Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 6.5

    Recommended update for pdsh, slurm_22_05

    This update for pdsh, slurm_22_05 fixes the following issues: Slurm was updated to 22.05.5 - Fixes a number of moderate severity issues, noteable are: * Load hash plugin at slurmstepd launch time to prevent issues loading the plugin at step completion if the …

    first Dec 7, 2022
  • Medium max 4.3

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 115.0.5790.102: * stability fix Chromium 115.0.5790.98: * Security: The Storage, Service Worker, and Communication APIs are now partitioned in third-party contexts to prevent certain types of side-…

    first Jul 26, 2023
  • Medium max 5.5

    libwireshark18-4.4.0-2.1 on GA media

    These are all security issues fixed in the libwireshark18-4.4.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2024
  • Medium max 6.5

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2023-51385: Fixed a command injection via user name or host name metacharacters (bsc#1218215). - Remember the state of sshd service during update / removal, to allow cut-over to a different openssh pac…

    first Feb 23, 2024
  • Medium max 5.3

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_115 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-2588: Fixed use-after-free in cls_route …

    first Nov 18, 2022
  • Medium max 6.5

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denia…

    first Oct 5, 2023
  • Medium max 5.5

    Security update for rear23a

    This update for rear23a fixes the following issues: - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUB_RESCUE=Y. (bsc#1218728)

    first Jan 18, 2024
  • Medium max 5.4

    Security update for ceph

    This update for ceph fixes the following issues: - CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag (bsc#1171921).

    first Jun 25, 2020
  • Medium max 5.9

    libgit2-1_1-1.1.1-1.2 on GA media

    These are all security issues fixed in the libgit2-1_1-1.1.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.8

    Security update for python-aiohttp

    This update for python-aiohttp fixes the following issues: - CVE-2024-42367: Fixed path traversal outside the root directory when requests involve compressed files as symbolic links (bsc#1229226)

    first Sep 3, 2024
  • Medium max 6.1

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382) - New Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:--…

    first May 24, 2023
  • Medium max 4.3

    Security update for gnome-settings-daemon

    This update for gnome-settings-daemon fixes the following issues: - CVE-2024-38394: Fixed mismatches in interpreting USB authorization policy (bsc#1226423).

    first Jun 22, 2024
  • Medium max 6.1

    Security update for python3

    This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security …

    first Nov 9, 2019
  • Medium max 5.6

    Security update for the Linux Azure Kernel

    The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in create_qp_common, mlx5_ib_create_qp_resp was never initialized, resulting in a…

    first Aug 6, 2019
  • Medium max 6.1
    openSUSE-SU-2021:0974-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…

    first Jul 6, 2021
  • Medium max 6.1

    switchboard-plug-bluetooth-8.0.1-1.1 on GA media

    These are all security issues fixed in the switchboard-plug-bluetooth-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 12, 2024
  • Medium max 6.3

    Security update for python39

    This update for python39 fixes the following issue: - Update to 3.9.21

    first Jan 9, 2025
  • Medium max 5.3

    Security update for salt

    This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache director…

    first Sep 28, 2023
  • Medium max 5.5

    Security update for kvm

    This update for kvm fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the li…

    first Sep 4, 2018
  • Medium max 5.9

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491). - Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673). - Fixed a test failure in apache_ssl in fips mode (…

    first Dec 12, 2020
  • Medium max 5.9

    Security update for postgresql17

    This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…

    first May 29, 2025
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_cre…

    first Aug 6, 2019
  • Medium max 5.2

    libICE-devel-1.0.10-1.8 on GA media

    These are all security issues fixed in the libICE-devel-1.0.10-1.8 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    python310-Django-4.2.6-1.1 on GA media

    These are all security issues fixed in the python310-Django-4.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982). - CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).

    first Feb 15, 2023
  • Medium max 6.2

    frr-8.4-11.1 on GA media

    These are all security issues fixed in the frr-8.4-11.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for Mesa

    This update for Mesa fixes the following issues: - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041). - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040). - CVE-2023-45922: Fixed …

    first Oct 4, 2024
  • Medium max 6.2

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38470: Ensure each label is at least one byte long (bsc#1215947). - CVE-2023-38473: Fixed a reachable assertion when parsing a host name (bsc#1216419).

    first Nov 21, 2023
  • Medium max 6.1

    Security update for libexif

    This update for libexif fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_sav…

    first Jun 4, 2020
  • Medium max 6.4

    Security update for python-python-socketio

    This update for python-python-socketio fixes the following issues: - CVE-2025-61765: fixed by using json, rather than pickle for serialization (bsc#1251193)

    first Oct 24, 2025
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-28834: Fixed side-channel in the deterministic ECDSA (bsc#1221746) - CVE-2024-28835: Fixed denial of service during certificate chain verification (bsc#1221747) Other fixes: - jitterentropy: Releas…

    first Jun 3, 2024
  • Medium max 5.9

    Security update for qatengine, qatlib

    This update for qatengine, qatlib fixes the following issues: Note that the 1.6.1 release included in 1.7.0 fixes the following vulnerabilities: * CVE-2024-28885: Fixed observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.…

    first Nov 11, 2025
  • Medium max 5.7

    kernel-firmware-platform-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-platform-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.3

    libruby3_1-3_1-3.1.4-1.1 on GA media

    These are all security issues fixed in the libruby3_1-3_1-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    java-13-openjdk-13.0.13.0-1.1 on GA media

    These are all security issues fixed in the java-13-openjdk-13.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for spark

    This update for spark fixes the following security issue: - CVE-2018-9159: Fix a security problem in the serving of static files. (bsc#1087837)

    first Sep 11, 2018
  • Medium max 4.4

    go1.24-1.24.1-1.1 on GA media

    These are all security issues fixed in the go1.24-1.24.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 6, 2025
  • Medium max 4.8

    cargo1.62-1.62.1-3.1 on GA media

    These are all security issues fixed in the cargo1.62-1.62.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 3.6.10: - CVE-2022-3725: OPUS dissector crash (bsc#1204822). - Multiple dissector infinite loops (bsc#1206189). - Kafka dissector memory exhaustion (bsc#1206190).

    first Dec 13, 2022
  • Medium max 5.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE…

    first Nov 2, 2023