Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 6.4

    Security update for tpm2-0-tss

    This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access (bsc#1207325).

    first Feb 27, 2023
  • Medium max 6.5

    dhcp-4.4.2.P1-11.1 on GA media

    These are all security issues fixed in the dhcp-4.4.2.P1-11.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for python-oslo.middleware

    This update for python-oslo.middleware fixes the following issues: Security issue fixed: - CVE-2017-2592: Using the CatchError class may include sensitive values in the error message accompanying a Traceback, resulting in their disclosure (bsc#1022043).

    first Apr 19, 2017
  • Medium max 4.0

    Security update for go1.22

    This update for go1.22 fixes the following issues: - CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le (bsc#1236801). Bug fixes: - go1.22 release tracking (bsc#1218424)

    first Feb 10, 2025
  • Medium max 5.9

    Security update for xen

    This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…

    first May 24, 2019
  • Medium max 5.9

    Security update for postgresql17

    This update for postgresql17 fixes the following issues: Upgrade to 17.5: - CVE-2025-4207: Fixed PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation (bsc#1242931) Changelog: https://www.postgresql.org…

    first May 21, 2025
  • Medium max 5.7

    kernel-firmware-20220516-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-20220516-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.1

    Security update for sssd

    This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other bug fixes and changes: - Install logrotate configuration (bsc#1004220) - Align…

    first Mar 23, 2019
  • Medium max 6.7

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: Update to version 2021.8.22 (bsc#1189720): * Fixed compile error when building with libfuse < 2.8.0 * Fixed obsolete macros in configure.ac * Signalled support of UTIME_OMIT to external libfuse2 * …

    first Sep 9, 2021
  • Medium max 6.4

    MozillaThunderbird-128.9.2-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-128.9.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 16, 2025
  • Medium max 6.5

    Recommended update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed (bsc#1154738): * CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). * CVE-2019-11757: Fixed a use-after-free when creating index …

    first Nov 9, 2019
  • Medium max 5.5

    Security update for mbedtls

    This update for mbedtls fixes the following issues: - Update to version 2.28.7: - Resolves CVE-2024-23170 boo#1219336 - Update to 2.28.6: Changes: * Mbed TLS is now released under a dual Apache-2.0 OR GPL-2.0-or-later license. Users may choose which license t…

    first Jan 31, 2024
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0…

    first Nov 12, 2019
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 RT kernel was updated to 4.4.88 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000365: The Linux Kernel imposes a size restriction on the arguments and environmental strings passe…

    first Nov 8, 2017
  • Medium max 5.3

    kernel-devel-5.19.7-1.1 on GA media

    These are all security issues fixed in the kernel-devel-5.19.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.7

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 8, 2020
  • Medium max 4.8

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object (bsc#1208036).

    first May 9, 2023
  • Medium max 5.5

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Esc…

    first Aug 30, 2020
  • Medium max 5.3

    Security update for samba

    This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync (bsc#1154598). - CVE-2019-10218: Client code can return filenames containing path separators …

    first Nov 9, 2019
  • Medium max 4.8

    Security update for php53

    This update for php53 fixes the following issues: Security issues fixed: - CVE-2019-11038: Fixed a information disclosure in gdImageCreateFromXbm() (bsc#1140118). - CVE-2019-11041: Fixed heap buffer over-read in exif_scan_thumbnail() (bsc#1146360). - CVE-2019…

    first Sep 3, 2019
  • Medium max 4.7

    apache2-mod_auth_openidc-2.4.12.2-1.1 on GA media

    These are all security issues fixed in the apache2-mod_auth_openidc-2.4.12.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for python, python-base

    This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via re…

    first Oct 29, 2018
  • Medium max 5.3

    Security update for php7

    This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11048: Improved the handling of overly long filenames or field names in HTTP file uploads (bsc#1171999).

    first Jul 7, 2020
  • Medium max 5.9

    Security update for dav1d

    This update for dav1d fixes the following issues: - CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).

    first Mar 21, 2024
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094) - CVE-2021-45486: Fixed an informati…

    first Jan 11, 2022
  • Medium max 5.9

    xorg-x11-server-1.20.13-1.2 on GA media

    These are all security issues fixed in the xorg-x11-server-1.20.13-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.6

    ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 on GA media

    These are all security issues fixed in the ruby3.3-rubygem-actionmailer-7.0-7.0.8.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2024
  • Medium max 5.9

    Security update for libmfx

    This update for libmfx fixes the following issues: - CVE-2023-48368: Fixed an improper input validation. (bsc#1226897) - CVE-2023-45221: Fixed an improper buffer restrictions. (bsc#1226898) - CVE-2023-22656: Fixed an out-of-bounds read. (bsc#1226899) - CVE-20…

    first Sep 18, 2024
  • Medium max 5.9

    Security update for postfix

    This update for postfix fixes the following issues: Security fixes: - CVE-2023-32182: Fixed config_postfix SUSE specific script using potentially bad /tmp file (bsc#1211196). Other fixes: - postfix: config.postfix causes too tight permission on main.cf (bsc#1…

    first Sep 22, 2023
  • Medium max 6.4

    Security update for ceph

    This update for ceph fixes the following issues: - CVE-2020-1759: Fixed once reuse in msgr V2 secure mode (bsc#1166403) - CVE-2020-1760: Fixed XSS due to RGW GetObject header-splitting (bsc#1166484).

    first Apr 6, 2020
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). - Do not install outdated README.SUSE (bsc#1174010). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1…

    first Sep 7, 2020
  • Medium max 5.9

    Security update for dnsdist

    This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 (jsc#PED-3402) - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - update to 1.2.0 (bs…

    first Dec 6, 2023
  • Medium max 6.3

    Security update for squid

    This update for squid fixes the following issues: - Update to version 6.10 - CVE-2024-37894: Fixed a denial of Service issue in ESI processing (bsc#1227086)

    first Jul 2, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.143 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded p…

    first Aug 16, 2018
  • Medium max 5.5

    Security update for osc

    This update for osc fixes the following issues: - 1.9.0 - Security: - Fix possibility to overwrite special files in .osc (CVE-2024-22034 bsc#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changi…

    first Aug 19, 2024
  • Medium max 6.5

    Security update for python-reportlab

    This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags (bsc#1182503). This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 13, 2021
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxl_phys2virt (bsc#1205808). - CVE-2021-3507: Fixed heap buffer overflow in DMA read data transfers in fdc (bsc#1185000). - CV…

    first Mar 21, 2023
  • Medium max 4.3

    apptainer-1.3.6-2.1 on GA media

    These are all security issues fixed in the apptainer-1.3.6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 7, 2025
  • Medium max 5.0

    Security update for qemu

    This update for qemu to version 4.2.1 fixes the following issues: - CVE-2020-10761: Fixed a denial of service in Network Block Device (nbd) support infrastructure (bsc#1172710). - CVE-2020-13800: Fixed a denial of service possibility in ati-vga emulation (bsc…

    first Jul 28, 2020
  • Medium max 5.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * …

    first Dec 22, 2020