Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 5.6

    Security update for microcode_ctl

    This update for ucode-intel fixes the following issues: The Intel CPU microcode version was updated to version 20180312. This update enables the IBPB+IBRS based mitigations of the Spectre v2 flaws (boo#1085207 CVE-2017-5715) - New Platforms - BDX-DE EGW A0 6-…

    first Mar 16, 2018
  • Medium max 5.9

    python310-w3lib-2.2.0-1.1 on GA media

    These are all security issues fixed in the python310-w3lib-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object…

    first Oct 3, 2023
  • Medium max 4.3

    Security update for xen

    This update for xen fixes the following issues: - CVE-2025-27465: Fixed incorrect stubs exception handling for flags recovery (XSA-470) (bsc#1244644) - Fixed more AMD transient execution attacks (XSA-471) (bsc#1246112)

    first Jul 22, 2025
  • Medium max 4.7

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference whe…

    first Oct 24, 2025
  • Medium max 4.0

    Security update for rubygem-actionview-4_2

    This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView (bsc#1167240).

    first Apr 8, 2020
  • Medium max 5.5

    Recommended update for google-cloud SDK

    This update for google-cloud SDK fixes the following issues: - Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697) - Bellow 5 binaries Obsolete the python3.6 counterpart: python311-google-resumable-media python311-google-api-co…

    first May 14, 2024
  • Medium max 5.7

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235). - Re-build containerd to use updated golang-packaging (jsc#1342). - Update to containerd v1.6.16 for Do…

    first Mar 28, 2023
  • Medium max 5.9

    ssh-audit-3.1.0-1.1 on GA media

    These are all security issues fixed in the ssh-audit-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 5 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods…

    first Jan 18, 2022
  • Medium max 4.9

    cpio-2.15-1.1 on GA media

    These are all security issues fixed in the cpio-2.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.7

    kernel-firmware-i915-20250210-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-i915-20250210-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.3

    Security update for python

    This update for python fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

    first Mar 5, 2024
  • Medium max 6.8

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container (bsc#1197870). Update to version 1.25.1. The following non-security bugs were fixed: - add workaround for https://bugzil…

    first Apr 27, 2022
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update…

    first Jan 18, 2018
  • Medium max 5.9

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).

    first Dec 20, 2023
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry …

    first Apr 23, 2020
  • Medium max 5.1

    Security update for permissions

    This update for permissions fixes the following issues: Update to version 20200127: * Makefile: Leap 15.3 still uses /etc, so adjust the installation setup Update to version 20181225: * mgetty: faxq-helper now finally reside in /usr/libexec * libksysguard5: U…

    first Dec 2, 2021
  • Medium max 5.9

    Security update for bouncycastle

    This update for bouncycastle fixes the following issues: Update to version 1.78.1, including fixes for: - CVE-2024-30171: Fixed timing side-channel attacks against RSA decryption (both PKCS#1v1.5 and OAEP). (bsc#1223252)

    first Jun 18, 2024
  • Medium max 5.9

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…

    first May 14, 2019
  • Medium max 5.3

    bouncycastle-1.74-1.1 on GA media

    These are all security issues fixed in the bouncycastle-1.74-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.7

    Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue. The following security issue was fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909).

    first Mar 28, 2023
  • Medium max 5.4

    python311-pycapnp-2.0.0-2.5 on GA media

    These are all security issues fixed in the python311-pycapnp-2.0.0-2.5 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • Medium max 5.3

    mysql-connector-java-8.0.33-2.1 on GA media

    These are all security issues fixed in the mysql-connector-java-8.0.33-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2021-41229: Fixed leaking buffers stored in cstates cache (bsc#1192760).

    first Sep 19, 2023
  • Medium max 5.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22890: TLS 1.3 session ticket proxy host mixup (bsc#1183934) - CVE-2021-22876: Automatic referer leaks credentials (bsc#1183933)

    first Apr 1, 2021
  • Medium max 5.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces fo…

    first Jul 15, 2019
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888). - CVE-2019-14902: Fixed an issue where automatic replication of ACLs…

    first Jan 28, 2020
  • Medium max 6.9

    Security update for python-xmltodict

    This update for python-xmltodict fixes the following issues: - CVE-2025-9375: XML injection vulnerability in `xmltodict` allows input data manipulation (bsc#1249036).

    first Oct 9, 2025
  • Medium max 5.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u212 fixes the following issues: Security issues fixed: - CVE-2019-2602: Better String parsing (bsc#1132728). - CVE-2019-2684: More dynamic RMI interactions (bsc#1132732). - CVE-2019-2698: Fuzzing TrueType fonts …

    first May 13, 2019
  • Medium max 5.0

    Security update for libssh2_org

    This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103]

    first Apr 27, 2019
  • Medium max 5.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2023-1906: Fixed a heap-based buffer overflow in ImportMultiSpectralQuantum. (bsc#1210308)

    first Apr 20, 2023
  • Medium max 5.6

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: nodejs12 was updated to version 12.18.0 - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-8172: Fixed am issue where TLS session reuse could have led t…

    first Jun 11, 2020
  • Medium max 6.5

    Security update for python-reportlab

    This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags (bsc#1182503).

    first Aug 9, 2021
  • Medium max 5.9

    Security update for libvirt

    This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…

    first Jun 5, 2019
  • Medium max 6.5

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352).

    first May 6, 2020
  • Medium max 4.0

    Security update for yast2-rmt

    This update for yast2-rmt to version 1.3.0 fixes the following issues: Security issue fixed: - CVE-2018-20105: Fixed an exposure of the CA private key passphrase in the log file (bsc#1119835). Non-security issue fixed: - Add support for forwarding registratio…

    first Mar 3, 2020
  • Medium max 6.8

    openssh-9.9p2-1.1 on GA media

    These are all security issues fixed in the openssh-9.9p2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2025
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_147 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that a…

    first Aug 1, 2023
  • Medium max 5.5

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2020-27618: Accept redundant shift sequences in IBM1364 (bsc#1178386) - CVE-2020-29562: Fix incorrect UCS4 inner loop bounds (bsc#1179694) - CVE-2020-29573: Harden printf against non-normal long double v…

    first Apr 13, 2021