Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 6.5

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).

    first Mar 30, 2022
  • Medium max 5.3

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2025-50181: Pool managers now properly control redirects when retries is passed. (bsc#1244925)

    first Aug 8, 2025
  • Medium max 6.1

    Security update for systemd

    This update for systemd fixes the following issues: - Updated to version 246.15 - CVE-2021-33910: Fixed a denial of service issue in systemd. (bsc#1188063) - CVE-2020-13529: Fixed an issue that allows crafted DHCP FORCERENEW packet can cause a server running …

    first Aug 23, 2021
  • Medium max 5.3

    gnutls-3.8.9-1.1 on GA media

    These are all security issues fixed in the gnutls-3.8.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2025
  • Medium max 6.2

    Mesa-24.2.6-392.1 on GA media

    These are all security issues fixed in the Mesa-24.2.6-392.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 8, 2024
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-28746: Register File Data Sampling (bsc#1221332) - CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (bsc#1221334)

    first Apr 3, 2024
  • Medium max 6.4

    Security update for grub2

    This update for grub2 fixes the following issues: - Fix for CVE-2020-10713 (bsc#1168994) - Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311 (bsc#1173812) - Fix for CVE-2020-15706 (bsc#1174463) - Fix for CVE-2020-15707 (bsc#1174570) - Use …

    first Jul 29, 2020
  • Medium max 6.4

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2023-43655: Fixed a remote code execution issue that could be triggered if users published a web-accessible composer.phar file (bsc#1215859).

    first Oct 10, 2023
  • Medium max 5.9

    audacity-3.7.0-1.1 on GA media

    These are all security issues fixed in the audacity-3.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2024
  • Medium max 5.5
    SUSE-SU-2020:2722-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …

    first Sep 23, 2020
  • Medium max 5.3

    Security update for python

    This update for python fixes the following issues: Security issue fixed: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955)

    first Jan 5, 2021
  • Medium max 5.3

    Security update for go1.20

    This update for go1.20 fixes the following issues: go1.20.11 (released 2023-11-07) includes security fixes to the path/filepath package, as well as bug fixes to the linker and the net/http package. * security: fix CVE-2023-45283 CVE-2023-45284 path/filepath: …

    first Nov 16, 2023
  • Medium max 5.0

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlink…

    first Feb 18, 2019
  • Medium max 6.1

    Security update for python3-lxml

    This update for python3-lxml fixes the following issues: - CVE-2021-28957: Fixed XSS due to missing input sanitization for HTML5 attributes (bsc#1184177).

    first Nov 10, 2022
  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). - CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807).

    first Nov 16, 2023
  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …

    first Aug 17, 2022
  • Medium max 5.4

    Security update for python-aiosmtpd

    This update for python-aiosmtpd fixes the following issues: - CVE-2024-34083: Fixed MiTM attack could inject extra unencrypted commands after STARTTLS (boo#1224467) - CVE-2024-27305: Fixed SMTP smuggling (boo#1221328)

    first Aug 16, 2024
  • Medium max 5.5

    kernel-devel-6.4.12-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.4.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.2

    Security update for samba

    This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Save registry file outside share as unprivileged user (bsc#1131060). Non-security issue fixed: - Backport changes to support quotas with SMB2 (bsc#1106119).

    first May 8, 2019
  • Medium max 6.5

    Security update for python-PyKMIP

    This update for python-PyKMIP fixes the following issues: Security issue fixed: - CVE-2018-1000872: Fixed a denial-of-service vulnerability which was caused by exhausting the available sockets. To mitigate the issue server socket timeout was decreased (bsc#11…

    first Feb 14, 2019
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated. - CVE-2022-0001, CVE-2022-0002, CV…

    first Mar 23, 2022
  • Medium max 5.9

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: Upgraded to 14.20: - CVE-2025-12817: Fixed missing check for CREATE privileges on the schema in CREATE STATISTICS (bsc#1253332) - CVE-2025-12818: Fixed integer overflow in allocation-size calculations w…

    first Dec 11, 2025
  • Medium max 6.8

    java-15-openjdk-15.0.5.0-1.1 on GA media

    These are all security issues fixed in the java-15-openjdk-15.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2023-28708: Fixed information disclosure by not including the secure attribute (bsc#1209622).

    first Mar 29, 2023
  • Medium max 6.7

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) - CVE…

    first Jun 16, 2022
  • Medium max 4.9

    389-ds-3.1.2~git55.7fbd4526-1.1 on GA media

    These are all security issues fixed in the 389-ds-3.1.2~git55.7fbd4526-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2025
  • Medium max 4.4

    cups-2.4.8-1.1 on GA media

    These are all security issues fixed in the cups-2.4.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8

    Security update for inn

    This update for inn fixes the following issues: - CVE-2021-31998: Fixed locale privialge escalation during the update of inn (bsc#1182321).

    first Jun 17, 2021
  • Medium max 6.5
    openSUSE-SU-2019:0298-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated: to 72.0.3626.121: * CVE-2019-5786: Use-after-free in FileReader fixed (boo#1127602) * Feature fixes update only

    first Mar 23, 2019
  • Medium max 6.5

    Security update for ceph

    This update for ceph fixes the following issues: Security issues fixed: - CVE-2022-0670: Fixed user/tenant read/write access to an entire file system (bsc#1201837). - CVE-2022-3650: Fixed Python script that allowed privilege escalation from ceph to root (bsc#…

    first Mar 27, 2023
  • Medium max 4.6

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2024-13176: Fixed timing side-channel in ECDSA signature computation (bsc#1236136).

    first Feb 11, 2025
  • Medium max 6.5

    Recommended update for net-snmp

    This update for net-snmp fixes the following issues: Update to net-snmp-5.9.4 (bsc#1214364 jsc#PED-6435). * 5.9.4: - libsnmp: - Remove the SNMP_SWIPE_MEM() macro Remove this macro since it is not used in the Net-SNMP code base. - DISPLAY-HINT fixes - Miscella…

    first Jan 4, 2024
  • Medium max 5.5

    libmbedcrypto7-2.28.7-1.1 on GA media

    These are all security issues fixed in the libmbedcrypto7-2.28.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    libtiff-devel-32bit-4.6.0-2.1 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551) - CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)

    first May 2, 2025
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-20855: An issue was discovered in the Linux kernel In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_cre…

    first Aug 6, 2019
  • Medium max 6.5

    Security update for the Linux Kernel (Live Patch 35 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_133 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could ma…

    first Feb 11, 2019
  • Medium max 6.5

    Security update for python-codecov

    This update for python-codecov fixes the following issues: - CVE-2019-10800: Fixed sanitization of gcov arguments before being being provided to the popen method (bsc#1201494).

    first Aug 10, 2022
  • Medium max 4.8

    java-21-openj9-21.0.4.0-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 13, 2024
  • Medium max 4.9

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.2.39 (bsc#1182739) - CVE-2021-2166: DML unspecified vulnerability lead to complete DOS. (bsc#1185870) - CVE-2021-2154: DML unspecified vulnerability can lead to complete DOS. (bsc#1185872) - C…

    first Aug 5, 2021