Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,771 results · Clear filters · Feed

  • Medium max 6.5
    SUSE-SU-2019:0236-1 1 CVE

    Security update for the Linux Kernel (Live Patch 0 for SLE 15)

    This update for the Linux Kernel 4.12.14-23 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make b…

    first Feb 5, 2019
  • Medium max 5.6
    SUSE-SU-2018:2332-1 13 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read…

    first Aug 15, 2018
  • Medium max 6.4
    openSUSE-SU-2020:1282-1 1 CVE

    Security update for grub2

    This update for grub2 fixes the following issue: - CVE-2020-15705: Fail kernel validation without shim protocol (bsc#1174421). - Add fibre channel device's ofpath support to grub-ofpathname and search hint to speed up root device discovery (bsc#1172745). This…

    first Aug 29, 2020
  • Medium max 5.5
    SUSE-SU-2023:3090-1 2 CVEs

    Security update for guava

    This update for guava fixes the following issues: Upgrade to guava 32.0.1: - CVE-2020-8908: Fixed predictable temporary files and directories used in FileBackedOutputStream (bsc#1179926). - CVE-2023-2976: Fixed a temp directory creation vulnerability (bsc#121…

    first Aug 1, 2023
  • Medium max 6.2
    SUSE-SU-2017:1337-1 1 CVE

    Security update for bash

    This update for bash fixed several issues This security issue was fixed: - CVE-2016-9401: popd in bash might allowed local users to bypass the restricted shell and cause a use-after-free via a crafted address (bsc#1010845). This non-security issue was fixed: …

    first May 18, 2017
  • Medium max 6.1
    openSUSE-SU-2024:14074-1 4 CVEs

    ruby3.3-rubygem-rails-7.0-7.0.8.4-1.1 on GA media

    These are all security issues fixed in the ruby3.3-rubygem-rails-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 24, 2024
  • Medium max 5.6
    SUSE-SU-2016:1343-1 1 CVE

    Security update for salt

    salt was updated to fix one security issue. This security issue was fixed: - CVE-2016-3176: Insecure configuration of PAM external authentication service. Authenticating were able to specify the PAM service (bsc#972436).

    first May 18, 2016
  • Medium max 4.8
    SUSE-SU-2023:4458-1 1 CVE

    Security update for gcc13

    This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers…

    first Nov 16, 2023
  • Medium max 5.3
    openSUSE-SU-2020:0510-1 1 CVE

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Apr 12, 2020
  • Medium max 4.3
    SUSE-SU-2018:3935-1 1 CVE

    Security update for tomcat6

    This update for tomcat6 fixes the following issue: Security issue fixed: - CVE-2018-11784: Fixed problem with specially crafted URLs that could be used to cause a redirect to any URI of an attackers choise (bsc#1110850).

    first Nov 28, 2018
  • Medium max 6.1
    SUSE-SU-2025:3900-1 2 CVEs

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-43718: Fixed uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service (bsc#1250908). - CVE-2025-52885…

    first Oct 31, 2025
  • Medium max 6.0
    SUSE-SU-2024:2273-1 1 CVE

    Security update for podman

    This update for podman fixes the following issues: - CVE-2024-6104: Fixed a potential leak of sensitive information on HTTP log file (bsc#1227052).

    first Aug 6, 2024
  • Medium max 6.5
    SUSE-SU-2022:3553-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

    first Oct 10, 2022
  • Medium max 5.3
    openSUSE-SU-2024:12065-1 1 CVE

    go1.17-1.17.10-1.1 on GA media

    These are all security issues fixed in the go1.17-1.17.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9
    SUSE-SU-2025:01883-1 1 CVE

    Security update for libjxl

    This update for libjxl fixes the following issues: - CVE-2024-11403: Fix out of bounds memory read/write in libjxl (bsc#1233768).

    first Jun 11, 2025
  • Medium max 5.6
    SUSE-SU-2018:2409-1 1 CVE

    Security update for xen

    This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacke…

    first Aug 17, 2018
  • Medium max 6.5
    SUSE-SU-2022:3390-1 2 CVEs

    Security update for dpdk

    This update for dpdk fixes the following issues: - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs (bsc#1202903). - CVE-2022-28199: Fixed buffer overflow in the vhost code (bsc#1202956).

    first Sep 26, 2022
  • Medium max 5.5
    openSUSE-SU-2024:12957-1 1 CVE

    python310-sqlparse-0.4.4-1.1 on GA media

    These are all security issues fixed in the python310-sqlparse-0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2023:3535-1 6 CVEs

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2021-28153: Fixed an issue where symlink targets would be incorrectly created as empty files. (bsc#1183533) - CVE-2023-32665: Fixed GVariant deserialisation which does not match spec for non-normal data.…

    first Sep 5, 2023
  • Medium max 5.6
    SUSE-SU-2018:2483-1 1 CVE

    Security update for xen

    This update for xen fixes the following issues: This security issue was fixed: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 da…

    first Aug 23, 2018
  • Medium max 6.1
    openSUSE-SU-2025:15797-1 1 CVE

    libpng12-0-1.2.59-4.1 on GA media

    These are all security issues fixed in the libpng12-0-1.2.59-4.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 4, 2025
  • Medium max 5.4
    openSUSE-SU-2023:0058-1 1 CVE

    Security update for phpMyAdmin

    This update for phpMyAdmin fixes the following issues: Update to 4.9.11: * Fix an XSS attack through the drag-and-drop upload feature (PMASA-2023-01, CWE-661, boo#1208186, CVE-2023-25727) * Fix broken pagination links in the navigation sidebar * Fix syntax er…

    first Feb 22, 2023
  • Medium max 5.9
    openSUSE-SU-2024:0111-1 1 CVE

    Security update for putty

    This update for putty fixes the following issues: Update to release 0.81 * Fix CVE-2024-31497: NIST P521 / ecdsa-sha2-nistp521 signatures are no longer generated with biased values of k. The previous bias compromises private keys.

    first Apr 19, 2024
  • Medium max 4.3
    SUSE-SU-2024:2380-1 1 CVE

    Security update for ppp

    This update for ppp fixes the following issues: - CVE-2022-4603: Fixed improper validation of array index of the component pppdump (bsc#1218251).

    first Jul 9, 2024
  • Medium max 6.5
    openSUSE-SU-2020:2333-1 8 CVEs

    Security update for python3

    This update for python3 fixes the following issues: - Fixed CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support calls eval() on content retrieved via HTTP. - Change setuptools and pip version numbers according to new wheels - Handful of change…

    first Dec 29, 2020
  • Medium max 5.3
    SUSE-SU-2021:0125-1 1 CVE

    Security update for php72

    This update for php72 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706).

    first Jan 14, 2021
  • Medium max 6.3
    SUSE-SU-2026:0077-1 1 CVE

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).

    first Jan 8, 2026
  • Medium max 5.3
    SUSE-SU-2025:03331-1 1 CVE

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2024-52615: wide-area DNS uses constant source port for queries and can expose the Avahi-daemon to DNS spoofing attacks (bsc#1233421).

    first Sep 24, 2025
  • Medium max 6.5
    SUSE-SU-2021:2817-1 1 CVE

    Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

    This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream releas…

    first Aug 23, 2021
  • Medium max 6.5
    SUSE-SU-2020:0854-1 3 CVEs

    Security update for python3

    This update for python3 fixes the following issue: - CVE-2019-18348: Fixed a CRLF injection via the host part of the url passed to urlopen(). Now an InvalidURL exception is raised (bsc#1155094). - CVE-2019-9674: Improved the documentation to reflect the dange…

    first Apr 2, 2020
  • Medium max 6.5
    SUSE-SU-2020:1587-1 24 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read val…

    first Jun 9, 2020
  • Medium max 5.3
    SUSE-SU-2023:3011-1 2 CVEs

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2023-2975: Fixed AES-SIV implementation ignores empty associated data entries (bsc#1213383). - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

    first Jul 28, 2023
  • Medium max 6.7
    openSUSE-SU-2019:2596-1 1 CVE

    Security update for cpio

    This update for cpio fixes the following issues: - CVE-2019-14866: Fixed an improper validation of the values written in the header of a TAR file through the to_oct() function which could have led to unexpected TAR generation (bsc#1155199). This update was im…

    first Nov 30, 2019
  • Medium max 5.6
    SUSE-SU-2018:2335-1 3 CVEs

    Security update to ucode-intel

    ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a), and is part of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal Fault). (bsc#1104134 bsc#1087082 bsc#1087083 bsc#…

    first Aug 15, 2018
  • Medium max 4.8
    SUSE-SU-2025:01880-1 1 CVE

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2025-4373: integer overflow in the `g_string_insert_unichar()` function can lead to buffer underwrite and memory corruption (bsc#1242844).

    first Jun 11, 2025
  • Medium max 5.5
    SUSE-SU-2023:1756-1 1 CVE

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)

    first Apr 4, 2023
  • Medium max 6.4
    SUSE-SU-2024:1587-1 2 CVEs

    Security update for go1.22

    This update for go1.22 fixes the following issues: Update to go1.22.3: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin (bsc#1224017) - CVE-2024-24788: net: high cpu usage in extractExtendedRCode (bsc#1224018) - cmd/compile: Go 1.22.x…

    first May 10, 2024
  • Medium max 6.3
    openSUSE-SU-2025:14751-1 1 CVE

    python39-3.9.21-2.1 on GA media

    These are all security issues fixed in the python39-3.9.21-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 8, 2025
  • Medium max 5.9
    openSUSE-SU-2023:0310-1 1 CVE

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2023-43665: Denial-of-service in django.utils.text.Truncator (boo#1215978).

    first Oct 20, 2023
  • Medium max 6.3
    openSUSE-SU-2024:14535-1 1 CVE

    python-2.7.18-51.1 on GA media

    These are all security issues fixed in the python-2.7.18-51.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 30, 2024