Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.9

    ghostscript-9.54.0-3.1 on GA media

    These are all security issues fixed in the ghostscript-9.54.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: - Upgrade to 15.7. (bsc#1224051) - CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to the table owner. See release notes for the steps that have to be taken to fix exis…

    first Jul 2, 2024
  • Low max 3.3

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831) - Prevent error message if `/var/lib/libuuid/clock.txt` does not exist (bsc#1194642) - Fixed performance degradation (bsc#1207…

    first Apr 3, 2024
  • Low max 3.1

    postgresql15-15.7-1.1 on GA media

    These are all security issues fixed in the postgresql15-15.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, i…

    first May 26, 2021
  • Low max 2.8

    Security update for python-Django

    This update for python-Django fixes the following issues: - Prevent settings leak in date template filter. (bsc#955412, CVE-2015-8213)

    first Jan 7, 2016
  • Low max 3.1

    traefik2-2.11.14-1.1 on GA media

    These are all security issues fixed in the traefik2-2.11.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 21, 2024
  • Low max 3.1

    Security update for postgresql10

    This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension (bsc#1163985). This update was imported from the…

    first Mar 10, 2020
  • Low max 3.0

    Security update for kubernetes1.25

    This update for kubernetes1.25 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400) Other fixes: - Included kubernetes1.25-client package. (jsc#PED-5755)

    first Aug 15, 2024
  • Low max 3.1

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: PostgreSQL upgrade to version 16.3 (bsc#1224051): - CVE-2024-4317: Fixed visibility restriction of pg_stats_ext and pg_stats_ext_exprs entries to the table owner (bsc#1224038). Bug fixes: - Fix incompat…

    first May 15, 2024
  • Low max 2.3

    php8-8.1.11-1.1 on GA media

    These are all security issues fixed in the php8-8.1.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: Update to 15.2: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

    first Feb 13, 2023
  • Low max 3.9

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-24735: Fixed Lua code injection (bsc#1198952). - CVE-2022-24736: Fixed Lua NULL pointer dereference (bsc#1198953).

    first Jun 2, 2022
  • Low max 3.8

    Security update for libgsasl

    This update for libgsasl fixes the following issues: - CVE-2022-2469: Fixed OOB read in GSSAPI server (bsc#1201715).

    first Oct 11, 2022
  • Low max 3.3

    bluez-5.65-4.1 on GA media

    These are all security issues fixed in the bluez-5.65-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: Update to 14.7: - CVE-2022-41862: Fixed memory leak in libpq (bsc#1208102).

    first Feb 13, 2023
  • Low max 3.3

    Security update for PackageKit

    This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930). - Update summary and description of gstreamer-plugin and gtk3-module. (bsc#1104313)

    first Dec 22, 2020
  • Low max 3.7

    Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

    MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards (bsc#935979).…

    first Jul 15, 2015
  • Low max 3.7

    postgresql12-12.14-1.1 on GA media

    These are all security issues fixed in the postgresql12-12.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.3

    ruby3.4-rubygem-activerecord-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activerecord-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.7

    Security update for java-17-openjdk

    This update for java-17-openjdk fixes the following issues: - CVE-2024-21011: Fixed denial of service due to long Exception message logging (JDK-8319851,bsc#1222979) - CVE-2024-21012: Fixed unauthorized data modification due HTTP/2 client improper reverse DNS…

    first May 6, 2024
  • Low max 3.1

    Security update golang-github-prometheus-prometheus

    golang-github-prometheus-prometheus was updated from version 2.45.6 to 2.53.3 (jsc#PED-11649): - Security issues fixed: * CVE-2024-51744: Updated golang-jwt to version 5.0 to fix bad error handling (bsc#1232970) - Highlights of other changes: * Performance: +…

    first Feb 14, 2025
  • Low max 3.7

    Security update for pdns-recursor

    This update for pdns-recursor fixes the following issues: - CVE-2019-3807: Fixed insufficient validation of DNSSEC signatures (boo#1121889) This update was imported from the openSUSE:Leap:15.0:Update update project.

    first Jan 31, 2019
  • Low max 3.7

    Security update for ntp

    This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed (bsc#1030050): - CVE-2017-6464: Denial of Service via Malformed Config - CVE-201…

    first Apr 18, 2017
  • Low max 3.1

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: - Upgrade to 14.12 (bsc#1224051): - CVE-2024-4317: Restrict visibility of pg_stats_ext and pg_stats_ext_exprs entries to the table owner. See release notes for the steps that have to be taken to fix exi…

    first Jul 2, 2024
  • Low max 3.2

    cockpit-320-1.1 on GA media

    These are all security issues fixed in the cockpit-320-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 4, 2024
  • Low max 3.7

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u382 (icedtea-3.28.0): - CVE-2023-22045: Fixed a difficult to exploit vulnerability that allows unauthenticated attacker with network access via multiple protocols to comprom…

    first Aug 28, 2023
  • Low max 3.6

    Security update for redis

    This update for redis fixes the following issues: - CVE-2023-45145: Fixed a potential permission bypass due to a race condition during UNIX socket creation (bsc#1216376).

    first Nov 6, 2023
  • Low max 3.6

    Security update for runc

    This update for runc fixes the following issues: - CVE-2024-45310: Fixed unintentional creation of empty files/directories on host (bsc#1230092) Other fixes: - Update to runc v1.2.6.

    first Apr 25, 2025
  • Low max 3.1

    rclone-1.68.1-2.1 on GA media

    These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 14, 2024
  • Low max 3.7

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly (bsc#1239461)

    first Mar 21, 2025
  • Low max 2.9

    atop-2.11.1-1.1 on GA media

    These are all security issues fixed in the atop-2.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2025
  • Low max 3.9

    redis-6.2.7-1.1 on GA media

    These are all security issues fixed in the redis-6.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for coredns

    This update for coredns fixes the following issues: - Update to version 1.12.1: * core: Increase CNAME lookup limit from 7 to 10 (#7153) * plugin/kubernetes: Fix handling of pods having DeletionTimestamp set * plugin/kubernetes: Revert 'only create PTR record…

    first Apr 19, 2025
  • Low max 3.7

    Security update for OpenSSL

    This OpenSSL update fixes the following issues: * Session Ticket Memory Leak (CVE-2014-3567) * Build option no-ssl3 is incomplete (CVE-2014-3568) * Add support for TLS_FALLBACK_SCSV to mitigate CVE-2014-3566 (POODLE) Security Issues: * CVE-2014-3567 <http://c…

    first Oct 24, 2014
  • Low max 3.3

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)

    first Apr 9, 2024
  • Low max 3.3

    freeimage-devel-3.18.0.1909-1.1 on GA media

    These are all security issues fixed in the freeimage-devel-3.18.0.1909-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.5

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2022-3563: Fixed a potential crash in the mgmt-tester tool (bsc#1204426).

    first Jan 26, 2023
  • Low max 2.3

    ruby3.4-rubygem-actioncable-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-actioncable-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.1

    libQt6Bluetooth6-6.8.1-2.1 on GA media

    These are all security issues fixed in the libQt6Bluetooth6-6.8.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2025