Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 5.3

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: - CVE-2016-1000111: sets environmental variable HTTP_PROXY based on user supplied Proxy request header (bsc#989997)

    first Jan 12, 2017
  • Medium max 5.8

    Security update for rubygem-excon

    This update for rubygem-excon fixes the following issues: CVE-2019-16779 (boo#1159342): Fix a race condition around persistent connections, where a connection, which was interrupted, would leave data on the socket. Subsequent requests would then read this dat…

    first Jan 29, 2020
  • Medium max 5.9

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491). - Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673). - Fixed a test failure in apache_ssl in fips mode (…

    first Dec 17, 2020
  • Medium max 5.5

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).

    first Apr 25, 2023
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2023-46218: Fixed cookie mixed case PSL bypass (bsc#1217573).

    first Dec 11, 2023
  • Medium max 5.9

    Security update for java-1_7_0-openjdk

    This update for java-1_7_0-openjdk fixes the following issues: - Update to 2.6.27 - OpenJDK 7u311 (July 2021 CPU) Security fixes: - CVE-2021-2341: Improve file transfers (bsc#1188564) - CVE-2021-2369: Better jar file validation (bsc#1188565) - CVE-2021-2432: …

    first Sep 9, 2021
  • Medium max 5.3

    kepler-0.7.11-2.1 on GA media

    These are all security issues fixed in the kepler-0.7.11-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 13, 2025
  • Medium max 5.5

    Security update for libgepub

    This update for libgepub fixes the following issues: - CVE-2025-6196: Fixed an integer overflow in the EPUB archive handling code that can leads to massive memory allocation and application crash. (bsc#1244704)

    first Jul 2, 2025
  • Medium max 6.1

    Security update for pcp

    This update for pcp fixes the following issues: - Fixed completely CVE-2020-8025 (bsc#1171883)

    first Apr 21, 2021
  • Medium max 5.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP 2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: In the Linux kernel, a device could be tracked by an attacker using the IP ID values the kernel produces f…

    first Jul 15, 2019
  • Medium max 5.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22890: TLS 1.3 session ticket proxy host mixup (bsc#1183934) - CVE-2021-22876: Automatic referer leaks credentials (bsc#1183933) This update was imported from the SUSE:SLE-15-SP2:Update update projec…

    first Apr 4, 2021
  • Medium max 6.6

    podman-5.4.0-3.1 on GA media

    These are all security issues fixed in the podman-5.4.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 11, 2025
  • Medium max 6.5

    Security update for puppet

    This update for puppet fixes the following issues: - CVE-2020-7942: Added a warning for a vulnerable configuration option, which could allow for information disclosure in certain setups. Disabling it my break some setups. (bsc#1167645)

    first Apr 21, 2020
  • Medium max 5.0

    python310-yt-dlp-2023.11.16-1.1 on GA media

    These are all security issues fixed in the python310-yt-dlp-2023.11.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513).

    first Dec 9, 2020
  • Medium max 5.3

    python311-starlette-0.47.2-1.1 on GA media

    These are all security issues fixed in the python311-starlette-0.47.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 24, 2025
  • Medium max 6.2

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)

    first Oct 11, 2023
  • Medium max 5.5

    libblkid-devel-2.37.3-1.1 on GA media

    These are all security issues fixed in the libblkid-devel-2.37.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.7

    Security update for SUSE Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: * Security fixes: * CVE-2023-34049: Arbitrary code execution via symlink attack (bsc#1215157) * Non security fixes: * Add python dateutil module to the bundle * Allow all primitive grain types for auto…

    first Dec 13, 2023
  • Medium max 4.3

    grafana-11.3.3-1.1 on GA media

    These are all security issues fixed in the grafana-11.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 3, 2025
  • Medium max 4.1

    Security update for sssd

    This update for sssd fixes the following issues: Security vulnerability addresed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other bug fixes and changes: - Install logrotate configuration (bsc#1004220) - Align…

    first Mar 5, 2019
  • Medium max 5.9

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: - New upstream LTS version 10.23.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…

    first Jan 15, 2021
  • Medium max 4.3

    Security update for jbigkit

    This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler (bsc#1198146).

    first Jul 9, 2024
  • Medium max 4.4

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: - CVE-2020-15095: Fixed information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686). This update was imported from…

    first Oct 10, 2020
  • Medium max 6.8

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Update to 11.0.13+8 (October 2021 CPU) - CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference - CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session c…

    first Nov 16, 2021
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-2056: Fixed a division by zero denial of service (bsc#1201176). - CVE-2022-2057: Fixed a division by zero denial of service (bsc#1201175). - CVE-2022-2058: Fixed a division by zero denial of service …

    first Aug 3, 2022
  • Medium max 5.9

    ffmpeg-4-4.4.5-9.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.5-9.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2025
  • Medium max 5.6

    Security update for salt

    salt was updated to fix one security issue. This security issue was fixed: - CVE-2016-3176: Insecure configuration of PAM external authentication service. Authenticating were able to specify the PAM service (bsc#972436).

    first Apr 7, 2016
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063) - Skip udev rules if 'elevator=' is used (bsc#1184994) This update was imported from the SUSE:SLE-15:Update up…

    first Jul 23, 2021
  • Medium max 6.2

    python-Jinja2-2.8-1.4 on GA media

    These are all security issues fixed in the python-Jinja2-2.8-1.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the…

    first Dec 11, 2025
  • Medium max 5.6

    Security update for SUSE Manager Server 3.1

    This update fixes the following issues: nutch: - Fix hadoop log dir. (bsc#1061574) osad, rhnlib: - Fix update mechanism when updating the updateservice (bsc#1073619) pxe-default-image: - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715, CVE-2017…

    first Mar 8, 2018
  • Medium max 5.9

    Security update for mozjs78

    This update for mozjs78 fixes the following issues: - CVE-2024-50602: Fixed DoS via XML_ResumeParser (bsc#1232599)

    first Dec 23, 2024
  • Medium max 5.4

    cargo-audit-advisory-db-20240730-1.1 on GA media

    These are all security issues fixed in the cargo-audit-advisory-db-20240730-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 30, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-1125: Enable Spectre v1 swapgs mitigations (bsc#1139358). - CVE-2018-20855: An issue was discovered in create_qp_c…

    first Sep 2, 2019
  • Medium max 5.3

    php7-7.4.26-1.1 on GA media

    These are all security issues fixed in the php7-7.4.26-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). - CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807).

    first Nov 20, 2023
  • Medium max 6.0

    Security update for ovmf

    This update for ovmf fixes the following issues: - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount (bsc#1225889). Other fixes: - Fixed Kubevirt GPU passthrough failure (bsc#1245542)

    first Jul 24, 2025
  • Medium max 6.1

    tomcat-9.0.80-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.80-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1
    openSUSE-SU-2024:13365-1 1 CVE 1 exploited

    roundcubemail-1.6.4-1.1 on GA media

    These are all security issues fixed in the roundcubemail-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024