Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.5

    indent-2.2.13-3.1 on GA media

    These are all security issues fixed in the indent-2.2.13-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8

    Security update for go1.23

    This update for go1.23 fixes the following issues: go1.23.10 (released 2025-06-05) includes security fixes to the /http and os packages, as well as bug fixes to the linker. (bsc#1229122 go1.23 release tracking CVE-2025-0913 CVE-2025-4673) * CVE-2025-0913: os:…

    first Jun 9, 2025
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to 10.5.12 [bsc#1189320]: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389

    first Sep 3, 2021
  • Medium max 5.3

    java-1_8_0-openj9-1.8.0.442-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.442-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 8, 2025
  • Medium max 5.6

    Security update for qemu

    This update for qemu fixes the following issues: A new feature was added: - Support EPYC vCPU type (bsc#1052825 fate#324038) Also a mitigation for a security problem has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUI…

    first Jan 3, 2018
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege…

    first Jul 21, 2022
  • Medium max 5.5

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands (bsc#1208790). - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion (bsc#1208793). The fo…

    first Mar 10, 2023
  • Medium max 5.9

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Feb 14, 2023
  • Medium max 4.3

    ppp-2.5.0-1.1 on GA media

    These are all security issues fixed in the ppp-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for libvirt

    This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…

    first Jun 3, 2019
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…

    first Jul 24, 2021
  • Medium max 5.3

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release (bsc#1230400) - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially ena…

    first Sep 18, 2024
  • Medium max 6.5

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: IBM Security Update November 2022: (bsc#1205302, bsc#1204703) - CVE-2022-3676: A security vulnerability was fixed in version 7.1.5.15, adding the reference here.

    first Dec 20, 2022
  • Medium max 5.9

    Security update for libvirt

    This update for libvirt fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchite…

    first Jun 6, 2019
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: - CVE-2019-14902: Fixed an issue where automatic replication of ACLs down subtree on AD Directory is not working (bsc#1160850). - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure duri…

    first Jan 23, 2020
  • Medium max 6.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-7264: Fixed out-of-bounds read in ASN.1 date parser GTime2str() (bsc#1228535)

    first Sep 2, 2024
  • Medium max 6.5

    Security update for python-arcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-jsondiff, python-knack, python-marshmallow, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-opentelemetry-sdk, python-opentelemetry-semantic-conventions, python-opentelemetry-

    This update for python-argcomplete, python-Fabric, python-PyGithub, python-antlr4-python3-runtime, python-avro, python-chardet, python-distro, python-docker, python-fakeredis, python-fixedint, python-httplib2, python-httpretty, python-javaproperties, python-j…

    first Jul 1, 2024
  • Medium max 4.9

    libmariadbd-devel-10.6.5-3.1 on GA media

    These are all security issues fixed in the libmariadbd-devel-10.6.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15-SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20669: Fixed an improper check i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c (bsc#11…

    first Dec 14, 2020
  • Medium max 5.6

    Security update for the Linux Kernel

    The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-1125: Fix Spectre V1 variant memory disclosure by speculation over the SWAPGS instruction (bsc#1139358). - CVE-2019-10207: A…

    first Aug 16, 2019
  • Medium max 5.5

    ImageMagick-7.1.1.6-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.1.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for canna

    This update for canna fixes the following issues: - CVE-2022-21950: move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets (boo#1199280).

    first Aug 16, 2022
  • Medium max 5.2

    Security update for glib2

    This update for glib2 fixes the following issues: - Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).

    first Sep 3, 2024
  • Medium max 5.9

    curl-8.11.0-1.1 on GA media

    These are all security issues fixed in the curl-8.11.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 8, 2024
  • Medium max 5.3

    libopenssl-1_1-devel-1.1.1t-3.1 on GA media

    These are all security issues fixed in the libopenssl-1_1-devel-1.1.1t-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for docker

    This update for docker fixes the following issues: Docker was updated to 20.10.23-ce. See upstream changelog at https://docs.docker.com/engine/release-notes/#201023 Docker was updated to 20.10.21-ce (bsc#1206065) See upstream changelog at https://docs.docker.…

    first Mar 17, 2023
  • Medium max 6.5

    netty3-3.10.6-9.1 on GA media

    These are all security issues fixed in the netty3-3.10.6-9.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2022-4144: Fixed qxl_phys2virt unsafe address translation that can lead to out-of-bounds read (bsc#1205808). - CVE-2022-3165: Fixed integer underflow in vnc_client_cut_text_ext() (bsc#1203788). - CVE-2022…

    first Mar 8, 2023
  • Medium max 5.5

    Security update for openssl1

    This update for openssl1 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334) -…

    first Feb 17, 2017
  • Medium max 4.0

    dnsmasq-2.86-1.1 on GA media

    These are all security issues fixed in the dnsmasq-2.86-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    cloud-init-23.1-1.1 on GA media

    These are all security issues fixed in the cloud-init-23.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for mysql-connector-java

    This update for mysql-connector-java fixes the following issues: - CVE-2021-2471: Fixed unauthorized access to critical data or complete access to all MySQL Connectors (bsc#1195557).

    first Mar 2, 2022
  • Medium max 5.3

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

    first Aug 17, 2023
  • Medium max 6.3

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)

    first Feb 11, 2025
  • Medium max 4.4

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - nodejs12 was updated to 12.18.4 LTS: - CVE-2020-8201: Fixed an HTTP Request Smuggling due to CR-to-Hyphen conversion (bsc#1176605). - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CV…

    first Oct 1, 2020
  • Medium max 5.5

    Security update for qemu

    This update for qemu fixes several issues. This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of memo…

    first Oct 18, 2018
  • Medium max 5.9

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by `/parallel` command line switch. (bsc#1204258) - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. (bsc#1204257)

    first Nov 15, 2022
  • Medium max 5.3

    Security update for php8

    This update for php8 fixes the following issues: - CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073)

    first Jun 17, 2024
  • Medium max 5.3

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parser of e-mail addresses which contain a special character (bsc#1210638).

    first Feb 22, 2024
  • Medium max 4.3

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-prometheus-prometheus: - Add support for Uyuni/SUSE Manager service discovery + Added 0003-Add-Uyuni-service-discovery - Readded _service file removed in error. - Update to 2.11.1 + Bug Fix: * Fix potentia…

    first Sep 6, 2019