6,767 results · Clear filters · Feed
-
Medium max 4.4SUSE-SU-2020:2823-1 2 CVEs
Security update for nodejs10
This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-…
first Oct 1, 2020 -
Medium max 5.9openSUSE-SU-2024:12074-1 2 CVEs
runc-1.1.2-1.1 on GA media
These are all security issues fixed in the runc-1.1.2-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.9SUSE-SU-2025:4388-1 2 CVEs
Security update for postgresql16
This update for postgresql16 fixes the following issues: Upgraded to 16.11: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…
first Dec 12, 2025 -
Medium max 6.5openSUSE-SU-2020:2254-1 5 CVEs
Security update for mariadb
This update for mariadb fixes the following issues: Update to 10.4.17 [bsc#1177472] and [bsc#1178428] - fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789, CVE-2020-15180 This update was imported …
first Dec 14, 2020 -
Medium max 5.9SUSE-SU-2024:1859-1 6 CVEs
Security update for java-1_8_0-ibm
This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 25 (bsc#1223470): - CVE-2023-38264: Fixed Object Request Broker (ORB) denial of service (bsc#1224164). - CVE-2024-21094: Fixed C2 compilation fails with '…
first May 30, 2024 -
Medium max 6.5SUSE-SU-2023:2053-1 2 CVEs
Security update for libxml2
This update for libxml2 fixes the following issues: - CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412). - CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411). The following non-security b…
first Apr 27, 2023 -
Medium max 6.5SUSE-SU-2024:3977-1 2 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2024-45818: Fixed deadlock in x86 HVM standard VGA handling (XSA-463) (bsc#1232622). - CVE-2024-45819: Fixed libxl data leaks to PVH guests via ACPI tables (XSA-464) (bsc#1232624). Bug fixes: - Remove usag…
first Nov 12, 2024 -
Medium max 5.3openSUSE-SU-2020:1984-1 8 CVEs
Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage…
first Nov 20, 2020 -
Medium max 5.6SUSE-SU-2018:2082-1 4 CVEs
Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869). - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to addr…
first Jul 27, 2018 -
Medium max 6.5SUSE-SU-2023:0323-1 1 CVE
Security update for python-swift3
This update for python-swift3 fixes the following issues: - CVE-2022-47950: Fixed an issue that could allow a remote attacker to disclose local file contents via a crafted XML file (bsc#1207035).
first Feb 8, 2023 -
Medium max 5.9SUSE-SU-2023:2777-1 3 CVEs
Security update for dnsdist
This update for dnsdist fixes the following issues: - Implements package 'dnsdist' with version 1.8.0 in SLE15. (jsc#PED-3402) - Downstream DNS resolver configuration should be chosen by the admin - Security fix: fixes a possible record smugging with a crafte…
first Jul 4, 2023 -
Medium max 5.3SUSE-SU-2024:0269-1 1 CVE
Security update for xen
This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)
first Jan 30, 2024 -
Medium max 5.9SUSE-SU-2019:0223-1 5 CVEs
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2016-0772: smtplib vulnerability opens startTLS stripping attack (bsc#984751) - CVE-2016-5636: heap overflow when importing malformed zip files (bsc#985177) - CVE-2016-5699: incor…
first Feb 1, 2019 -
Medium max 4.8openSUSE-SU-2024:14453-1 4 CVEs
java-21-openjdk-21.0.5.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
first Nov 2, 2024 -
Medium max 6.5SUSE-SU-2025:01777-1 1 CVE
Security update for iputils
This update for iputils fixes the following issues: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)
first May 30, 2025 -
Medium max 5.6SUSE-SU-2018:0555-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauth…
first Feb 27, 2018 -
Medium max 6.6openSUSE-SU-2025:15124-1 8 CVEs
ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-rails-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 6.5SUSE-SU-2019:2954-1 4 CVEs
Security update for qemu
This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bs…
first Nov 12, 2019 -
Medium max 5.7SUSE-SU-2022:1923-1 17 CVEs
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update to version 20220411 (git commit f219d616f42b, bsc#1199459): - CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26350, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CV…
first Jun 2, 2022 -
Medium max 6.5
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2021-4083: Fixed a race condition with Unix domain socket garbage collection that can lead to read memory after free. (bsc#1193727) - CVE-2021-4149: Fixed an im…
first Jan 14, 2022 -
Medium max 5.5SUSE-SU-2024:3345-1 1 CVE
Security update for python-azure-identity
This update for python-azure-identity fixes the following issues: - CVE-2024-35255: Fixed an Azure identity libraries elevation of privilege vulnerability. (bsc#1230100)
first Sep 19, 2024 -
Medium max 5.6SUSE-SU-2024:1857-1 1 CVE
Security update for python-requests
This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).
first May 30, 2024 -
Medium max 5.5SUSE-SU-2023:4736-1 5 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478). - CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231). - CVE-2023-26965: Fix heap-based use after free in loadI…
first Dec 12, 2023 -
Medium max 6.5SUSE-SU-2024:1507-1 1 CVE
Security update for SUSE Manager Server 4.3
This update fixes the following issues: cobbler: - Provide option to use pre-built GRUB bootloader - Prevent parallel executions of cobbler sync actions (bsc#1218764) image-sync-formula: - Update to version 0.1.1711646883.4a44375 * Add missing URL tag * Updat…
first May 6, 2024 -
Medium max 5.9SUSE-SU-2023:3358-1 1 CVE
Security update for samba
This update for samba fixes the following issues: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). Bugfixes: - Fixed trust relationship failure (bsc#1213384)
first Aug 18, 2023 -
Medium max 6.6openSUSE-SU-2025:14617-1 1 CVE
rizin-0.7.4-1.1 on GA media
These are all security issues fixed in the rizin-0.7.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jan 5, 2025 -
Medium max 5.3openSUSE-SU-2024:13019-1 1 CVE
libsharpyuv0-1.3.0-2.1 on GA media
These are all security issues fixed in the libsharpyuv0-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2024:0973-1 3 CVEs
Security update for tiff
This update for tiff fixes the following issues: - CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686). - CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590). - CVE-2023-40745: Fixed integer overflow in tiffcp…
first Mar 22, 2024 -
Medium max 4.8SUSE-SU-2020:1296-1 1 CVE
Security update for autoyast2
This update for autoyast2 to version 4.1.15 fixes the following issues: Security issue fixed: - CVE-2019-18905: Removed all '--gpg-auto-import-keys' options from zypper commands (bsc#1140711). Non-security issue fixed: - Fix desktop files updating some icons …
first May 18, 2020 -
Medium max 5.5SUSE-SU-2022:4146-1 10 CVEs
Security update for binutils
This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579). - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-dema…
first Nov 21, 2022 -
Medium max 6.5SUSE-RU-2022:4297-1 5 CVEs
Recommended update for pdsh, slurm_22_05
This update for pdsh, slurm_22_05 fixes the following issues: Slurm was updated to 22.05.5 - Fixes a number of moderate severity issues, noteable are: * Load hash plugin at slurmstepd launch time to prevent issues loading the plugin at step completion if the …
first Nov 30, 2022 -
Medium max 6.5openSUSE-SU-2024:11698-1 2 CVEs
MozillaThunderbird-91.4.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.4.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 4.3openSUSE-SU-2024:12667-1 1 CVE
helm-3.11.1-1.1 on GA media
These are all security issues fixed in the helm-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.2SUSE-SU-2022:3422-1 11 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED …
first Sep 27, 2022 -
Medium max 6.5openSUSE-SU-2020:2149-1 5 CVEs
Security update for mariadb
This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15…
first Dec 2, 2020 -
Medium max 4.8SUSE-SU-2023:4480-1 1 CVE
Security update for gcc13
This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers…
first Nov 20, 2023 -
Medium max 5.4SUSE-SU-2024:1974-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.17 - CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997)
first Jun 11, 2024 -
Medium max 6.5SUSE-SU-2025:01940-1 1 CVE
Security update for kubernetes1.23
This update for kubernetes1.23 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).
first Jun 13, 2025 -
Medium max 5.9SUSE-SU-2024:3925-1 1 CVE
Security update for curl
This update for curl fixes the following issues: - CVE-2024-9681: Fixed HSTS subdomain overwrites parent cache entry (bsc#1232528)
first Nov 6, 2024 -
Medium max 6.5SUSE-SU-2017:0758-1 1 CVE
Security update for ceph
This update provides Ceph 10.2.5, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-8626: Handle empty POST condition to not allow attackers to crash the ceph-radosgw service. (bsc#1007217) These non-security issues were fixed: - …
first Mar 20, 2017