12838 matches found
OPENSUSE-SU-2024:10602-1 NetworkManager-1.32.10-2.1 on GA media
These are all security issues fixed in the NetworkManager-1.32.10-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10722-1 docker-20.10.6_ce-2.1 on GA media
These are all security issues fixed in the docker-20.10.6ce-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10651-1 binutils-2.37-1.3 on GA media
These are all security issues fixed in the binutils-2.37-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10676-1 ceph-16.2.6.45+g8fda9838398-1.1 on GA media
These are all security issues fixed in the ceph-16.2.6.45+g8fda9838398-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:0093-1 Security update for minidlna
This update for minidlna fixes the following issues: Update to 1.3.3 boo1222007: - Fixed HTTP chunk length parsing. CVE-2023-33476 - Improved Dutch and Swedish translations. - Fixed directory symlink deletion handling...
OPENSUSE-SU-2021:1577-1 Security update for log4j
This update for log4j fixes the following issues: - CVE-2021-44228: Fix a remote code execution vulnerability that existed in the LDAP JNDI parser. bsc1193611, CVE-2021-44228 This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2021:1477-1 Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13405: The inodeinitowner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID t...
OPENSUSE-SU-2021:2954-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and modproxy bsc1189387...
OPENSUSE-SU-2021:1142-1 Security update for the Linux Kernel
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3679: A lack of CPU resource in the Linux kernel tracing module functionality was found in the way user uses trace ring buffer in a specific way. Only privileged...
OPENSUSE-SU-2020:1243-1 Security update for postgresql12
This update for postgresql12 fixes the following issues: - update to 12.4: CVE-2020-14349, bsc1175193: Set a secure searchpath in logical replication walsenders and apply workers CVE-2020-14350, bsc1175194: Make contrib modules' installation scripts more secure...
OPENSUSE-SU-2020:0985-1 Security update for xen
This update for xen fixes the following issues: - CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking bsc1173377. - CVE-2020-15565: Fixed insufficient cache write-back under VT-d bsc1173378. - CVE-2020-15566: Fixed incorrect error handling in event channel port allocation...
OPENSUSE-SU-2019:2575-1 Security update for cups
This update for cups fixes the following issues: - CVE-2019-8675: Fixed a stack buffer overflow in libcups's asn1gettype functionbsc1146358. - CVE-2019-8696: Fixed a stack buffer overflow in libcups's asn1getpacked function bsc1146359. This update was imported from the SUSE:SLE-15:Update update...
OPENSUSE-SU-2019:1573-1 Security update for php7
This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension bsc1128892. - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory...
OPENSUSE-SU-2019:1438-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing bsc1132728. - CVE-2019-2684: More dynamic RMI interactions bsc1132732. - CVE-2019-2698: Fuzzing TrueType fonts - setCurrGlyphID bsc1132729. - CVE-2018-3639:...
OPENSUSE-SU-2026:12074-1 kernel-devel-7.2.9-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.2.9-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11877-1 jackson-databind-2.18.11-1.1 on GA media
These are all security issues fixed in the jackson-databind-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11882-1 netty-4.1.138-1.1 on GA media
These are all security issues fixed in the netty-4.1.138-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11795-1 ffmpeg-9-libavcodec-devel-9.0.1-6.1 on GA media
These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21843-1 Security update for cadvisor
This update for cadvisor fixes the following issues: Changes in cadvisor: update vendor.tar to fix: bsc1279044, CVE-2026-84445 bsc1279224, CVE-2026-84304 bsc1279320, CVE-2026-84303: cadvisor: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization...
OPENSUSE-SU-2026:21834-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272128. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for...
OPENSUSE-SU-2026:21812-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260902T191204 2026-09-02T19:12:04Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6305 CVE-2026-55834 GHSA-2wvm-8mvp-22qv GO-2026-6306 CVE-2026-55064 GHSA-44v6-7fxq-vgf4...
OPENSUSE-SU-2026:11721-1 libmariadb-devel-3.4.9-2.1 on GA media
These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21540-1 Security update for samba
This update for samba fixes the following issues: Update to 4.22.11. Security issues fixed: - CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr bsc1261188. - CVE-2026-2340: WORM vfs module does not block directory...
OPENSUSE-SU-2026:21529-1 Security update for perl-HTTP-Tiny
This update for perl-HTTP-Tiny fixes the following issues: Changes in perl-HTTP-Tiny: - updated to 0.096 - CVE-2026-7017: Fixed forwarded credential headers to cross-origin redirect targets bsc1271020 - Caller-supplied Authorization, Cookie, and Proxy-Authorization headers are now stripped on...
OPENSUSE-SU-2026:11368-1 openjfx-17.0.20.0-1.1 on GA media
These are all security issues fixed in the openjfx-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21310-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - Update to version 2.96.0: Critical security fix: patched vulnerability in gh codespace jupyter that could allow command execution when connecting to malicious Codespaces Merge commit from fork Fix concurrent map writes in codespace...
OPENSUSE-SU-2026:11182-1 clamav-1.5.3-1.1 on GA media
These are all security issues fixed in the clamav-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21059-1 Security update for openCryptoki
This update for openCryptoki fixes the following issues Upgrade openCryptoki to version 3.27 jscPED-14609: Add base support for PKCS11 v3.2. Add support for PKCS11 v3.2 CVerifySignatureInit|Update|Final. Add support for PKCS11 v3.2 CEncapsulateKey/CDecapsulateKey. Soft/ICA/CCA/EP11: Add support f...
OPENSUSE-SU-2026:21015-1 Security update for dnsdist
This update for dnsdist fixes the following issues - CVE-2026-0396: crafted DNS queries can allow to inject HTML content bsc1261236. - CVE-2026-0397: CORS misconfiguration can lead to information disclosure bsc1261237. - CVE-2026-24028: crafted DNS response packet can lead to an out-of-bounds rea...
OPENSUSE-SU-2026:21122-1 Security update for tomcat10
This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....
OPENSUSE-SU-2026:20926-1 Security update for python-requests
This update for python-requests fixes the following issue: - CVE-2026-25645: extractzippedpaths uses predictable filenames when extracting files from zip archives and reuses target files that already exist without validation bsc1260589...
OPENSUSE-SU-2026:20796-1 Security update for nginx
This update for nginx fixes the following issues - CVE-2026-27651: denial of service via undisclosed requests when the ngxmailauthhttpmodule is enabled bsc1260415. - CVE-2026-32647: NGINX worker memory over-read or over-write via a specially crafted MP4 file bsc1260420. - CVE-2026-40701: heap...
OPENSUSE-SU-2026:10430-1 python311-lmdb-2.1.1-1.1 on GA media
These are all security issues fixed in the python311-lmdb-2.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20291-1 Security update for fluidsynth
This update for fluidsynth fixes the following issues: - CVE-2025-56225: NULL pointer deference when loading and invalid MIDI file bsc1256435...
OPENSUSE-RU-2026:20161-1 Recommended update for hauler
This update for hauler fixes the following issues: Changes in hauler: - Update to version 1.4.1 bsc1256546, CVE-2026-22772: fixed typos for containerd imports 493 fix and support containerd imports of hauls 492 bump github.com/sigstore/fulcio 489 - Update to version 1.4.0: added/updated logging f...
OPENSUSE-SU-2026:20088-1 Security update for python-urllib3
This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses bsc1256331...
OPENSUSE-SU-2026:20013-1 Security update for avahi
This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing bsc1233421...
OPENSUSE-SU-2025:20048-1 Security update for samba
This update for samba fixes the following issues: Update to 4.22.5: CVE-2025-10230: Command injection via WINS server hook script bsc1251280. CVE-2025-9640: uninitialized memory disclosure via vfsstreamsxattr bsc1251279. - Relax samba-gpupdate requirement for cepces, certmonger, and sscep to a...
OPENSUSE-SU-2025:15466-1 polaris-10.1.1-1.1 on GA media
These are all security issues fixed in the polaris-10.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15351-1 fractal-12.beta+14-1.1 on GA media
These are all security issues fixed in the fractal-12.beta+14-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15048-1 tomcat-9.0.104-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.104-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15023-1 java-17-openjdk-17.0.15.0-1.1 on GA media
These are all security issues fixed in the java-17-openjdk-17.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14937-1 govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250327T184518-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:0103-1 Security update for cadvisor
This update for cadvisor fixes the following issues: - update to 0.52.1: Make resctrl optional/pluggable - update to 0.52.0: bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6 chore: Update Prometheus libraries bump runc to v1.2.4 Add Pressure Stall Information Metrics Switch ...
OPENSUSE-SU-2024:14521-1 php8-8.3.14-1.1 on GA media
These are all security issues fixed in the php8-8.3.14-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14494-1 nodejs-electron-31.7.4-1.1 on GA media
These are all security issues fixed in the nodejs-electron-31.7.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14470-1 govulncheck-vulndb-0.0.20241106T172143-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241106T172143-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14469-1 chromedriver-130.0.6723.116-1.1 on GA media
These are all security issues fixed in the chromedriver-130.0.6723.116-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:14458-1 govulncheck-vulndb-0.0.20241104T154416-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20241104T154416-1.1 package on the GA media of openSUSE Tumbleweed...