6,767 results · Clear filters · Feed
-
Medium max 6.8SUSE-SU-2019:0125-1 4 CVEs
Security update for openssh
This update for openssh fixes the following issues: Security issue fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wou…
first Jan 18, 2019 -
Medium max 5.6SUSE-RU-2018:0821-1 1 CVE
Recommended update for drbd, drbd-utils
This update for drbd and drbd-utils provides the following fixes: Changes in drbd-utils: - Make sure the full bitmap gets properly propagated in drbdmeta. Also make sure the ID is kept when downgrading from v9 to v8. (bsc#1037109) - Support passing '--force' …
first Mar 26, 2018 -
Medium max 6.2SUSE-SU-2017:1317-1 1 CVE
Security update for bash
This update for bash fixes an issue that could lead to syntax errors when parsing scripts that use expr(1) inside loops. Additionally, the popd build-in now ensures that the normalized stack offset is within bounds before trying to free that stack entry. This…
first May 16, 2017 -
Medium max 6.5openSUSE-SU-2024:13103-1 1 CVE
kbfs-6.2.2-2.1 on GA media
These are all security issues fixed in the kbfs-6.2.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.8SUSE-SU-2023:0362-1 6 CVEs
Security update for grafana
This update for grafana fixes the following issues: - Version update from 8.5.13 to 8.5.15 (jsc#PED-2617): * CVE-2022-39306: Security fix for privilege escalation (bsc#1205225) * CVE-2022-39307: Omit error from http response when user does not exists (bsc#120…
first Feb 10, 2023 -
Medium max 5.5SUSE-SU-2022:1255-1 20 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount leak bug in net/llc/af_llc.c (bnc#1197391). - CVE-2022-1016: Fixed a vulnerability in the nf_t…
first Apr 19, 2022 -
Medium max 5.7openSUSE-SU-2025:14790-1 11 CVEs
kernel-firmware-nvidia-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-nvidia-20250206-1.1 package on the GA media of openSUSE Tumbleweed.
first Feb 12, 2025 -
Medium max 4.4SUSE-SU-2024:2152-1 1 CVE
Security update for vte
This update for vte fixes the following issues: - CVE-2024-37535: Fixed a bug that allowed an attacker to cause a denial of service (memory consumption) via a window resize escape. (bsc#1226134)
first Jun 21, 2024 -
Medium max 6.5openSUSE-SU-2025:15106-1 1 CVE
python311-treq-24.9.1-1.4 on GA media
These are all security issues fixed in the python311-treq-24.9.1-1.4 package on the GA media of openSUSE Tumbleweed.
first May 17, 2025 -
Medium max 6.4
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-24_107 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731).
first Mar 29, 2022 -
Medium max 6.0SUSE-SU-2022:1306-1 1 CVE
Security update for git
This update for git fixes the following issues: - CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).
first Apr 22, 2022 -
Medium max 5.5SUSE-SU-2025:3714-1 2 CVEs
Security update for python-ldap
This update for python-ldap fixes the following issues: - CVE-2025-61911: Enforce str for escape_filter_chars (bsc#1251912). - CVE-2025-61912: Escape NULs as per RFC 4514 in escape_dn_chars (bsc#1251913).
first Oct 22, 2025 -
Medium max 5.6SUSE-SU-2018:0841-1 9 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may all…
first Mar 29, 2018 -
Medium max 4.6SUSE-SU-2025:0390-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)
first Feb 10, 2025 -
Medium max 6.2openSUSE-SU-2024:12822-1 2 CVEs
containerd-1.6.19-1.1 on GA media
These are all security issues fixed in the containerd-1.6.19-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.3openSUSE-SU-2024:13806-1 2 CVEs
gnutls-3.8.4-1.1 on GA media
These are all security issues fixed in the gnutls-3.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 6.5SUSE-SU-2023:3447-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling'. (bsc#1214083, XSA-435) - CVE-2023-…
first Aug 28, 2023 -
Medium max 5.4SUSE-SU-2024:1973-1 1 CVE
Security update for rmt-server
This update for rmt-server fixes the following issues: - Update to version 2.17 - CVE-2024-28103: Fixed Permissions-Policy that was only served on responses with an HTML related Content-Type. (bsc#1225997)
first Jun 11, 2024 -
Medium max 5.9SUSE-SU-2024:2375-1 1 CVE
Security update for python3-cryptography
This update for python3-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).
first Jul 9, 2024 -
Medium max 5.1openSUSE-SU-2021:0940-1 1 CVE
Security update for bouncycastle
This update for bouncycastle fixes the following issues: - CVE-2020-15522: Fixed a timing issue within the EC math library (bsc#1186328). This update was imported from the SUSE:SLE-15-SP2:Update update project.
first Jun 29, 2021 -
Medium max 6.5SUSE-SU-2022:2104-1 23 CVEs
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 kernel was updated. The following security bugs were fixed: - CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472) - CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. Thi…
first Jun 16, 2022 -
Medium max 6.5SUSE-SU-2022:3497-1 3 CVEs
Security update for slurm
This update for slurm fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute …
first Oct 4, 2022 -
Medium max 6.5SUSE-SU-2017:1222-1 9 CVEs
Security update for Botan
This update for Botan to version 1.10.9 fixes the following issues: These security issues were fixed: - CVE-2015-5726: The BER decoder in Botan 0.10.x allowed remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 d…
first May 9, 2017 -
Medium max 5.9SUSE-SU-2020:2731-1 1 CVE
Security update for conmon, fuse-overlayfs, libcontainers-common, podman
This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 (bsc#1175821) - install missing systemd units for the new Rest API (bsc#1175957) and a few man-pages that where missing before - Drop…
first Sep 24, 2020 -
Medium max 5.5SUSE-SU-2022:3863-1 2 CVEs
Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).
first Nov 3, 2022 -
Medium max 6.3openSUSE-SU-2024:11858-1 5 CVEs
libwireshark15-3.6.2-2.1 on GA media
These are all security issues fixed in the libwireshark15-3.6.2-2.1 package on the GA media of openSUSE Tumbleweed.
first Jun 15, 2024 -
Medium max 5.4SUSE-SU-2019:3318-1 2 CVEs
Security update for samba
This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108). - CVE-2019-148…
first Dec 17, 2019 -
Medium max 6.5SUSE-SU-2022:0931-1 3 CVEs
Security update for xen
This update for xen fixes the following issues: Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated. - CVE-2022-0001, CVE-2022-0002, CV…
first Mar 22, 2022 -
Medium max 5.1SUSE-SU-2020:1828-1 1 CVE
Security update for systemd
This update for systemd fixes the following issues: - CVE-2019-20386: Fixed a memory leak when executing the udevadm trigger command (bsc#1161436). - Renamed the persistent link for ATA devices (bsc#1164538) - shared/install: try harder to find enablement sym…
first Jul 2, 2020 -
Medium max 6.7SUSE-SU-2025:1453-1 1 CVE
Security update for libva
This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: * CVE-2023-39929: uncontrolled search path may allow an authenticated user to escalate privilege via local access (bsc#1224413, jsc#PED-11066) T…
first May 5, 2025 -
Medium max 6.5SUSE-SU-2021:3214-1 1 CVE
Security update for gd
This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).
first Sep 23, 2021 -
Medium max 4.4SUSE-SU-2025:0873-1 1 CVE
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238702)
first Mar 14, 2025 -
Medium max 6.3SUSE-SU-2024:4151-1 1 CVE
Security update for python
This update for python fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Add ipaddress module from https://github.com/phihag/ipaddress - Remove -IVendor/ from python-config (bs…
first Dec 3, 2024 -
Medium max 4.8SUSE-SU-2026:0060-1 2 CVEs
Security update for capstone
This update for capstone fixes the following issues: Security issues fixed: - CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309). - CVE-2025-68114: unchecked `vsnprintf` return value can le…
first Jan 7, 2026 -
Medium max 4.3SUSE-SU-2022:2586-2 5 CVEs
Security update for ldb, samba
This update for ldb, samba fixes the following issues: - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492). - CVE-2022-2031:…
first Jul 29, 2022 -
Medium max 6.1openSUSE-SU-2024:14279-1 1 CVE
python-WebOb-doc-1.8.8-1.1 on GA media
These are all security issues fixed in the python-WebOb-doc-1.8.8-1.1 package on the GA media of openSUSE Tumbleweed.
first Aug 20, 2024 -
Medium max 5.4SUSE-SU-2025:0956-1 1 CVE
Security update for python-Jinja2
This update for python-Jinja2 fixes the following issues: - CVE-2025-27516: Fixed sandbox breakout through attr filter selecting format method (bsc#1238879)
first Mar 19, 2025 -
Medium max 6.3openSUSE-SU-2021:3616-1 13 CVEs
Security update for binutils
This update for binutils fixes the following issues: Update to binutils 2.37: * The GNU Binutils sources now requires a C99 compiler and library to build. * Support for Realm Management Extension (RME) for AArch64 has been added. * A new linker option '-z rep…
first Nov 4, 2021 -
Medium max 5.5SUSE-SU-2024:0833-1 1 CVE
Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).
first Mar 11, 2024 -
Medium max 5.3SUSE-SU-2023:4471-1 2 CVEs
Security update for go1.21
This update for go1.21 fixes the following issues: go1.21.4 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker, the runtime, the compiler, and the go/types, net/http, and runtime/cgo packages. * secu…
first Nov 16, 2023