Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 4.2

    Security update for postgresql96

    PostgreSQL was updated to 9.6.9 fixing bugs and security issues: Release notes: - https://www.postgresql.org/about/news/1851/ - https://www.postgresql.org/docs/current/static/release-9-6-9.html A dump/restore is not required for those running 9.6.X. However, …

    first Jun 14, 2018
  • Medium max 6.3

    python39-3.9.20-6.1 on GA media

    These are all security issues fixed in the python39-3.9.20-6.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • Medium max 5.5

    Security update for python3

    This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 24, 2020
  • Medium max 5.3

    Security update for php7

    This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).

    first Jun 18, 2020
  • Medium max 5.5

    Security update for samba

    This update for samba fixes the following issues: - CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records (bsc#1177613). - CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994). - CVE-2020-14318: Missing perm…

    first Oct 29, 2020
  • Medium max 4.4

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034) - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)

    first Sep 11, 2024
  • Medium max 6.9

    Security update for libjxl

    This update for libjxl fixes the following issues: - CVE-2024-11498: Fixed denial of service by checking height limit in modular trees (boo#1233785).

    first Jan 31, 2025
  • Medium max 5.3

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: - Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual machine. - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).

    first Jul 10, 2021
  • Medium max 6.4
    SUSE-SU-2022:0647-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_86 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463).

    first Mar 1, 2022
  • Medium max 6.1

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2019-20907: Fixed denial of service by avoiding possible infinite loop in specifically crafted tarball (bsc#1174091). - CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface…

    first Sep 21, 2020
  • Medium max 5.9

    Security update for libvirt

    This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…

    first Jun 18, 2019
  • Medium max 6.3

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has sta…

    first Sep 16, 2022
  • Medium max 6.5

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2024-5642: Fixed invalid value sent to underlying OpenSSL API may cause a buffer overread when NPN is used (bsc#1227233)

    first Sep 20, 2024
  • Medium max 5.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple prot…

    first Oct 8, 2018
  • Medium max 6.5

    python38-3.8.19-7.1 on GA media

    These are all security issues fixed in the python38-3.8.19-7.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 10, 2024
  • Medium max 6.5

    Security update for shim

    This update for shim fixes the following issues: - Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458) - Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX co…

    first Mar 30, 2023
  • Medium max 6.2

    Security update for apt-cacher-ng

    This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data (boo#1157703). - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localh…

    first Jan 29, 2020
  • Medium max 6.7

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2020-14386: Fixed a potential local privilege escalation via memory corruption (bsc#1176069). The following non-sec…

    first Sep 9, 2020
  • Medium max 6.4

    Security update for podman

    This update for podman fixes the following issues: Security issue fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections. (bsc#1144065)

    first Sep 10, 2019
  • Medium max 6.5

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies as secure (bsc#1222857) - CVE-2024-3096: Fixed bypass on null byte leading passwords checked…

    first Apr 26, 2024
  • Medium max 5.3

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. (bnc#1194926) - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. (bnc#1194930) -…

    first Mar 14, 2022
  • Medium max 6.1

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382) - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:--…

    first May 24, 2023
  • Medium max 6.1

    Security update for python-tornado

    This update for python-tornado fixes the following issues: - CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741).

    first Jul 11, 2023
  • Medium max 6.1

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382). - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:…

    first May 18, 2023
  • Medium max 6.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)

    first Sep 13, 2024
  • Medium max 5.5

    Security update for binutils

    This update for binutils fixes the following issues: binutils was updated to current 2.32 branch @7b468db3 [jsc#ECO-368]: Includes the following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bs…

    first Oct 14, 2019
  • Medium max 5.9

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption (bsc#1178168). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Dec 6, 2020
  • Medium max 6.1

    yt-dlp-2023.07.06-1.1 on GA media

    These are all security issues fixed in the yt-dlp-2023.07.06-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for ffmpeg-4

    This update for ffmpeg-4 fixes the following issues: - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778).

    first Jan 26, 2023
  • Medium max 5.9

    gnutls-3.8.2-1.1 on GA media

    These are all security issues fixed in the gnutls-3.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2024-45818: Fixed deadlock in x86 HVM standard VGA handling (XSA-463) (bsc#1232622). - CVE-2024-45819: Fixed libxl data leaks to PVH guests via ACPI tables (XSA-464) (bsc#1232624). Bug fixes: - Remove usag…

    first Nov 29, 2024
  • Medium max 5.9

    docker-27.4.1_ce-12.1 on GA media

    These are all security issues fixed in the docker-27.4.1_ce-12.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 18, 2024
  • Medium max 6.4
    openSUSE-SU-2022:1039-1 22 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • Medium max 6.1

    roundcubemail-1.6.5-1.1 on GA media

    These are all security issues fixed in the roundcubemail-1.6.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.9

    Security update for python-oslo.utils

    This update for python-oslo.utils fixes the following issues: - CVE-2022-0718: Fixed incorrect password masking in debug output. (bsc#1196454)

    first Jul 21, 2025
  • Medium max 6.8

    java-1_8_0-openjdk-1.8.0.312-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.312-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount rac…

    first Oct 14, 2022
  • Medium max 6.7

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: - CVE-2024-28219: Fixed buffer overflow in _imagingcms.c (bsc#1222262)

    first Apr 12, 2024
  • Medium max 5.5

    cloud-init-23.1-2.1 on GA media

    These are all security issues fixed in the cloud-init-23.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8

    Security update for permissions

    This update for permissions fixes the following issues: Security issues fixed: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-201…

    first Dec 5, 2019