Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 6.3

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1838: Fixed an use-after-free fl…

    first Apr 18, 2023
  • Medium max 5.5

    Security update for the Linux Kernel

    The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-16746: An issue was discovered in net/wireless/nl80211.c where it did not check the length of variable elements in a beacon …

    first Aug 6, 2020
  • Medium max 5.3

    Security update for rubygem-activesupport-4_1

    This update for rubygem-activesupport-4_1 fixes the following issues: - CVE-2016-0753: Input Validation Circumvention (bsc#963334) - CVE-2015-7576: Timing attack vulnerability in basic authentication in Action Controller (bsc#963329)

    first Feb 26, 2016
  • Medium max 5.9

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: The Intel CPU Microcode was updated to the official QSR 2019.1 Microcode release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) ---- new platforms -----------------------------…

    first May 28, 2019
  • Medium max 6.8

    Security update for permissions

    This update for permissions fixes the following issues: - CVE-2019-3688: Changed wrong ownership in /usr/sbin/pinger to root:squid which could have allowed a squid user to gain persistence by changing the binary (bsc#1093414). - CVE-2019-3690: Fixed a privile…

    first Dec 5, 2019
  • Medium max 6.5

    Security update for rmt-server

    This update for rmt-server to version 2.5.2 fixes the following issues: Security issue fixed: - CVE-2019-18904: Fixed a denial of service in the offline migration (bsc#1160922). Non-security issue fixed: - Relaxed systemd units dependencies (bsc#1160673) - Ad…

    first Feb 19, 2020
  • Medium max 5.9

    Security update for openCryptoki

    This update for openCryptoki fixes the following issues: openCryptoki was updated to version to 3.17.0 (bsc#1220266, bsc#1219217) + openCryptoki 3.17 - tools: added function to list keys to p11sak - common: added support for OpenSSL 3.0 - common: added suppor…

    first Jul 4, 2024
  • Medium max 6.7

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: Updated to version 2022.5.17 (bsc#1199978): - CVE-2022-30783: Fixed an issue where messages between NTFS-3G and the kernel could be intercepted when using libfuse-lite. - CVE-2022-30784: Fixed a me…

    first Aug 17, 2022
  • Medium max 5.5

    Security update for openssl

    This update for openssl fixes the following issues: Security issues fixed: - CVE-2016-7056: ECSDA P-256 timing attack key recovery (bsc#1019334) - CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085) - CVE-2016-8610: remote denial of service…

    first Jan 16, 2018
  • Medium max 5.4

    libvarnishapi3-7.7.0-1.1 on GA media

    These are all security issues fixed in the libvarnishapi3-7.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2025
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15436: Fixed a use after free vulnerability in fs/block_dev.c which could have allowed local users to gain priv…

    first Dec 11, 2020
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-3164: Fixed a heap buffer overflow in tiffcrop. (bsc#1212233)

    first Jun 13, 2024
  • Medium max 5.9

    Security update for docker-runc

    This update for docker-runc fixes the following issues: - CVE-2019-19921: Fixed a volume mount race condition with shared mounts (bsc#1160452).

    first Feb 7, 2020
  • Medium max 5.3

    python38-3.8.17-2.1 on GA media

    These are all security issues fixed in the python38-3.8.17-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    libcontainers-common-20210626-7.1 on GA media

    These are all security issues fixed in the libcontainers-common-20210626-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for samba

    This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).

    first Jul 29, 2022
  • Medium max 6.6

    Security update for wayland

    This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. (bsc#1190486)

    first Apr 18, 2023
  • Medium max 6.5

    Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

    This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream releas…

    first Aug 23, 2021
  • Medium max 5.4

    python310-Jinja2-3.1.3-1.1 on GA media

    These are all security issues fixed in the python310-Jinja2-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for ntp

    This update for ntp fixes the following issues: Fixed multiple out of bound writes: CVE-2023-26551 (bsc#1210386), CVE-2023-26552 (bsc#1210388), CVE-2023-26553 (bsc#1210387), CVE-2023-26554 (bsc#1210389).

    first May 9, 2023
  • Medium max 6.5

    Security update for mariadb

    This update for mariadb fixes the following issues: Updated to version 10.6.13: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404).

    first Jun 9, 2023
  • Medium max 5.3

    libopenssl-3-devel-3.1.4-2.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    Security update for python-autobahn

    This update for python-autobahn fixes the following issue: - CVE-2020-35678: Fixed a redirect header injection (boo#1180570).

    first Jan 21, 2021
  • Medium max 6.7

    Security update for salt

    This update for salt fixes the following issues: Security issues fixed: - CVE-2023-34049: arbitrary code execution via symlink attack (bsc#1215157) Bugs fixed: - Fix optimization_order opt to prevent testsuite fails - Improve salt.utils.json.find_json to avoi…

    first Nov 9, 2023
  • Medium max 6.5

    kubernetes1.24-apiserver-1.24.15-2.1 on GA media

    These are all security issues fixed in the kubernetes1.24-apiserver-1.24.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412). - CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411). - CVE-2022-29824: Fixed inte…

    first Apr 26, 2023
  • Medium max 6.1

    Security update for python3

    This update for python3 to 3.6.9 fixes the following issues: Security issues fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238). Non-security …

    first Oct 29, 2019
  • Medium max 4.8

    Security update for php7

    This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode()…

    first Jul 2, 2019
  • Medium max 5.6

    Security update for SUSE Manager Server 3.1

    This update fixes the following issues: nutch: - Fix hadoop log dir. (bsc#1061574) osad, rhnlib: - Fix update mechanism when updating the updateservice (bsc#1073619) pxe-default-image: - Spectre and Meltdown mitigation. (CVE-2017-5753, CVE-2017-5715, CVE-2017…

    first Mar 8, 2018
  • Medium max 5.3

    Security update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client

    This update for crowbar-core, crowbar-openstack, openstack-horizon-plugin-monasca-ui, openstack-monasca-api, openstack-monasca-log-api, openstack-neutron, rubygem-puma, rubygem-rest-client contains the following fixes: Security issue fixed for rubygem-puma: -…

    first Jan 13, 2020
  • Medium max 5.5

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2023-5752: Fixed injection of arbitrary configuration through Mercurial parameter (bsc#1217353).

    first Dec 28, 2023
  • Medium max 6.3

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Remove -IVendor/ from python-config (bsc#1231795)

    first Dec 3, 2024
  • Medium max 6.5

    python3-virtualbox-6.1.32-1.1 on GA media

    These are all security issues fixed in the python3-virtualbox-6.1.32-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP …

    first Nov 23, 2020
  • Medium max 5.5

    ruby3.3-rubygem-activesupport-7.0-7.0.8.4-1.1 on GA media

    These are all security issues fixed in the ruby3.3-rubygem-activesupport-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 24, 2024
  • Medium max 5.7

    kernel-firmware-liquidio-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-liquidio-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.5

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: Added support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through.

    first May 30, 2018
  • Medium max 5.7

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786): - CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth produ…

    first Mar 21, 2022
  • Medium max 5.7

    Security update for aws-nitro-enclaves-cli

    This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501).

    first Jun 10, 2024
  • Medium max 6.5

    Security update for python-reportlab

    This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags (bsc#1182503). - Add missing import in CVE-2020-28463 fix (bsc#1190110).

    first Sep 23, 2021