Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). - CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807).

    first Nov 20, 2023
  • Medium max 5.6

    Security update for openjpeg2

    This update for openjpeg2 fixes the following issues: - CVE-2024-56826: Fixed heap buffer overflow in bin/common/color.c (bsc#1235029)

    first Jan 9, 2025
  • Medium max 4.5

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command (bsc#1229685). - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer …

    first Feb 26, 2025
  • Medium max 5.3

    lightdm-kde-greeter-6.0.5-1.1 on GA media

    These are all security issues fixed in the lightdm-kde-greeter-6.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 1, 2025
  • Medium max 6.7

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: Update to version 2021.8.22 (bsc#1189720): * Fixed compile error when building with libfuse < 2.8.0 * Fixed obsolete macros in configure.ac * Signalled support of UTIME_OMIT to external libfuse2 * …

    first Sep 7, 2021
  • Medium max 5.6

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm to version 8.0.5.30 fixes the following issues: Security issues fixed: - CVE-2019-2422: Fixed a memory disclosure in FileChannelImpl (bsc#1122293). - CVE-2018-11212: Fixed an issue in alloc_sarray function in jmemmgr.c (bsc#1122…

    first Mar 15, 2019
  • Medium max 6.1

    Security update for python3-requests

    This update for python3-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).

    first Jul 19, 2023
  • Medium max 5.0

    dracut-044-17.1 on GA media

    These are all security issues fixed in the dracut-044-17.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.5

    Recommended update for vim

    This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim (bsc#1231373) - CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238) Other fixes: - Remove patch that introduced a bug caused signi…

    first Dec 23, 2024
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9568: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could le…

    first Jan 23, 2019
  • Medium max 5.9

    Security update for qemu

    This update for qemu fixes the following issues: Following security issues were fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12…

    first May 16, 2019
  • Medium max 5.7

    virtiofsd-1.10.1-1.1 on GA media

    These are all security issues fixed in the virtiofsd-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for apache2-mod_security2

    This update for apache2-mod_security2 fixes the following issues: - CVE-2025-54571: Fixed insufficient return value handling on modsecurity leads to xss and source code disclosure (bsc#1247674)

    first Sep 29, 2025
  • Medium max 6.2

    kubernetes1.32-apiserver-1.32.2-1.1 on GA media

    These are all security issues fixed in the kubernetes1.32-apiserver-1.32.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2025
  • Medium max 6.5

    Security update for gd

    This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400).

    first Sep 27, 2021
  • Medium max 5.3

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248). - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246). Bugfixes: - Remove broken accessibility sub-pa…

    first Mar 16, 2023
  • Medium max 5.0

    Security update for libreoffice

    This update for fixes the following issues: libreoffice was updated rom 7.5.4.1 to 7.6.2.1 (jsc#PED-6799, jsc#PED-6800): - For the highlights of changes of version 7.6 please consult the official release notes: * https://wiki.documentfoundation.org/ReleaseNot…

    first Nov 21, 2023
  • Medium max 5.5

    Security update for protobuf-c

    This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. (bsc#1210323)

    first Apr 25, 2023
  • Medium max 5.3

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25219: Fixed lame cache that could have been abused to severely degrade resolver performance (bsc#1192146).

    first Nov 11, 2021
  • Medium max 5.6

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napi_get_value_string_*() (bsc#1172443). - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames (b…

    first Jun 9, 2020
  • Medium max 6.5

    freerdp-3.4.0-1.1 on GA media

    These are all security issues fixed in the freerdp-3.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u191 fixes the following issues: Security issues fixed: - CVE-2018-3136: Manifest better support (bsc#1112142) - CVE-2018-3139: Better HTTP Redirection (bsc#1112143) - CVE-2018-3149: Enhance JNDI lookups (bsc#111…

    first Jan 10, 2019
  • Medium max 5.9

    Security update for libssh

    This update for libssh fixes the following issues: Security fixes: - CVE-2023-6004: Fixed command injection using proxycommand (bsc#1218209) - CVE-2023-48795: Fixed potential downgrade attack using strict kex (bsc#1218126) - CVE-2023-6918: Fixed missing check…

    first Jan 18, 2024
  • Medium max 4.4

    Security update for cifs-utils

    This update for cifs-utils fixes the following issues: - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs (bsc#1174477). - Fixed an invalid free in mount.cifs; (bsc#1152930).

    first Sep 23, 2020
  • Medium max 4.9

    Security update for cpio

    This update for cpio fixes the following issues: - Fixed cpio not extracting correctly when using --no-absolute-filenames option the security fix for CVE-2023-7207 (bsc#1218571, bsc#1219238)

    first Mar 11, 2024
  • Medium max 5.6

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: - CVE-2015-1142857: Add 7.13.1.0 bnx2x firmware files for ethernet flow control vulnerability in SRIOV devices (bsc#1077355) - CVE-2017-5715: Prevent unauthorized disclosure of information to an atta…

    first Jun 7, 2018
  • Medium max 4.8

    spotifyd-0.3.3-9.1 on GA media

    These are all security issues fixed in the spotifyd-0.3.3-9.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    phpMyAdmin-5.2.0-2.1 on GA media

    These are all security issues fixed in the phpMyAdmin-5.2.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for traceroute

    This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).

    first Nov 30, 2023
  • Medium max 6.5

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 (bsc#1197903): - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use.

    first Apr 5, 2022
  • Medium max 5.9

    Security update for python-pycryptodomex

    This update for python-pycryptodomex fixes the following issues: - CVE-2023-52323: Fixed a side-channel in the OAEP decryption, exploitable by a Manger attack (bsc#1218564).

    first Feb 20, 2024
  • Medium max 6.5

    gnome-extensions-46.3.1-2.1 on GA media

    These are all security issues fixed in the gnome-extensions-46.3.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 18, 2024
  • Medium max 6.1

    Security update for yt-dlp

    This update for yt-dlp fixes the following issues: - Update to release 2023.11.14 * Security: [CVE-2023-46121] Patch Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection * Disallow smuggling of arbitrary http_headers; extractors now only use spe…

    first Nov 18, 2023
  • Medium max 6.5

    grafana-8.3.5-1.1 on GA media

    These are all security issues fixed in the grafana-8.3.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for python-rsa

    This update for python-rsa fixes the following security issue: * CVE-2016-1494: Possible signature forgery via Bleichenbacher attack (bsc#960680)

    first Jan 13, 2016
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22925: TELNET stack contents disclosure again. (bsc#1188220) - CVE-2021-22924: Bad connection reuse due to flawed path name checks. (bsc#1188219) - CVE-2021-22923: Insufficiently Protected Credential…

    first Jul 21, 2021
  • Medium max 5.9

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2023-49083: Fixed a NULL pointer dereference when loading certificates from a PKCS#7 bundle (bsc#1217592).

    first Dec 14, 2023
  • Medium max 5.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file (bsc#1202800). - CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file …

    first Sep 6, 2022
  • Medium max 5.3

    Security update for python

    This update for python fixes the following issues: - CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691).

    first Oct 26, 2023
  • Medium max 5.9

    Security update for python36

    This update for python36 fixes the following issues: - python36 was updated to 3.6.13 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).

    first Mar 19, 2021