Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.5
    openSUSE-SU-2024:11370-1 5 CVEs 1 exploited

    sca-patterns-sle12-1.0.8-2.2 on GA media

    These are all security issues fixed in the sca-patterns-sle12-1.0.8-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for Mesa

    This update for Mesa fixes the following issues: - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041). - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040). - CVE-2023-45922: Fixed …

    first Oct 8, 2024
  • Medium max 6.1

    Security update for libpng12

    This update for libpng12 fixes the following issues: - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)

    first Dec 12, 2025
  • Medium max 5.3

    gajim-1.5.1-1.1 on GA media

    These are all security issues fixed in the gajim-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    libexif-devel-0.6.23-1.2 on GA media

    These are all security issues fixed in the libexif-devel-0.6.23-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15 - Fix use-after-free in slirp (CVE-2018-20126 bsc#1119991) - Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068 bs…

    first Nov 14, 2019
  • Medium max 5.9

    openCryptoki-3.23.0-4.1 on GA media

    These are all security issues fixed in the openCryptoki-3.23.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 15, 2024
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

    first Mar 3, 2025
  • Medium max 5.3

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient

    first Feb 19, 2021
  • Medium max 5.4

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-en…

    first Oct 22, 2020
  • Medium max 6.5

    Security update for dhcp

    This update for dhcp fixes the following issues: - CVE-2022-2928: Fixed an option refcount overflow (bsc#1203988). - CVE-2022-2929: Fixed a DHCP memory leak (bsc#1203989).

    first Nov 15, 2022
  • Medium max 4.6

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)

    first Feb 3, 2025
  • Medium max 6.8

    Security update for openssh

    This update for openssh fixes the following issues: Security issue fixed: - CVE-2018-20685: Fixed an issue where scp client allows remote SSH servers to bypass intended access restrictions (bsc#1121571) - CVE-2019-6109: Fixed an issue where the scp client wou…

    first Apr 29, 2019
  • Medium max 6.8

    chkstat-1550_20210901-29.2 on GA media

    These are all security issues fixed in the chkstat-1550_20210901-29.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.2

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2023-45803: Fix a request body leak that could occur when receiving a 303 HTTP response (bsc#1216377).

    first Nov 3, 2023
  • Medium max 6.2

    grafana-8.5.20-2.1 on GA media

    These are all security issues fixed in the grafana-8.5.20-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1

    grafana-11.3.2-1.1 on GA media

    These are all security issues fixed in the grafana-11.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 22, 2025
  • Medium max 5.3

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-1882: Fixed a use-after-free flaw in free_p…

    first Nov 18, 2022
  • Medium max 5.9

    Security update for curl

    This update for curl fixes the following issues: These security issues were fixed: - CVE-2016-9586: libcurl printf floating point buffer overflow (bsc#1015332) - CVE-2017-7407: The ourWriteOut function in tool_writeout.c in curl might have allowed physically …

    first Apr 26, 2017
  • Medium max 6.0

    Security update for git

    This update for git fixes the following issues: - Updated to version 2.35.3: - CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).

    first May 2, 2022
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-1125: Enable Spectre v1 swapgs mitigations (bsc#1139358). - CVE-2018-20855: An issue was discovered in create_qp_c…

    first Sep 2, 2019
  • Medium max 4.8

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption in Cipher.update_into (bsc#1208036).

    first May 9, 2023
  • Medium max 5.9

    Security update for rekor

    This update for rekor fixes the following issues: update to 1.3.5 (jsc#SLE-23476): - Additional unique index correction - Remove timestamp from checkpoint - Drop conditional when verifying entry checkpoint - Fix panic for DSSE canonicalization - Change Redis …

    first Feb 13, 2024
  • Medium max 6.5

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137). This update was imported from the SUSE:SLE-15:Update update project.

    first Oct 8, 2019
  • Medium max 5.3

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).

    first Sep 24, 2025
  • Medium max 6.3

    python310-3.10.15-5.1 on GA media

    These are all security issues fixed in the python310-3.10.15-5.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 Realtime kernel was updated to 4.4.114 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch predict…

    first Feb 19, 2018
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

    first Mar 3, 2025
  • Medium max 6.5

    Security update for the Linux Kernel

    The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-11669: An issue was discovered on the powerpc platform. arch/powerpc/kernel/idle_book3s.S did not have save/restore function…

    first Apr 23, 2020
  • Medium max 6.5
    SUSE-SU-2022:0367-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - CVE-2…

    first Feb 10, 2022
  • Medium max 5.9

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption (bsc#1178168).

    first Dec 4, 2020
  • Medium max 5.9

    Security update for curl

    This update for curl fixes the following issues: - CVE-2022-43552: HTTP Proxy deny use-after-free (bsc#1206309).

    first Dec 21, 2022
  • Medium max 5.3

    ffmpeg-4-4.4.3-4.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22876: Fixed an issue where the automatic referer was leaking credentials (bsc#1183933).

    first Apr 28, 2021
  • Medium max 6.5

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).

    first Mar 30, 2022
  • Medium max 6.8

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135).

    first Mar 24, 2022
  • Medium max 5.9

    Security update for openssh

    This update for openssh fixes the following issues: - Prevent user enumeration through the timing of password processing (bsc#989363, CVE-2016-6210) [-prevent_timing_user_enumeration] - Allow lowering the DH groups parameter limit in server as well as when GS…

    first Sep 9, 2016
  • Medium max 5.3

    EternalTerminal-6.2.4-1.1 on GA media

    These are all security issues fixed in the EternalTerminal-6.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).

    first Nov 8, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib…

    first Aug 6, 2019