Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 5.5

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2022-3550: Fixed out of bounds read/write in _GetCountedString() (bsc#1204412). - CVE-2022-3551: Fixed various leaks of the return value of GetComponentSpec() (bsc#1204416).

    first Nov 1, 2022
  • Medium max 5.3

    java-11-openj9-11.0.18.0-1.1 on GA media

    These are all security issues fixed in the java-11-openj9-11.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    Security update for rubygem-rails-html-sanitizer

    This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2022-32209: Fixed a potential content injection under specific configurations (bsc#1201183).

    first Aug 24, 2022
  • Medium max 5.9

    jsch-agent-proxy-connector-factory-0.0.9-1.1 on GA media

    These are all security issues fixed in the jsch-agent-proxy-connector-factory-0.0.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for openssl-1_1-livepatches

    This update for openssl-1_1-livepatches fixes the following issues: Security issue fixed: - CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (bsc#1217151). Other fixes: - Report…

    first Dec 20, 2023
  • Medium max 6.5

    Security update for ceph

    This update provides Ceph 10.2.10, which brings fixes and enhancements: This security issue was fixed: - CVE-2017-7519: libradosstriper processes arbitrary printf placeholders in user input. (bsc#1043767) - CVE-2016-9579: Do not abort RGW server when acceptin…

    first Dec 1, 2017
  • Medium max 6.6

    redis-3.2.4-1.1 on GA media

    These are all security issues fixed in the redis-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to…

    first Jun 10, 2020
  • Medium max 5.3

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u322 build 04 with OpenJ9 0.30.0: - Fixing the following vulnerabilities: CVE-2022-21248 (bsc#1194926), CVE-2022-21277 (bsc#1194930), CVE-2022-21282 (bsc#1194933), CVE-2022-21291…

    first Mar 16, 2022
  • Medium max 5.6

    Security update for qemu

    This update for qemu fixes the following issues: A mitigation for a security flaw has been applied: - CVE-2017-5715: QEMU was updated to allow passing through new MSR and CPUID flags from the host VM to the CPU, to allow enabling/disabling branch prediction f…

    first Jan 9, 2018
  • Medium max 4.3

    nova-3.6.1-1.1 on GA media

    These are all security issues fixed in the nova-3.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.0

    Feature update for slurm and pdsh

    This update for slurm and pdsh fixes the following issues: slurm was updated to version 24.11.1 using package slurm_24_11: - Security issues fixed: * CVE-2024-48936: Fixed authentication handling in stepmgr that could permit an attacker to execute processes u…

    first Feb 24, 2025
  • Medium max 5.9

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2023-43665: Denial-of-service in django.utils.text.Truncator (boo#1215978).

    first Oct 20, 2023
  • Medium max 4.9

    Security update for cpio

    This update for cpio fixes the following issues: - CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction (bsc#1218571).

    first Jan 26, 2024
  • Medium max 6.8

    Security update for zabbix

    This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping (boo#1218199)

    first Dec 27, 2023
  • Medium max 5.4

    weblate-4.11-1.1 on GA media

    These are all security issues fixed in the weblate-4.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.7

    python-2.7.18-18.1 on GA media

    These are all security issues fixed in the python-2.7.18-18.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 RT kernel was updated to 4.4.139 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13053: The alarm_timer_nsleep function had an integer overflow via a large relative timeout because …

    first Jul 31, 2018
  • Medium max 6.5

    helm-3.9.4-2.1 on GA media

    These are all security issues fixed in the helm-3.9.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-16168: Fixed improper validation of sqlite_stat1 field that could lead to denial of service (bsc#1150137).

    first Oct 3, 2019
  • Medium max 5.5

    Security update for rhino

    This update for rhino fixes the following issues: Update to version 1.7.15.1. Security issues fixed: - CVE-2025-66453: high CPU consumption when processing specific numbers via the `toFixed()` function (bsc#1254481). Other changes and issues fixed: - Version …

    first Dec 12, 2025
  • Medium max 6.4

    Security update for grub2

    This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use …

    first Jul 29, 2020
  • Medium max 5.9

    parsec-0.8.0-3.1 on GA media

    These are all security issues fixed in the parsec-0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3107: Fixed missing check of return value of kvmalloc_array() (bnc#1206395). - CVE-2022-3108: Fixed missing check of …

    first Feb 14, 2023
  • Medium max 5.9

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgraded to 16.11: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…

    first Dec 12, 2025
  • Medium max 6.2

    Security update for texlive-filesystem

    This update for texlive-filesystem fixes the following issues: Security issues fixed: - CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740). - CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).

    first Jul 8, 2020
  • Medium max 5.0

    Security update for dracut

    This update for dracut fixes the following issues: Security issues fixed: - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets sto…

    first Oct 10, 2017
  • Medium max 5.5

    Security update for python-numpy

    This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_from…

    first Oct 17, 2022
  • Medium max 5.6

    Security update for python-requests

    This update for python-requests fixes the following issues: - CVE-2024-35195: Fixed cert verification regardless of changes to the value of `verify` (bsc#1224788).

    first Jun 7, 2024
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).

    first Dec 9, 2020
  • Medium max 5.1

    Security update for openstack-cinder, openstack-horizon-plugin-designate-ui, openstack-neutron, openstack-neutron-lbaas

    This update for openstack-cinder, openstack-horizon-plugin-designate-ui, openstack-neutron, openstack-neutron-lbaas fixes the following issues: Security vulnerabity fixed in openstack-cinder: - CVE-2017-15139: Fixed a leakage of sensitive information between …

    first Mar 22, 2019
  • Medium max 5.9

    Security update for cifs-utils

    This update for cifs-utils fixes the following issues: - CVE-2025-2312: Fixed cifs.upcall making an upcall to the wrong namespace in containerized environments while trying to get Kerberos credentials (bsc#1239680)

    first Apr 28, 2025
  • Medium max 5.3

    Security update for java-1_7_0-openjdk

    This update for java-1_7_0-openjdk to version 7u181 fixes the following issues: + S8162488: JDK should be updated to use LittleCMS 2.8 + S8180881: Better packaging of deserialization + S8182362: Update CipherOutputStream Usage + S8183032: Upgrade to LittleCMS…

    first Jun 14, 2018
  • Medium max 5.5

    containerd-1.6.6-1.1 on GA media

    These are all security issues fixed in the containerd-1.6.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3

    Security update for python

    This update for python fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

    first Mar 14, 2025
  • Medium max 6.2

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594). - CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).

    first Apr 5, 2024
  • Medium max 5.1

    Security update for dpdk

    This update for dpdk fixes the following issues: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171930). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#1171925). - CVE-2020-10724: …

    first Jun 8, 2020
  • Medium max 6.5

    logrotate-3.20.1-1.1 on GA media

    These are all security issues fixed in the logrotate-3.20.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for pdns

    This update for pdns fixes the following issues: Security issues fixed: - CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157). - CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).

    first Dec 11, 2018
  • Medium max 4.3

    Security update for samba

    This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally (bsc#1081741). - CVE-2018-10858: smbc_urlencode helper function is a subject to b…

    first Oct 18, 2018