Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.7

    Recommended update for hplip

    This update for hplip fixes the following issues: This update for hplip fixes the following issues: Update to hplip 3.24.4 (jsc#PED-5846) - Added support for new printers: * HP OfficeJet 8120 All-in-One series * HP OfficeJet Pro 8120 All-in-One series * HP Of…

    first Jan 28, 2025
  • Medium max 6.6

    Security update for ongres-scram

    This update for ongres-scram fixes the following issues: - CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399)

    first Nov 11, 2025
  • Medium max 5.0

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035). - CVE-2021-21705: Fixed SSRF bypass in FILTER_VALIDATE_URL (bsc#1188037).

    first Aug 6, 2021
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb to version 10.2.31 GA fixes the following issues: MariaDB was updated to version 10.2.31 GA (bsc#1162388 and bsc#1156669). Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to c…

    first Mar 31, 2020
  • Medium max 5.9

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Jan 17, 2023
  • Medium max 5.9

    liboqs-devel-0.14.0-1.1 on GA media

    These are all security issues fixed in the liboqs-devel-0.14.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 11, 2025
  • Medium max 6.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: IBM Security Update November 2022: (bsc#1205302, bsc#1204703) - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding the reference here.

    first Dec 21, 2022
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_56 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges nee…

    first Jul 14, 2021
  • Medium max 4.5

    libntfs-3g-devel-2022.10.3-4.1 on GA media

    These are all security issues fixed in the libntfs-3g-devel-2022.10.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3

    Security update for doomsday

    This update for doomsday fixes the following issues: - CVE-2025-2592: Use system assimp library to fix a heap-based buffer overflow (boo#1239917)

    first Apr 9, 2025
  • Medium max 5.3

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. (bsc#1244925)

    first Aug 8, 2025
  • Medium max 5.6

    Security update for qemu

    This update for qemu fixes the following issues: This update for qemu fixes the following issues: A mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU…

    first Jan 8, 2018
  • Medium max 5.3

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2024-27351: Fixed a regular expression DoS in django.utils.text.Truncator.words (bsc#1220358)

    first Mar 14, 2024
  • Medium max 5.5

    Security update for python-numpy

    This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…

    first Oct 17, 2022
  • Medium max 6.5

    Security update for openssl

    This update for openssl fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

    first May 30, 2023
  • Medium max 5.3

    Security update for SUSE Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2023-20897: Do not fail on bad message pack message (bsc#1213441) * CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cach…

    first Sep 28, 2023
  • Medium max 6.6

    Security update for rubygem-actionpack-5_1

    This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2024-47887: Fixed Possible ReDoS vulnerability in HTTP Token authentication in Action Controller (bsc#1231729). - CVE-2024-42228: Fixed uninitialized value *size when calling amdgpu_vce_…

    first Nov 1, 2024
  • Medium max 6.1

    element-web-1.11.36-1.1 on GA media

    These are all security issues fixed in the element-web-1.11.36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8
    openSUSE-SU-2021:0707-1 1 CVE 1 exploited

    Security update for perl-Image-ExifTool

    This update for perl-Image-ExifTool fixes the following issues: Update to version 12.25 fixes (boo#1185547 CVE-2021-22204) * JPEG XL support is now official * Added read support for Medical Research Council (MRC) image files * Added ability to write a number …

    first May 10, 2021
  • Medium max 5.6

    Security update for xen

    This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754: Prevent information leaks via side effects of speculative execution, aka 'Spectre' and 'Meltdown' attacks (bsc#1074562, bsc#1068032) - C…

    first Mar 5, 2018
  • Medium max 6.5

    Security update for mariadb

    This update for mariadb and mariadb-connector-c fixes the following issues: - Update mariadb to 10.2.36 GA [bsc#1177472, bsc#1178428] fixing for the following security vulnerabilities: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776, CVE-2020-14789 CVE-2020-15…

    first Nov 24, 2020
  • Medium max 6.5

    Security update for php53

    This update for php53 to version 5.3.17 fixes the following issues: These security issues were fixed: - CVE-2016-5093: get_icu_value_internal out-of-bounds read (bnc#982010). - CVE-2016-5094: Don't create strings with lengths outside int range (bnc#982011). -…

    first Jun 21, 2016
  • Medium max 4.0

    Security update for rubygem-actionpack-4_2

    This update for rubygem-actionpack-4_2 fixes the following issues: - CVE-2023-28362: Fixed XSS via User Supplied Values to redirect_to (bsc#1213312).

    first Aug 9, 2023
  • Medium max 6.5
    openSUSE-SU-2022:0366-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254)…

    first Feb 10, 2022
  • Medium max 6.5

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issue fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). Non-security issues fixed: - apparmor: avoid copying empty profile name (bsc#1149100). - loggi…

    first May 15, 2020
  • Medium max 5.5

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-35977: Fixed an integer overflow that could allow authenticated users to cause a crash (bsc#1207202).

    first Feb 6, 2023
  • Medium max 6.5

    squid-5.4.1-2.1 on GA media

    These are all security issues fixed in the squid-5.4.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).

    first May 28, 2024
  • Medium max 6.9

    Security update for gradle

    This update for gradle fixes the following issues: - CVE-2023-35947: Fixed an issue while unpacking tar archives, where files could be created outside of the unpack location (bsc#1212931).

    first Nov 6, 2024
  • Medium max 5.9

    Security update for xen

    This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…

    first May 16, 2019
  • Medium max 6.5

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 (bsc#1197903): - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use.

    first Apr 5, 2022
  • Medium max 6.8

    Security update for permissions

    This update for permissions fixes the following issues: - Fork package for 12-SP5 (bsc#1155939) - make btmp root:utmp (bsc#1050467, bsc#1182899) - pcp: remove no longer needed / conflicting entries (bsc#1171883). Fixes a potential security issue. - do not fol…

    first Jul 9, 2021
  • Medium max 6.5

    Security update for mariadb

    This update for mariadb fixes the following issues: This update provides MariaDB 10.5.21. See release notes at https://mariadb.com/kb/en/mariadb-10-5-21-release-notes/ and changelog at https://mariadb.com/kb/en/mariadb-10-5-21-changelog/ . Security issues fix…

    first Jul 26, 2023
  • Medium max 6.2

    python-pip-8.1.2-1.2 on GA media

    These are all security issues fixed in the python-pip-8.1.2-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for java-1_8_0-ibm

    java-1_8_0-ibm was updated to Java 8.0 Service Refresh 5 Fix Pack 25 (bsc#1116574) * Class Libraries: - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10930 CVE-2018-3183 - IJ10933 CV…

    first Apr 27, 2019
  • Medium max 5.7

    kernel-firmware-dpaa2-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-dpaa2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 4.3

    Security update for tpm2-0-tss

    This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690).

    first May 14, 2024
  • Medium max 6.5

    Security update for SUSE Manager Proxy 3.0

    The following security issue in spacewalk-backend has been fixed: - Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470) Additionally, the following non-security issues have been fixed: rhnli…

    first May 18, 2017
  • Medium max 6.5

    ovmf-202405-1.1 on GA media

    These are all security issues fixed in the ovmf-202405-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 13, 2024
  • Medium max 6.5

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

    first May 30, 2023