Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.9

    Security update for openssl

    This update for openssl fixes the following issues: - CVE-2022-4304: Fixed timing Oracle in RSA Decryption (bsc#1207534).

    first Mar 1, 2023
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-12084: prevent quadratic behavior in node ID cache clearing (bsc#1254997). - CVE-2025-13836: prevent reading an HTTP response from a server, if no read amount is specified, with using Content-Le…

    first Jan 26, 2026
  • Medium max 4.3

    ffmpeg-5-5.1.2-4.1 on GA media

    These are all security issues fixed in the ffmpeg-5-5.1.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in ext4 (bsc#1173798). - CVE-2020-14331: Fixed a missing check in sc…

    first Sep 3, 2020
  • Medium max 5.6

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386)

    first Apr 23, 2024
  • Medium max 5.3

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

    first Feb 21, 2024
  • Medium max 5.3

    Security update for lftp

    This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code det…

    first Mar 19, 2019
  • Medium max 6.5

    Security update for java-1_7_1-ibm

    java-1_7_1-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 (bsc#1116574): * Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API * Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-313…

    first Nov 27, 2018
  • Medium max 5.3

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

    first Aug 11, 2023
  • Medium max 5.3

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041).

    first Dec 6, 2021
  • Medium max 4.8

    Security update for gnome-shell

    This update for gnome-shell fixes the following issues: Security issue fixed: - CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493). Fixed bugs: - Remove sessionList of endSessionDialog for security reasons (jsc#SLE-6660).

    first May 31, 2019
  • Medium max 5.3

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: - CVE-2024-50336: Fixed insufficient MXC URI validation which could allow client-side path traversal (bsc#1234413) Other fixes: - Updated to Mozilla Thunderbird 128.5.2i (bsc#1234413): * fixed: La…

    first Dec 16, 2024
  • Medium max 5.3

    python-requests-2.11.1-1.1 on GA media

    These are all security issues fixed in the python-requests-2.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for Botan

    This update for Botan fixes the following issues: - Fixed CVE-2024-50382, CVE-2024-50383 - various compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan.

    first Oct 30, 2024
  • Medium max 5.5

    peazip-9.1.0-1.1 on GA media

    These are all security issues fixed in the peazip-9.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for python3

    This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball.

    first Aug 19, 2020
  • Medium max 6.1

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling (bsc#1243106) Other fixes: - Fixed GCC 15 compile time error (bsc#1241938) - Fixed building with containerd 1.7.25+ (bsc…

    first May 30, 2025
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10768: Fixed an issue with the prctl() function which could have allowed indirect branch speculation even after it…

    first Jun 23, 2020
  • Medium max 5.3

    Security update for ffmpeg-4

    This update for ffmpeg-4 fixes the following issues: - CVE-2025-7700: Fixed NULL Pointer Dereference in FFmpeg ALS Decoder (bsc#1246790).

    first Sep 11, 2025
  • Medium max 6.9

    forgejo-runner-3.5.1-1.1 on GA media

    These are all security issues fixed in the forgejo-runner-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2024
  • Medium max 5.9

    Security update for samba

    This update for samba fixes the following issues: - CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481). The following non-security bug was fixed: - Prevent use after free of messaging_ctdb_fde_ev st…

    first Mar 29, 2023
  • Medium max 5.5

    xen-4.16.1_02-3.1 on GA media

    These are all security issues fixed in the xen-4.16.1_02-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    java-1_8_0-openj9-1.8.0.392-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.392-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to version 10.2.40 (bsc#1189320): - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389 In additon the follwing was changed: - Increase NOFILE limit on service configurat…

    first Aug 25, 2021
  • Medium max 5.3

    python310-aiohttp-3.9.0-1.1 on GA media

    These are all security issues fixed in the python310-aiohttp-3.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    java-1_8_0-openjdk-1.8.0.362-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.362-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5848: In the function wmi_set_ie(), the length validation code did not handle unsigned integer overflow properly…

    first Oct 18, 2018
  • Medium max 6.5

    Security update for systemd-presets-common-SUSE

    This update for systemd-presets-common-SUSE fixes the following issues: - CVE-2022-1706: Fixed accessible configs from unprivileged containers in VMs running on VMware products (bsc#1199524). The following non-security bugs were fixed: - Modify branding-prese…

    first Aug 22, 2022
  • Medium max 6.3

    Security update for sddm

    This update for sddm fixes the following issue: - Fix X not having access control on startup (boo#1177201, CVE-2020-28049). This update was imported from the openSUSE:Leap:15.2:Update update project.

    first Nov 11, 2020
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of ren…

    first Jun 18, 2019
  • Medium max 4.4

    Security update for cifs-utils

    This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. (bsc#1183239) - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. (bsc#1174477) This upd…

    first Apr 30, 2021
  • Medium max 4.9

    Security update for mariadb

    This update for mariadb fixes the following issues: - CVE-2021-46669 (bsc#1199928) - CVE-2022-21427 (bsc#1199928) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27383 (bsc…

    first Jun 23, 2022
  • Medium max 6.1

    Security update for grafana, kafka, logstash and monasca-installer

    This update for grafana, kafka, logstash and monasca-installer fixes the following issues: The following security issues have been fixed: grafana: - CVE-2018-12099: Fix Cross-Site-Scripting (XSS) vulnerabilities in dashboard links. (bsc#1096985) kafka: - CVE-…

    first Aug 28, 2018
  • Medium max 5.7

    Security update for python39-pip

    This update for python39-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).

    first Jan 12, 2022
  • Medium max 5.3

    Security update for python39

    This update for python39 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).

    first Nov 7, 2024
  • Medium max 4.3

    Security update for trivy

    This update for trivy fixes the following issues: Update to version 0.37.3 (boo#1208091, CVE-2023-25165): * chore(helm): update Trivy from v0.36.1 to v0.37.2 (#3574) * ci: quote pros in c++ for semantic pr (#3605) * fix(image): check proxy settings from env f…

    first Mar 5, 2023
  • Medium max 5.9

    Security update for booth

    This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)

    first Jun 18, 2024
  • Medium max 4.4

    Security update for curl

    This update for curl fixes the following issues: - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes …

    first Nov 5, 2018
  • Medium max 6.2

    prometheus-blackbox_exporter-0.19.0-13.1 on GA media

    These are all security issues fixed in the prometheus-blackbox_exporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for python39

    This update for python39 fixes the following issues: Security issues fixed: - CVE-2024-6923: Fixed email header injection due to unquoted newlines (bsc#1228780) - CVE-2024-5642: Removed support for anything but OpenSSL 1.1.1 or newer (bsc#1227233) Non-securit…

    first Sep 2, 2024