Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.1

    Security update for postgresql10 and postgresql12

    This update for postgresql10 and postgresql12 fixes the following issues: postgresql10 was updated to 10.13 (bsc#1171924). https://www.postgresql.org/about/news/2038/ https://www.postgresql.org/docs/10/release-10-13.html postgresql10 was updated to 10.12 (CVE…

    first Aug 6, 2020
  • Low max 3.9

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-24735: Fixed Lua code injection (bsc#1198952). - CVE-2022-24736: Fixed Lua NULL pointer dereference (bsc#1198953).

    first May 25, 2022
  • Low max 3.2

    Security update for clone-master-clean-up

    This update for clone-master-clean-up fixes the following issues: - CVE-2021-32000: Fixed some potentially dangerous file system operations (bsc#1181050). Bugfixes: - Fixed clone-master-clean-up failing to remove btrfs snapshots (bsc#1203651).

    first Oct 19, 2022
  • Low max 3.7

    Security update for openldap2

    This update fixes the following security issues: - CVE-2015-6908: The ber_get_next function allowed remote attackers to cause a denial of service (reachable assertion and application crash) via crafted BER data, as demonstrated by an attack against slapd. (bs…

    first Jan 27, 2016
  • Low max 3.4

    pdns-recursor-4.8.4-1.1 on GA media

    These are all security issues fixed in the pdns-recursor-4.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    gio-branding-upstream-2.84.1-2.1 on GA media

    These are all security issues fixed in the gio-branding-upstream-2.84.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 17, 2025
  • Low max 3.3

    Recommended update for libzypp, zypper, PackageKit

    This update for libzypp, zypper, PackageKit fixes the following issues: - Fixup New VendorSupportOption flag VendorSupportSuperseded (jsc#OBS-301, jsc#PED-8014) - CVE-2024-0217: Check that Finished signal is emitted at most once (bsc#1218544) - Add resolver o…

    first Apr 11, 2024
  • Low max 3.1

    gd-2.3.3-1.1 on GA media

    These are all security issues fixed in the gd-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.1

    Security update for cosign

    This update for cosign fixes the following issues: Updated to 2.2.1 (jsc#SLE-23879) - Enhancements: * CVE-2023-46737: Possible endless data attack from attacker-controlled registry (bsc#1216933) * feat: Support basic auth and bearer auth login to registry (#3…

    first Dec 14, 2023
  • Low max 3.0

    Security update for kubernetes1.24

    This update for kubernetes1.24 fixes the following issues: - CVE-2021-25743: Fixed sanitization of raw data of escape, meta or control sequences before output it to terminal (bsc#1194400)

    first Aug 8, 2024
  • Low max 3.7

    squid-5.2-1.1 on GA media

    These are all security issues fixed in the squid-5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.3

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2024-28085: Properly neutralize escape sequences in wall. (bsc#1221831)

    first Apr 9, 2024
  • Low max 2.3

    Security update for ceph

    CEPH was updated to version 10.2.10, which brings several fixes and enhancements. Upstream 10.2.10 release summary can be found at: https://ceph.com/releases/v10-2-10-jewel-released/ Security issues fixed: - CVE-2017-7519: libradosstriper processed arbitrary …

    first Nov 2, 2017
  • Low max 3.3

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2024-29508: Fixed heap pointer leak in pdf_base_font_alloc (bsc#1227380)

    first Jul 17, 2024
  • Low max 3.3

    guava-30.1.1-1.2 on GA media

    These are all security issues fixed in the guava-30.1.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 2.3

    ruby3.4-rubygem-activemodel-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activemodel-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 3.3

    radare2-5.9.8-2.1 on GA media

    These are all security issues fixed in the radare2-5.9.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 20, 2025
  • Low max 3.3

    Security update for PackageKit

    This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930). - Update summary and description of gstreamer-plugin and gtk3-module. (bsc#1104313) This …

    first Dec 27, 2020
  • Low max 3.7

    Security update for cargo-c

    This update for cargo-c fixes the following issues: - CVE-2025-3416: use-after-free in Md::fetch and Cipher::fetch of rust-openssl crate (bsc#1242675).

    first May 16, 2025
  • Low max 2.0

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-68469: crash due to heap buffer overflow when processing a specially crafted TIFF file (bsc#1255391).

    first Jan 7, 2026
  • Low max 1.8

    python315-3.15.0~a1-2.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 1, 2025
  • Low max 3.0

    Security update for umoci

    This update for umoci fixes the following issues: Update to umoci v0.5.0. Upstream changelog is available from <https://github.com/opencontainers/umoci/releases/tag/v0.5.0> bsc#1243388 A security flaw was found in the OCI image-spec, where it is possible to c…

    first Jul 11, 2025
  • Low max 2.8

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).

    first Jun 30, 2025
  • Low max 3.7

    Security update for s390-tools

    This update for s390-tools fixes the following issues: Security issues fixed: - CVE-2025-3416: Fixed Use-After-Free in Md::fetch and Cipher::fetch in rust-openssl crate. (bsc#1242622) Other issues: - Added the new IBM z17 (9175) processor type.

  • Low max 2.9

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2025-43961: Fixed out-of-bounds read in the Fujifilm 0xf00c tag parser in metadata/tiff.cpp (bsc#1241643) - CVE-2025-43962: Fixed out-of-bounds read when tag 0x412 processing in phase_one_correct functi…

    first May 16, 2025
  • Low max 2.9

    libraw-devel-0.21.4-1.1 on GA media

    These are all security issues fixed in the libraw-devel-0.21.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 24, 2025
  • Low max 3.1

    libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 on GA media

    These are all security issues fixed in the libQt5Bluetooth5-32bit-5.15.16+kde2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 30, 2025
  • Low max 2.3

    ruby3.4-rubygem-activejob-8.0-8.0.1-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activejob-8.0-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Low max 2.2

    python310-PyJWT-2.10.1-1.1 on GA media

    These are all security issues fixed in the python310-PyJWT-2.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 3, 2024
  • Low max 3.1

    traefik-3.2.1-1.1 on GA media

    These are all security issues fixed in the traefik-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 23, 2024
  • Low max 2.8

    libunbound8-1.21.0-1.1 on GA media

    These are all security issues fixed in the libunbound8-1.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 16, 2024
  • Low max 3.4

    opensc-0.24.0-2.1 on GA media

    These are all security issues fixed in the opensc-0.24.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.4

    curl-8.11.1-1.1 on GA media

    These are all security issues fixed in the curl-8.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 13, 2024
  • Low max 3.0

    docker-20.10.11_ce-1.1 on GA media

    These are all security issues fixed in the docker-20.10.11_ce-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.7

    Security update for squid

    This update for squid fixes the following issues: Update to version 4.17: - CVE-2021-28116: Fixed a out-of-bounds read in the WCCP protocol (bsc#1189403). This update was imported from the SUSE:SLE-15:Update update project.

    first Oct 31, 2021
  • Low max 3.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22898: Fixed curl TELNET stack contents disclosure (bsc#1186114). - Allow partial chain verification [jsc#SLE-17956] * Have intermediate certificates in the trust store be treated as trust-anchors, i…

    first May 29, 2021
  • Low max 3.3

    Security update for PackageKit

    This update for PackageKit fixes the following issue: - CVE-2020-16121: Fixed an Information disclosure in InstallFiles, GetFilesLocal and GetDetailsLocal (bsc#1176930). - Notify service manager when it shutdown and cleanup temporary files when PackageKit qui…

    first Dec 19, 2020
  • Low max 3.1

    postgresql12-12.8-1.3 on GA media

    These are all security issues fixed in the postgresql12-12.8-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.4

    slrn-1.0.3-3.13 on GA media

    These are all security issues fixed in the slrn-1.0.3-3.13 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.6

    Security update for runc

    This update for runc fixes the following issues: - Update to runc v1.1.14 - CVE-2024-45310: Fixed an issue where runc can be tricked into creating empty files/directories on host. (bsc#1230092)

    first Sep 19, 2024