Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,771 results · Clear filters · Feed

  • Medium max 6.5
    openSUSE-SU-2024:10911-1 6 CVEs

    ldb-tools-2.3.0-1.3 on GA media

    These are all security issues fixed in the ldb-tools-2.3.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3
    openSUSE-SU-2023:0041-1 2 CVEs

    Security update for EternalTerminal

    This update for EternalTerminal fixes the following issues: EternalTerminal was updated to 6.2.4: * CVE-2022-48257, CVE-2022-48258 remedied * fix readme regarding port forwarding #522 * Fix test failures that started appearing in CI #526 * Add documentation f…

    first Feb 8, 2023
  • Medium max 5.6
    SUSE-SU-2018:2410-2 1 CVE

    Security update for xen

    This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacke…

    first Oct 18, 2018
  • Medium max 4.3
    openSUSE-SU-2019:1989-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853). This update was imported from the SUSE:SLE-15:Update update pr…

    first Aug 23, 2019
  • Medium max 5.5
    openSUSE-SU-2024:14277-1 1 CVE

    osc-1.9.0-1.1 on GA media

    These are all security issues fixed in the osc-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 20, 2024
  • Medium max 6.5
    SUSE-SU-2022:23018-1 7 CVEs

    Security update for conmon, libcontainers-common, libseccomp, podman

    This update for conmon, libcontainers-common, libseccomp, podman fixes the following issues: podman was updated to 3.4.4. Security issues fixed: - fix CVE-2021-41190 [bsc#1193273], opencontainers: OCI manifest and index parsing confusion - fix CVE-2021-4024 […

    first Feb 25, 2022
  • Medium max 5.9
    SUSE-SU-2022:3162-1 1 CVE

    Security update for libyajl

    This update for libyajl fixes the following issues: - CVE-2022-24795: Fixed heap-based buffer overflow when handling large inputs (bsc#1198405).

    first Sep 7, 2022
  • Medium max 6.5
    openSUSE-SU-2024:14333-1 1 CVE

    curl-8.10.0-1.1 on GA media

    These are all security issues fixed in the curl-8.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 12, 2024
  • Medium max 6.3
    openSUSE-SU-2025:14760-1 1 CVE

    python313-3.13.2-1.1 on GA media

    These are all security issues fixed in the python313-3.13.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 9, 2025
  • Medium max 6.8
    openSUSE-SU-2025:14704-1 10 CVEs

    govulncheck-vulndb-0.0.20250117T214834-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250117T214834-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 28, 2025
  • Medium max 5.5
    SUSE-SU-2022:1266-1 20 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount bug in llc_ui_bind and llc_ui_autobind which could allow an unprivileged user to execute a DoS. (bnc#1197391) - CVE-2022-1016: Fixe…

    first Apr 19, 2022
  • Medium max 4.8
    openSUSE-SU-2021:0012-1 1 CVE

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - jetty-minimal was upgraded to version 9.4.35.v20201120 - CVE-2020-27218: Fixed an issue where buffer not correctly recycled in Gzip Request inflation (bsc#1179727). This update was imported from the …

    first Jan 4, 2021
  • Medium max 6.3
    openSUSE-SU-2025:0058-1 3 CVEs

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 133.0.6943.53 (stable released 2024-02-04) (boo#1236806) * CVE-2025-0444: Use after free in Skia * CVE-2025-0445: Use after free in V8 * CVE-2025-0451: Inappropriate implementation in Extensions …

    first Feb 13, 2025
  • Medium max 4.4
    SUSE-SU-2022:3382-1 1 CVE

    Security update for permissions

    This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018). - Add capability for prometheus-blackbox_exporter (bsc#1191194). - Make btmp root:utmp (bsc#1050467).

    first Sep 26, 2022
  • Medium max 6.7
    openSUSE-SU-2020:1198-1 1 CVE

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 14, 2020
  • Medium max 5.6
    SUSE-SU-2018:0019-1 2 CVEs

    Security update for kvm

    This update for kvm fixes the following issues: Also a mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch predicti…

    first Jan 4, 2018
  • Medium max 5.9
    openSUSE-SU-2024:12731-1 2 CVEs

    dnsdist-1.8.0~rc1-1.1 on GA media

    These are all security issues fixed in the dnsdist-1.8.0~rc1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2019:1398-1 2 CVEs

    Security update for libpng16

    This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211). - CVE-2018-13785: Fixed a wrong calculation of …

    first May 31, 2019
  • Medium max 6.5
    SUSE-SU-2018:2696-1 2 CVEs

    Security update for python3

    This update for python3 provides the following fixes: These security issues were fixed: - CVE-2018-1061: Prevent catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could have used this flaw to cause denial of service (bsc#1088004). - CV…

    first Sep 12, 2018
  • Medium max 6.5
    SUSE-SU-2019:2906-1 2 CVEs

    Security update for ardana-ansible, ardana-horizon, ardana-keystone, ardana-manila, ardana-neutron, crowbar-core, crowbar-openstack, grafana, openstack-cinder, openstack-dashboard, openstack-horizon-plugin-manila-ui, openstack-keystone, openstack-manila, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, pdns, python-Django1, python-keystonemiddleware, python-octaviaclient, python-os-brick, python-oslo.cache, p

    This update for ardana-ansible, ardana-horizon, ardana-keystone, ardana-manila, ardana-neutron, crowbar-core, crowbar-openstack, grafana, openstack-cinder, openstack-dashboard, openstack-horizon-plugin-manila-ui, openstack-keystone, openstack-manila, openstac…

    first Nov 6, 2019
  • Medium max 5.3
    openSUSE-SU-2024:11203-1 1 CVE

    python36-Beaker-1.11.0-5.5 on GA media

    These are all security issues fixed in the python36-Beaker-1.11.0-5.5 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2022:4627-1 1 CVE

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Restrict cpu rule to x86_64, and also update the rule files to make use of the 'CO…

    first Dec 27, 2022
  • Medium max 4.0
    SUSE-SU-2025:4271-1 1 CVE

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)

    first Nov 27, 2025
  • Medium max 5.3
    openSUSE-SU-2024:13455-1 2 CVEs

    java-11-openj9-11.0.21.0-1.1 on GA media

    These are all security issues fixed in the java-11-openj9-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3
    openSUSE-SU-2024:14387-1 1 CVE

    apache-commons-io-2.17.0-2.1 on GA media

    These are all security issues fixed in the apache-commons-io-2.17.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2024
  • Medium max 5.5
    SUSE-SU-2021:2404-1 1 CVE

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063) - Skip udev rules if 'elevator=' is used (bsc#1184994)

    first Jul 20, 2021
  • Medium max 5.6
    SUSE-SU-2018:0011-1 17 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). - CVE-201…

    first Jan 4, 2018
  • Medium max 6.7
    openSUSE-SU-2024:0157-1 1 CVE

    Security update for nano

    This update for nano fixes the following issues: - CVE-2024-5742: Avoid privilege escalations via symlink attacks on emergency save file (boo#1226099)

    first Jun 11, 2024
  • Medium max 6.1
    SUSE-SU-2025:1555-1 3 CVEs

    Security update for go1.22-openssl

    This update for go1.22-openssl fixes the following issues: Update to version 1.22.12 (bsc#1218424): Security fixes: - CVE-2024-45336: net/http: sensitive headers incorrectly sent after cross-domain redirect (bsc#1236046) - CVE-2024-45341: crypto/x509: usage o…

    first May 15, 2025
  • Medium max 5.5
    SUSE-SU-2022:3840-1 2 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).

    first Nov 1, 2022
  • Medium max 5.9
    SUSE-SU-2019:1239-1 8 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 host information, which can be considered…

    first May 14, 2019
  • Medium max 5.3
    openSUSE-SU-2020:1994-1 8 CVEs

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage…

    first Nov 21, 2020
  • Medium max 6.5
    SUSE-SU-2022:3286-1 1 CVE

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2022-2850: Fixed an application crash when running a sync_repl client that could be triggered via a malformed cookie (bsc#1202470). Non-security fixes: - Update to version 2.0.16~git20.219f047ae: * Fix …

    first Sep 16, 2022
  • Medium max 5.6
    openSUSE-SU-2021:2861-1 1 CVE

    Security update for spectre-meltdown-checker

    This update for spectre-meltdown-checker fixes the following issues: spectre-meltdown-checker was updated to version 0.44 (bsc#1189477) - feat: add support for SRBDS related vulnerabilities - feat: add zstd kernel decompression (#370) - enh: arm: add experime…

    first Aug 27, 2021
  • Medium max 6.1
    SUSE-SU-2022:3836-1 2 CVEs

    Security update for python-lxml

    This update for python-lxml fixes the following issues: - CVE-2021-28957: Fixed XSS due to missing input sanitization for HTML5 attributes (bsc#1184177). - CVE-2020-27783: Fixed XSS due to the use of improper parser (bsc#1179534).

    first Nov 1, 2022
  • Medium max 5.5
    openSUSE-SU-2021:1863-1 1 CVE

    Security update for umoci

    This update for umoci fixes the following issues: Update to v0.4.7 (bsc#1184147). - CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147).

    first Jul 27, 2021
  • Medium max 6.5
    openSUSE-SU-2020:0274-1 2 CVEs

    Security update for python3

    This update for python3 fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation to reflect the dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service…

    first Mar 1, 2020
  • Medium max 6.2
    SUSE-SU-2024:1083-1 1 CVE

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2024-2494: Fixed negative g_new0 length leading to unbounded memory allocation (bsc#1221815).

    first Apr 2, 2024
  • Medium max 6.5
    SUSE-SU-2020:1714-1 3 CVEs

    Security update for php5

    This update for php5 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). - CVE…

    first Jun 23, 2020
  • Medium max 5.4
    openSUSE-SU-2020:1703-1 2 CVEs

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-en…

    first Oct 20, 2020