Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 4.9

    Security update for cpio

    This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)

    first Mar 11, 2024
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2022-4144: Fixed unsafe address translation that can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808).

    first Mar 23, 2023
  • Medium max 4.3

    Security update for open-lldp

    This update for open-lldp fixes the following issues: - CVE-2018-10932: Fixed an improper sanitization of shell-escape codes. (bsc#1104624)

    first Oct 26, 2021
  • Medium max 6.5

    Security update for kubernetes1.26

    This update for kubernetes1.26 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).

    first Jul 18, 2025
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (…

    first Jun 27, 2023
  • Medium max 5.3

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). Bug fixes: - The default /etc/ssl/openssl3.cnf file will includ…

    first Dec 6, 2023
  • Medium max 6.5

    Security update for python-Pillow

    This update for python-Pillow fixes the following security issues: * Fixed an integer overflow in Resample.c causing writes in the Python heap. * Fixed a buffer overflow in PcdDecode.c causing a segfault when opening PhotoCD files. CVE-2016-TBD * Fixed a buff…

    first Mar 31, 2016
  • Medium max 6.8

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135).

    first Mar 24, 2022
  • Medium max 5.3

    libwireshark16-4.0.7-2.1 on GA media

    These are all security issues fixed in the libwireshark16-4.0.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.4

    Security update for rubygem-loofah

    This update for rubygem-loofah fixes the following issues: Security issue fixed: - CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969).

    first Nov 27, 2018
  • Medium max 4.8

    gnome-extensions-40.5-1.1 on GA media

    These are all security issues fixed in the gnome-extensions-40.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3

    Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia

    This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can …

    first Jun 24, 2021
  • Medium max 6.6

    Optional update for python-redis and redis

    This optional update for python-redis and redis provides the following fixes python-redis: - Update to version to 3.4.1 (jsc#ECO-2417) * Move the username argument in the Redis and Connection classes to the end of the argument list. This helps those poor soul…

    first Nov 11, 2020
  • Medium max 5.5

    python310-azure-identity-1.18.0-1.1 on GA media

    These are all security issues fixed in the python310-azure-identity-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2024
  • Medium max 5.7

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).

    first Jul 13, 2021
  • Medium max 4.4

    Security update for vim

    This update for vim fixes the following issues: - CVE-2024-41965: Fixed improper neutralization of argument delimiters in zip.vim that could have led to data loss (bsc#1228776). - CVE-2025-29768: Fixed double-free in dialog_changed() (bsc#1239602).

    first Jul 4, 2025
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bug was fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Varia…

    first May 22, 2018
  • Medium max 6.1

    Security update for python-autobahn

    This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570). This update was imported from the openSUSE:Leap:15.1:Update update project.

    first Jan 28, 2021
  • Medium max 5.9

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Upgraded to 13.23: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…

    first Dec 9, 2025
  • Medium max 6.1

    grafana-7.5.7-1.2 on GA media

    These are all security issues fixed in the grafana-7.5.7-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for exiv2

    This update for exiv2 fixes the following issues: exiv2 was updated to latest 0.26 branch, fixing bugs and security issues: - CVE-2017-1000126: Fixed an out of bounds read in webp parser (bsc#1068873). - CVE-2017-9239: Fixed a segmentation fault in TiffImageE…

    first Apr 8, 2020
  • Medium max 5.3

    java-1_8_0-openj9-1.8.0.332-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.332-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    skopeo-1.2.3-1.2 on GA media

    These are all security issues fixed in the skopeo-1.2.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    php8-8.3.8-1.1 on GA media

    These are all security issues fixed in the php8-8.3.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    ffmpeg-7-7.0-1.1 on GA media

    These are all security issues fixed in the ffmpeg-7-7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for dhcp

    This update for dhcp fixes several issues. This security issue was fixed: - CVE-2017-3144: OMAPI code didn't free socket descriptors when empty message is received allowing DoS (bsc#1076119). These non-security issues were fixed: - Optimized if and when DNS c…

    first Feb 23, 2018
  • Medium max 5.6

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: This security issue was fixed: - CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bs…

    first Jun 7, 2018
  • Medium max 6.3

    libwireshark15-3.6.8-2.1 on GA media

    These are all security issues fixed in the libwireshark15-3.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46839: Fixed memory access through PCI device with phantom functions (XSA-449) (bsc#1218851). - CVE-2023-46840: Fixed Failure to quarantine devices in !HVM builds (XSA-450) (bsc#1219080). - CVE-2023-4…

    first Mar 11, 2024
  • Medium max 6.5

    Security update for python

    This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

    first Oct 17, 2022
  • Medium max 6.0

    golang-github-prometheus-prometheus-2.53.0-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-2.53.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 3, 2024
  • Medium max 4.0

    Security update for libarchive

    This update for libarchive fixes the following issues: - CVE-2025-25724: Fixed buffer overflow vulnerability in function list_item_verbose() in tar/util.c (bsc#1238610).

    first Mar 21, 2025
  • Medium max 4.7

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_111 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).

    first Mar 27, 2023
  • Medium max 6.1

    Security update for python-bleach

    This update for python-bleach to version 3.1.1 fixes the following issue: - Python-bleach was updated to 3.1.1 - CVE-2020-6802: Fixed mutation XSS vulnerabilities (boo#1165303). This update was imported from the openSUSE:Leap:15.1:Update update project.

    first Mar 9, 2020
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-20569: Fixed x86/AMD Speculative Return Stack Overflow (XSA-434) (bsc#1214082). - CVE-2022-40982: Fixed x86/Intel Gather Data Sampling (XSA-435) (bsc#1214083). - CVE-2023-20593: Fixed x86/AMD Zenbleed…

    first Aug 30, 2023
  • Medium max 5.6

    libopenjp2-7-2.5.3-2.1 on GA media

    These are all security issues fixed in the libopenjp2-7-2.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 7, 2025
  • Medium max 5.5

    Security update for p7zip

    This update for p7zip fixes the following issues: - CVE-2022-47069: heap buffer overflow in `ZipIn.cpp` file (bsc#1209648). - CVE-2025-53817: null pointer dereference may lead to denial of service (bsc#1246707).

    first Oct 24, 2025
  • Medium max 4.0

    Security update for rubygem-actionview-5_1

    This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240). This update was imported from the SUSE:SLE-15:Update update project.

    first May 8, 2020
  • Medium max 6.5

    Security update for wget

    This update for wget fixes the following issues: - CVE-2024-10524: Dropped support for shorthand URLs that enabled SSRF attacks (bsc#1233773).

    first Jun 12, 2025
  • Medium max 5.4

    ruby3.3-rubygem-actiontext-7.0-7.0.8.4-1.1 on GA media

    These are all security issues fixed in the ruby3.3-rubygem-actiontext-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 24, 2024