Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 6.5

    libwireshark16-4.0.6-3.1 on GA media

    These are all security issues fixed in the libwireshark16-4.0.6-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    libmozjs-115-0-115.15.0-3.1 on GA media

    These are all security issues fixed in the libmozjs-115-0-115.15.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 16, 2024
  • Medium max 4.0

    yast2-rmt-1.3.3-1.2 on GA media

    These are all security issues fixed in the yast2-rmt-1.3.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: Update Java 7.1 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-20…

    first Mar 29, 2022
  • Medium max 5.3

    Security update for python3

    This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906)

    first Nov 1, 2024
  • Medium max 5.3

    Security update for php7

    This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706).

    first Jan 14, 2021
  • Medium max 4.6

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in the ECDSA signature computation (bsc#1236136)

    first Feb 4, 2025
  • Medium max 5.3
    SUSE-SU-2015:2216-1 29 CVEs 1 exploited

    Security update for java-1_7_0-ibm

    The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…

    first Dec 7, 2015
  • Medium max 5.9

    ruby3.4-rubygem-fluentd-1.17.1-1.3 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-fluentd-1.17.1-1.3 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • Medium max 4.3

    grafana-10.1.5-2.1 on GA media

    These are all security issues fixed in the grafana-10.1.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    go1.22-1.22.11-1.1 on GA media

    These are all security issues fixed in the go1.22-1.22.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 25, 2025
  • Medium max 4.7

    Security update for shadow

    This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806).

    first Oct 10, 2023
  • Medium max 6.7

    Security update for cpio

    This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199).

    first Nov 25, 2019
  • Medium max 5.3

    libtasn1-6-32bit-4.20.0-1.1 on GA media

    These are all security issues fixed in the libtasn1-6-32bit-4.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 9, 2025
  • Medium max 6.5

    ctdb-4.17.2+git.273.a55a83528b9-1.1 on GA media

    These are all security issues fixed in the ctdb-4.17.2+git.273.a55a83528b9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for openssl-1_1-livepatches

    This update for openssl-1_1-livepatches fixes the following issues: Security issue fixed: - CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (bsc#1217151). Other fixes: - Report…

    first Dec 20, 2023
  • Medium max 5.9

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgrade to 16.9: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…

    first May 30, 2025
  • Medium max 5.5

    Security update for binutils

    This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - C…

    first Oct 30, 2019
  • Medium max 6.0

    Security update for cni-plugins

    This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com…

    first Jul 20, 2020
  • Medium max 6.7

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: - CVE-2024-28219: Fixed buffer overflow in _imagingcms.c (bsc#1222262)

    first Apr 12, 2024
  • Medium max 4.8

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u432 (icedtea-3.33.0): - CVE-2024-21208: Enhance HTTP client (bsc#1231702). - CVE-2024-21210: Improve handling of vectorization (bsc#1231711). - CVE-2024-21217: Improve deser…

    first Nov 13, 2024
  • Medium max 6.8

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2023-1544: out-of-bounds read in VMWare's paravirtual RDMA device operations can be exploited through a malicious guest driver to crash the QEMU process on the host (bsc#1209554). -…

    first Jan 6, 2026
  • Medium max 4.7

    Security update for redis

    This update for redis fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804)

    first Jul 1, 2025
  • Medium max 6.5

    Security update for tomcat

    This update for tomcat fixes the following issues: Security issues fixed: - CVE-2018-1305: Fixed late application of security constraints that can lead to resource exposure for unauthorised users (bsc#1082481). - CVE-2018-1304: Fixed incorrect handling of emp…

    first Mar 26, 2018
  • Medium max 6.2

    prometheus-postgres_exporter-0.10.1-2.1 on GA media

    These are all security issues fixed in the prometheus-postgres_exporter-0.10.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.7

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…

    first Jul 14, 2022
  • Medium max 5.3

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…

    first Feb 25, 2021
  • Medium max 4.0

    Security update for libsolv, libzypp, zypper

    This update for libsolv, libzypp, zypper fixes the following issues: Security issue fixed: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763). Bug fixes - Fixed removing orphaned packages dropped by to-be-installed products (bsc#…

    first Feb 27, 2020
  • Medium max 6.0

    onefetch-2.22.0-1.1 on GA media

    These are all security issues fixed in the onefetch-2.22.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 20, 2024
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11034: Fixed a heap-buffer overflow in php_ifd_get32si() (bsc#1132838). - CVE-2019-11035: Fixed a heap-buffer overflow in exif_iif_add_value() (bsc#1132837). - CVE-2019-11036: …

    first May 28, 2019
  • Medium max 4.8

    java-21-openj9-21.0.6.0-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 9, 2025
  • Medium max 5.4

    phpMyAdmin-5.2.1-2.1 on GA media

    These are all security issues fixed in the phpMyAdmin-5.2.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for xen

    This update for xen fixes the following issues: XEN was updated to the Xen 4.9.3 bug fix only release (bsc#1027519) - CVE-2018-17963: qemu_deliver_packet_iov accepted packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or po…

    first Oct 26, 2018
  • Medium max 6.1

    caddy-2.5.1-2.1 on GA media

    These are all security issues fixed in the caddy-2.5.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922). Bug fixes: - The default /etc/ssl/openssl3.cnf file will includ…

    first Dec 2, 2023
  • Medium max 4.0

    Security update for yast2-rmt

    This update for yast2-rmt to 1.2.2 fixes the following issues: Security issue fixed: - CVE-2018-20105: Pass SSL password to Cheetah CLI interface securely (bsc#1119835) Non-security issues fixed: - Launch as root from gnome-shell menu (bsc#1123562) - Remove b…

    first Mar 18, 2019
  • Medium max 4.1

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2025-0495: buildx: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239765) Other fixes: - Update …

    first Apr 17, 2025
  • Medium max 5.5

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2023-52722: Do not allow eexec seeds other than the Type 1 standard while using SAFER mode (bsc#1223852).

    first May 9, 2024
  • Medium max 6.4

    rollup-3.29.5-1.1 on GA media

    These are all security issues fixed in the rollup-3.29.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2025
  • Medium max 4.4

    chkstat-1599_20220912-1.1 on GA media

    These are all security issues fixed in the chkstat-1599_20220912-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024