Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 6.5

    Security update for shim

    This update for shim fixes the following issues: - Update only adds the CVE reference to the previously released update (bsc#1198458, CVE-2022-28737)

    first May 3, 2023
  • Medium max 5.3

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2024-9287: Fixed quoted path names provided when creating a virtual environment (bsc#1232241). Bug fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906).

    first Nov 6, 2024
  • Medium max 6.2

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38472: Fixed denial of service due to a reachable assertion found in avahi_rdata_parse (bsc#1216853) - CVE-2023-38470: Fixed denial of service due to a reachable assertion found in avahi_escape_labe…

    first May 6, 2024
  • Medium max 6.5

    libmozjs-128-0-128.9.0-1.1 on GA media

    These are all security issues fixed in the libmozjs-128-0-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2025
  • Medium max 6.1

    Security update for SUSE Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security fixes: * CVE-2023-28370: Tornado: Fix an open redirect in StaticFileHandler (bsc#1211741) - Bug fixes: * Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#121099…

    first Aug 2, 2023
  • Medium max 5.9

    Security update for python310-setuptools

    This update for python310-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Jan 16, 2023
  • Medium max 6.5
    SUSE-SU-2022:0090-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (b…

    first Jan 17, 2022
  • Medium max 5.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524).

    first Sep 6, 2022
  • Medium max 4.3

    Security update for samba

    This update for samba fixes the following issues: The following security issues were fixed: - CVE-2018-1050: Fixed denial of service vulnerability when SPOOLSS is run externally (bsc#1081741). - CVE-2018-10858: smbc_urlencode helper function is a subject to b…

    first Aug 15, 2018
  • Medium max 5.3

    Security update for python

    This update for python fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

    first Feb 8, 2024
  • Medium max 5.3

    ucode-intel-20240910-1.1 on GA media

    These are all security issues fixed in the ucode-intel-20240910-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 13, 2024
  • Medium max 4.3

    Security update for curl

    This update for curl fixes the following issues: Security issue fixed: - CVE-2018-16839: Fixed a buffer overflow in the SASL authentication code (bsc#1112758).

    first Apr 23, 2019
  • Medium max 6.5

    dbus-1-1.14.8-1.1 on GA media

    These are all security issues fixed in the dbus-1-1.14.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for python3

    This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) - CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644)

    first Jan 31, 2019
  • Medium max 5.9

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - CVE-2024-8184: Fixed remote denial-of-service in ThreadLimitHandler.getRemote() (bsc#1231651).

    first Oct 18, 2024
  • Medium max 4.2

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487).

    first Mar 8, 2023
  • Medium max 5.5

    Security update for nautilus

    This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives (bsc#1205418).

    first Jan 2, 2023
  • Medium max 5.3

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

    first Jul 25, 2023
  • Medium max 5.3

    libopenssl-1_1-devel-1.1.1v-1.1 on GA media

    These are all security issues fixed in the libopenssl-1_1-devel-1.1.1v-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for glade

    This update for glade fixes the following issues: - CVE-2020-36774: Fixed crash when rebuilding GladeGtkBox (bsc#1220059).

    first Mar 25, 2024
  • Medium max 6.8

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: - CVE-2022-3479: Fixed a potential crash that could be triggered when a server requested a client authentication certificate, but the client had no certificates stored (bsc#1204272). - Updated to version…

    first Jan 24, 2023
  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege (bsc#1192615) - CVE-2021-0127: Intel …

    first Feb 18, 2022
  • Medium max 5.6

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2017-5715: Fixes for speculative side channel attacks aka 'SpectreAttack' (var2) (bsc#1079869). - CVE-2018-6764: Fixed guest executable code injection via libnss_dns.so loaded by…

    first Apr 3, 2018
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 24 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_72 fixes several issues. The following security issues were fixed: - CVE-2021-0605: Fixed an out-of-bounds read which could lead to local information disclosure in the kernel with System execution privileges needed…

    first Jul 15, 2021
  • Medium max 5.9

    postgresql14-14.20-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.20-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 28, 2025
  • Medium max 5.5

    Security update for python

    This update for python fixes the following issues: - CVE-2019-20907: Avoid a possible infinite loop caused by specifically crafted tarballs (bsc#1174091).

    first Aug 19, 2020
  • Medium max 4.6

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

    first Nov 25, 2025
  • Medium max 5.9

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2023-7008: Fixed man-in-the-middle due to unsigned name response in signed zone not refused when DNSSEC=yes (bsc#1218297) Other fixes: - Unit: drop ProtectClock=yes from systemd-udevd.service (bsc#1226…

    first Sep 5, 2024
  • Medium max 6.5

    Security update for jasper

    This update for jasper fixes the following issues: - CVE-2016-9398: Improved patch for already fixed issue (bsc#1010979). - CVE-2016-9399: Fix assert in calcstepsizes (bsc#1010980). - CVE-2017-5499: Validate component depth bit (bsc#1020451). - CVE-2017-5503:…

    first Sep 21, 2020
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29156: Fixed a double free related to rtrs_clt_dev_release (bnc#1198515). - CVE-2022-28893: Ensuring that sockets …

    first May 16, 2022
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to 20191112 official security release (bsc#1155988) - Includes security fixes for: - CVE-2019-11135: Added feature allowing to disable TSX RTM (bsc#1139073) - CVE-2019-11139: A CPU microcode on…

    first Nov 15, 2019
  • Medium max 6.5

    Security update for libxml2

    This update for libxml2 fixes the following security issues: - CVE-2018-9251: The xz_decomp function allowed remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint (bs…

    first Oct 9, 2018
  • Medium max 6.2

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: prometheus-blackbox_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208062) - Other non-security bugs fixed and changes: * Add `min_version` parameter of `tls_con…

    first May 11, 2023
  • Medium max 6.5

    Security update for compat-openssl098

    This update for compat-openssl098 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

    first May 30, 2023
  • Medium max 5.9

    Security update for gnutls

    This update for gnutls fixes the following issues: This update for gnutls fixes the following issues: Security issues fixed: - Improved mitigations against Lucky 13 class of attacks - 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to pl…

    first Sep 24, 2018
  • Medium max 4.8

    Security update for editorconfig-core-c

    This update for editorconfig-core-c fixes the following issues: - CVE-2024-53849: stack buffer overflow and pointer overflow when handling escaped characters. (bsc#1233815)

    first Dec 3, 2024
  • Medium max 4.3

    Security update for virtualbox

    This update for virtualbox to version 5.2.24 fixes the following issues: Multiple security issues fixed: CVE-2019-2500, CVE-2019-2524, CVE-2019-2552, CVE-2018-3309, CVE-2019-2520 CVE-2019-2521, CVE-2019-2522, CVE-2019-2523, CVE-2019-2526, CVE-2019-2548 CVE-20…

    first Jun 11, 2019
  • Medium max 5.5

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: scap-security-guide was updated to version 0.1.75 (jsc#ECO-3319): - Added Ism profile for OL8, OL9 - Added new product kylinserver10 - Created OL10 product - Release SLMicro5 product - Replaced two date injections by SO…

    first Feb 14, 2025
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806) - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807) - CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-4231…

    first Nov 11, 2022
  • Medium max 5.9

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2024-2511: Fixed unconstrained session cache growth in TLSv1.3 (bsc#1222548).

    first May 14, 2024