Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.6

    Security update for buildah

    This update for buildah fixes the following issues: - Update to version 1.35.5 - CVE-2024-11218: Fix TOCTOU error when bind and cache mounts use 'src' values. (bsc#1236272)

    first Jan 30, 2025
  • High max 8.2

    element-web-1.11.4-1.1 on GA media

    These are all security issues fixed in the element-web-1.11.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    openSUSE-SU-2022:0363-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254…

    first Feb 10, 2022
  • High max 7.8

    xwayland-23.2.2-3.1 on GA media

    These are all security issues fixed in the xwayland-23.2.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-Flask

    This update for python-Flask fixes the following issues: - CVE-2019-1010083: Fixed DoS via crafted encoded JSON data (bsc#1141968).

    first Apr 20, 2023
  • High max 7.5

    Security update for go1.22

    This update for go1.22 fixes the following issues: - go1.22.1 (released 2024-03-05) includes security fixes to the crypto/x509, html/template, net/http, net/http/cookiejar, and net/mail packages, as well as bug fixes to the compiler, the go command, the runti…

    first Mar 19, 2024
  • High max 7.5

    krb5-1.19.2-3.1 on GA media

    These are all security issues fixed in the krb5-1.19.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python

    This update for python rebuilds python against a symbol versioned openssl 1.0.2 to allow usage with openssl 1.1.1. Also the following security issues are fixed: - CVE-2022-0391: Fixed sanitizing URLs containing ASCII newline and tabs in urlparse (bsc#1195396)…

    first Apr 8, 2022
  • High max 7.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7482: Several missing length checks ticket decode allowing for information leak or potentially code execution (bsc…

    first Sep 8, 2017
  • High max 8.8

    Security update for pacemaker

    This update for pacemaker fixes the following issues: Security issues fixed: - CVE-2019-3885: Fixed an information disclosure in log output. (bsc#1131357) - CVE-2018-16877: Fixed a local privilege escalation through insufficient IPC client-server authenticati…

    first May 15, 2019
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.90-6_12 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in th…

    first Jun 11, 2018
  • High max 7.2

    cargo-audit-advisory-db-20210802-1.2 on GA media

    These are all security issues fixed in the cargo-audit-advisory-db-20210802-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for dhcp

    This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)

    first Jul 11, 2021
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2022-42252: Fixed a request smuggling (bsc#1204918).

    first Nov 23, 2022
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…

    first Jan 16, 2025
  • High max 7.5

    Security update for krb5

    This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).

    first Nov 19, 2020
  • High max 7.5

    Security update for rubygem-actionpack-3_2

    This update for rubygem-actionpack-3_2 fixes the following issues: - CVE-2021-22885: Fixed Possible Information Disclosure / Unintended Method Execution in Action Pack (bsc#1185715). - CVE-2016-2097: Fixed Possible Information Leak Vulnerability in Action Vie…

    first Dec 8, 2022
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FT…

    first Dec 10, 2020
  • High max 7.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2024-7006: Fixed null pointer dereference in tif_dirinfo.c (bsc#1228924)

    first Aug 20, 2024
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: A device could have been tracked by an attacker using the IP ID values the kernel produces for connection-l…

    first Jul 15, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following issues were fixed: - CVE-2021-3489: Fixed an issue where the eBPF RINGBUF bpf_ringbuf_reserve did not check that the allocated size was smaller than the ringbuf size (bsc#1185640).…

    first Jun 29, 2021
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-202…

    first Jul 17, 2023
  • High max 7.5

    flannel-0.26.6-1.1 on GA media

    These are all security issues fixed in the flannel-0.26.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2025
  • High max 7.5

    Security update for ruby2.5

    This update for ruby2.5 fixes the following issues: - CVE-2022-28739: Fixed a buffer overrun in String-to-Float conversion (bsc#1198441). - CVE-2021-41817: Fixed a regular expression denial of service in Date Parsing Methods (bsc#1193035). - CVE-2021-32066: F…

    first May 3, 2022
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22898: TELNET stack contents disclosure (bsc#1186114) - CVE-2021-22876: The automatic referer leaks credentials (bsc#1183933) - CVE-2020-8286: Inferior OCSP verification (bsc#1179593) - CVE-2020-8285…

    first May 27, 2021
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - Fixed CVEs: CVE-2020-13934 (bsc#1174121) CVE-2020-13935 (bsc#1174117)

    first Jul 24, 2020
  • High max 8.8

    dxflib-devel-3.26.4-1.1 on GA media

    These are all security issues fixed in the dxflib-devel-3.26.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for squid

    This update for squid fixes the following issues: - CVE-2024-25617: Fixes denial of service in HTTP header parser (bsc#1219960) - CVE-2024-25111: Fixes Chunked Encoding Stack Overflow (bsc#1216715)

    first Apr 4, 2024
  • High max 7.5

    Security update for crowbar, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui

    This update for crowbar, crowbar-ha, crowbar-init, crowbar-openstack, crowbar-ui fixes the following issues: This security issues was fixed: - CVE-2018-3760: Upgrade rubygem-sprockets to prevent an information leak. Specially crafted requests could have been …

    first Sep 4, 2018
  • High max 7.5

    openssh-9.6p1-11.1 on GA media

    These are all security issues fixed in the openssh-9.6p1-11.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2024
  • High max 8.3

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2022-24828: Fixed a code injection issue that affected integrators using specific APIs to read untrusted input files (bsc#1198494).

    first Sep 5, 2022
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the In…

    first Nov 28, 2019
  • High max 7.5

    java-1_8_0-openjdk-1.8.0.345-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.345-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for salt

    This update for salt fixes the following issues: - CVE-2022-22935: Sign authentication replies to prevent MiTM (bsc#1197417) - CVE-2022-22934: Sign pillar data to prevent MiTM attacks. (bsc#1197417) - CVE-2022-22936: Prevent job and fileserver replays (bsc#11…

    first Mar 30, 2022
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bound…

    first Jun 26, 2025
  • High max 7.5

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to 10.5.16 (bsc#1199928): - CVE-2021-46669 (bsc#1199928) - CVE-2022-27376 (bsc#1198628) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27379 (bsc#1198605) - CVE-2022-27380 (b…

    first Jun 7, 2022
  • High max 8.2

    Security update for nodejs14

    This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: * deps: update llhttp to 2.1.4 - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body (bsc#1191602, C…

    first Dec 7, 2021
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792). - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213).

    first Dec 21, 2023
  • High max 7.8

    kernel-devel-6.0.1-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    git-delta-0.8.3-1.2 on GA media

    These are all security issues fixed in the git-delta-0.8.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024