Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.7

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2025-7039: Fixed buffer under-read on glib through glib/gfileutils.c via get_tmp_file() (bsc#1249055)

    first Nov 24, 2025
  • Low max 2.9

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct function (bsc#1241585) - CVE-2025-43964: Fixed tag 0x412 processing in phase_one_correct does not enforce minimum w0 a…

    first Apr 28, 2025
  • Low max 2.3

    python311-3.11.11-4.1 on GA media

    These are all security issues fixed in the python311-3.11.11-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 11, 2025
  • Low max 2.9

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser in metadata/tiff.cpp (bsc#1241643) - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct functi…

    first May 16, 2025
  • Low max 3.7

    java-21-openj9-21.0.3.0-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.6

    Security update for runc

    This update for runc fixes the following issues: - CVE-2024-45310: Fixed unintentional creation of empty files/directories on host (bsc#1230092) Other fixes: - Update to runc v1.2.6.

    first Jul 16, 2025
  • Low max 3.1

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-3647: Fixed crash in sigsegvHandler debug function (bsc#1204633).

    first Nov 22, 2022
  • Low max 3.4

    kubernetes1.23-apiserver-1.23.17-5.1 on GA media

    These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.3

    Security update for PackageKit

    This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930). - Notify service manager when it shutdown and cleanup temporary files when PackageKit qui…

    first Dec 16, 2020
  • Low max 3.2

    Security update for cockpit

    This update for cockpit fixes the following issues: - CVE-2024-6126: Fixed Integer overflow in pam_sm_close_session() (bsc#1226040).

    first Jul 14, 2024
  • Low max 2.3

    ruby3.4-rubygem-actiontext-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-actiontext-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.1

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related…

    first Oct 9, 2021
  • Low max 3.8

    Security update for libgsasl

    This update for libgsasl fixes the following issues: - CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).

    first Oct 11, 2022
  • Low max 3.1

    Security update for qt6-connectivity

    This update for qt6-connectivity fixes the following issues: - CVE-2025-23050: Fixed buffer over-read and division by zero (boo#1236237)

    first Jan 25, 2025
  • Low max 3.7

    Security update for python-configobj

    This update for python-configobj fixes the following issues: - CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py (bsc#1210070).

    first Aug 22, 2023
  • Low max 3.6

    Security update for python

    This update for python fixes the following issues: Security issues fixed: - CVE-2017-1000158: Fixed integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution (bsc#1068664). …

    first May 22, 2018
  • Low max 2.9

    yast2-security-4.4.1-1.2 on GA media

    These are all security issues fixed in the yast2-security-4.4.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.2

    Recommended update for permissions

    This update for permissions fixes the following issues: Security issues fixed: - CVE-2020-8013: Fixed a missing symlink check. Do not follow symlinks that are the final path element (bsc#1163922). - Fixed a regression where chkstat broke when /proc was not av…

    first Feb 28, 2020
  • Low max 3.7

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues: Security issues fixed: - CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation (bsc#1154849) - CVE-2017-15107: Fixed a vulnera…

    first Dec 5, 2019
  • Low max 3.7

    Security update for curl

    This update for curl fixes the following issues: - CVE-2022-35252: Fixed a potential injection of control characters into cookies, which could be exploited by sister sites to cause a denial of service (bsc#1202593).

    first Sep 2, 2022
  • Low max 3.7

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2024-22211: Fixed am integer overflow in freerdp_bitmap_planar_context_reset() (bsc#1219049).

    first Feb 28, 2024
  • Low max 3.0

    singularity-3.8.5-1.1 on GA media

    These are all security issues fixed in the singularity-3.8.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for postgresql96

    This update for postgresql96 fixes the following issues: PostgreSQL was updated to version 9.6.17. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).

    first Mar 4, 2020
  • Low max 2.2

    Recommended update for permissions

    This update for permissions fixes the following issues: - CVE-2020-8013: Fixed an improper check which could have allowed the setting of unintented setuid bits (bsc#1163922). - Fixed handling of relative directory symlinks in chkstat. - Whitelisted postgres s…

    first Mar 6, 2020
  • Low max 3.7

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: OpenJDK was updated to version 8u382 build 05 with OpenJ9 0.40.0 VM: - CVE-2023-22045: Fixed vulnerability in hotspot component (bsc#1213481). - CVE-2023-22049: Fixed vulnerability in library compo…

    first Aug 16, 2023
  • Low max 3.7

    libfreebl3-3.26.2-1.1 on GA media

    These are all security issues fixed in the libfreebl3-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.3

    Security update for augeas

    This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909)

    first May 29, 2025
  • Low max 3.0

    Security update for singularity

    This update for singularity fixes the following issues: Update to 3.8.5: - CVE-2021-41190: Fixed OCI manifest and index parsing confusion (boo#1193273). - Building Singularity from source requires go greater or equal 1.16. We now aim to support the two most r…

    first Dec 4, 2021
  • Low max 2.3

    ruby3.4-rubygem-actionview-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-actionview-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.3

    Security update for salt

    salt was updated to fix one security issue. This security issue was fixed: - CVE-2015-8034: Prevent saving state.sls cache data to disk with insecure permissions (bsc#957914).

    first Jul 28, 2016
  • Low max 3.7

    Security update for squid

    This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403).

    first Oct 11, 2021
  • Low max 3.7

    postgresql14-14.7-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.5

    obs-service-refresh_patches-0.3.9+git.1625238904.d59f20e-1.2 on GA media

    These are all security issues fixed in the obs-service-refresh_patches-0.3.9+git.1625238904.d59f20e-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    postgresql14-14.12-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.3

    ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activestorage-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.1

    Recommended update for python-aiohttp, python-typing_extensions

    This update for python-aiohttp, python-typing_extensions fixes the following issues: - Include in SLE-15 (bsc#1197831) - Fixed required/optional keys with old-style TypedDict - Test in separate multibuild flavor to break depcycles with full python stdlib - Cl…

    first Sep 15, 2022
  • Low max 3.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631).

    first Jun 5, 2025
  • Low max 2.3

    ruby3.4-rubygem-actionpack-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-actionpack-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.7

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: Update to 14.7: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

    first Mar 10, 2023
  • Low max 2.3

    python312-3.12.9-2.1 on GA media

    These are all security issues fixed in the python312-3.12.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 11, 2025