Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

58 results · Clear filters · Feed

  • Medium max 6.9
    openSUSE-SU-2026:11737-1 1 CVE 1 exploited

    sshamble-0.3.12-1.1 on GA media

    These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 9, 2026
  • Medium max 6.5
    openSUSE-SU-2026:11044-1 1 CVE 1 exploited

    python311-google-adk-2.2.0-1.1 on GA media

    These are all security issues fixed in the python311-google-adk-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 16, 2026
  • Medium max 6.5
    openSUSE-SU-2026:11026-1 1 CVE 1 exploited

    python311-starlette-1.2.0-1.1 on GA media

    These are all security issues fixed in the python311-starlette-1.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 13, 2026
  • Medium max 5.5
    SUSE-SU-2020:2720-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - Update to 4.10.18 - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller,…

    first Sep 23, 2020
  • Medium max 6.1
    openSUSE-SU-2024:13365-1 1 CVE 1 exploited

    roundcubemail-1.6.4-1.1 on GA media

    These are all security issues fixed in the roundcubemail-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1
    openSUSE-SU-2021:0942-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…

    first Jun 29, 2021
  • Medium max 5.5
    SUSE-SU-2025:0929-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initia…

    first Mar 19, 2025
  • Medium max 6.5
    SUSE-SU-2022:0090-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (b…

    first Jan 17, 2022
  • Medium max 5.5
    SUSE-SU-2020:2722-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …

    first Sep 23, 2020
  • Medium max 6.5
    openSUSE-SU-2019:0298-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated: to 72.0.3626.121: * CVE-2019-5786: Use-after-free in FileReader fixed (boo#1127602) * Feature fixes update only

    first Mar 23, 2019
  • Medium max 5.5
    SUSE-SU-2020:2719-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…

    first Sep 23, 2020
  • Medium max 6.1
    openSUSE-SU-2021:1014-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…

    first Jul 9, 2021
  • Medium max 6.4
    openSUSE-SU-2022:1037-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • Medium max 6.9
    openSUSE-SU-2020:1888-1 2 CVEs 1 exploited

    Security update for otrs

    This update for otrs fixes the following issues: - otrs was updated to 6.0.30 (OSA-2020-14 boo#1178434) - CVE-2020-11022, CVE-2020-11023: Vulnerability in third-party library - jquery OTRS uses jquery version 3.4.1, which is vulnerable to cross-site scripting…

    first Nov 9, 2020
  • Medium max 5.3
    SUSE-SU-2015:2268-1 20 CVEs 1 exploited

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Version update to 8.0-2.0 (bsc#955131): CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 14, 2015
  • Medium max 5.5
    SUSE-FU-2022:4496-1 7 CVEs 1 exploited

    Feature update for SCA patterns

    This update for SCA patterns fixes the following issues: sca-patterns-base: - Version update from 1.3.1 to 1.5.0 to implement the conversion of SCA Tool to Python3 (jsc#SLE-25064, jsc#SLE-24335): * Convert SCA Tool from Python2 to Python3 (bsc#1191005, SLE-21…

    first Dec 15, 2022
  • Medium max 5.5
    SUSE-SU-2025:0962-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initializ…

    first Mar 19, 2025
  • Medium max 5.5
    SUSE-SU-2020:2724-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…

    first Sep 23, 2020
  • Medium max 5.5
    SUSE-SU-2020:2730-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …

    first Sep 23, 2020
  • Medium max 5.5
    SUSE-SU-2025:0907-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_182 fixes one issue. The following security issue was fixed: - CVE-2024-50302: HID: core: zero-initialize the report buffer (bsc#1233679).

    first Mar 18, 2025
  • Medium max 6.5
    SUSE-SU-2022:0080-1 18 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2021-4083: Fixed a race condition with Unix domain socket garbage collection that can lead to read memory after free. (bsc#1193727) - CVE-2021-4149: Fixed an im…

    first Jan 14, 2022
  • Medium max 6.4
    SUSE-SU-2022:0996-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_107 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731).

    first Mar 29, 2022
  • Medium max 6.1
    openSUSE-SU-2023:0345-1 1 CVE 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Update to version 1.6.4 (boo#1216429): * CVE-2023-5631: Fix cross-site scripting vulnerability in handling of SVG in HTML messages * Fix PHP8 warnings * Fix default 'mime.types' path on Windows * Manag…

    first Nov 2, 2023
  • Medium max 6.4
    SUSE-SU-2022:0647-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_86 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).

    first Mar 1, 2022
  • Medium max 6.4
    openSUSE-SU-2022:1039-1 22 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • Medium max 6.5
    openSUSE-SU-2021:0840-1 21 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.77 (boo#1186458): * Support Managed configuration API for Web Applications * WebOTP API: cross-origin iframe support * CSS custom counter styles * Support JSON Modules * Clipboard: read-o…

    first Jun 4, 2021
  • Medium max 5.3
    SUSE-SU-2015:2182-1 29 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…

    first Dec 3, 2015
  • Medium max 6.4
    SUSE-SU-2022:0667-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_141 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).

    first Mar 2, 2022
  • Medium max 5.3
    SUSE-SU-2015:2192-1 31 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 3, 2015
  • Medium max 6.8
    openSUSE-SU-2021:0707-1 1 CVE 1 exploited

    Security update for perl-Image-ExifTool

    This update for perl-Image-ExifTool fixes the following issues: Update to version 12.25 fixes (boo#1185547 CVE-2021-22204) * JPEG XL support is now official * Added read support for Medical Research Council (MRC) image files * Added ability to write a number …

    first May 10, 2021
  • Medium max 6.5
    openSUSE-SU-2022:0366-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254)…

    first Feb 10, 2022
  • Medium max 5.5
    openSUSE-SU-2020:1513-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …

    first Sep 24, 2020
  • Medium max 6.4
    SUSE-SU-2022:1034-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_54 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, rela…

    first Mar 30, 2022
  • Medium max 5.5
    SUSE-SU-2020:2721-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…

    first Sep 23, 2020
  • Medium max 5.3
    SUSE-SU-2015:2168-2 29 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    The java-1_7_1-ibm package was updated to versioin 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4…

    first Dec 14, 2015
  • Medium max 5.5
    openSUSE-SU-2024:11370-1 5 CVEs 1 exploited

    sca-patterns-sle12-1.0.8-2.2 on GA media

    These are all security issues fixed in the sca-patterns-sle12-1.0.8-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2022:0367-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - CVE-2…

    first Feb 10, 2022
  • Medium max 6.4
    SUSE-SU-2022:1037-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • Medium max 5.3
    SUSE-SU-2015:2166-1 31 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Nov 26, 2015
  • Medium max 5.3
    SUSE-SU-2015:2216-1 29 CVEs 1 exploited

    Security update for java-1_7_0-ibm

    The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…

    first Dec 7, 2015