6,767 results · Clear filters · Feed
-
Medium max 5.5SUSE-SU-2022:0134-3 2 CVEs
Security update for python-numpy
This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…
first Oct 17, 2022 -
Medium max 6.0SUSE-SU-2020:1664-1 1 CVE
Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue whe…
first Jun 18, 2020 -
Medium max 4.3openSUSE-SU-2024:12729-1 1 CVE
terraform-provider-helm-2.9.0-1.1 on GA media
These are all security issues fixed in the terraform-provider-helm-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.0openSUSE-SU-2024:14364-1 1 CVE
obs-service-cargo-1.3.6-5.1 on GA media
These are all security issues fixed in the obs-service-cargo-1.3.6-5.1 package on the GA media of openSUSE Tumbleweed.
first Sep 24, 2024 -
Medium max 5.6SUSE-SU-2018:2631-1 1 CVE
Security update for libvirt
This update for libvirt fixes the following issues: This new feature was added: - bsc#1094325, bsc#1094725: libxl: Enable virsh blockresize for XEN guests This security issue was fixed: - CVE-2017-5715: Additional fixes for the Spectre patches (bsc#1079869) T…
first Sep 6, 2018 -
Medium max 5.3openSUSE-SU-2024:13437-1 1 CVE
libopenssl-1_1-devel-1.1.1w-4.1 on GA media
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1w-4.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.4SUSE-SU-2020:2304-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
first Aug 25, 2020 -
Medium max 4.2SUSE-SU-2024:1486-1 2 CVEs
Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments (bsc#1222835) - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts…
first May 2, 2024 -
Medium max 6.5SUSE-SU-2020:14306-1 1 CVE
Security update for python
This update for python fixes the following security issue: - CVE-2020-8492: Fixed a regular expression in urllib that was prone to denial of service via HTTP (bsc#1162367).
first Mar 3, 2020 -
Medium max 6.5SUSE-SU-2025:1567-1 8 CVEs
Security update for microcode_ctl
This update for microcode_ctl fixes the following issues: Intel CPU Microcode was updated to the 20250512 release (bsc#1243123) - CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Int…
first May 16, 2025 -
Medium max 5.5SUSE-SU-2020:3092-1 3 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permi…
first Oct 29, 2020 -
Medium max 6.7openSUSE-SU-2019:2593-1 1 CVE
Security update for cpio
This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199). This update was im…
first Nov 30, 2019 -
Medium max 4.7SUSE-SU-2024:1007-2 2 CVEs
Security update for shadow
This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). - CVE-2023-4641: Fixed possible password leak during passwd(1) change (bsc#1214806). The following non-security bugs were fixe…
first Mar 27, 2024 -
Medium max 5.9SUSE-SU-2021:3020-1 4 CVEs
Security update for apache2-mod_auth_openidc
This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2021-32785: format string bug via hiredis (bsc#1188638) - CVE-2021-32786: open redirect in logout functionality (bsc#1188639) - CVE-2021-32791: Hardcoded static IV and AAD with a reuse…
first Sep 13, 2021 -
Medium max 5.6openSUSE-SU-2019:1924-1 8 CVEs
Security update for the Linux Kernel
The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-1125: Fix Spectre V1 variant memory disclosure by speculation over the SWAPGS instruction (bsc#1139358). - CVE-2019-10207: A…
first Aug 16, 2019 -
Medium max 5.5
Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-150300_59_182 fixes one issue. The following security issue was fixed: - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).
first Mar 18, 2025 -
Medium max 4.4SUSE-SU-2024:2003-2 1 CVE
Security update for cups
This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365) - Handle local 'Negotiate' authentication response for cli clients (bsc#…
first Jun 12, 2024 -
Medium max 5.5SUSE-SU-2017:0555-1 1 CVE
Security update for util-linux
This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041). This non-security iss…
first Feb 23, 2017 -
Medium max 4.6SUSE-SU-2025:1345-1 1 CVE
Security update for containerd
This update for containerd fixes the following issues: - CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749) Other fixes: - Update to containerd v1.7.27.
first Apr 17, 2025 -
Medium max 6.9SUSE-SU-2024:4411-1 3 CVEs
Security update for mozjs115
This update for mozjs115 fixes the following issues: - CVE-2024-11498: Fixed resource exhaustion via Stack overflow in libjxl (bsc#1233786) - CVE-2024-11403: Fixed out of Bounds Memory Read/Write in libjxl (bsc#1233766) - CVE-2024-50602: Fixed DoS via XML_Res…
first Dec 23, 2024 -
Medium max 6.5SUSE-SU-2019:13924-1 5 CVEs
Security update for mailman
This update for mailman fixes the following issues: - Fixed a XSS vulnerability and information leak in user options CGI, which could be used to execute arbitrary scripts in the user's browser via specially encoded URLs (bsc#1077358 CVE-2018-5950) - Fixed a d…
first Jan 4, 2019 -
Medium max 4.3openSUSE-SU-2024:10046-1 1 CVE
libsoup-2_4-1-2.56.0-1.1 on GA media
These are all security issues fixed in the libsoup-2_4-1-2.56.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.9openSUSE-SU-2024:14594-1 2 CVEs
libmozjs-115-0-115.15.0-4.1 on GA media
These are all security issues fixed in the libmozjs-115-0-115.15.0-4.1 package on the GA media of openSUSE Tumbleweed.
first Dec 17, 2024 -
Medium max 5.3SUSE-SU-2023:2973-1 1 CVE
Security update for openssl
This update for openssl fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).
first Jul 26, 2023 -
Medium max 5.5SUSE-SU-2020:14525-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2020-14323: Unprivileged user can crash winbind (bsc#1173994). - CVE-2020-14318: Missing permissions check in SMB1/2/3 ChangeNotify (bsc#1173902).
first Oct 30, 2020 -
Medium max 6.5openSUSE-SU-2024:13420-1 1 CVE
connman-1.42-1.1 on GA media
These are all security issues fixed in the connman-1.42-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9openSUSE-SU-2023:0411-1 1 CVE
Security update for putty
This update for putty fixes the following issues: putty is updated to release 0.80 * Fix CVE-2023-48795 [boo#1218128] - Update to release 0.79 * Terminal mouse tracking: support for mouse movements which are not drags, and support for horizontal scroll events…
first Dec 20, 2023 -
Medium max 6.5SUSE-SU-2022:3511-1 1 CVE
Security update for python3
This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).
first Oct 20, 2022 -
Medium max 4.8SUSE-SU-2019:2270-1 2 CVEs
Security update for php72
This update for php72 fixes the following issues: Security issues fixed: - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019-11042: Fixed heap buffer over-read in exif_process_user_comment() (bsc#1145095).
first Sep 2, 2019 -
Medium max 6.4SUSE-SU-2020:2305-1 1 CVE
Security update for grub2
This update for grub2 fixes the following issues: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745).
first Aug 25, 2020 -
Medium max 5.5SUSE-SU-2022:0541-1 4 CVEs
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …
first Feb 21, 2022 -
Medium max 6.3SUSE-SU-2022:0334-1 5 CVEs
Security update for containerd, docker
This update for containerd, docker fixes the following issues: - CVE-2021-41089: Fixed 'cp' can chmod host files (bsc#1191015). - CVE-2021-41091: Fixed flaw that could lead to data directory traversal in moby (bsc#1191434). - CVE-2021-41092: Fixed exposed use…
first Feb 4, 2022 -
Medium max 5.5SUSE-SU-2020:2241-1 3 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Esc…
first Aug 25, 2020 -
Medium max 6.8SUSE-SU-2025:0744-1 1 CVE
Security update for openssh8.4
This update for openssh8.4 fixes the following issues: - CVE-2025-26465: Fixed a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040). Other bugfixes: - Fix usage of local accelerator cards via openssl-ibmca (bsc#1216474, bsc#1218871). …
first Feb 28, 2025 -
Medium max 5.5SUSE-SU-2022:1744-1 1 CVE
Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. (bsc#1199423) Updated to Intel CPU Microcode 20220419 release. (bsc#1198717) - CVE-2022-21151: Processor optimization removal or modification of security-…
first May 19, 2022 -
Medium max 6.1SUSE-SU-2022:1873-1 1 CVE
Security update for pcp
This update for pcp fixes the following issues: - CVE-2020-8025: Fixed outdated entries in permissions profiles for /var/lib/pcp/tmp/* (bsc#1171883).
first May 27, 2022 -
Medium max 5.3SUSE-SU-2022:4079-1 5 CVEs
Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues: - Update to jdk-17.0.5+8 (October 2022 CPU) - CVE-2022-39399: Improve HTTP/2 client usage(bsc#1204480) - CVE-2022-21628: Better HttpServer service (bsc#1204472) - CVE-2022-21624: Enhance icon present…
first Nov 18, 2022 -
Medium max 5.9openSUSE-SU-2025:14627-1 2 CVEs
logback-1.2.11-4.1 on GA media
These are all security issues fixed in the logback-1.2.11-4.1 package on the GA media of openSUSE Tumbleweed.
first Jan 9, 2025 -
Medium max 6.5SUSE-SU-2023:1580-1 3 CVEs
Security update for ceph
This update for ceph fixes the following issues: Security issues fixed: - CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837). - CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#…
first Mar 27, 2023 -
Medium max 6.3SUSE-SU-2023:3710-1 2 CVEs
Security update for openvswitch3
This update for openvswitch3 fixes the following issues: - CVE-2023-3153: Fixed service monitor MAC flow is not rate limited (bsc#1212125).
first Sep 20, 2023