Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.9

    libmozjs-128-0-128.5.1-2.1 on GA media

    These are all security issues fixed in the libmozjs-128-0-128.5.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 16, 2024
  • Medium max 5.4

    python-Twisted-doc-22.10.0-1.1 on GA media

    These are all security issues fixed in the python-Twisted-doc-22.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.7

    Security update for shadow

    This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806).

    first Oct 10, 2023
  • Medium max 5.7

    Security update for sevctl

    This update for sevctl fixes the following issues: - CVE-2023-50711: Fixed out of bounds memory accesses in vmm-sys-util (bsc#1218502, bsc#1218499) Non-security fixes: - Updated to version 0.4.3 (jsc#PED-4981)

    first Jan 26, 2024
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#11599…

    first Feb 6, 2020
  • Medium max 4.6

    Security update for exim

    This update for exim fixes the following issues: - CVE-2022-3559: Fixed a use after free in processing of the component Regex Handler (boo#1204427, Bug 2915)

    first Oct 30, 2022
  • Medium max 4.7

    exiv2-0.27.5-8.1 on GA media

    These are all security issues fixed in the exiv2-0.27.5-8.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for containerd

    This update for containerd fixes the following issues: containerd: - CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145) docker: - Update to Docker 20.10.17-ce. See upstream changelog online at https://docs.docker.com/engi…

    first Jun 23, 2022
  • Medium max 4.5

    Security update for systemd

    This update for systemd fixes the following issues: Security issues fixed: - CVE-2019-3842: Fixed a privilege escalation in pam_systemd which could be exploited by a local user (bsc#1132348). - CVE-2019-6454: Fixed a denial of service via crafted D-Bus messag…

    first May 28, 2019
  • Medium max 5.3

    Security update for rubygem-activemodel-4_1

    This update for rubygem-activemodel-4_1 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention (bsc#963334)

    first Feb 26, 2016
  • Medium max 5.9

    filezilla-3.67.0-1.1 on GA media

    These are all security issues fixed in the filezilla-3.67.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3
    SUSE-SU-2015:2192-1 31 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 3, 2015
  • Medium max 5.9

    python310-asyncssh-2.14.2-1.1 on GA media

    These are all security issues fixed in the python310-asyncssh-2.14.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1

    Security update for mercurial

    This update for mercurial fixes the following issues: Security issue fixed: - CVE-2019-3902: Fixed incorrect patch-checking with symlinks and subrepos (bsc#1133035). This update was imported from the SUSE:SLE-15:Update update project.

    first Jun 26, 2020
  • Medium max 6.9

    Security update for vim

    This update for vim fixes the following issues: Updated to 9.1.1629: - CVE-2025-53905: Fixed malicious tar archive may causing a path traversal in Vim’s tar.vim plugin (bsc#1246604) - CVE-2025-53906: Fixed malicious zip archive may causing a path traversal in…

    first Sep 23, 2025
  • Medium max 6.1

    Security update for python-XStatic-jquery-ui

    This update for python-XStatic-jquery-ui fixes the following issues: - CVE-2016-7103: possible cross-site scripting in dialog closeText could lead to arbitrary code injection (bsc#996004)

    first Sep 5, 2017
  • Medium max 5.9

    Security update for python39-setuptools

    This update for python39-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Jan 27, 2023
  • Medium max 6.0

    Security update for runc

    This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixe…

    first Dec 14, 2021
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read val…

    first Jun 10, 2020
  • Medium max 6.7

    nano-8.0-2.1 on GA media

    These are all security issues fixed in the nano-8.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u292 (icedtea 3.19.0). - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).

    first Jun 17, 2021
  • Medium max 6.5

    xen-4.16.0_06-3.1 on GA media

    These are all security issues fixed in the xen-4.16.0_06-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for qt6-webengine

    This update for qt6-webengine fixes the following issues: - CVE-2024-11403: Fixed out of bounds memory read/write in libjxl (boo#1233764)

    first Dec 9, 2024
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904)

    first Oct 10, 2023
  • Medium max 5.9

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947).

    first Feb 19, 2021
  • Medium max 6.5

    Security update for grafana and system-user-grafana

    This update for grafana and system-user-grafana fixes the following issues: - Updated grafana to upstream version 7.3.1 * CVE-2019-15043: In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a…

    first Apr 15, 2021
  • Medium max 6.5

    Security update for libvirt

    This update for libvirt fixes the following issues: Security fixes: - CVE-2023-3750: Fixed mproper locking in virStoragePoolObjListSearch that may lead to denial of service (bsc#1213447). Other fixes: - build library with support for modular daemons (bsc#1213…

    first Jul 31, 2023
  • Medium max 5.3

    python310-Flask-Cors-4.0.1-1.1 on GA media

    These are all security issues fixed in the python310-Flask-Cors-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2024
  • Medium max 4.3

    Security update for openssh

    This update for openssh fixes the following issues: - Security issues fixed: * CVE-2025-32728: Fixed a logic error in DisableForwarding option (bsc#1241012) - Other bugs fixed: * Allow KEX hashes greater than 256 bits (bsc#1241045) * Fixed hostname being left…

    first May 19, 2025
  • Medium max 6.2

    prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-2.1 on GA media

    These are all security issues fixed in the prometheus-ha_cluster_exporter-1.3.1+git.1676027782.ad3c0e9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …

    first Aug 18, 2022
  • Medium max 6.2

    libvirt-10.3.0-2.1 on GA media

    These are all security issues fixed in the libvirt-10.3.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.9

    Security update for cpio

    This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)

    first May 13, 2024
  • Medium max 5.6

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: - Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715) This new firmware enables the Indirect Branch Control (IBC) feature on AMD family 17h processor to mitigate an attack on the branch predicto…

    first Jan 9, 2018
  • Medium max 5.3

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

    first Aug 5, 2025
  • Medium max 5.3

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: - CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588)

    first Nov 29, 2023
  • Medium max 4.1

    Security update for sssd

    This update for sssd fixes the following issues: Security vulnerabilities addressed: - Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Create sockets with right permissions (bsc#1098377, CVE-2018-10852) Other bug …

    first Mar 6, 2019
  • Medium max 6.4

    Security update for go1.21

    This update for go1.21 fixes the following issues: Update to go1.21.10: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017) - net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0

    first May 10, 2024
  • Medium max 6.5

    Security update for python-python-jose

    This update for python-python-jose fixes the following issues: CVE-2024-33663: Fixed algorithm confusion with OpenSSH ECDSA keys and other key formats (boo#1223417).

    first May 7, 2024
  • Medium max 5.7

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update AMD ucode and SEV firmware - CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE…

    first May 19, 2022