Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 5.9

    apache-sshd-2.12.0-1.1 on GA media

    These are all security issues fixed in the apache-sshd-2.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.6

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-27144: Fixed denial of service in parsing function of embedded library Go JOSE (bsc#1237641)

    first Mar 5, 2025
  • Medium max 5.5

    trivy-0.52.0-1.1 on GA media

    These are all security issues fixed in the trivy-0.52.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3

    Security update for tpm2-0-tss

    This update for tpm2-0-tss fixes the following issues: - CVE-2024-29040: Fixed quote data validation by Fapi_VerifyQuote (bsc#1223690).

    first May 14, 2024
  • Medium max 5.5

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a regular rexpression that is vulnerable to ReDOS (bsc#1210617).

    first Jul 5, 2023
  • Medium max 6.9

    ruby3.4-rubygem-rack-2.2-2.2.12-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-rack-2.2-2.2.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 6, 2025
  • Medium max 5.3

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

    first Jul 25, 2023
  • Medium max 4.8

    Security update for php5

    This update for php5 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223).

    first Sep 3, 2020
  • Medium max 6.2

    Security update for texlive-filesystem

    This update for texlive-filesystem fixes the following issues: Security issues fixed: - CVE-2020-8016: Fixed a race condition in the spec file (bsc#1159740). - CVE-2020-8017: Fixed a race condition on a cron job (bsc#1158910).

    first Jun 9, 2020
  • Medium max 5.3

    Security update for python3-Twisted

    This update for python3-Twisted fixes the following issues: - CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588)

    first Nov 29, 2023
  • Medium max 5.3

    xen-4.18.0_06-1.1 on GA media

    These are all security issues fixed in the xen-4.18.0_06-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    python310-3.10.15-2.1 on GA media

    These are all security issues fixed in the python310-3.10.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 25, 2024
  • Medium max 6.3

    Security update for rubygem-rack

    This update for rubygem-rack to version 2.0.8 fixes the following issues: - CVE-2018-16471: Fixed a cross-site scripting (XSS) flaw via the scheme method on Rack::Request (bsc#1116600). - CVE-2019-16782: Fixed a possible information leak and session hijack vu…

    first Feb 12, 2020
  • Medium max 6.5

    php8-8.1.12-1.1 on GA media

    These are all security issues fixed in the php8-8.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-20…

    first Mar 29, 2022
  • Medium max 5.5

    Security update for xen

    This update for xen fixes several issues. These security issues were fixed: - CVE-2017-5973: A infinite loop while doing control transfer in xhci_kick_epctx allowed privileged user inside the guest to crash the host process resulting in DoS (bsc#1025188) - CV…

    first Feb 28, 2017
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2023-2861: Fixed improper access control on special files in 9pfs (bsc#1212968). - CVE-2023-3301: Fixed NULL pointer dereference in vhost_vdpa_get_vhost_net() (bsc#1213414). - CVE-2023-3255: Fixed infinit…

    first Aug 8, 2023
  • Medium max 6.2

    Security update for git

    This update for git fixes the following issues: - CVE-2023-22490: Fixed incorrectly usable local clone optimization even when using a non-local transport (bsc#1208027). - CVE-2023-23946: Fixed issue where a path outside the working tree can be overwritten as …

    first Feb 15, 2023
  • Medium max 5.9

    Security update for ntp

    This update for ntp fixes the following issues: ntp was updated to 4.2.8p15 - CVE-2020-11868: Fixed an issue which a server mode packet with spoofed source address frequently send to the client ntpd could have caused denial of service (bsc#1169740). - CVE-201…

    first Jul 6, 2020
  • Medium max 5.3

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

    first Oct 15, 2019
  • Medium max 5.9

    Security update for rubygem-yajl-ruby

    This update for rubygem-yajl-ruby fixes the following issue: -CVE-2022-24795: Fixed a heap-based buffer overflow when handling large inputs due to an integer overflow (bsc#1198405)

    first Jun 2, 2022
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spectre Var…

    first May 22, 2018
  • Medium max 4.7

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935).

    first Jul 8, 2025
  • Medium max 6.1

    Security update for fail2ban

    This update for fail2ban fixes the following issues: - CVE-2021-32749: prevent a command injection via mail command (boo#1188610) - Integrate change to resolve boo#1146856 and boo#1180738 Update to 0.11.2 - increased stability, filter and action updates New F…

    first Sep 16, 2021
  • Medium max 6.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2019-12781: Added incorrect HTTP detection with reverse-proxy connecting via HTTPS (bsc#1139945). - CVE-2019-3498: Fixed a content spoofing via crafted URL in the default 404 page (bsc#1120932).

    first Nov 29, 2019
  • Medium max 6.3

    ffmpeg-5-5.1.4-13.1 on GA media

    These are all security issues fixed in the ffmpeg-5-5.1.4-13.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2024
  • Medium max 6.4

    Security update for skopeo

    This update for skopeo fixes the following issues: Security issues fixed: - CVE-2019-10214: Fixed missing enforcement of TLS connections (bsc#1144065).

    first Sep 10, 2019
  • Medium max 5.3

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 (bsc#1197126). Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-20…

    first Mar 29, 2022
  • Medium max 6.6

    Security update for net-tools

    This update for net-tools fixes the following issues: Security issues fixed: - Avoid unsafe use of `memcpy` in `ifconfig` (bsc#1248687). - Prevent overflow in `ax25` and `netrom` (bsc#1248687). - Fix stack buffer overflow in `parse_hex` (bsc#1248687). - Fix s…

    first Sep 17, 2025
  • Medium max 5.0

    Security update for qemu

    This update for qemu fixes the following issues: Security issue fixed: - CVE-2019-6778: Fixed a heap buffer overflow issue in the SLiRP networking implementation (bsc#1123156). - CVE-2018-16872: Fixed a host security vulnerability related to handling symlinks…

    first Apr 27, 2019
  • Medium max 5.4

    buildah-1.37.4-1.1 on GA media

    These are all security issues fixed in the buildah-1.37.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2024
  • Medium max 5.7

    kernel-firmware-atheros-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-atheros-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 6.5

    Security update for java-1_7_1-ibm

    java-1_7_1-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 (bsc#1116574): * Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API * Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-313…

    first Apr 27, 2019
  • Medium max 6.4

    forgejo-8.0.3-1.1 on GA media

    These are all security issues fixed in the forgejo-8.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 10, 2024
  • Medium max 5.9

    putty-0.81-1.1 on GA media

    These are all security issues fixed in the putty-0.81-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for opencc

    This update for opencc fixes the following issues: - CVE-2018-16982: Fixed out-of-bounds keyOffset and valueOffset values in BinaryDict.cpp. (bsc#1108310)

    first Nov 29, 2022
  • Medium max 6.3

    Security update for binutils

    This update for binutils fixes the following issues: Update to binutils 2.37: * The GNU Binutils sources now requires a C99 compiler and library to build. * Support for the arm-symbianelf format has been removed. * Support for Realm Management Extension (RME)…

    first Nov 2, 2021
  • Medium max 5.5

    Security update for binutils

    This update for binutils fixes the following issues: binutils was updated to current 2.32 branch [jsc#ECO-368]. Includes following security fixes: - CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412) - C…

    first Oct 25, 2019
  • Medium max 4.0

    Security update for squid

    This update for squid fixes the following issues: - CVE-2025-59362: fixed buffer overflow (bsc#1250627)

    first Oct 17, 2025
  • Medium max 6.4

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 3.6.22: - CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops (bsc#1224274) - CVE-2024-4853: The editcap command line utility could crash when chopping bytes from the beginning o…

    first May 30, 2024