Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.7

    libcrypto38-2.5.0-1.1 on GA media

    These are all security issues fixed in the libcrypto38-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    curl-7.85.0-1.1 on GA media

    These are all security issues fixed in the curl-7.85.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21068: Fixed integer overflow in C1 compiler address generation (JDK-8322122,bs…

    first Apr 26, 2024
  • Low max 3.7

    java-22-openjdk-22.0.1.0-1.1 on GA media

    These are all security issues fixed in the java-22-openjdk-22.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Update to 13.10: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

    first Mar 1, 2023
  • Low max 3.1

    Security update for gd

    This update for gd fixes the following issues: Security issue fixed: - CVE-2018-14553: Fixed a null pointer dereference in gdImageClone (bsc#1165471). - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140120).

    first Mar 5, 2020
  • Low max 3.7

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: Update to 15.2: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

    first Feb 28, 2023
  • Low max 3.7

    Security update for libtcnative-1-0

    This update for libtcnative-1-0 fixes the following issues: - CVE-2015-4000: Disable 512-bit export-grade cryptography to prevent Logjam vulnerability (bsc#938945)

    first Sep 26, 2016
  • Low max 3.4

    Security update for java-1_7_0-openjdk

    This update fixes 13 security issues. These security issues were fixed: - CVE-2015-0395: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vecto…

    first Mar 9, 2015
  • Low max 3.0

    containerd-1.4.12-1.1 on GA media

    These are all security issues fixed in the containerd-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for postgresql10

    This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985).

    first Mar 18, 2020
  • Low max 3.1

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: PostgreSQL upgrade to version 15.7 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompat…

    first May 24, 2024
  • Low max 2.1

    git-2.48.1-1.1 on GA media

    These are all security issues fixed in the git-2.48.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 16, 2025
  • Low max 2.9

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser in metadata/tiff.cpp (bsc#1241643) - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct functi…

    first Jun 6, 2025
  • Low max 3.5

    Security update for cmark

    This update for cmark fixes the following issues: - CVE-2023-22486: Fixed quadratic complexity in handle_close_bracket may lead to a denial of service (bsc#1207674).

    first Apr 13, 2023
  • Low max 3.2

    clone-master-clean-up-1.11-1.1 on GA media

    These are all security issues fixed in the clone-master-clean-up-1.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.3

    ruby3.4-rubygem-rails-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-rails-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.7

    Security update for dovecot22

    This update for dovecot22 to version 2.2.29.1 fixes the following issues: This security issue was fixed: - CVE-2017-2669: Don't double-expand %variables in keys. If dict was used as the authentication passdb, using specially crafted %variables in the username…

    first May 11, 2017
  • Low max 2.8

    chafa-1.12.1-1.1 on GA media

    These are all security issues fixed in the chafa-1.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.3

    PackageKit-1.2.2-13.2 on GA media

    These are all security issues fixed in the PackageKit-1.2.2-13.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.5

    Security update for procps

    This update for procps fixes the following issues: - Integer overflow due to incomplete fix for CVE-2023-4016 can lead to segmentation fault in ps command when pid argument has a leading space (bsc#1236842, bsc#1214290).

    first Feb 28, 2025
  • Low max 3.7

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues: Security issues fixed: - CVE-2019-14834: Fixed a memory leak which could have allowed to remote attackers to cause denial of service via DHCP response creation (bsc#1154849) - CVE-2017-15107: Fixed a vulnera…

    first Dec 5, 2019
  • Low max 2.8

    ruby3.4-rubygem-thor-1.4.0-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-thor-1.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 24, 2025
  • Low max 3.3

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall to avoid potential account takeover. (bsc#1221831)

    first Jun 7, 2024
  • Low max 3.2

    Security update for cockpit

    This update for cockpit fixes the following issues: - new version 320: * pam-ssh-add: Fix insecure killing of session ssh-agent (boo#1226040, CVE-2024-6126) - changes in older versions: * Storage: Btrfs snapshots * Podman: Add image pull action * Files: Bookm…

    first Jul 21, 2024
  • Low max 3.9

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2021-45944: Fixed use-after-free in sampled_data_sample (bsc#1194303) - CVE-2021-45949: Fixed heap-based buffer overflow in sampled_data_finish (bsc#1194304)

    first Feb 14, 2022
  • Low max 2.3

    ruby3.4-rubygem-activesupport-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activesupport-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 2.3

    ruby3.4-rubygem-actionmailbox-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-actionmailbox-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, i…

    first Jul 10, 2021
  • Low max 3.9
    SUSE-SU-2023:2530-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695).

    first Jun 16, 2023
  • Low max 3.3

    Security update for augeas

    This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909)

    first May 12, 2025
  • Low max 2.9

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser in metadata/tiff.cpp (bsc#1241643) - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct functi…

    first Jun 6, 2025
  • Low max 3.3

    Security update for nodejs-underscore

    This update for nodejs-underscore fixes the following issues: Update version to 1.13.1 * Fix security issue (boo#1184800, CVE-2021-23358) * Fix bugs * Many new features

    first Apr 23, 2021
  • Low max 2.9

    Security update for cairo

    This update for cairo fixes the following issues: - CVE-2025-50422: NULL pointer access in `active_edges_to_traps()` can lead to crash in Poppler (bsc#1247589).

    first Sep 19, 2025
  • Low max 3.3

    nodejs-underscore-1.13.1-1.3 on GA media

    These are all security issues fixed in the nodejs-underscore-1.13.1-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.3

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)

    first Apr 9, 2024
  • Low max 3.1

    redis-7.0.5-3.1 on GA media

    These are all security issues fixed in the redis-7.0.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for rubygem-activesupport-4_1

    This update for rubygem-activesupport-4_1 fixes the following issues: The previous security patch for CVE-2015-7576 was adding a new file but this file was not being added in the gemspec, thus the resulting gem didn't have it. This update includes the patch i…

    first Mar 22, 2016
  • Low max 2.3

    ruby3.4-rubygem-railties-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-railties-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 2.3

    python313-3.13.2-3.1 on GA media

    These are all security issues fixed in the python313-3.13.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 12, 2025