Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 6.5

    Security update for expat

    This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429) This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 28, 2019
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to 3.12.31 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, th…

    first Jul 18, 2022
  • Medium max 5.7

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819). This update was imported from the SUSE:SLE-15:Update update project.

    first Dec 19, 2021
  • Medium max 6.9

    Security update for python-Werkzeug

    This update for python-Werkzeug fixes the following issues: - CVE-2024-49767: Fixed possible resource exhaustion when parsing file data in forms (bsc#1232449).

    first Oct 30, 2024
  • Medium max 5.9

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).

    first Dec 9, 2020
  • Medium max 4.4

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2024-37891: Fixed proxy-authorization request header is not stripped during cross-origin redirects (bsc#1226469)

    first Jul 30, 2024
  • Medium max 4.0

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)

    first Oct 7, 2025
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - machine-id-setup: generate machine-id from DMI product ID on Amazon EC2 - Add timestamp to D-Bus events to improve traceability. (jsc#SLE-21894) - busctl: add a timestamp to the output of the busctl monito…

    first Nov 4, 2021
  • Medium max 5.9

    postgresql16-16.11-1.1 on GA media

    These are all security issues fixed in the postgresql16-16.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 28, 2025
  • Medium max 6.7

    Security update for the Linux Kernel

    The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed potential negative array index in do_split() in ext4 (bsc#1173798). - CVE-2020-14386: Fixed an overflow in af_p…

    first Sep 8, 2020
  • Medium max 4.7

    Security update for shadow

    This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806).

    first Sep 13, 2023
  • Medium max 5.5

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

    first Mar 8, 2024
  • Medium max 5.9

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity (bsc#1217950).

    first Dec 19, 2023
  • Medium max 5.5

    exiv2-0.28.2-1.1 on GA media

    These are all security issues fixed in the exiv2-0.28.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.6

    Security update for grafana

    This update for grafana fixes the following issues: - CVE-2025-27144: Fixed Go JOSE's Parsing Vulnerability (bsc#1237671)

    first Mar 25, 2025
  • Medium max 6.1

    ucode-intel-20230214-2.1 on GA media

    These are all security issues fixed in the ucode-intel-20230214-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_7_0-ibm

    This update for java-1_7_0-ibm fixes the following issues: - Update to Java 7.0 Service Refresh 10 Fix Pack 80 [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803] * CVE-2020-27221: Potential for a stack-based buffer overflow when the virtual machine or…

    first Feb 23, 2021
  • Medium max 5.3

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…

    first Feb 25, 2021
  • Medium max 6.0

    Security update for nextcloud

    This update for nextcloud fixes the following issues: - Update to 23.0.12 See: https://nextcloud.com/changelog/#latest23 - This also fix security issues: - CVE-2022-35931: Password Policy app could generate passwords that would be block (boo#1203190) - CVE-20…

    first Apr 3, 2023
  • Medium max 6.7

    python3-virtualbox-6.1.34-1.1 on GA media

    These are all security issues fixed in the python3-virtualbox-6.1.34-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.0

    git-annex-10.20220624-1.1 on GA media

    These are all security issues fixed in the git-annex-10.20220624-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - New upstream LTS version 12.20.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…

    first Jan 15, 2021
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2018-12207: Fixed a race condition where untrusted virtual machines could have been using the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU c…

    first Feb 17, 2020
  • Medium max 5.8

    freerdp-2.4.1-1.1 on GA media

    These are all security issues fixed in the freerdp-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for python

    This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091). This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 24, 2020
  • Medium max 4.3

    Security update for mutt

    This update for mutt fixes the following issues: - CVE-2023-4874: Fixed NULL pointer dereference when composing an email (bsc#1215189). - CVE-2023-4875: Fixed NULL pointer dereference when receiving an email (bsc#1215191).

    first Sep 27, 2023
  • Medium max 6.5

    Security update for woodstox

    This update for woodstox fixes the following issues: - CVE-2022-40152: Fixed stack overflow in XML serialization (bsc#1203521).

    first Mar 8, 2023
  • Medium max 5.5

    Security update for cloud-init

    This update for cloud-init contains following fixes: - CVE-2021-3429: Do not write the generated password to the log file. (bsc#1184758) - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277) Other fixes: - Change log file creation…

    first May 10, 2023
  • Medium max 5.5

    Security update for binutils

    This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - C…

    first Oct 24, 2019
  • Medium max 6.8

    python310-certifi-2023.7.22-2.1 on GA media

    These are all security issues fixed in the python310-certifi-2023.7.22-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)

    first Apr 14, 2023
  • Medium max 6.7

    supportutils-3.1.17-2.2 on GA media

    These are all security issues fixed in the supportutils-3.1.17-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    avahi-0.8-26.1 on GA media

    These are all security issues fixed in the avahi-0.8-26.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.7

    kernel-firmware-all-20240712-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-all-20240712-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 15, 2024
  • Medium max 5.9

    Security update for xen

    This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…

    first May 24, 2019
  • Medium max 6.3

    Security update for binutils

    This update for binutils fixes the following issues: - For compatibility on old code stream that expect 'brcl 0,label' to not be disassembled as 'jgnop label' on s390x. (bsc#1192267) This reverts IBM zSeries HLASM support for now. - Fixed that ppc64 optflags …

    first Mar 22, 2022
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u171 fixes the following issues: These security issues were fixed: - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More…

    first Jul 12, 2018
  • Medium max 6.5

    Security update for slurm

    This update for slurm fixes the following issues: - CVE-2022-31251: Fixed a potential security vulnerability in the test package (bsc#1201674). - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute …

    first Oct 6, 2022
  • Medium max 5.7

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).

    first Dec 13, 2021
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u222 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file protocol h…

    first Aug 1, 2019