12798 matches found
OPENSUSE-SU-2021:1601-1 Security update for log4j
This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes LOG4J2-3198, LOG4J2-3201, LOG4J2-3208, and LOG4J2-3211 that are included in...
OPENSUSE-SU-2021:3641-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3772: Fixed sctp vtag check in sctpsfootb bsc1190351. - CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have...
OPENSUSE-SU-2021:2320-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: - Update to version 3.36.0 - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization bsc1173641 - CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated...
OPENSUSE-SU-2020:1293-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request bsc1175071. - CVE-2020-11984: Fixed an information disclosure bug in modproxyuwsgi bsc1175074. - CVE-2020-11993: When trace/debu...
OPENSUSE-SU-2020:1111-1 Security update for tomcat
This update for tomcat fixes the following issues: - Fixed CVEs: CVE-2020-13934 bsc1174121 CVE-2020-13935 bsc1174117 This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2020:1048-1 Security update for chromium
This update for chromium fixes the following issues: - Update to 84.0.4147.89 boo1174189: Critical CVE-2020-6510: Heap buffer overflow in background fetch. High CVE-2020-6511: Side-channel information leakage in content security policy. High CVE-2020-6512: Type Confusion in V8. High CVE-2020-6513...
OPENSUSE-SU-2019:1148-1 Security update for gd
This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function bsc1123361. - CVE-2019-6978: Fixed a double free in the gdImagePtr functions bsc1123522. This update was imported...
OPENSUSE-SU-2018:0813-1 Security update for nginx
This update for nginx to version 1.13.9 fixes the following issues: - CVE-2017-7529: nginx: Integer overflow in nginx range filter module allowed memory disclosure bsc1048265 This update also contains all updates and improvements in 1.13.9 upstream release...
OPENSUSE-SU-2026:11968-1 libpoppler-cpp3-26.09.0-3.1 on GA media
These are all security issues fixed in the libpoppler-cpp3-26.09.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21761-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260827T195228 2026-08-27T19:52:28Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-5026 CVE-2026-39821 GO-2026-6225 GO-2026-6250 CVE-2026-63328 GHSA-8rc5-4fr6-64pw...
OPENSUSE-SU-2026:21375-1 Security update for jackson-annotations, jackson-core, jackson-databind
This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions bsc1268902. - CVE-2026-59889: missing view guard when deserializi...
OPENSUSE-SU-2026:21331-1 Security update for helm
This update for helm fixes the following issue - CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens bsc1270127. Changes for helm: - Update to version 3.21.2...
OPENSUSE-SU-2026:11249-1 python313-weasyprint-69.0-1.1 on GA media
These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21182-1 Security update for python-python-engineio
This update for python-python-engineio fixes the following issues: Changes in python-python-engineio: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS bsc1269544 - CVE-2026-48809: size of incoming...
OPENSUSE-SU-2026:21166-1 Security update for nano
This update for nano fixes the following issues: Changes in nano: - Update to version 9.1: When searching, the viewport is placed snug left where possible. The ability to read and write files in old Mac format a lone carriage return as line ending was removed. The ^T toggle between WhereIs and...
OPENSUSE-SU-2026:21079-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh bsc1239342. - CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs bsc1238702. ...
OPENSUSE-SU-2026:10958-1 chromedriver-149.0.7827.53-2.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.53-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20831-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues - CVE-2026-42308: integer overflow in font processing can lead to denial of service bsc1265359. - CVE-2026-42309: heap buffer overflow when processing nested list coordinates bsc1265153. - CVE-2026-42310: infinite loop and resource exhausti...
OPENSUSE-SU-2026:20769-1 Security update for mozjs115
This update for mozjs115 fixes the following issues: Changes in mozjs115: - CVE-2026-32776: Fixed a NULL pointer dereference when processing empty external parameter entities inside an entity declaration value bsc1259728 - CVE-2026-32777: Fixed a denial of service due to infinite loop in DTD...
OPENSUSE-SU-2026:20681-1 Security update for java-21-openjdk
This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.11+10 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...
OPENSUSE-RU-2026:20325-1 Recommended update for shim
This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shimstartimage: fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory -...
OPENSUSE-SU-2026:20798-1 Security update for trivy
This update for trivy fixes the following issues: Update to version 0.68.2: Security fixes: - CVE-2024-3817: hashicorp/go-getter: argument injection when fetching remote default git branches bsc1227010. - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause...
OPENSUSE-SU-2026:20177-1 Security update for golang-github-prometheus-prometheus
This update for golang-github-prometheus-prometheus fixes the following issues: Update to version 3.5.0: Security issues fixed: - CVE-2025-13465: prototype pollution in the .unset and .omit functions can lead to deletion of methods from global bsc1257329. - CVE-2025-12816: interpretation conflict...
OPENSUSE-SU-2026:20151-1 Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 4.4.13: - CVE-2025-11626: MONGO dissector infinite loop bsc1251933. - CVE-2025-13499: Kafka dissector crash bsc1254108. - CVE-2025-13945: HTTP3 dissector crash bsc1254471. - CVE-2025-13946: MEGACO dissector infinite loop...
OPENSUSE-SU-2026:20000-1 Security update for salt
This update for salt fixes the following issues: Changes in salt: - Add minimumauthversion to enforce security CVE-2025-62349 - Backport security fixes for vendored tornado BDSA-2024-3438 BDSA-2024-3439 BDSA-2024-9026 - Junos module yaml loader fix CVE-2025-62348 - Require Python dependencies onl...
OPENSUSE-SU-2025:0008-1 Security update for python-django-ckeditor
This update for python-django-ckeditor fixes the following issues: - Update to 6.7.2 Deprecated the package. Added a new ckeditor/fixups.js script which disables the version check again if something slips through by accident and which disables the behavior where CKEditor 4 would automatically...
OPENSUSE-SU-2024:0358-1 Security update for qbittorrent
This update for qbittorrent fixes the following issues: - Update to version 5.0.1 fixes boo1232731 CVE-2024-51774 Added features: Add 'Simple pread/pwrite' disk IO type Bug fixes: Don't ignore SSL errors boo1232731 CVE-2024-51774 Don't try to apply Mark-of-the-Web to nonexistent files Disable 'Mo...
OPENSUSE-SU-2024:14435-1 corepack22-22.10.0-1.1 on GA media
These are all security issues fixed in the corepack22-22.10.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14433-1 python310-pytest-html-4.1.1-3.1 on GA media
These are all security issues fixed in the python310-pytest-html-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14431-1 grafana-11.3.0-1.1 on GA media
These are all security issues fixed in the grafana-11.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14393-1 MozillaFirefox-131.0.2-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-131.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14369-1 libmozjs-128-0-128.2.0-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14293-1 python310-Flask-Cors-4.0.1-1.1 on GA media
These are all security issues fixed in the python310-Flask-Cors-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14282-1 velociraptor-0.7.0.4.git97.675e45f9-12.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git97.675e45f9-12.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14260-1 MozillaFirefox-129.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-129.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:0212-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 126.0.6478.182 boo1227979: - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use...
OPENSUSE-SU-2024:14207-1 java-21-openjdk-21.0.4.0-1.1 on GA media
These are all security issues fixed in the java-21-openjdk-21.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10090-1 libruby2_3-2_3-2.3.1-1.6 on GA media
These are all security issues fixed in the libruby23-23-2.3.1-1.6 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10561-1 mailx-12.5-24.4 on GA media
These are all security issues fixed in the mailx-12.5-24.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12775-1 chromedriver-111.0.5563.64-2.1 on GA media
These are all security issues fixed in the chromedriver-111.0.5563.64-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13444-1 gnutls-3.8.2-1.1 on GA media
These are all security issues fixed in the gnutls-3.8.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10074-1 ldb-tools-1.1.27-1.1 on GA media
These are all security issues fixed in the ldb-tools-1.1.27-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13075-1 java-11-openjdk-11.0.20.0-1.1 on GA media
These are all security issues fixed in the java-11-openjdk-11.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13697-1 corepack20-20.11.1-1.1 on GA media
These are all security issues fixed in the corepack20-20.11.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11818-1 ruby3.1-rubygem-actioncable-6.0-6.0.4.4-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-actioncable-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11089-1 nfdump-1.6.23-1.3 on GA media
These are all security issues fixed in the nfdump-1.6.23-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13692-1 tomcat-9.0.85-3.1 on GA media
These are all security issues fixed in the tomcat-9.0.85-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12944-1 python310-urllib3_1-1.26.15-1.1 on GA media
These are all security issues fixed in the python310-urllib31-1.26.15-1.1 package on the GA media of openSUSE Tumbleweed...