Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573) - CVE-20…

    first Aug 4, 2020
  • Medium max 6.6

    kernel-devel-6.0.7-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.4

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7069: Fixed an issue when AES-CCM mode was used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV was used (bsc#1177351). - CVE-2020-7070: Fixed an issue where percent-en…

    first Oct 16, 2020
  • Medium max 5.5

    Security update for openssl

    This update for openssl fixes the following issues: - CVE-2024-0727: Denial of service when processing a maliciously formatted PKCS12 file (bsc#1219243).

    first Mar 12, 2024
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968). - CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973). - CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971). …

    first Oct 21, 2022
  • Medium max 6.5

    Security update for podman

    This update for podman fixes the following issues: - CVE-2024-9676: Fixed symlink traversal vulnerability in the containers/storage library that could cause Denial of Service (DoS) (bsc#1231698)

    first Oct 24, 2024
  • Medium max 6.1

    Security update for caddy

    This update for caddy fixes the following issues: Update to version 2.5.1: * Fixed regression in Unix socket admin endpoints. * Fixed regression in caddy trust commands. * Hash-based load balancing policies (ip_hash, uri_hash, header, and cookie) use an impro…

    first Jun 10, 2022
  • Medium max 4.3

    Recommended update for apache-commons-io

    This update for apache-commons-io fixes the following issues: apache-commons-io was updated from version 2.15.1 to 2.18.0: - Key changes across versions: * Cleaner code and updated dependencies * Improved security when handling serialized data with the new sa…

    first Apr 7, 2025
  • Medium max 4.9

    Security update for mariadb

    This update for mariadb fixes the following issues: - CVE-2021-46669 (bsc#1199928) - CVE-2022-21427 (bsc#1199928) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27380 (bsc#1198606) - CVE-2022-27381 (bsc#1198607) - CVE-2022-27383 (bsc…

    first Jun 16, 2022
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - bsc#1172033 (CVE-2020-13253) - bsc#1180207 (CVE-2020-14394) - bsc#1172382 (CVE-2020-13754) - bsc#1198038 (CVE-2022-0216) - bsc#1193880 (CVE-2021-3929) - bsc#1197653 (CVE-2022-1050) - bsc#1205808 (CVE-2022-414…

    first Mar 16, 2023
  • Medium max 6.1

    ruby3.2-rubygem-loofah-2.19.1-1.2 on GA media

    These are all security issues fixed in the ruby3.2-rubygem-loofah-2.19.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.8

    wayshot-1.1.9-1.1 on GA media

    These are all security issues fixed in the wayshot-1.1.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for python-PyPDF2

    This update for python-PyPDF2 fixes the following issues: - CVE-2022-24859: Fixed infinite loop vulnerability (boo#1198588)

    first Nov 12, 2024
  • Medium max 6.8

    Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2020-15257: Fixed a privilege escalation in containerd (bsc#1178969). - CVE-2021-21284: potential privilege escalation wh…

    first Feb 11, 2021
  • Medium max 4.4

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues: - CVE-2025-22870: golang.org/x/net/proxy: Fixed proxy bypass using IPv6 zone IDs (bsc#1238702)

    first Mar 14, 2025
  • Medium max 6.2

    Security update for python-zipp

    This update for python-zipp fixes the following issues: - CVE-2024-5569: Fixed DoS vulnerability when processing a specially crafted zip file (bsc#1227547).

    first Jul 11, 2024
  • Medium max 5.3

    java-11-openjdk-11.0.21.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.4

    Security update for obs-service-tar_scm

    This update for obs-service-tar_scm fixes the following issues: Security vulnerabilities addressed: - CVE-2018-12473: Fixed a path traversal issue, which allowed users to access files outside of the repository using relative paths (bsc#1105361) - CVE-2018-124…

    first Mar 23, 2019
  • Medium max 5.5

    fscrypt-0.3.3-1.1 on GA media

    These are all security issues fixed in the fscrypt-0.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10135: Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2…

    first Sep 4, 2020
  • Medium max 5.3

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332). - CVE-2018-16301: Fixed a buffer overflow (bsc#1153332). This update was imported from the SUSE:SLE-15:Upda…

    first Oct 20, 2019
  • Medium max 5.9

    Security update for dnsdist

    This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 (jsc#PED-3402) - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - update to 1.2.0 (bs…

    first Dec 6, 2023
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2022-4415: Fixed systemd-coredump that did not respect the fs.suid_dumpable kernel setting (bsc#1205000). Bug fixes: - Support by-path devlink for multipath nvme block devices (bsc#1200723). - Set SYST…

    first Dec 28, 2022
  • Medium max 5.5

    libvirt-10.1.0-1.1 on GA media

    These are all security issues fixed in the libvirt-10.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    php8-8.0.13-1.1 on GA media

    These are all security issues fixed in the php8-8.0.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation (bsc#1174633, ZDI-CAN-11426). - CVE-2020-14345: XKB out-of-bounds access privilege escalation vul…

    first Aug 25, 2020
  • Medium max 5.5

    ansible-core-2.18.1-1.1 on GA media

    These are all security issues fixed in the ansible-core-2.18.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 5, 2024
  • Medium max 6.5

    Security update for python

    This update for python fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

    first Oct 17, 2022
  • Medium max 5.3

    java-17-openj9-17.0.4.0-1.1 on GA media

    These are all security issues fixed in the java-17-openj9-17.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2022-32206: HTTP compression denial of service (bsc#1200735) - CVE-2022-32208: FTP-KRB bad message verification (bsc#1200737)

    first Jul 7, 2022
  • Medium max 6.5

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).

    first Mar 8, 2024
  • Medium max 5.9

    rekor-1.3.5-1.1 on GA media

    These are all security issues fixed in the rekor-1.3.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12-SP2 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an…

    first Oct 26, 2022
  • Medium max 6.1

    Security update for grafana

    This update for grafana fixes the following issues: Update to version 7.1.5: * Features / Enhancements - Stats: Stop counting the same user multiple times. - Field overrides: Filter by field name using regex. - AzureMonitor: map more units. - Explore: Don't r…

    first Oct 10, 2020
  • Medium max 4.5

    python-eyeD3-0.7.4-3.3 on GA media

    These are all security issues fixed in the python-eyeD3-0.7.4-3.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092631) This feature can be controlled by the 'ssbd=on/off' commandline flag for the XEN hypervisor…

    first May 29, 2018
  • Medium max 5.9

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange (bsc#1173513). - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install (bsc#1142000) - Fixed an i…

    first Dec 17, 2020
  • Medium max 5.6

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-32414: Fixed an out-of-bounds read when parsing text via the Python API. (bsc#1241551) - CVE-2025-32415: Fixed a crafted XML document may lead to a heap-based buffer under-read. (bsc#1241453)

    first May 2, 2025
  • Medium max 5.3

    Security update for rust1.66

    This update for rust1.66 fixes the following issues: - CVE-2022-46176: Fixed missing SSH host key verification in cargo when cloning indexes and dependencies via SSH(bsc#1206930).

    first Jan 24, 2023
  • Medium max 4.0

    GraphicsMagick-1.3.45-3.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.45-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2025