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#11599…
first Jan 14, 2020 -
Medium max 4.0SUSE-SU-2019:1703-1 1 CVE
Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Removes string replace for textmode fix (bsc#1134195) py26-compat-salt: - Avoid syntax error on yumpkg module running on Python 2.6 (bsc#1136250) - Use ThreadPool from multiprocessing.pool to avoid leakins wh…
first Jun 25, 2019 -
Medium max 5.6SUSE-RU-2020:1238-1 1 CVE
Recommended update for SUSE Manager Server 4.0
This update fixes the following issues: branch-network-formula: - Handle application/efi mime type - Allow http access to saltboot directory cobbler: - Signatures file now uses 'default_autoinstall' which fixes import problem happening with some distributions…
first May 11, 2020 -
Medium max 5.3openSUSE-SU-2021:0106-1 1 CVE
Security update for php7
This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706). This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Jan 18, 2021 -
Medium max 6.3SUSE-SU-2022:4055-1 1 CVE
Security update for go1.18
This update for go1.18 fixes the following issues: Update to go 1.18.8 (released 2022-11-01) (bsc#1193742): Security fixes: - CVE-2022-41716: Fixed unsanitized NUL in environment variables in syscalls, os/exec (go#56327) (bsc#1204941). Bugfixes: - runtime: lo…
first Nov 17, 2022 -
Medium max 5.3SUSE-SU-2023:3862-1 2 CVEs
Security update for salt
This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache director…
first Sep 28, 2023 -
Medium max 4.8SUSE-SU-2024:4202-1 4 CVEs
Security update for java-1_8_0-openjdk
This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u432 (icedtea-3.33.0): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702,JDK-8328286) - CVE-2024-21210: Fixed unauthorized update, insert or delete acc…
first Dec 5, 2024 -
Medium max 6.5SUSE-SU-2023:0153-1 1 CVE
Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-0056: Fixed a server crash that could be triggered via a malformed HTTP/2 frame (bsc#1207181).
first Jan 26, 2023 -
Medium max 5.5SUSE-SU-2020:1699-1 5 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10768: The prctl() function could be used to enable indirect branch speculation even after it has been disab…
first Jun 22, 2020 -
Medium max 4.8SUSE-SU-2024:3963-1 4 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: - Update to upstream tag jdk-17.0.13+11 (October 2024 CPU) * Security fixes + JDK-8307383: Enhance DTLS connections + JDK-8290367, JDK-8332643: Update default value and extend the scope of com.sun.jn…
first Nov 9, 2024 -
Medium max 6.5SUSE-SU-2021:1282-1 1 CVE
Security update for apache-commons-io
This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string (bsc#1184755)
first Apr 20, 2021