Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …

    first Feb 25, 2022
  • Medium max 6.5

    Security update for python

    This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // BaseHTTPServer (bsc#1202624).

    first Nov 10, 2022
  • Medium max 6.5

    xerces-j2-2.12.2-1.1 on GA media

    These are all security issues fixed in the xerces-j2-2.12.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    docker-20.10.23_ce-2.1 on GA media

    These are all security issues fixed in the docker-20.10.23_ce-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for mutt

    This update for mutt fixes the following issues: - CVE-2023-4874: Fixed NULL pointer dereference when composing an email (bsc#1215189). - CVE-2023-4875: Fixed NULL pointer dereference when receiving an email (bsc#1215191).

    first Sep 20, 2023
  • Medium max 5.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to the jdk8u181 (icedtea 3.9.0) release fixes the following issues: These security issues were fixed: - CVE-2018-2938: Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple prot…

    first Oct 18, 2018
  • Medium max 6.5

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: - CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)

    first Feb 21, 2024
  • Medium max 5.9

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2021-24122: Fixed an information disclosure if resources are served from the NTFS file system (bsc#1180947). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Feb 22, 2021
  • Medium max 6.5

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2022-31628: Fixed an uncontrolled recursion in the phar uncompressor while decompressing 'quines' gzip files. (bsc#1203867) - CVE-2022-31629: Fixed a bug which could lead an attacker to set an insecure co…

    first Nov 1, 2022
  • Medium max 5.5

    Security update for chafa

    This update for chafa fixes the following issues: - CVE-2022-2301: Fix buffer over-read (boo#1201211)

    first Jul 8, 2022
  • Medium max 5.9

    Security update for xen

    This update for xen fixes the following issues: Security issues fixed: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fixed an issue in ls…

    first Oct 24, 2019
  • Medium max 6.3

    Security update for python

    This update for python fixes the following issues: - Reference to no longer used 'bracketed_host' variable in the fix for CVE-2025-0938 (bsc#1236705, bsc#1223694).

    first Mar 10, 2025
  • Medium max 4.9

    matrix-synapse-1.94.0-2.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.0

    go1.22-1.22.12-1.1 on GA media

    These are all security issues fixed in the go1.22-1.22.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 8, 2025
  • Medium max 6.5

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for…

    first May 4, 2023
  • Medium max 5.3

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * Class libraries:…

    first Jan 5, 2021
  • Medium max 5.3

    Security update for libtirpc

    This update for libtirpc fixes the following issues: Security issues fixed: - CVE-2018-14621: libtirpc: Infinite loop in EMFILE case in svc_vc.c (bsc#1106519) - CVE-2018-14622: libtirpc: Segmentation fault in makefd_xprt return value in svc_vc.c (bsc#1106517)

    first Oct 15, 2018
  • Medium max 4.8

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Updated to version 11.0.25+9 (October 2024 CPU): - CVE-2024-21208: Fixed partial DoS in component Networking (bsc#1231702) - CVE-2024-21210: Fixed unauthorized read/write access to data in component …

    first Nov 1, 2024
  • Medium max 5.3

    Security update for libwebp

    This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212).

    first Jun 13, 2023
  • Medium max 5.3

    Security update for libnbd

    This update for libnbd fixes the following issues: - Updated to version 1.18.1 - Updated to version 1.18.0: - CVE-2023-5215: Fixed an issue where an NBD server returning an unexpected block size might crash an application (bsc#1215799).

    first Oct 27, 2023
  • Medium max 6.1

    python310-XStatic-jquery-ui-1.13.0.1-1.15 on GA media

    These are all security issues fixed in the python310-XStatic-jquery-ui-1.13.0.1-1.15 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • Medium max 5.8

    Security update for rubygem-rack

    This update for rubygem-rack fixes the following issues: - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing (bsc#1220239). - CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing (bsc#12202…

    first Mar 5, 2024
  • Medium max 5.8

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2024-56374: Fixed lack of upper bound limit enforcement in strings when performing IPv6 validation that could lead to denial of service (bsc#1235856)

    first Jan 16, 2025
  • Medium max 6.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…

    first Mar 23, 2019
  • Medium max 6.5

    Security update for kubernetes1.24

    This update for kubernetes1.24 fixes the following issues: - CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).

    first Jun 13, 2025
  • Medium max 6.2

    Security update for prometheus-ha_cluster_exporter

    This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047).

    first Feb 20, 2023
  • Medium max 6.0

    Security update for cni-plugins

    This update for cni-plugins fixes the following issues: cni-plugins updated to version 0.8.6 - CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410). Release notes: https://github.com…

    first Jul 23, 2020
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…

    first Jul 21, 2022
  • Medium max 6.8

    Security update for openssh

    This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…

    first Jun 17, 2019
  • Medium max 5.3

    python-2.7.18-37.1 on GA media

    These are all security issues fixed in the python-2.7.18-37.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

    first Jul 28, 2023
  • Medium max 5.3

    Security update for mariadb

    This update for mariadb fixes the following issues: mariadb was updated to version 10.0.44 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue which could …

    first Jun 16, 2020
  • Medium max 4.2

    grafana-9.5.1-1.1 on GA media

    These are all security issues fixed in the grafana-9.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for xen

    This update for xen fixes several issues. These security issues were fixed: - A malicious 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks by placing a IRET hypercall in …

    first May 2, 2017
  • Medium max 5.7

    Recommended update for hplip

    This update for hplip fixes the following issues: This update for hplip fixes the following issues: Update to hplip 3.24.4 (jsc#PED-5846) - Added support for new printers: * HP OfficeJet 8120 All-in-One series * HP OfficeJet Pro 8120 All-in-One series * HP Of…

    first Jan 28, 2025
  • Medium max 6.5

    python38-3.8.13-4.1 on GA media

    These are all security issues fixed in the python38-3.8.13-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for gradle

    This update for gradle fixes the following issues: - CVE-2023-35946: Fixed a dependency issue leading the cache to write files into an unintended location. (bsc#1212930)

    first Sep 6, 2024
  • Medium max 5.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25285: A race condition between hugetlb sysctl handlers in mm/hugetlb.c could be used by local attackers to corrup…

    first Nov 3, 2020
  • Medium max 4.3

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2024-56378: out-of-bounds read within JBIG2Bitmap::combine, which can lead to an application crash. (bsc#1234795)

    first Dec 24, 2024
  • Medium max 6.4

    Recommended update for ruby2.5

    This update for ruby2.5 toversion 2.5.7 fixes the following issues: ruby 2.5 was updated to version 2.5.7 - CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804). - CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and S…

    first Mar 28, 2020