Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.5

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to 10.2.41: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).

    first Dec 30, 2021
  • Medium max 4.2

    Security update for slurm

    This update for slurm fixes the following issues: Update to version 24.11.5. Security issues fixed: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#…

    first May 29, 2025
  • Medium max 6.1

    Security update for rubygem-activesupport-5_1

    This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2022-27777: Fixed cross-site scripting vulnerability in Action View tag helper (bsc#1199060).

    first Oct 18, 2022
  • Medium max 5.5

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2024-6923: email header injection due to unquoted newlines. (bsc#1228780)

    first Sep 18, 2024
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-8834: KVM on Power8 processors had a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plu…

    first Apr 23, 2020
  • Medium max 4.7

    Security update for pam

    This update for pam fixes the following issues: - CVE-2024-10041: sensitive data exposure while performing authentications. (bsc#1232234)

    first Apr 17, 2025
  • Medium max 5.3

    Security update for podman

    This update for podman fixes the following issues: Security issue fixed: - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API (bsc#1176804). Non-security issues fixed: - add de…

    first Nov 26, 2020
  • Medium max 5.4

    Recommended update for rubygem-yajl-ruby

    This update for rubygem-yajl-ruby provides the following fixes: - Update to version 1.3.1 - Fix crafted JSON file allows to crash ruby process with a SIGABRT (bsc#1066565, CVE-2017-1651)

    first Dec 21, 2017
  • Medium max 5.3

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

    first Aug 7, 2025
  • Medium max 6.2

    Security update for python-idna

    This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed potential DoS via resource consumption via specially crafted inputs to idna.encode() (bsc#1222842).

    first Apr 24, 2024
  • Medium max 5.8

    Security update for qemu

    This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. (CVE-2017-5715 bsc#1068032) The January 2018 release of qemu initially addressed the Spec…

    first Mar 21, 2018
  • Medium max 4.3

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582)

    first Oct 28, 2020
  • Medium max 6.5

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).

    first Oct 6, 2022
  • Medium max 6.2

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171). - CVE-2022…

    first Jan 25, 2023
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-28746: Register File Data Sampling (bsc#1221332) - CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334) - CVE-2023-46841: Hhadow stack vs exceptions from emulation stubs (bsc#1…

    first Apr 3, 2024
  • Medium max 5.9

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Dec 13, 2020
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2023-23916: Fixed HTTP multi-header compression denial of service (bsc#1207992).

    first Feb 15, 2023
  • Medium max 6.2

    Security update for Mesa

    This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId() (bsc#1222040) - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString() (bsc#1222041) - CVE-2023-45922: Fixed se…

    first Oct 8, 2024
  • Medium max 6.1

    Security update for clamav

    This update for clamav fixes the following issues: - Update to version 0.103.12 - CVE-2024-20506: Disable symlinks following to prevent an attacker to corrupt system files. (bsc#1230162) - CVE-2024-20505: Fixed possible out-of-bounds read bug in the PDF file …

    first Sep 18, 2024
  • Medium max 6.5

    apache-commons-io-2.11.0-2.1 on GA media

    These are all security issues fixed in the apache-commons-io-2.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for docker

    This update for docker fixes the following issues: Update to Docker 27.5.1-ce (bsc#1237335): - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration (bsc#1234089).

    first Mar 4, 2025
  • Medium max 4.4

    libpcap-devel-1.10.5-1.1 on GA media

    These are all security issues fixed in the libpcap-devel-1.10.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 4, 2024
  • Medium max 5.0

    Security update for dracut

    This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets sto…

    first Apr 6, 2017
  • Medium max 6.0

    cargo-audit-0.20.0~git66.972ac93-3.1 on GA media

    These are all security issues fixed in the cargo-audit-0.20.0~git66.972ac93-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2024
  • Medium max 5.3

    perl-Module-ScanDeps-1.370.0-1.1 on GA media

    These are all security issues fixed in the perl-Module-ScanDeps-1.370.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 12, 2025
  • Medium max 6.7

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

    first Aug 4, 2020
  • Medium max 5.7

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).

    first Mar 24, 2022
  • Medium max 4.4

    Security update for permissions

    This update for permissions fixes the following issues: Update to version 20200127: * chkstat: also consider group controlled paths (boo#1203018, CVE-2022-31252)

    first Sep 19, 2022
  • Medium max 6.0

    Security update for gh

    This update for gh fixes the following issues: Update to version 2.53.0: * CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file (boo#1227035) * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test due to…

    first Jul 27, 2024
  • Medium max 6.4

    Security update for go1.21

    This update for go1.21 fixes the following issues: Update to go1.21.10: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017) - net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/net@v0.23.0

    first May 9, 2024
  • Medium max 6.2

    tar-1.35-2.1 on GA media

    These are all security issues fixed in the tar-1.35-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1

    libiniparser-devel-4.2.6-1.1 on GA media

    These are all security issues fixed in the libiniparser-devel-4.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2025
  • Medium max 5.1

    Security update for the Linux Kernel

    The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25704: Fixed a memory leak in perf_event_parse_addr_filter() (bsc#1178393). - CVE-2020-25668: Make FONTX ioctl use the tty p…

    first Nov 14, 2020
  • Medium max 6.2

    python2-pip-20.0.2-2.6 on GA media

    These are all security issues fixed in the python2-pip-20.0.2-2.6 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.4

    grafana-8.5.15-2.1 on GA media

    These are all security issues fixed in the grafana-8.5.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for umoci

    This update for umoci fixes the following issues: Update to v0.4.7 (bsc#1184147). - CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).

    first Jul 27, 2021
  • Medium max 5.4

    rclone-1.68.2-2.1 on GA media

    These are all security issues fixed in the rclone-1.68.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 25, 2024
  • Medium max 6.8

    nodejs-electron-28.2.7-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-28.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative g_new0 length can lead to unbounded memory allocation (bsc#1221815).

    first Apr 1, 2024
  • Medium max 5.5

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: - CVE-2025-59419: fixed SMTP command injection vulnerability that allowed email forgery (bsc#1252097)

    first Nov 12, 2025