Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 6.4

    Security update for grub2

    This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Fix …

    first Jul 29, 2020
  • Medium max 6.3

    apache2-mod_uwsgi-2.0.28-1.1 on GA media

    These are all security issues fixed in the apache2-mod_uwsgi-2.0.28-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2024
  • Medium max 4.9

    qemu-8.2.1-1.1 on GA media

    These are all security issues fixed in the qemu-8.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.0

    Security update for ovmf

    This update for ovmf fixes the following issues: - CVE-2024-1298: MdeModulePkg: Potential UINT32 overflow in S3 ResumeCount (bsc#1225889)

    first Dec 17, 2024
  • Medium max 6.7

    amanda-3.5.3-1.1 on GA media

    These are all security issues fixed in the amanda-3.5.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for glibc

    This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931) Also a regression from a previous update was fixed: - elf: Align argument of __munmap to page siz…

    first Oct 18, 2023
  • Medium max 6.5

    libwireshark16-4.0.6-1.1 on GA media

    These are all security issues fixed in the libwireshark16-4.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u282 (icedtea 3.18.0) * January 2021 CPU (bsc#1181239) * Security fixes + JDK-8247619: Improve Direct Buffering of Characters (CVE-2020-14803) * Import of OpenJDK 8 u282 bu…

    first Feb 19, 2021
  • Medium max 6.0

    Security update for gh

    This update for gh fixes the following issues: Update to version 2.53.0: * CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file (boo#1227035) * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test due to…

    first Jul 27, 2024
  • Medium max 5.5

    Security update for samba

    This update for samba fixes the following issues: - Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (b…

    first Jan 21, 2021
  • Medium max 6.3

    ffmpeg-5-5.1.4-11.1 on GA media

    These are all security issues fixed in the ffmpeg-5-5.1.4-11.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2024
  • Medium max 6.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: Security issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939) - CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attacker…

    first Dec 1, 2023
  • Medium max 4.6

    Security update for exim

    This update for exim fixes the following issues: - CVE-2022-3559: Fixed use after free in processing of the component Regex Handler (boo#1204427, Bug 2915)

    first Nov 8, 2022
  • Medium max 6.1

    Security update for python3-lxml

    This update for python3-lxml fixes the following issues: - CVE-2020-27783: Fixed XSS due to the use of improper parser (bsc#1179534).

    first Sep 29, 2022
  • Medium max 5.3

    Security update for go1.21-openssl

    This update for go1.21-openssl fixes the following issues: Update to version 1.21.5.1: - CVE-2023-45285: cmd/go: git VCS qualifier in module path uses git:// scheme (bsc#1217834). - CVE-2023-45284: path/filepath: Clean removes ending slash for volume on Windo…

    first Dec 20, 2023
  • Medium max 5.5

    Security update for cni, cni-plugins, conmon, fuse-overlayfs, podman

    This update for cni, cni-plugins, conmon, fuse-overlayfs, podman fixes the following issues: podman was updated to 1.8.0: - CVE-2019-18466: Fixed a bug where podman cp would improperly copy files on the host when copying a symlink in the container that includ…

    first Mar 16, 2020
  • Medium max 5.5

    Security update for libQtWebKit4

    This update for libQtWebKit4 fixes the following issues: - CVE-2024-40779: Fixed heap buffer overflow in computeSampleUsingLinearInterpolation (bsc#1228693)

    first Jan 16, 2025
  • Medium max 5.9

    Security update for bind

    This update for bind fixes the following issues: Security issue fixed: - CVE-2019-6471: Fixed a reachable assert in dispatch.c. (bsc#1138687) Non-security issue fixed: - bind will no longer rely on /etc/insserv.conf (bsc#1118367, bsc#1118368) This update was …

    first Oct 6, 2019
  • Medium max 5.5

    Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_101 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics …

    first Feb 24, 2023
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: Security issues fixed: - CVE-2021-33910: Fixed a denial of service (stack exhaustion) in systemd (PID 1) (bsc#1188063) Other fixes: - mount-util: shorten the loop a bit (#7545) - mount-util: do not use the o…

    first Jul 21, 2021
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, th…

    first Jul 18, 2022
  • Medium max 5.3

    Security update for ffmpeg

    This update for ffmpeg fixes the following issues: - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778). - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754).

    first Jan 30, 2023
  • Medium max 5.3

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2024-28182: Fixed denial of service via http/2 continuation frames (bsc#1221399)

    first Apr 8, 2024
  • Medium max 6.5

    libsnmp40-32bit-5.9.3-4.1 on GA media

    These are all security issues fixed in the libsnmp40-32bit-5.9.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for php72

    This update for php72 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure c…

    first Nov 11, 2022
  • Medium max 4.3

    Security update for samba

    Samba was updated to 4.6.15, bringing bug and security fixes. (bsc#1110943) Following security issues were fixed: - CVE-2018-10919: Fix unauthorized attribute access via searches. (bsc#1095057); Non-security bugs fixed: - Fix ctdb_mutex_ceph_rados_helper dead…

    first Oct 16, 2018
  • Medium max 6.6
    SUSE-SU-2022:0660-1 3 CVEs 2 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_10 fixes several issues. The following security issues were fixed: - CVE-2022-0516: Fixed KVM s390 return error on SIDA memop on normal guest (bsc#1195947). - CVE-2021-0920: Fixed a local privilege escalation due to …

    first Mar 2, 2022
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to…

    first Aug 16, 2018
  • Medium max 5.3

    libopenssl-1_1-devel-1.1.1u-5.1 on GA media

    These are all security issues fixed in the libopenssl-1_1-devel-1.1.1u-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed

    This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Security issue fixed: - CVE-2023-31022: Fixed NULL ptr deref in kernel module layer Changes in kernel-firmware-nvidia-gspx-G06: - update firmware to ver…

    first Nov 13, 2023
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u292 (icedtea 3.19.0). - CVE-2021-2161: Fixed incomplete enforcement of JAR signing disabled algorithms (bsc#1185055).

    first Jun 15, 2021
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode on…

    first Nov 18, 2019
  • Medium max 6.4

    Security update for skopeo

    This update for skopeo fixes the following issues: Security issues fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections (bsc#1144065). This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 15, 2019
  • Medium max 6.5

    Security update for wget

    This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL (bsc#1233773)

    first Dec 2, 2024
  • Medium max 6.2

    Security update for python-Jinja2

    The python-Jinja2 package was updated to version 2.7.3 to fix a security issues and some build problems. The following vulnerabilities were fixed: - Update to 2.7.3 (bnc#858239, CVE-2014-0012) - Security issue: Corrected the security fix for the cache folder.…

    first May 11, 2015
  • Medium max 6.5

    Security update for dbus-1

    This update for dbus-1 fixes the following issues: - CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).

    first Jul 19, 2023
  • Medium max 4.0

    Security update for libzypp, zypper

    This update for libzypp, zypper fixes the following issues: libzypp fixes the following security issue: - CVE-2019-18900: Fixed assert cookie file that was world readable (bsc#1158763). zypper was updated to fix the following issues: - Fixed an issue, where z…

    first Nov 18, 2020
  • Medium max 6.5

    Security update for python-Pillow

    This update for python-Pillow fixes the following security issues: * CVE-2016-0775: Fixed a buffer overflow in FliDecode.c causing a segfault when opening FLI files. (bsc#965582) * CVE-2016-0740: Fixed a buffer overflow in TiffDecode.c causing an arbitrary am…

    first Jun 14, 2016
  • Medium max 5.9

    Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, java-1_8_0-openjdk

    Mozilla Firefox was updated to the Firefox ESR release 45.9. Mozilla NSS was updated to support TLS 1.3 (close to release draft) and various new ciphers, PRFs, Diffie Hellman key agreement and support for more hashes. Security issues fixed in Firefox (bsc#103…

    first May 11, 2017
  • Medium max 6.3

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488). - CVE-2019…

    first Sep 22, 2021