Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 6.8

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2025-26465: Fixed MitM attack against OpenSSH's VerifyHostKeyDNS-enabled client (bsc#1237040).

    first Feb 20, 2025
  • Medium max 4.3

    Security update for samba

    This update for samba fixes the following issues: - CVE-2022-32742: Fixed incorrect length check in SMB1write, SMB1write_and_close, SMB1write_and_unlock (bso#15085) (bsc#1201496).

    first Jul 28, 2022
  • Medium max 6.5

    Security update for python-python-sql

    This update for python-python-sql fixes the following issues: - CVE-2024-9774: Fixed that unary operators does not escape non-Expression (boo#1234653).

    first Dec 21, 2024
  • Medium max 5.1

    Security update for Mesa

    This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).

    first Jan 21, 2020
  • Medium max 5.0

    Security update for eclipse, maven-surefire, tycho

    This update for eclipse, maven-surefire, tycho fixes the following issues: eclipse received the following security fix: - CVE-2023-4218: Fixed a bug where parsing files with xml content laeds to XXE attacks. (bsc#1216992) maven-sunfire was updated from versio…

    first Apr 16, 2024
  • Medium max 5.5

    Recommended update for ucode-intel

    The Intel CPU microcode bundle was updated to the 20180703 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083). More information on: https://download…

    first Oct 18, 2018
  • Medium max 6.7

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes one issue. The following security issue was fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079).

    first May 4, 2024
  • Medium max 5.9

    Security update for go1.15

    This update for go1.15 fixes the following issues: - Updated go to upstream version 1.15.12 (released 2021-05-06) (bsc#1175132). - CVE-2021-31525: Fixed stack overflow via net/http ReadRequest (bsc#1185790).

    first Jun 18, 2021
  • Medium max 4.1

    docker-stable-24.0.9_ce-9.1 on GA media

    These are all security issues fixed in the docker-stable-24.0.9_ce-9.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2025
  • Medium max 5.5

    Recommended update for ucode-intel

    The Intel CPU microcode bundle was updated to the 20180703 release. For the listed CPU chipsets this fixes CVE-2018-3640 (Spectre v3a) and helps mitigating CVE-2018-3639 (Spectre v4) (bsc#1100147 bsc#1087082 bsc#1087083). More information on: https://download…

    first Jul 12, 2018
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-27835: Fixed a use after free vulnerability in infiniband hfi1 driver in the way user calls Ioctl after open dev f…

    first May 16, 2022
  • Medium max 5.3

    python310-bjoern-3.2.2-1.10 on GA media

    These are all security issues fixed in the python310-bjoern-3.2.2-1.10 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • Medium max 6.3

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2024-11168: improper validation of IPv6 and IPvFuture addresses. (bsc#1233307) Bug fixes: - Remove -IVendor/ from python-config. (bsc#1231795) - Include renaming :noindex: option to :no-index: in Sph…

    first Dec 3, 2024
  • Medium max 5.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous u…

    first Jan 16, 2018
  • Medium max 6.5

    Security update for python-aiohttp, python-time-machine

    This update for python-aiohttp, python-time-machine fixes the following issues: python-aiohttp was updated to version 3.9.3: * Fixed backwards compatibility breakage (in 3.9.2) of ``ssl`` parameter when set outside of ``ClientSession`` (e.g. directly in ``TCP…

    first Feb 21, 2024
  • Medium max 5.5

    Security update for kvm

    This update for kvm fixes the following issues: This security issue was fixed: - CVE-2018-3639: Spectre v4 vulnerability mitigation support for KVM guests (bsc#1092885). Systems with microprocessors utilizing speculative execution and speculative execution of…

    first May 23, 2018
  • Medium max 6.5

    Security update for python

    This update for python fixes the following issues: Security issues fixed: - CVE-2019-9674: Improved the documentation, warning about dangers of zip-bombs (bsc#1162825). - CVE-2020-8492: Fixed a regular expression in urrlib that was prone to denial of service …

    first Feb 27, 2020
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2021-33910: Fixed use of strdupa() on a path (bsc#1188063). - logind: terminate cleanly on SIGTERM/SIGINT (bsc#1188018). - Adopting BFQ to control I/O (jsc#SLE-21032, bsc#1134353). - Rules weren't appl…

    first Oct 18, 2021
  • Medium max 5.3

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…

    first Feb 25, 2021
  • Medium max 6.1

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). - CVE-2022-32166: Fixed out of b…

    first May 22, 2023
  • Medium max 4.4

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: - CVE-2020-15095: Fixed information leak through log files (bsc#1173937). - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation on Aarch64 with gcc10 (bsc#1172686).

    first Oct 6, 2020
  • Medium max 4.3

    keylime-config-7.12.1-1.1 on GA media

    These are all security issues fixed in the keylime-config-7.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 16, 2025
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).

    first Dec 10, 2020
  • Medium max 4.3

    Security update for jq

    This update for jq fixes the following issues: - CVE-2024-23337: Fixed signed integer overflow in jv.c:jvp_array_write (bsc#1243450).

    first Jul 18, 2025
  • Medium max 6.5

    Security update for dpdk

    This update for dpdk fixes the following issues: - Update to version 22.11.10 - CVE-2025-23259: Fixed an out-of-order completions in ordinary Rx burst. (bsc#1254161)

    first Nov 26, 2025
  • Medium max 5.5

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2019-20907, bsc#1174091: avoiding possible infinite loop in specifically crafted tarball. - CVE-2020-14422, bsc#1173274: where hash collisions in IPv4Interface and IPv6Interface could lead to DOS.

    first Aug 12, 2020
  • Medium max 5.9

    Security update for microcode_ctl

    This update for microcode_ctl fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Micr…

    first May 14, 2019
  • Medium max 6.7

    Security update for supportutils

    This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes (bsc#1118463). - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#11…

    first Feb 25, 2019
  • Medium max 5.3

    Security update for libgit2

    This update for libgit2 fixes the following issues: - CVE-2023-22742: Verify ssh remote host keys (bsc#1207364)

    first Apr 6, 2023
  • Medium max 6.3

    assimp-devel-5.4.3-4.1 on GA media

    These are all security issues fixed in the assimp-devel-5.4.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 18, 2025
  • Medium max 5.5

    Security update for python312-pip

    This update for python312-pip fixes the following issues: - CVE-2023-5752: Avoiding injection of arbitrary configuration through Mercurial parameter. (bsc#1217353)

    first Sep 6, 2024
  • Medium max 5.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 75 [bsc#1180063, bsc#1177943] CVE-2020-14792 CVE-2020-14797 CVE-2020-14782 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 * …

    first Jan 4, 2021
  • Medium max 5.9

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption (bsc#1178168).

    first Dec 2, 2020
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: The following security vulnerabilities were fixed: - CVE-2018-1139: Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048) - CVE-2018-1140: ldbsearch '(distinguishedName=abc)' and DNS query with escap…

    first Aug 14, 2018
  • Medium max 5.3

    java-21-openjdk-21.0.1.0-1.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for grpc

    This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. (bsc#1228919) - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. (bsc#1233821)

    first Dec 20, 2024
  • Medium max 6.5

    libsqlite3-0-3.36.0-1.2 on GA media

    These are all security issues fixed in the libsqlite3-0-3.36.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for xen

    This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…

    first May 24, 2019
  • Medium max 5.3

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

    first Oct 4, 2023
  • Medium max 5.9

    ntp-4.2.8p15-7.2 on GA media

    These are all security issues fixed in the ntp-4.2.8p15-7.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024