Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 5.3

    python-2.7.18-15.1 on GA media

    These are all security issues fixed in the python-2.7.18-15.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Update to NSS 3.90.2: - CVE-2023-5388: Fixed timing attack against RSA decryption in TLS (bsc#1216198)

    first Feb 21, 2024
  • Medium max 5.5

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issues: - CVE-2022-31008: Fixed predictable secret seed in URI encryption (bsc#1205267).

    first Dec 8, 2022
  • Medium max 6.3

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

    first Mar 27, 2025
  • Medium max 6.3

    ansible-core-2.16-2.16.13-1.1 on GA media

    These are all security issues fixed in the ansible-core-2.16-2.16.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • Medium max 5.5

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2022-39316: Fixed out of bound read in zgfx decoder (bsc#1205512). - CVE-2022-39317: Fixed undefined behaviour in zgfx decoder (bsc#1205512). - CVE-2022-39320: Fixed heap buffer overflow in urbdrc chan…

    first Feb 13, 2023
  • Medium max 6.2

    python-suds-jurko-0.6-4.1 on GA media

    These are all security issues fixed in the python-suds-jurko-0.6-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for tar

    This update for tar fixes the following issues: - CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). Bug fixes: - Fix hang when unpacking test tarball (bsc#1202436).

    first Feb 20, 2023
  • Medium max 5.6

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: This security issue was fixed: - CVE-2017-5715: Prevent unauthorized disclosure of information to an attacker with local user access caused by speculative execution and indirect branch prediction (bs…

    first Oct 18, 2018
  • Medium max 6.3

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2025-12084: quadratic complexity when building nested elements using `xml.dom.minidom` methods that depend on `_clear_id_cache()` can lead to availability issues when building excessively nested docum…

    first Dec 31, 2025
  • Medium max 5.3

    python312-3.12.0b4-1.1 on GA media

    These are all security issues fixed in the python312-3.12.0b4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38471: Fixed a reachable assertion in dbus_set_host_name. (bsc#1216594) - CVE-2023-38469: Fixed a reachable assertion in avahi_dns_packet_append_record. (bsc#1216598)

    first Jun 25, 2024
  • Medium max 4.4

    Security update for permissions

    This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).

    first Sep 23, 2022
  • Medium max 4.3

    Security update for php72

    This update for php72 fixes the following issues: - CVE-2021-21705 [bsc#1188037]: SSRF bypass in FILTER_VALIDATE_URL

    first Jul 29, 2021
  • Medium max 5.5

    zim-0.73.5-1.2 on GA media

    These are all security issues fixed in the zim-0.73.5-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    kubernetes1.30-apiserver-1.30.11-1.1 on GA media

    These are all security issues fixed in the kubernetes1.30-apiserver-1.30.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2025
  • Medium max 6.5

    qemu-7.1.0-10.1 on GA media

    These are all security issues fixed in the qemu-7.1.0-10.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250211 release (bsc#1237096) - CVE-2024-31068: Improper Finite State Machines (FSMs) in Hardware Logic for some Intel Processors may allow privileged user to po…

    first Feb 18, 2025
  • Medium max 5.9

    jettison-1.5.4-1.1 on GA media

    These are all security issues fixed in the jettison-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    exiv2-0.27.5-7.1 on GA media

    These are all security issues fixed in the exiv2-0.27.5-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    qemu-8.0.3-2.1 on GA media

    These are all security issues fixed in the qemu-8.0.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    python36-translate-toolkit-3.3.6-1.3 on GA media

    These are all security issues fixed in the python36-translate-toolkit-3.3.6-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for ghostscript-library

    This update for ghostscript-library fixes the following issues: - CVE-2018-10194: Fixed a stack-based buffer overflow in gdevpdts.c (bsc#1090099) - Fixed a crash in the fix for CVE-2016-9601.

    first May 22, 2018
  • Medium max 5.5
    SUSE-SU-2020:2724-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Proto…

    first Sep 23, 2020
  • Medium max 6.8

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update to version OpenJDK 8u312 (October 2021 CPU): - CVE-2021-35550: Fixed weak ciphers preferred over stronger ones for TLS (bsc#1191901). - CVE-2021-35556: Fixed excessive memory allocation in …

    first Nov 24, 2021
  • Medium max 4.7

    Security update for valkey

    This update for valkey fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804). - CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913).

    first Jul 7, 2025
  • Medium max 6.2

    glibc-2.41-1.1 on GA media

    These are all security issues fixed in the glibc-2.41-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 2, 2025
  • Medium max 6.5

    Recommended update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.2.1 provides the following fixes: - Security issues fixed (bsc#1154738): * CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429). * CVE-2019-11757: Fixed a use-after-free when creating index …

    first Nov 9, 2019
  • Medium max 6.3

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307).

    first Mar 28, 2025
  • Medium max 6.5

    Security update for python39

    This update for python39 fixes the following issues: python39 was updated to version 3.9.14: - CVE-2020-10735: Fixed DoS due to int() type in PyLong_FromString() not limiting amount of digits when converting text to int (bsc#1203125). - CVE-2021-28861: Fixed …

    first Oct 1, 2022
  • Medium max 6.8

    Security update for permissions

    This update for permissions fixes the following issues: Security issue fixed: - CVE-2020-8013: Fixed a local privilege escalation with mrsh and wodim (bsc#1163922). Non-security issues fixed: - Fixed regression where chkstat breaks without /proc available (bs…

    first May 4, 2020
  • Medium max 5.5

    Security update for coreutils

    This update for coreutils fixes one issue. This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges (bsc#1023041)

    first Apr 3, 2018
  • Medium max 5.9

    Security update for python3-setuptools

    This update for python3-setuptools fixes the following issues: - CVE-2022-40897: Fixed Regular Expression Denial of Service (ReDoS) in package_index.py (bsc#1206667).

    first Nov 21, 2023
  • Medium max 5.5

    rear-2.7-2.1 on GA media

    These are all security issues fixed in the rear-2.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    java-1_8_0-openj9-1.8.0.352-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.352-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.7

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).

    first Dec 13, 2021
  • Medium max 6.6

    Security update for log4j

    This update for log4j fixes the following issues: - CVE-2021-44832: Fixes a remote code execution via JDBC Appender (bsc#1194127) This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Jan 2, 2022
  • Medium max 5.6

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2023-5992: Fixed side-channel leaks while stripping encryption PKCS#1 padding (bsc#1219386).

    first Aug 12, 2025
  • Medium max 5.9

    Security update for openCryptoki

    This update for openCryptoki fixes the following issues: Upgrade openCryptoki to version 3.23 (jsc#PED-3360, jsc#PED-3361) * EP11: Add support for FIPS-session mode * CVE-2024-0914: Updates to harden against RSA timing attacks (bsc#1219217) * Bug fixes - prov…

    first Apr 26, 2024
  • Medium max 6.5

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747): - CVE-2024-44244: Processing maliciously crafted web content may lead to an unexpected process crash. - CVE-2024-44296: Processing maliciously crafted web content …

    first Nov 27, 2024