Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,765 results · Clear filters · Feed

  • Medium max 5.1
    SUSE-SU-2023:4346-1 4 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778)…

    first Nov 2, 2023
  • Medium max 6.5
    SUSE-SU-2024:1508-1 2 CVEs

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-prometheus-node_exporter: - Update to 1.7.0 (jsc#PED-7893, jsc#PED-7928): * [FEATURE] Add ZFS freebsd per dataset stats #2753 * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721 * [ENHANCEMENT] …

    first May 6, 2024
  • Medium max 5.3
    SUSE-SU-2023:1923-1 1 CVE

    Security update for nodejs16

    This update for nodejs16 fixes the following issues: Update to nodejs LTS version 16.20.0: Security fixes: - CVE-2022-25881: Fixed ReDoS vulnerability in http-cache-semantics (bsc#1208744). Other changes: - update undici to 5.20.0 - update c-ares to 1.19.0 - …

    first Apr 20, 2023
  • Medium max 6.1
    openSUSE-SU-2021:0942-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…

    first Jun 29, 2021
  • Medium max 6.1
    openSUSE-SU-2020:0892-1 3 CVEs

    Security update for grafana, grafana-piechart-panel, grafana-status-panel

    This update for grafana, grafana-piechart-panel, grafana-status-panel fixes the following issues: grafana was updated to version 7.0.3: * Features / Enhancements - Stats: include all fields. #24829, @ryantxu - Variables: change VariableEditorList row action I…

    first Jun 28, 2020
  • Medium max 6.5
    SUSE-SU-2020:1208-1 2 CVEs

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). - CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765). Non-securi…

    first May 6, 2020
  • Medium max 6.3
    openSUSE-SU-2024:11376-1 2 CVEs

    sddm-0.19.0-4.2 on GA media

    These are all security issues fixed in the sddm-0.19.0-4.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1
    SUSE-SU-2023:4359-1 4 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - …

    first Nov 3, 2023
  • Medium max 5.5
    SUSE-SU-2025:0889-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_20 fixes one issue. The following security issue was fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452).

    first Mar 17, 2025
  • Medium max 6.5
    SUSE-SU-2019:0222-1 13 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of serv…

    first Feb 1, 2019
  • Medium max 5.1
    openSUSE-SU-2020:0084-1 1 CVE

    Security update for Mesa

    This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Jan 21, 2020
  • Medium max 4.0
    SUSE-SU-2025:01500-1 1 CVE

    Security update for opensaml

    This update for opensaml fixes the following issues: - CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. (bsc#1239889)

    first Jun 5, 2025
  • Medium max 5.3
    SUSE-SU-2024:0168-1 1 CVE

    Security update for python-aiohttp

    This update for python-aiohttp fixes the following issues: Updated to version 3.8.6: - CVE-2023-49082: Fixed an HTTP header injection via a crafted method (bsc#1217682).

    first Jan 19, 2024
  • Medium max 5.3
    openSUSE-SU-2024:10206-1 1 CVE

    python-bjoern-1.4.2-1.23 on GA media

    These are all security issues fixed in the python-bjoern-1.4.2-1.23 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1
    openSUSE-SU-2019:2438-1 2 CVEs

    Security update for python3

    This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security …

    first Nov 5, 2019
  • Medium max 6.5
    SUSE-SU-2024:3754-1 1 CVE

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698)

    first Oct 24, 2024
  • Medium max 5.2
    SUSE-SU-2024:2998-1 1 CVE

    Security update for glib2

    This update for glib2 fixes the following issues: - Fixed a possible use after free regression introduced by CVE-2024-34397 patch (bsc#1224044).

    first Aug 22, 2024
  • Medium max 4.2
    SUSE-SU-2025:01755-1 1 CVE

    Security update for slurm_22_05

    This update for slurm_22_05 fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

    first May 29, 2025
  • Medium max 6.5
    openSUSE-SU-2024:12549-1 1 CVE

    apache-commons-net-3.9.0-1.1 on GA media

    These are all security issues fixed in the apache-commons-net-3.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.0
    openSUSE-SU-2019:1291-1 1 CVE

    Security update for libssh2_org

    This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] This update was imported from the SUSE:SLE-15:Update update project.

    first Apr 29, 2019
  • Medium max 6.5
    SUSE-SU-2019:2440-1 1 CVE

    Security update for expat

    This update for expat fixes the following issues: Security issue fixed: - CVE-2019-15903: Fixed a heap-based buffer over-read caused by crafted XML documents. (bsc#1149429)

    first Sep 23, 2019
  • Medium max 5.7
    openSUSE-SU-2025:14804-1 11 CVEs

    kernel-firmware-all-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-all-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 13, 2025
  • Medium max 4.7
    openSUSE-SU-2024:14271-1 1 CVE

    nginx-1.27.1-1.1 on GA media

    These are all security issues fixed in the nginx-1.27.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2024
  • Medium max 5.3
    SUSE-SU-2022:3194-1 1 CVE

    Security update for SUSE Manager Server 4.3

    This update fixes the following issues: apache-commons-csv: - Fix the URL for the package - Declare the LICENSE file as license and not doc apache-commons-math3: - Fix the URL for the package - Declare the LICENSE file as license and not doc drools: - Declare…

    first Sep 8, 2022
  • Medium max 4.2
    SUSE-SU-2019:0784-1 12 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-2019-921…

    first Mar 28, 2019
  • Medium max 5.9
    SUSE-SU-2024:0035-1 1 CVE

    Security update for python-paramiko

    This update for python-paramiko fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack (bsc#bsc#1218168). - Update to 3.4.0.

    first Jan 5, 2024
  • Medium max 5.5
    SUSE-SU-2025:0949-1 1 CVE

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_144 fixes one issue. The following security issue was fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452).

    first Mar 19, 2025
  • Medium max 5.2
    SUSE-SU-2024:1950-1 1 CVE

    Security update for glib2

    This update for glib2 fixes the following issues: Update to version 2.78.6: + Fix a regression with IBus caused by the fix for CVE-2024-34397 Changes in version 2.78.5: + Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are vulnerable to un…

    first Jun 7, 2024
  • Medium max 4.3
    SUSE-SU-2018:2320-1 1 CVE

    Security update for samba

    This update for samba fixes the following issues: The following security vulnerability was fixed: - CVE-2018-10858: smbc_urlencode helper function is a subject to buffer overflow (bsc#1103411) The following other bugs were fixed: - Fix libnss_wins.so.2 link l…

    first Aug 14, 2018
  • Medium max 5.3
    openSUSE-SU-2019:1282-1 1 CVE

    Security update for python3

    This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). This update was imported from the SUSE:SLE-15…

    first Apr 26, 2019
  • Medium max 5.6
    SUSE-SU-2018:2189-1 1 CVE

    Security update for kernel-firmware

    This update for kernel-firmware to version 20180525 fixes the following issues: This security issue was fixed: - CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect b…

    first Aug 3, 2018
  • Medium max 6.0
    SUSE-SU-2021:4171-1 1 CVE

    Security update for runc

    This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixe…

    first Dec 23, 2021
  • Medium max 5.4
    SUSE-SU-2019:1285-1 1 CVE

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595).

    first May 17, 2019
  • Medium max 6.1
    SUSE-SU-2022:2870-1 1 CVE

    Security update for rubygem-rails-html-sanitizer

    This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2022-32209: Fixed a potential content injection under specific configurations (bsc#1201183).

    first Aug 22, 2022
  • Medium max 4.3
    openSUSE-SU-2020:1842-1 1 CVE

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2020-13943: Fixed HTTP/2 Request mix-up (bsc#1177582) This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Nov 5, 2020
  • Medium max 6.2
    SUSE-SU-2024:1008-1 2 CVEs

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594). - CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).

    first Mar 27, 2024
  • Medium max 5.3
    openSUSE-SU-2024:14539-1 1 CVE

    himmelblau-0.7.7+git.0.b48d0bb-1.1 on GA media

    These are all security issues fixed in the himmelblau-0.7.7+git.0.b48d0bb-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 3, 2024
  • Medium max 4.5
    openSUSE-SU-2019:1605-1 2 CVEs

    Security update for netpbm

    This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). -…

    first Jun 24, 2019
  • Medium max 5.3
    SUSE-SU-2023:4520-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).

    first Nov 21, 2023
  • Medium max 6.0
    SUSE-SU-2022:1260-1 1 CVE

    Security update for git

    This update for git fixes the following issues: - CVE-2022-24765: Fixed a potential command injection via git worktree (bsc#1198234).

    first Apr 19, 2022