Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.9

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: Upgraded to 15.15: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…

    first Dec 15, 2025
  • Medium max 5.5

    Security update for opencc

    This update for opencc fixes the following issues: - CVE-2018-16982: Check offset bounds in BinaryDict::NewFromFile method. (bsc#1108310)

    first Jun 19, 2024
  • Medium max 5.4

    Security update for perl-Archive-Zip

    This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could…

    first Aug 16, 2018
  • Medium max 5.9

    ctdb-4.19.2+git.322.7e9201cef5-1.1 on GA media

    These are all security issues fixed in the ctdb-4.19.2+git.322.7e9201cef5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.6

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).

    first Feb 7, 2025
  • Medium max 5.9

    Security update for libmfx

    This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. (bsc#1226897) - CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898) - CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899) - CVE-20…

    first Sep 19, 2024
  • Medium max 6.1

    Security update for cobbler

    This update for cobbler fixes the following issues: - CVE-2016-9605: A directory traversal problem in the fix script endpoint was fixed that could be used to leak file content. (bsc#1030582)

    first Jun 26, 2017
  • Medium max 5.5

    Security update for python-numpy

    This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…

    first Oct 17, 2022
  • Medium max 5.3

    clamav-1.4.2-1.1 on GA media

    These are all security issues fixed in the clamav-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2025
  • Medium max 5.3

    netty3-3.10.6-17.1 on GA media

    These are all security issues fixed in the netty3-3.10.6-17.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 4, 2024
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2017-1000100: TFP sends more than buffer size and it could lead to a denial of service (bsc#1051644) - CVE-2017-1000101: URL globbing out of bounds read could lead to a denial of service (bsc#1051643)

    first Aug 16, 2017
  • Medium max 5.3

    hylafax+-7.0.3-5.1 on GA media

    These are all security issues fixed in the hylafax+-7.0.3-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for ppp

    This update for ppp fixes the following issues: - CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).

    first Dec 22, 2023
  • Medium max 6.1

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Update to 1.6.7 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides a fix to a recently reported XSS vulnerabilities: * Fix cross-site scripting (XSS) vulnerability in…

    first Aug 21, 2024
  • Medium max 5.5

    Security update for cloud-init

    This update for cloud-init contains the following fixes: - Move fdupes call back to %install.(bsc#1214169) - Update to version 23.3. (bsc#1216011) * (bsc#1215794) * (bsc#1215740) * (bsc#1216007) + Bump pycloudlib to 1!5.1.0 for ec2 mantic daily image support …

    first Jan 16, 2024
  • Medium max 5.9

    Security update for kvm

    This update for kvm fixes the following issues: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091: Adde…

    first May 21, 2019
  • Medium max 5.5

    Security update for rear27a

    This update for rear27a fixes the following issues: - CVE-2024-23301: Fixed world-readable initrd with GRUB_RESCUE=Y (bsc#1218728). Bug fixes: - Fix mkinitrd dependency issue by installing dracut-mkinitrd-deprecated (see bsc#1202352).

    first Feb 28, 2024
  • Medium max 6.5

    Security update for shim

    This update for shim fixes the following issues: - Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458) - Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX co…

    first May 9, 2023
  • Medium max 5.5

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.4.22: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497). - Add missing dependen…

    first Dec 1, 2021
  • Medium max 5.5

    Security update for iniparser

    This update for iniparser fixes the following issues: - CVE-2023-33461: Fixed a NULL pointer dereference in iniparser_getboolean() (boo#1211889)

    first Jul 17, 2023
  • Medium max 5.9

    Security update for libgcrypt

    This update for libgcrypt fixes the following issues: - CVE-2024-2236: Fixed timing based side-channel in RSA implementation. (bsc#1221107)

    first Jul 21, 2025
  • Medium max 6.5

    Security update for spectre-meltdown-checker

    This update for spectre-meltdown-checker fixes the following issues: - feat: implement TAA detection (CVE-2019-11135 bsc#1139073) - feat: implement MCEPSC / iTLB Multihit detection (CVE-2018-12207 bsc#1117665) - feat: taa: add TSX_CTRL MSR detection in hardwa…

    first Dec 30, 2019
  • Medium max 4.6

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

    first Nov 28, 2025
  • Medium max 5.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: Issue fixed: - Fixed a bug related to the fix for CVE-2016-9318 which allowed xsltproc to access the internet even when --nonet was given and also was making docbook-xsl-stylesheets to have incomplete xml ca…

    first Jul 18, 2019
  • Medium max 5.6

    Security update for the Linux Kernel (Live Patch 2 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_6 fixes one issue. The following security issue was fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1…

    first Aug 21, 2018
  • Medium max 5.4

    matrix-synapse-1.85.2-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.85.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8

    java-17-openjdk-17.0.1.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.4

    k3s-1.21.3+k3s1-1.2 on GA media

    These are all security issues fixed in the k3s-1.21.3+k3s1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.0

    fence-agents-4.10.0+git.1627556580.31443c15-1.2 on GA media

    These are all security issues fixed in the fence-agents-4.10.0+git.1627556580.31443c15-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    libxml2-2-2.13.8-1.1 on GA media

    These are all security issues fixed in the libxml2-2-2.13.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2025
  • Medium max 6.1

    phpMyAdmin-5.1.2-1.1 on GA media

    These are all security issues fixed in the phpMyAdmin-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: - fix CVE-2020-7068 [bsc#1175223]: Use of freed hash key in the phar_parse_zipfile function

    first Sep 1, 2020
  • Medium max 6.0

    Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue whe…

    first Jul 15, 2020
  • Medium max 6.3

    python3-mailman-3.3.5-1.1 on GA media

    These are all security issues fixed in the python3-mailman-3.3.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)

    first Apr 3, 2023
  • Medium max 6.5

    Security update for exiv2

    This update for exiv2 fixes the following issues: - CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. (bsc#1142681) - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read(). (bsc#1189332)…

    first Nov 28, 2022
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (bsc#1237096) - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel Processors may allow privileged user to po…

    first Feb 19, 2025
  • Medium max 6.5

    Security update for libosip2

    This update for libosip2 fixes the following issues: - CVE-2022-41550: Fixed an integer overflow in the header parser (boo#1204225)

    first Oct 13, 2022
  • Medium max 5.6

    Security update to ucode-intel

    ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is part of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal fault). (bsc#1104134 bsc#1087082 bsc#1087083 bsc#1…

    first Aug 15, 2018
  • Medium max 5.4

    Security update for exim

    This update for exim fixes the following issues: - CVE-2024-39929: Fixed incorrect parsing of multiline rfc2231 header filename (boo#1227423).

    first Jul 25, 2024