Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 6.8

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Update to 11.0.13+8 (October 2021 CPU) - CVE-2021-35550, bsc#1191901: Update the default enabled cipher suites preference - CVE-2021-35565, bsc#1191909: com.sun.net.HttpsServer spins on TLS session c…

    first Nov 17, 2021
  • Medium max 5.0

    OpenIPMI-2.0.36.4+git.c114912-1.1 on GA media

    These are all security issues fixed in the OpenIPMI-2.0.36.4+git.c114912-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2024
  • Medium max 6.8

    buildah-1.25.1-1.1 on GA media

    These are all security issues fixed in the buildah-1.25.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denia…

    first Oct 5, 2023
  • Medium max 5.5

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2018-3639: cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits pass through.

    first May 28, 2018
  • Medium max 5.3

    Security update for python312

    This update for python312 fixes the following issues: - Properly quote path names provided when creating a virtual environment (bsc#1232241, CVE-2024-9287)

    first Jan 9, 2025
  • Medium max 6.5

    Security update for php72

    This update for php72 fixes the following issues: Security issues fixed: - CVE-2020-7059: Fixed an out-of-bounds read in php_strip_tags_ex (bsc#1162629). - CVE-2020-7060: Fixed a global buffer-overflow in mbfl_filt_conv_big5_wchar (bsc#1162632). - CVE-2019-20…

    first Feb 18, 2020
  • Medium max 5.3

    Security update for samba

    This update for samba fixes the following issues: - CVE-2019-10218: Client code can return filenames containing path separators (bsc#1144902).

    first Nov 4, 2019
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (…

    first Jun 23, 2023
  • Medium max 6.5

    Security update for golang-github-prometheus-prometheus

    This update for golang-github-prometheus-prometheus fixes the following issues: - Provide and reload firewalld configuration only for: + openSUSE Leap 15.0, 15.1, 15.2 + SUSE SLE15, SLE15 SP1, SLE15 SP2 - Upgrade to upstream version 2.27.1 (jsc#SLE-18254) + B…

    first Aug 12, 2021
  • Medium max 5.3

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

    first Aug 7, 2025
  • Medium max 6.9

    Security update for python-xmltodict

    This update for python-xmltodict fixes the following issues: - CVE-2025-9375: XML injection vulnerability in `xmltodict` allows input data manipulation (bsc#1249036).

    first Oct 7, 2025
  • Medium max 5.5

    perl-Spreadsheet-ParseXLSX-0.290.0-2.1 on GA media

    These are all security issues fixed in the perl-Spreadsheet-ParseXLSX-0.290.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for python-docker

    This update for python-docker fixes the following issues: - CVE-2024-35195: Fix failure with updated python-requests. (bsc#1224788)

    first Jun 7, 2024
  • Medium max 5.5

    Recommended update for google-cloud SDK

    This update for google-cloud SDK fixes the following issues: - Add python311 cloud services packages and dependencies (jsc#PED-7987, jsc#PED-6697) - Bellow 5 binaries Obsolete the python3.6 counterpart: python311-google-resumable-media python311-google-api-co…

    first Sep 13, 2024
  • Medium max 5.5

    xorg-x11-server-21.1.4-2.1 on GA media

    These are all security issues fixed in the xorg-x11-server-21.1.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for wget

    This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL (bsc#1233773)

    first Dec 3, 2024
  • Medium max 5.9

    mysql-connector-java-8.0.28-1.1 on GA media

    These are all security issues fixed in the mysql-connector-java-8.0.28-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412). - CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

    first Apr 27, 2023
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version 8u171 fixes the following issues: These security issues were fixed: - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More…

    first Jul 12, 2018
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to 20191112 security release (bsc#1155988) - Processor Identifier Version Products - Model Stepping F-MO-S/PI Old->New - ---- new platforms ---------------------------------------- - CML-U62 A0…

    first Nov 14, 2019
  • Medium max 5.3

    Security update for ghostscript-library

    This update for ghostscript-library fixes several issues. These security issues were fixed: - CVE-2017-7207: The mem_get_bits_rectangle function allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document…

    first May 3, 2018
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA (bsc#1162388). Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client (bsc#1162388). - CVE-2…

    first Feb 27, 2020
  • Medium max 5.3

    java-1_8_0-openjdk-1.8.0.352-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.352-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for python, python-base

    This update for python, python-base fixes the following issues: Security issues fixed: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663). - CVE-2018-1061: Fixed DoS via re…

    first Dec 10, 2018
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2022-3821: Fixed buffer overrun in format_timespan() function (bsc#1204968). - Import commit 417bb0944e035969594fff83a3ab9c2ca9a56234 * 20743c1a44 logind: fix crash in logind on user-specified message …

    first Nov 29, 2022
  • Medium max 5.3

    Security update for fuse

    This update for fuse fixes the following issues: - CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'use…

    first Oct 19, 2018
  • Medium max 6.3

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has …

    first Sep 14, 2022
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2016-8624: invalid URL parsing with '#' (bsc#1005646) - CVE-2016-8623: Use-after-free via shared cookies (bsc#1005645) - CVE-2016-8621: curl_getdate read out of bounds (bsc#1005642) - CVE-2016-8619: doubl…

    first Nov 2, 2016
  • Medium max 5.3

    yq-4.44.6-1.1 on GA media

    These are all security issues fixed in the yq-4.44.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 12, 2025
  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220809 release (bsc#1201727): - CVE-2022-21233: Fixed an issue where stale data may have been leaked from the legacy xAPIC MMIO region, which could be used to compromise …

    first Aug 17, 2022
  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: These security issues were fixed: - CVE-2017-7228: Broken check in memory_exchange() permited PV guest breakout (bsc#1030442). - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progres…

    first Apr 20, 2017
  • Medium max 5.3

    java-17-openjdk-17.0.2.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    libopenvswitch-2_17-0-2.17.0-12.1 on GA media

    These are all security issues fixed in the libopenvswitch-2_17-0-2.17.0-12.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to version 10.2.40 [bsc#1189320]: - fixes for the following security vulnerabilities: CVE-2021-2372 and CVE-2021-2389

    first Aug 25, 2021
  • Medium max 5.3

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_76 fixes several issues. The following security issues were fixed: - CVE-2021-33655: Fixed out of bounds write with ioctl FBIOPUT_VSCREENINFO (bnc#1201635). - CVE-2022-2588: Fixed use-after-free in cls_route (…

    first Nov 18, 2022
  • Medium max 5.5

    Security update for openssl

    This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641) Security issues fixed: - CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334) - …

    first Feb 14, 2017
  • Medium max 5.9

    go1.16-1.16.8-1.1 on GA media

    These are all security issues fixed in the go1.16-1.16.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    python310-requests-2.31.0-1.2 on GA media

    These are all security issues fixed in the python310-requests-2.31.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

    first Mar 11, 2024