Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,767 results · Clear filters · Feed

  • Medium max 6.1
    openSUSE-SU-2024:10897-1 2 CVEs

    koan-3.0.1-1.2 on GA media

    These are all security issues fixed in the koan-3.0.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2020:2908-1 9 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to…

    first Oct 13, 2020
  • Medium max 5.5
    SUSE-SU-2018:2973-2 3 CVEs

    Security update for qemu

    This update for qemu fixes the following security issues: - CVE-2018-12617: qmp_guest_file_read had an integer overflow that could have been exploited by sending a crafted QMP command (including guest-file-read with a large count value) to the agent via the l…

    first Oct 18, 2018
  • Medium max 6.1
    SUSE-SU-2025:1565-1 1 CVE

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to 12.5.2: Security fixes: - CVE-2025-22247: Fixed Insecure file handling (bsc#1243106) Other fixes: - Fixed GCC 15 compile time error (bsc#1241938) - Fix building with containerd 1.7.25+ (bsc#1…

    first May 16, 2025
  • Medium max 6.5
    SUSE-SU-2019:0863-1 3 CVEs

    Security update for SUSE Manager Server 3.1

    This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None (bsc#1130658) - SUSE texmode fix (bsc#1109316) - Fix for SUSE distribution detection in ISO building (bsc#1123991) py26-compat-salt: - Remove arch from nam…

    first Apr 3, 2019
  • Medium max 5.9
    openSUSE-SU-2024:11279-1 1 CVE

    python36-w3lib-1.22.0-2.4 on GA media

    These are all security issues fixed in the python36-w3lib-1.22.0-2.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2025:01591-1 2 CVEs

    Security update for python-maturin

    This update for python-maturin fixes the following issues: - CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631). - CVE-2025-4574: crossbeam-channel:…

    first May 19, 2025
  • Medium max 6.5
    SUSE-SU-2019:0320-1 9 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of servi…

    first Feb 11, 2019
  • Medium max 5.5
    SUSE-SU-2018:0602-1 1 CVE

    Security update for rubygem-puppet

    This update for rubygem-puppet fixes the following issues: - CVE-2017-10689: Reset permissions when unpacking tar in PMT. When using minitar, files were unpacked with whatever permissions are in the tarball. This is potentially unsafe, as tarballs can be easi…

    first Mar 5, 2018
  • Medium max 4.3
    SUSE-SU-2024:3517-1 7 CVEs

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2024-45620: Incorrect handling of the length of buffers or files in pkcs15init. (bsc#1230076) - CVE-2024-45619: Incorrect handling length of buffers or files in libopensc. (bsc#1230075) - CVE-2024-45618…

    first Oct 3, 2024
  • Medium max 5.8
    openSUSE-SU-2024:10624-1 3 CVEs

    apache2-mod_auth_openidc-2.4.9.4-1.2 on GA media

    These are all security issues fixed in the apache2-mod_auth_openidc-2.4.9.4-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.3
    openSUSE-SU-2024:10846-1 11 CVEs

    hostapd-2.9-6.2 on GA media

    These are all security issues fixed in the hostapd-2.9-6.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2023:0058-1 1 CVE

    Security update for systemd

    This update for systemd fixes the following issues: Fixing the following issues: - units: restore RemainAfterExit=yes in systemd-vconsole-setup.service - vconsole-setup: don't concat strv if we don't need to (i.e. not in debug log mode) - vconsole-setup: add …

    first Jan 10, 2023
  • Medium max 5.5
    SUSE-SU-2020:2631-1 5 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed a potential negative array index in do_split() (bsc#1173798). - CVE-2020-14356: Fixed a null…

    first Sep 14, 2020
  • Medium max 6.5
    SUSE-SU-2024:0935-1 1 CVE

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46841: Fixed shadow stack vs exceptions from emulation stubs (XSA-451) (bsc#1219885).

    first Mar 19, 2024
  • Medium max 4.2
    SUSE-SU-2025:01752-1 1 CVE

    Security update for slurm_23_02

    This update for slurm_23_02 fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

    first May 29, 2025
  • Medium max 6.5
    openSUSE-SU-2024:11674-1 2 CVEs

    podman-3.4.4-1.1 on GA media

    These are all security issues fixed in the podman-3.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2023:2471-1 1 CVE

    Security update for openssl1

    This update for openssl1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). - Update further expiring certificates that affect tests (bsc#1201627)

    first Jun 8, 2023
  • Medium max 5.5
    openSUSE-SU-2024:13544-1 1 CVE

    libredwg-devel-0.12.5.6924-1.1 on GA media

    These are all security issues fixed in the libredwg-devel-0.12.5.6924-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    openSUSE-SU-2024:13122-1 2 CVEs

    xen-4.17.2_02-1.1 on GA media

    These are all security issues fixed in the xen-4.17.2_02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.7
    SUSE-SU-2021:2971-1 21 CVEs

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: Update to version 2021.8.22 (bsc#1189720): * Fixed compile error when building with libfuse < 2.8.0 * Fixed obsolete macros in configure.ac * Signalled support of UTIME_OMIT to external libfuse2 * …

    first Sep 7, 2021
  • Medium max 4.5
    SUSE-SU-2019:1645-1 3 CVEs

    Security update for netpbm

    This update for netpbm fixes the following issues: Security issues fixed: - CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file (bsc#1086777). - CVE-2017-2579…

    first Jun 21, 2019
  • Medium max 5.5
    SUSE-SU-2024:0549-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

    first Feb 20, 2024
  • Medium max 5.9
    SUSE-SU-2021:0768-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - python27 was upgraded to 2.7.18 - CVE-2021-23336: Fixed a potential web cache poisoning by using a semicolon in query parameters use of semicolon as a query string separator (bsc#1182379).

    first Mar 11, 2021
  • Medium max 4.7
    SUSE-SU-2025:03369-1 2 CVEs

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses (bsc#1249375). - CVE-2025-8114: NULL pointer dereference whe…

    first Sep 26, 2025
  • Medium max 5.4
    openSUSE-SU-2019:2700-1 2 CVEs

    Security update for samba

    This update for samba fixes the following issues: - CVE-2019-14861: Fixed a DNSServer RPC server crash, that allowed an authenticated user to crash the DCE/RPC DNS management server by creating records with matching the zone name (bsc#1158108). - CVE-2019-148…

    first Dec 22, 2019
  • Medium max 5.5
    SUSE-SU-2022:2560-1 10 CVEs

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…

    first Jul 27, 2022
  • Medium max 5.3
    SUSE-SU-2025:0727-1 1 CVE

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-12243: quadratic complexity of DER input decoding in libtasn1 can lead to a DoS (bsc#1236974).

    first Feb 26, 2025
  • Medium max 5.3
    openSUSE-SU-2023:0031-1 1 CVE

    Security update for upx

    upx was updated to fix the following issues: - CVE-2023-23457: Fixed a segmentation fault when processing malicious elf files (boo#1207122) Update to release 4.0.1 * Fix crash when a linux/armeb LZMA-packed binary unpacks itself. * Resolve 'CantPackException:…

    first Jan 23, 2023
  • Medium max 6.4
    openSUSE-SU-2022:1037-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • Medium max 6.9
    openSUSE-SU-2020:1888-1 2 CVEs 1 exploited

    Security update for otrs

    This update for otrs fixes the following issues: - otrs was updated to 6.0.30 (OSA-2020-14 boo#1178434) - CVE-2020-11022, CVE-2020-11023: Vulnerability in third-party library - jquery OTRS uses jquery version 3.4.1, which is vulnerable to cross-site scripting…

    first Nov 9, 2020
  • Medium max 6.5
    SUSE-SU-2023:0375-1 1 CVE

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: IBM Security Update November 2022: (bsc#1205302, bsc#1204703) - CVE-2022-3676: A security vulnerability was fixed in version 8.0.7.20, adding the reference here.

    first Feb 10, 2023
  • Medium max 5.3
    SUSE-SU-2015:2268-1 20 CVEs 1 exploited

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Version update to 8.0-2.0 (bsc#955131): CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 14, 2015
  • Medium max 5.6
    SUSE-SU-2018:1080-1 18 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauth…

    first Apr 25, 2018
  • Medium max 5.9
    SUSE-SU-2019:14051-1 11 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampl…

    first May 16, 2019
  • Medium max 5.7
    SUSE-SU-2022:0942-2 1 CVE

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819).

    first Apr 19, 2022
  • Medium max 5.5
    SUSE-SU-2024:0862-1 1 CVE

    Security update for zabbix

    This update for zabbix fixes the following issues: - CVE-2024-22119: Fixed ability to run XSS in graph item names (bsc#1219775).

    first Mar 13, 2024
  • Medium max 6.1
    SUSE-SU-2019:2932-1 1 CVE

    Security update for rubygem-haml

    This update for rubygem-haml fixes the following issue: - CVE-2017-1002201: Fixed an insufficient character escape that could have led to arbitrary code execution (bsc#1155089).

    first Nov 8, 2019
  • Medium max 5.9
    SUSE-SU-2024:2318-1 1 CVE

    Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

    This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…

    first Jul 8, 2024
  • Medium max 6.0
    SUSE-SU-2020:1657-1 1 CVE

    Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker was updated to 19.03.11-ce runc was updated to version 1.0.0-rc10 containerd was updated to version 1.2.13 - CVE-2020-13401: Fixed an issue whe…

    first Jun 18, 2020