Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_51 fixes several issues. The following security issues were fixed: - CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges nee…

    first Jul 22, 2021
  • Medium max 6.5

    Security update for xerces-j2

    This update for xerces-j2 fixes the following issues: - CVE-2022-23437: Fixed infinite loop within Apache XercesJ xml parser (bsc#1195108).

    first Feb 18, 2022
  • Medium max 4.3

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2024-56378: Fixed out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc (bsc#1234795)

    first Dec 30, 2024
  • Medium max 6.5

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2021-22570: Fix incorrect parsing of nullchar in the proto symbol (bsc#1195258).

    first Mar 14, 2022
  • Medium max 6.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount races i…

    first Oct 21, 2022
  • Medium max 6.5

    Security update for fontforge

    This update for fontforge fixes the following issues: - CVE-2025-50949: Fixed a memory leak in the DlgCreate8 function. (bsc#1252652)

    first Dec 10, 2025
  • Medium max 5.0

    Security update for php72

    This update for php72 fixes the following issues: - CVE-2021-21704: Fixed security issues in pdo_firebase module (bsc#1188035).

    first Aug 6, 2021
  • Medium max 5.6

    Security update for xen

    This update for xen fixes the following issues: Update to Xen 4.7.5 bug fix only release (bsc#1027519) Security issues fixed: - CVE-2018-7540: Fixed DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) (bsc#1080635) - CVE-2018-7541: A grant table v2 -> v…

    first Apr 10, 2018
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-15780: A lockdown bypass for loading unsigned modules using ACPI table injection was fixed. (bsc#1173573) - CVE-20…

    first Aug 3, 2020
  • Medium max 5.3

    java-19-openjdk-19.0.1.0-1.1 on GA media

    These are all security issues fixed in the java-19-openjdk-19.0.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for libxslt

    This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101). - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains cer…

    first Jul 17, 2019
  • Medium max 5.9

    Security update for ruby2.5

    This update for ruby2.5 fixes the following issues: - CVE-2024-43398: Fixed DoS when parsing a XML that has many deep elements with the same local name attributes (bsc#1229673) - CVE-2024-41123: Fixed DoS when parsing an XML that contains many specific charac…

    first Nov 1, 2024
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.131 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Information leaks using 'Memory Disambiguation' feature in modern CPUs were mitigated, aka 'Spect…

    first May 22, 2018
  • Medium max 5.3

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD.…

    first Feb 25, 2021
  • Medium max 6.5

    Security update for kubernetes1.24

    This update for kubernetes1.24 fixes the following issues: Update to version 1.24.16: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin(bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy …

    first Aug 10, 2023
  • Medium max 5.5

    Security update for rubygem-activesupport-5.2

    This update for rubygem-activesupport-5.2 fixes the following issue: - CVE-2023-38037: fixed a File Disclosure of Locally Encrypted Files (bsc#1214807)

    first Nov 3, 2023
  • Medium max 5.5

    nvidia-modprobe-565.77-1.1 on GA media

    These are all security issues fixed in the nvidia-modprobe-565.77-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 21, 2025
  • Medium max 5.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624).

    first Aug 3, 2023
  • Medium max 5.5

    Security update for ceph

    This update for ceph to version 12.2.12-594-g02236657ca fixes the following issues: Security issues fixed: - CVE-2018-16889: Fixed missing sanitation of customer encryption keys from log output in v4 auth. (bsc#1121567)

    first Sep 12, 2019
  • Medium max 6.2

    Recommended update for python-jmespath, python-jsonschema, python-paramiko, python-pexpect, python-pip, python-ply, python-pretend, python-process-tests, python-pycodestyle, python-pyflakes, python-pyxdg, python-tabulate, python-vcversioner

    This update for python-jmespath, python-jsonschema, python-paramiko, python-pexpect, python-pip, python-ply, python-pretend, python-process-tests, python-pycodestyle, python-pyflakes, python-pyxdg, python-tabulate, python-vcversioner fixes the following issue…

    first Oct 1, 2019
  • Medium max 5.7

    kernel-firmware-nfp-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-nfp-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.9

    ruby3.1-rubygem-fluentd-1.14.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-fluentd-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for containerd, docker and runc

    This update for containerd, docker and runc fixes the following issues: containerd: - CVE-2022-31030: Fixed denial of service via invocation of the ExecSync API (bsc#1200145) docker: - Update to Docker 20.10.17-ce. See upstream changelog online at https://doc…

    first Jul 8, 2022
  • Medium max 4.3

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2025-10158: Fixed out of bounds array access via negative index (bsc#1254441)

    first Jan 8, 2026
  • Medium max 5.3

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

    first Feb 8, 2024
  • Medium max 5.1

    Security update for Mesa

    This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).

    first Jan 20, 2020
  • Medium max 6.5

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

    first Sep 30, 2022
  • Medium max 4.6

    Security update for zabbix

    This update for zabbix fixes the following issues: - CVE-2022-24349: Fixed a reflected XSS in the action configuration window (bsc#1196944). - CVE-2022-24917: Fixed a reflected XSS in the service configuration window (bsc#1196945). - CVE-2022-24918: Fixed a r…

    first Apr 19, 2022
  • Medium max 5.9

    libopenssl-3-devel-3.1.4-6.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.4-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image (bsc#1207413).

    first Feb 10, 2023
  • Medium max 5.5

    tuxguitar-1.6.0-2.1 on GA media

    These are all security issues fixed in the tuxguitar-1.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.4

    Security update for ceph

    This update for ceph fixes the following issues: - CVE-2020-10753: Fixed an HTTP header injection via CORS ExposeHeader tag (bsc#1171921). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Jun 29, 2020
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: Update to Xen 4.13.5 bug fix release (bsc#1027519). - CVE-2023-20569: Fixed x86/AMD Speculative Return Stack Overflow (XSA-434) (bsc#1214082). - CVE-2022-40982: Fixed x86/Intel Gather Data Sampling (XSA-435) (bs…

    first Aug 30, 2023
  • Medium max 6.5

    Security update for netty3

    This update for netty3 fixes the following issues: - CVE-2021-43797: Fixed a potential HTTP request smuggling issue due to insufficient validation against control characters (bsc#1193672).

    first Jun 13, 2022
  • Medium max 5.5

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220510 release. (bsc#1199423) Updated to Intel CPU Microcode 20220419 release. (bsc#1198717) - CVE-2022-21151: Processor optimization removal or modification of security-…

    first May 18, 2022
  • Medium max 6.2

    avahi-0.8-27.1 on GA media

    These are all security issues fixed in the avahi-0.8-27.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

    first Jan 13, 2026
  • Medium max 6.5

    Security update for iputils

    This update for iputils fixes the following issues: - CVE-2025-47268: Fixed integer overflow in RTT calculation can lead to undefined behavior (bsc#1242300)

    first May 30, 2025
  • Medium max 6.3

    Security update for binutils

    This update for binutils fixes the following issues: Update to binutils 2.37: * The GNU Binutils sources now requires a C99 compiler and library to build. * Support for Realm Management Extension (RME) for AArch64 has been added. * A new linker option '-z rep…

    first Nov 4, 2021
  • Medium max 4.0

    Security update for python-GitPython

    This update for python-GitPython fixes the following issues: - CVE-2023-41040: Fixed directory traversal attack vulnerability (boo#1214810)

    first Sep 25, 2023