12838 matches found
OPENSUSE-SU-2021:1632-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 96.0.4664.110 boo1193713: CVE-2021-4098: Insufficient data validation in Mojo CVE-2021-4099: Use after free in Swiftshader CVE-2021-4100: Object lifecycle issue in ANGLE CVE-2021-4101: Heap buffer overflow in Swiftshader CVE-2021-4102:...
OPENSUSE-SU-2021:1490-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2021-30640: Escape parameters in JNDI Realm queries bsc1188279. - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients bsc1188278. - CVE-2021-41079: Fixed a denial of service caused by an unexpected TLS packet...
OPENSUSE-SU-2021:3522-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. bsc1190702 - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious inpu...
OPENSUSE-SU-2021:1234-1 Security update for apache2
This update for apache2 fixes the following issues: - CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and modproxy bsc1189387. This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2021:0947-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...
OPENSUSE-SU-2021:0677-1 Security update for exim
This update for exim fixes the following issues: Exim was updated to exim-4.94.2 security update boo1185631 CVE-2020-28007: Link attack in Exim's log directory CVE-2020-28008: Assorted attacks in Exim's spool directory CVE-2020-28014: Arbitrary PID file creation CVE-2020-28011: Heap buffer overfl...
OPENSUSE-SU-2020:2053-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed: - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...
OPENSUSE-SU-2020:1724-1 Security update for gnutls
This update for gnutls fixes the following issues: - Fix heap buffer overflow in handshake with norenegotiation alert sent CVE-2020-24659 bsc1176181 - FIPS: Implement ECDH requirements from SP800-56Arev3 bsc1176086 - FIPS: Use 2048 bit prime in DH selftest bsc1176086 - FIPS: Add TLS KDF selftest...
OPENSUSE-SU-2019:0296-1 Security update for apache2
This update for apache2 fixes the following issues: Security issues fixed: - CVE-2018-17189: Fixed a denial of service in modhttp2, via slow and unneeded request bodies bsc1122838 - CVE-2018-17199: Fixed that modsessioncookie did not respect expiry time bsc1122839 Non-security issue fixed: -...
OPENSUSE-SU-2017:0362-1 Security update for nginx
This update for nginx fixes the following vulnerability: - CVE-2016-4450: Remote attackers could have caused a denial of service NULL pointer dereference and worker process crash via a crafted request, involving writing a client request body to a temporary file...
OPENSUSE-SU-2026:12049-1 qemu-11.1.1-2.1 on GA media
These are all security issues fixed in the qemu-11.1.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21955-1 Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host spoofing boo1281749...
OPENSUSE-SU-2026:20849-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 148.0.7778.215 boo1266471: CVE-2026-9872: Out of bounds write in GPU CVE-2026-9873: Use after free in Network CVE-2026-9874: Use after free in Dawn CVE-2026-9875: Out of bounds read in WebGL CVE-2026-9876: Use...
OPENSUSE-SU-2026:21687-1 Security update for python-aiohttp
This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate bsc1273125. - CVE-2026-69243: HTTP request smuggling via the WebSocket upgrade procedure bsc1273553...
OPENSUSE-SU-2026:11542-1 redis-8.10.1-1.1 on GA media
These are all security issues fixed in the redis-8.10.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11443-1 amazon-ecs-init-1.106.0-1.1 on GA media
These are all security issues fixed in the amazon-ecs-init-1.106.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21481-1 Security update for vexctl
This update for vexctl fixes the following issues: - CVE-2024-45337: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto bsc1234486. - CVE-2025-22868: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...
OPENSUSE-SU-2026:11312-1 acl-2.4.0-1.1 on GA media
These are all security issues fixed in the acl-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21308-1 Security update for php8
This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351...
OPENSUSE-SU-2026:21302-1 Security update for nghttp2
This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with Content-Length bsc1269489...
OPENSUSE-SU-2026:21267-1 Recommended update for mpv, libKPipeWireRecord6, ffmpegthumbs-kf5
This update for mpv, libKPipeWireRecord6, ffmpegthumbs-kf5 fixes the following issues:...
OPENSUSE-SU-2026:21179-1 Security update for lrzip
This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzmadecompressbuf and a NULL pointer dereference in ucompthread on corrupt/malicious archives...
OPENSUSE-SU-2026:11147-1 python-lxml-doc-6.1.1-1.1 on GA media
These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21161-1 Security update for python-pdm
This update for python-pdm fixes the following issues: Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files bsc1268384 - CVE-2026-47763: Do not write to paths outside the scheme dir bsc1268385 - CVE-2026-47781: Update plugin installation path to use...
OPENSUSE-SU-2026:21019-1 Security update for rpcbind
This update for rpcbind fixes the following issues - Update to rpcbind 1.2.9 bsc1267212 https://lore.kernel.org/linux-nfs/[email protected]/ rpcinfo: stack buffer overflow in rpcinfo rpcbaddrlist rpcbind: Stop unauthenticated oversized allocation in PMAPPROCCALLIT...
OPENSUSE-SU-2026:11073-1 bitcoin-qt6-31.0-2.1 on GA media
These are all security issues fixed in the bitcoin-qt6-31.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21084-1 Security update for distribution
This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265788. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation...
OPENSUSE-SU-2026:11027-1 python311-tornado6-6.5.7-1.1 on GA media
These are all security issues fixed in the python311-tornado6-6.5.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20956-1 Security update for trivy
This update for trivy fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files bsc1267047. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...
OPENSUSE-SU-2026:10966-1 amazon-ssm-agent-3.3.4624.0-2.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.4624.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10946-1 assimp-devel-6.0.5-3.1 on GA media
These are all security issues fixed in the assimp-devel-6.0.5-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10951-1 perl-Net-CIDR-Set-0.210.0-1.1 on GA media
These are all security issues fixed in the perl-Net-CIDR-Set-0.210.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20880-1 Security update for python-pip
This update for python-pip fixes the following issues: - CVE-2026-3219: concatenated tar and ZIP files are handled as ZIP files, resulting in possibly obfuscated malicious code bsc1262429. - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation,...
OPENSUSE-SU-2026:20778-1 Security update for gnutls
This update for gnutls fixes the following issues - CVE-2026-3832: cert-session: fix multi-entry OCSP revocation bypass bsc1263706. - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive bsc1263707. - CVE-2026-5260: lib/pkcs11privkey: guard against overreading on short...
OPENSUSE-SU-2026:10801-1 OpenColorIO-devel-2.5.2-1.1 on GA media
These are all security issues fixed in the OpenColorIO-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10646-1 python311-pyOpenSSL-26.1.0-1.1 on GA media
These are all security issues fixed in the python311-pyOpenSSL-26.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10648-1 python315-3.15.0~a8-3.1 on GA media
These are all security issues fixed in the python315-3.15.0a8-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10487-1 chromedriver-146.0.7680.177-1.1 on GA media
These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20350-1 Security update for tomcat
This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping bsc1258371. - CVE-2026-24733: improper input validation on HTTP/0.9 requests bsc1258385. - CVE-2026-24734: certificate revocation bypas...
OPENSUSE-SU-2026:20253-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.7.1 ESR was released: Fixed: Security fix. MFSA 2026-10 bsc1258231: CVE-2026-2447: Heap buffer overflow in libvpx...
OPENSUSE-SU-2026:10114-1 logback-1.2.13-2.1 on GA media
These are all security issues fixed in the logback-1.2.13-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15795-1 go1.25-1.25.5-1.1 on GA media
These are all security issues fixed in the go1.25-1.25.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:15538-1 govulncheck-vulndb-0.0.20250908T141310-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250908T141310-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14981-1 fontforge-20230101-6.1 on GA media
These are all security issues fixed in the fontforge-20230101-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:0113-1 Security update for assimp
This update for assimp fixes the following issues: - CVE-2024-48425: Fixed SEGV in Assimp:SplitLargeMeshesProcessTriangle:UpdateNode boo1232324 - CVE-2024-48423: Fixed a arbitrary code execution via CallbackToLogRedirector boo1232322 - CVE-2024-48424: Fixed a heap-buffer-overflow in...
OPENSUSE-SU-2025:14795-1 kernel-firmware-radeon-20250206-1.1 on GA media
These are all security issues fixed in the kernel-firmware-radeon-20250206-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:0417-1 Security update for chromium
This security update for Chromium to version 131.0.6778.204 boo1234704 fixes: CVE-2024-12692: Type Confusion in V8 CVE-2024-12693: Out of bounds memory access in V8 CVE-2024-12694: Use after free in Compositing CVE-2024-12695: Out of bounds write in V8 Various fixes from internal audits, fuzzing...
OPENSUSE-SU-2024:0408-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2024-53907: Fixed potential denial-of-service in django.utils.html.striptags boo1234232...
OPENSUSE-SU-2024:0378-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 131.0.6778.85 stable released 2024-11-19 boo1233534 CVE-2024-11395: Type Confusion in V8...