Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 5.9

    Security update for booth

    This update for booth fixes the following issues: - CVE-2024-3049: Fixed a vulnerability where a specially crafted hash can lead to invalid HMAC being accepted by Booth server. (bsc#1226032)

    first Jun 17, 2024
  • Medium max 5.5
    SUSE-SU-2020:2720-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - Update to 4.10.18 - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller,…

    first Sep 23, 2020
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.143 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5390 aka 'SegmentSmack': Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_…

    first Aug 14, 2018
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u392 (icedtea-3.29.0) October 2023 CPU: - CVE-2023-22067: Fixed IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed certificate path validation issue du…

    first Nov 21, 2023
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-5848: In the function wmi_set_ie(), the length validation code did not handle unsigned integer overflow properly…

    first Jun 29, 2018
  • Medium max 6.3

    curl-8.9.1-1.1 on GA media

    These are all security issues fixed in the curl-8.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 13, 2024
  • Medium max 5.5

    Security update for apache-pdfbox

    This update for apache-pdfbox fixes the following security issue: - CVE-2018-11797: A carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. (bsc#1111009):

    first Nov 13, 2018
  • Medium max 5.1

    libnfsidmap1-1.0-26.2 on GA media

    These are all security issues fixed in the libnfsidmap1-1.0-26.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.6

    Security update for xrdp

    This update for xrdp fixes the following issues: - CVE-2023-42822: Fixed unchecked access to font glyph info (bsc#1215803).

    first Nov 27, 2023
  • Medium max 6.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19462: relay_open in kernel/relay.c in the Linux kernel allowed local users to cause a denial of service (such as …

    first Aug 3, 2020
  • Medium max 5.3

    Security update for java-1_7_0-openjdk

    This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.24 - OpenJDK 7u281 (October 2020 CPU, bsc#1177943) * Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class + JDK-8237990, …

    first Nov 12, 2020
  • Medium max 6.8

    Security update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova, python-eventlet, rubygem-redcarpet, rubygem-puma

    This update for ardana-ansible, ardana-monasca, crowbar-openstack, influxdb, kibana, openstack-cinder, openstack-ec2-api, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-keystone, openstack-neutron-gbp, openstack-nova,…

    first Nov 19, 2021
  • Medium max 6.2

    Security update for tar

    This update for tar fixes the following issues: - CVE-2023-39804: Fixed extension attributes in PAX archives incorrect hanling (bsc#1217969).

    first Jan 9, 2024
  • Medium max 6.5

    hcode-2.1-680.1 on GA media

    These are all security issues fixed in the hcode-2.1-680.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: Update Xen to version 4.14.4 (bsc#1027519) Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mi…

    first Mar 23, 2022
  • Medium max 6.5

    Security update for gnome-shell

    This update for gnome-shell fixes the following issues: - CVE-2024-36472: Fixed portal helper automatically launched without user confirmation (bsc#1225567)

    first Jul 22, 2024
  • Medium max 5.6

    Security update to ucode-intel

    ucode-intel was updated to the 20180807 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and is part of the mitigations for CVE-2018-3639 (Spectre v4) and CVE-2018-3646 (L1 Terminal fault). (bsc#1104134 bsc#1087082 bsc#1087083 bsc#1…

    first Aug 15, 2018
  • Medium max 6.1

    fail2ban-0.11.2-3.1 on GA media

    These are all security issues fixed in the fail2ban-0.11.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-28356: Fixed a refcount bug in llc_ui_bind and llc_ui_autobind which could allow an unprivileged user to execut…

    first Apr 26, 2022
  • Medium max 5.6

    Security update for python-docker

    This update for python-docker fixes the following issues: - CVE-2024-35195: Fixed missing certificate verification (bsc#1224788).

    first Jun 24, 2024
  • Medium max 6.8

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272). - Updated to version…

    first Jan 20, 2023
  • Medium max 4.3

    Security update for ed25519-java

    This update for ed25519-java fixes the following issues: - CVE-2020-36843: Fixed no check performed on scalar to avoid signature malleability (bsc#1239551)

    first Mar 26, 2025
  • Medium max 6.5

    Security update for xerces-j2

    This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).

    first Feb 18, 2022
  • Medium max 6.5

    teleport-17.0.3-1.1 on GA media

    These are all security issues fixed in the teleport-17.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 4, 2024
  • Medium max 5.5

    Security update for groovy

    This update for groovy fixes the following issues: - groovy was updated to 2.4.21 - CVE-2020-17521: Fixed an information disclosure vulnerability (bsc#1179729). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Dec 31, 2020
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Var…

    first May 22, 2018
  • Medium max 4.3

    pluto-5.13.3-1.1 on GA media

    These are all security issues fixed in the pluto-5.13.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.7

    shadowsocks-rust-1.16.2-1.1 on GA media

    These are all security issues fixed in the shadowsocks-rust-1.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

    first Mar 3, 2025
  • Medium max 6.5

    Recommended update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed (bsc#1154738): * CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). * CVE-2019-11757: Fixed a use-after-free when creating index …

    first Nov 7, 2019
  • Medium max 4.4

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath (bsc#1176589). - CVE-2020-15095: Fixed an information leak through log files (bsc#1173937). - Explicitly add -fno-…

    first Oct 12, 2020
  • Medium max 6.2

    avahi-0.8-31.1 on GA media

    These are all security issues fixed in the avahi-0.8-31.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for python-Django1

    This update for python-Django1 fixes the following issues: - CVE-2023-41164: Fixed a potential denial of service vulnerability in django.utils.encoding.uri_to_iri() (bsc#1214667).

    first Sep 5, 2023
  • Medium max 6.7

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628).

    first Aug 11, 2020
  • Medium max 4.3

    ffmpeg-4-4.4.3-2.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for jbigkit

    This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146).

    first Dec 25, 2023
  • Medium max 6.4

    Security update for sudo

    This update for sudo fixes the following issues: - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, b…

    first Nov 23, 2016
  • Medium max 6.3

    python312-3.12.9-1.1 on GA media

    These are all security issues fixed in the python312-3.12.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 9, 2025
  • Medium max 5.3

    Security update for brotli

    This update for brotli fixes the following issues: brotli was updated to 1.0.9: * CVE-2020-8927: Fix integer overflow when input chunk is longer than 2GiB [boo#1175825] * `brotli -v` now reports raw / compressed size * decoder: minor speed / memory usage impr…

    first Sep 29, 2020
  • Medium max 6.4

    Security update for grub2

    This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use …

    first Jul 29, 2020