Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,771 results · Clear filters · Feed

  • Medium max 6.5
    SUSE-SU-2016:2714-1 11 CVEs

    Security update for curl

    This update for curl fixes the following security issues: - CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646) - CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645) - CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642) - CVE-2016-86…

    first Nov 3, 2016
  • Medium max 5.4
    SUSE-SU-2016:2457-1 1 CVE

    Security update for openstack-horizon-plugin-manila-ui

    This update for openstack-horizon-plugin-manila-ui fixes the metadata_to_str function code injection vulnerability. (bsc#988935, CVE-2016-6519)

    first Oct 5, 2016
  • Medium max 6.4
    SUSE-SU-2016:3300-1 2 CVEs

    Security update for samba

    This update for samba provides the following fixes: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441) - CVE-2016-2126: Prevent denial of service due to a client triggered crash in the winbindd parent proces…

    first Dec 29, 2016
  • Medium max 5.3
    SUSE-SU-2016:0432-1 1 CVE

    Security update for rubygem-activemodel-4_2

    This update for rubygem-activemodel-4_2 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention (bsc#963334)

    first Feb 11, 2016
  • Medium max 4.0
    SUSE-SU-2018:3879-1 11 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672). - CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToCo…

    first Nov 23, 2018
  • Medium max 5.3
    SUSE-SU-2016:0619-1 1 CVE

    Security update for rubygem-activerecord-3_2

    This update for rubygem-activerecord-3_2 fixes the following issues: - CVE-2015-7577: rubygem-activerecord: Nested attributes rejection proc bypass (bsc#963330)

    first Mar 1, 2016
  • Medium max 6.2
    SUSE-SU-2016:2704-1 1 CVE

    Security update for python-suds-jurko

    This update for python-suds-jurko fixes the following issues: - CVE-2013-2217: A temporary directory was used in an insecure fashion when initializing file-based URL cache. (bsc#827568)

    first Nov 2, 2016
  • Medium max 6.4
    SUSE-SU-2020:0737-1 7 CVEs

    Recommended update for ruby2.5

    This update for ruby2.5 toversion 2.5.7 fixes the following issues: ruby 2.5 was updated to version 2.5.7 - CVE-2020-8130: Fixed a command injection in intree copy of rake (bsc#1164804). - CVE-2019-16255: Fixed a code injection vulnerability of Shell#[] and S…

    first Mar 20, 2020
  • Medium max 4.0
    SUSE-SU-2025:1342-1 2 CVEs

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-32364: Fixed a floating point exception. (bsc#1240880) - CVE-2025-32365: Fixed the isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc. (bsc#1240881) - Adding -fpie compile flag to GCC f…

    first Apr 17, 2025
  • Medium max 4.4
    SUSE-SU-2025:0802-1 1 CVE

    Security update for go1.24

    This update for go1.24 fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy, golang.org/x/net/http/httpproxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238572) Other fixes: - Updated go version to go1.24.1 (bsc#1236217): * go#71986 go#71984…

    first Mar 6, 2025
  • Medium max 6.5
    openSUSE-SU-2025:14915-1 1 CVE

    tomcat10-10.1.39-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.39-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 20, 2025