Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,771 results · Clear filters · Feed

  • Medium max 6.8

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25220: Fixed a DNS cache poisoning vulnerability due to loose caching rules (bsc#1197135).

    first Mar 24, 2022
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to version 10.2.40 (bsc#1189320): - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389 In additon the follwing was changed: - Increase NOFILE limit on service configurat…

    first Aug 25, 2021
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to version 10.2.40 [bsc#1189320]: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389

    first Aug 25, 2021
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…

    first Jul 21, 2021
  • Medium max 4.9

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…

    first Aug 5, 2021
  • Medium max 4.8

    tuigreet-0.7.1-6.1 on GA media

    These are all security issues fixed in the tuigreet-0.7.1-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    openSUSE-SU-2021:0825-1 21 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.77 (boo#1186458): * Support Managed configuration API for Web Applications * WebOTP API: cross-origin iframe support * CSS custom counter styles * Support JSON Modules * Clipboard: read-o…

    first Jun 2, 2021
  • Medium max 5.3

    Security update for upx

    upx was updated to fix the following issues: Update to release 4.0.2 * Fix unpack of ELF x86-64 that failed with 'CantUnpackException: corrupt b_info' * Resolve SEGV on PackLinuxElf64::invert_pt_dynamic - CVE-2021-30500: Fixed Null pointer dereference in Pack…

    first Apr 11, 2023
  • Medium max 5.3

    php7-7.4.24-2.1 on GA media

    These are all security issues fixed in the php7-7.4.24-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    Security update for python-bleach

    This update for python-bleach to version 3.1.1 fixes the following issue: - Python-bleach was updated to 3.1.1 - CVE-2020-6802: Fixed mutation XSS vulnerabilities (boo#1165303).

    first Mar 7, 2020
  • Medium max 6.1

    python310-autobahn-23.6.2-3.1 on GA media

    These are all security issues fixed in the python310-autobahn-23.6.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8

    Security update for python-bottle

    This update for python-bottle fixes the following issues: - CVE-2020-28473: Fixed Web Cache Poisoning vulnerability using parameter cloaking (bsc#1182181). This update was imported from the SUSE:SLE-15:Update update project.

    first Feb 16, 2021
  • Medium max 4.4

    Security update for python-jupyter_notebook

    This update for python-jupyter_notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458).

    first Jan 16, 2021
  • Medium max 4.4

    Security update for python-jupyter_notebook

    This update for python-jupyter_notebook fixes the following issue: - CVE-2020-26215: Fixed an open redirect vulnerability (boo#1180458). This update was imported from the openSUSE:Leap:15.1:Update update project.

    first Jan 19, 2021
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Dec 10, 2020
  • Medium max 6.3

    Security update for binutils

    This update for binutils fixes the following issues: Update to binutils 2.37: * The GNU Binutils sources now requires a C99 compiler and library to build. * Support for Realm Management Extension (RME) for AArch64 has been added. * A new linker option '-z rep…

    first Nov 15, 2021
  • Medium max 5.1

    Security update for bouncycastle

    This update for bouncycastle fixes the following issues: - CVE-2020-15522: Fixed a timing issue within the EC math library (bsc#1186328).

    first Jul 10, 2021
  • Medium max 4.0

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues: Update to version 2.86 - CVE-2021-3448: fixed outgoing port used when --server is used with an interface name. (bsc#1183709) - CVE-2020-14312: Set --local-service by default (bsc#1173646). - Open inotify soc…

    first Oct 27, 2021
  • Medium max 5.1

    Security update for the Linux Kernel

    The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-12351: Fixed a type confusion while processing AMP packets aka 'BleedingTooth' aka 'BadKarma' (bsc#1177724). - CVE-2020-2449…

    first Nov 29, 2020
  • Medium max 6.3

    oddjob-0.34.5-1.9 on GA media

    These are all security issues fixed in the oddjob-0.34.5-1.9 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    python310-CherryPy-18.9.0-3.3 on GA media

    These are all security issues fixed in the python310-CherryPy-18.9.0-3.3 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • Medium max 5.3

    Security update for java-11-openjdk

    This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues: Security issues fixed: - CVE-2019-2745: Improved ECC Implementation (bsc#1141784). - CVE-2019-2762: Exceptional throw cases (bsc#1141782). - CVE-2019-2766: Improve file proto…

    first Aug 15, 2019
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA (bsc#1162388). Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388). - CVE-2…

    first Mar 2, 2020
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class (bsc#1159923). - CVE-2019-11046: Fixed an information leak in bc_shift_addsub() (bsc#11599…

    first Jan 20, 2020
  • Medium max 6.5

    golang-github-prometheus-prometheus-2.27.1-4.2 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-2.27.1-4.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: Security issue fixed: - CVE-2019-10197: Fixed user escape from share path definition (bsc#1141267). Bug fix: - Prepare for future use of kernel keyrings, modify /etc/pam.d/samba to include pam_keyinit.so; (bsc…

    first Sep 16, 2019
  • Medium max 4.7

    Security update for gnutls

    This update for gnutls fixes the following issues: Security issue fixed: - CVE-2018-16868: Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification (bsc#1118087). Non-security issue fixed: - Explicitly require libnettle 3.4.1 to prevent miss…

    first May 30, 2019
  • Medium max 6.1

    Security update for python-Django

    This update for python-Django to 1.11.15 fixes the following issues: This security issue was fixed: - CVE-2018-14574: Prevent open redirect in django.middleware.common.CommonMiddleware (bsc#1102680). These non-security issues were fixed: - Fixed WKBWriter.wri…

    first Aug 14, 2018
  • Medium max 5.7

    Security update for nagios

    This update for nagios to version 4.4.5 fixes the following issues: - CVE-2019-3698: Symbolic link following vulnerability in the cronjob allows local attackers to cause cause DoS or potentially escalate privileges. (boo#1156309) - CVE-2018-18245: Fixed XSS v…

    first Apr 14, 2020
  • Medium max 5.7

    kernel-firmware-brcm-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-brcm-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.6

    kernel-firmware-20210901-1.2 on GA media

    These are all security issues fixed in the kernel-firmware-20210901-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for jasper

    This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979). - CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980). - CVE-2017-5499: Validate component depth bit (bsc#1020451). - CVE-2017-5503:…

    first Sep 25, 2020
  • Medium max 6.5

    Security update for jasper

    This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979). - CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980). - CVE-2017-5499: Validate component depth bit (bsc#1020451). - CVE-2017-5503:…

    first Sep 24, 2020
  • Medium max 4.9

    libkpathsea6-6.3.3-76.3 on GA media

    These are all security issues fixed in the libkpathsea6-6.3.3-76.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    file-5.29-2.1 on GA media

    These are all security issues fixed in the file-5.29-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    xen-4.15.1_01-1.2 on GA media

    These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.7

    nagios-4.4.6-2.5 on GA media

    These are all security issues fixed in the nagios-4.4.6-2.5 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.6

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237681)

    first Mar 10, 2025
  • Medium max 6.2

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2025-0395: Fix underallocation of abort_msg_s struct (bsc#1236282)

    first Feb 18, 2025
  • Medium max 5.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).

    first Nov 8, 2024