12894 matches found
OPENSUSE-SU-2022:0176-1 Security update for unbound
This update for unbound fixes the following issues: - CVE-2019-25031: Fixed configuration injection in createunboundadservers.sh upon a successful man-in-the-middle attack bsc1185382. - CVE-2019-25032: Fixed integer overflow in the regional allocator via regionalalloc bsc1185383. - CVE-2019-25033...
OPENSUSE-SU-2022:0016-1 Security update for watchman
This update for watchman fixes the following issues: - ship README.suse that explains how to use the template systemd units - add user writable bit for systemd service and socket files - properly handle state directory creation in /run/watchman/$USER-state. The former approach was susceptible to ...
OPENSUSE-SU-2021:3291-1 Security update for glibc
This update for glibc fixes the following issues: - CVE-2021-33574: Fixed use pthreadattrcopy in mqnotify bsc1186489. - CVE-2021-35942: Fixed wordexp handle overflow in positional parameter number bsc1187911...
OPENSUSE-SU-2021:1524-1 Security update for tor
This update for tor fixes the following issues: tor 0.4.6.8: Improving reporting of general overload state for DNS timeout errors by relays Regenerate fallback directories for October 2021 Bug fixes for onion services CVE-2021-22929: do not log v2 onion services access attempt warnings on disk...
OPENSUSE-SU-2021:1462-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 95.0.4638.69 boo1192184: CVE-2021-37997: Use after free in Sign-In CVE-2021-37998: Use after free in Garbage Collection CVE-2021-37999: Insufficient data validation in New Tab Page CVE-2021-38000: Insufficient validation of untrusted...
OPENSUSE-SU-2021:2837-1 Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.2.40 bsc1189320: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389 In additon the follwing was changed: - Increase NOFILE limit on service configuration bsc1180014 The default 'NOFILE' setti...
OPENSUSE-SU-2021:1091-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links fixed: Folder Pane display theme fixes for macOS fixed: Chat account settings did not always save as...
OPENSUSE-SU-2021:1975-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes ...
OPENSUSE-SU-2021:2005-1 Security update for jetty-minimal
This update for jetty-minimal fixes the following issues: Update to version 9.4.42.v20210604 - Fix: bsc1187117, CVE-2021-28169 - possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory - Fix: bsc1184367, CVE-2021-28165 - jet...
OPENSUSE-SU-2021:0435-1 Security update for python
This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator bsc1182379. This update was imported from the SUSE:SLE-15:Update updat...
OPENSUSE-SU-2020:0913-1 Security update for unbound
This update for unbound fixes the following issues: - CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target bsc1171889. - CVE-2020-12663: Fixed an issue where malformed answers from upstream name...
OPENSUSE-SU-2020:0682-1 Security update for openexr
This update for openexr provides the following fix: Security issues fixed: - CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier bsc1169575. - CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...
OPENSUSE-SU-2020:0500-1 Security update for nagios
This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. boo1156309 - CVE-2018-18245: Fixed XSS vulnerability in Alert Summary report...
OPENSUSE-SU-2019:2675-1 Security update for the Linux Kernel
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15211: There was a use-after-free caused by a malicious USB device in drivers/media/v4l2-core/v4l2-dev.c bnc1146519. - CVE-2019-15213: There was a use-after-free...
OPENSUSE-SU-2019:2260-1 Security update for MozillaFirefox
This update for MozillaFirefox to 68.1 fixes the following issues: Security issues fixed: - CVE-2019-9811: Fixed a sandbox escape via installation of malicious language pack. bsc1140868 - CVE-2019-9812: Fixed a sandbox escape through Firefox Sync. bsc1149294 - CVE-2019-11710: Fixed several memory...
OPENSUSE-SU-2019:1839-1 Security update for python-Django
This update for python-Django fixes the following issues: Security issues fixed: - CVE-2019-11358: Fixed prototype pollution. - CVE-2019-12308: Fixed XSS in AdminURLFieldWidget bsc1136468 - CVE-2019-12781: Fixed incorrect HTTP detection with reverse-proxy connecting via HTTPS bsc1139945. -...
OPENSUSE-SU-2026:12096-1 python313-datamodel-code-generator-0.83.0-1.1 on GA media
These are all security issues fixed in the python313-datamodel-code-generator-0.83.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12061-1 nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media
These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11903-1 python313-django-allauth-65.19.4-1.1 on GA media
These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21988-1 Security update for radare2
This update for radare2 fixes the following issues: Changes in radare2: - Update to version 6.2.2: Analysis: new JNI plugin with typed interface tables, arm64 Swift float calling conventions, DWARF prototype linking, jump-table and switch-case fixes Core: fix RAnalOp leaks in disasm/diff/debug...
OPENSUSE-SU-2026:11865-1 python313-sglang-0.5.20-1.1 on GA media
These are all security issues fixed in the python313-sglang-0.5.20-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11762-1 yast2-samba-client-5.0.5-1.1 on GA media
These are all security issues fixed in the yast2-samba-client-5.0.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11483-1 zpaqfranz-64.8-1.1 on GA media
These are all security issues fixed in the zpaqfranz-64.8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11468-1 python313-cryptography-50.0.0-1.1 on GA media
These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11425-1 python313-sentry-sdk-2.66.1-1.1 on GA media
These are all security issues fixed in the python313-sentry-sdk-2.66.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11432-1 libthrift-0_24_0-0.24.0-1.1 on GA media
These are all security issues fixed in the libthrift-0240-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21471-1 Security update for keybase-client
This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels...
OPENSUSE-SU-2026:21247-1 Security update for docker-compose
This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration bsc1239766. - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the...
OPENSUSE-SU-2026:11202-1 python313-Protego-0.6.2-1.1 on GA media
These are all security issues fixed in the python313-Protego-0.6.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21244-1 Security update for podman
This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service bsc1262856. - CVE-2026-39827: Invoking memory leak when rejecting channels can lead to Do...
OPENSUSE-SU-2026:21075-1 Security update for alsa
This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory bsc1268853...
OPENSUSE-SU-2026:11139-1 chromedriver-149.0.7827.200-1.1 on GA media
These are all security issues fixed in the chromedriver-149.0.7827.200-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11126-1 velociraptor-0.7.0.4.git185.a5708584-2.1 on GA media
These are all security issues fixed in the velociraptor-0.7.0.4.git185.a5708584-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21038-1 Security update for 7zip
This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure bsc1267858. - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation bsc1267421. - CVE-2026-48101: Information...
OPENSUSE-SU-2026:21010-1 Security update for google-cloud-sap-agent
This update for google-cloud-sap-agent fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265764. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for...
OPENSUSE-SU-2026:21111-1 Security update for himmelblau
This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant DAG flow bsc1266662. Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: Update cargo vet audits for backport depsrust: bump the...
OPENSUSE-SU-2026:20934-1 Security update for xdg-dbus-proxy
This update for xdg-dbus-proxy fixes the following issue: - CVE-2026-34080: failure in the policy parser can lead to information disclosure bsc1261737...
OPENSUSE-SU-2026:20921-1 Security update for elemental-toolkit
This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260277. Changes: - Update to v2.3.4: 974af043 Bump golang.org/x/net to v0.55.0 bsc1267168 bsc1251679 ae39c90...
OPENSUSE-SU-2026:10973-1 python3-oslo.messaging-doc-18.1.0-1.1 on GA media
These are all security issues fixed in the python3-oslo.messaging-doc-18.1.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10937-1 openssh-10.3p1-6.1 on GA media
These are all security issues fixed in the openssh-10.3p1-6.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20845-1 Security update for libsoup
This update for libsoup fixes the following issue - CVE-2026-4271: use-after-free in the HTTP/2 server when user signal handlers disconnect connections during callback execution bsc1259767...
OPENSUSE-SU-2026:10900-1 python311-dulwich-1.2.5-1.1 on GA media
These are all security issues fixed in the python311-dulwich-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10898-1 matrix-synapse-1.153.0-2.1 on GA media
These are all security issues fixed in the matrix-synapse-1.153.0-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10879-1 libredwg-devel-0.13.4.8200-1.1 on GA media
These are all security issues fixed in the libredwg-devel-0.13.4.8200-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10884-1 ctdb-4.23.8+git.477.f78166bceed-1.1 on GA media
These are all security issues fixed in the ctdb-4.23.8+git.477.f78166bceed-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20730-1 Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Fix CVE-2026-34986 bsc1262956 github.com/go-jose/go-jose/[email protected] CVE-2026-33186 GO-2026-4762 bsc1260311 google.golang.org/[email protected] CVE-2026-24137 GO-2026-4358 bsc1264177 github.com/sigstore/[email protected] Fix...
OPENSUSE-SU-2026:20506-1 Security update for python-cryptography
This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. bsc1260876 - CVE-2026-26007: missing validation can lead to security issues for signature verification ECDSA and shared key negotiati...
OPENSUSE-SU-2026:10474-1 ignition-2.26.0-3.1 on GA media
These are all security issues fixed in the ignition-2.26.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:20373-1 Security update for python-Django
This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-25674: Fixed race condition which can lead to potential incorrect permissions on newly created file system objects bsc1259142...