Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,767 results · Clear filters · Feed

  • Medium max 5.5
    SUSE-SU-2021:2410-1 1 CVE

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service (stack exhaustion) in systemd (PID 1) (bsc#1188063)

    first Jul 20, 2021
  • Medium max 5.9
    SUSE-SU-2023:0403-1 1 CVE

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Feb 14, 2023
  • Medium max 5.9
    SUSE-SU-2019:1371-1 5 CVEs

    Security update for xen

    This update for xen fixes the following issues: Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (MSBDS) - CVE-2018-12127: Microarchitectur…

    first May 28, 2019
  • Medium max 5.0
    SUSE-SU-2021:2412-1 1 CVE

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. (bsc#1188282)

    first Jul 20, 2021
  • Medium max 6.5
    SUSE-SU-2022:3511-2 1 CVE

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624).

    first Oct 20, 2022
  • Medium max 5.8
    SUSE-SU-2018:0831-1 9 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: This update has the next round of Spectre v2 related patches, which now integrate with corresponding changes in libvirt. (CVE-2017-5715 bsc#1068032) The January 2018 release of qemu initially addressed the Spec…

    first Mar 27, 2018
  • Medium max 5.5
    SUSE-SU-2023:2619-1 1 CVE

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a Regular Expression Denial of Service (ReDOS) vulnerability (bsc#1210617).

    first Jun 23, 2023
  • Medium max 4.4
    SUSE-SU-2024:3355-1 2 CVEs

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034) - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)

    first Sep 20, 2024
  • Medium max 5.7
    openSUSE-SU-2025:14769-1 11 CVEs

    kernel-firmware-amdgpu-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-amdgpu-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 4.8
    openSUSE-SU-2025:14686-1 1 CVE

    java-21-openjdk-21.0.6.0-1.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2025
  • Medium max 5.5
    SUSE-SU-2020:2730-1 1 CVE 1 exploited

    Security update for samba

    This update for samba fixes the following issues: - ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon …

    first Sep 23, 2020
  • Medium max 5.3
    openSUSE-SU-2024:13421-1 2 CVEs

    java-1_8_0-openjdk-1.8.0.392-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.392-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3
    SUSE-SU-2024:4165-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Add ipaddress module from https://github.com/phihag/ipaddress - Remove -IVendor/ from python-config (bs…

    first Dec 4, 2024
  • Medium max 5.3
    SUSE-SU-2022:1862-1 1 CVE

    Security update for go1.17

    This update for go1.17 fixes the following issues: - CVE-2022-29526: Fixed faccessat() system call operation that checked the wrong group (bsc#1199413). - go1.17.10 (released 2022-05-10) (bsc#1190649).

    first May 26, 2022
  • Medium max 6.5
    SUSE-SU-2025:02521-1 1 CVE

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

    first Jul 25, 2025
  • Medium max 5.5
    SUSE-SU-2017:0718-1 12 CVEs

    Security update for xen

    This update for xen fixes several issues. These security issues were fixed: - CVE-2016-10155: The virtual hardware watchdog 'wdt_i6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu pro…

    first Mar 17, 2017
  • Medium max 6.2
    openSUSE-SU-2024:13521-1 2 CVEs

    jq-1.7.1-1.1 on GA media

    These are all security issues fixed in the jq-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2
    openSUSE-SU-2025:14818-1 1 CVE

    kubernetes1.31-apiserver-1.31.6-1.1 on GA media

    These are all security issues fixed in the kubernetes1.31-apiserver-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2025
  • Medium max 6.7
    SUSE-SU-2020:3187-1 3 CVEs

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-22 fixes several issues. The following security issues were fixed: - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact …

    first Nov 5, 2020
  • Medium max 6.8
    SUSE-SU-2025:0234-1 2 CVEs

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: Update to 18.20.6: - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#1236250) - CVE-2025-22150: Fixed insufficiently random values used when defining the boundary for a multipa…

    first Jan 24, 2025
  • Medium max 4.3
    SUSE-SU-2024:0103-1 1 CVE

    Security update for rubygem-actionpack-5_1

    This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2020-8166: Fixed ability to forge per-form CSRF tokens given a global CSRF (bsc#1172182).

    first Jan 15, 2024
  • Medium max 5.5
    SUSE-SU-2022:2083-1 19 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) -…

    first Jun 14, 2022
  • Medium max 5.9
    openSUSE-SU-2021:0082-1 3 CVEs

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: - New upstream LTS version 10.23.1: * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite wi…

    first Jan 16, 2021
  • Medium max 6.5
    SUSE-SU-2018:3920-1 7 CVEs

    Security update for java-1_7_0-ibm

    java-1_7_0-ibm is updated to Java 7.0 Service Refresh 10 Fix Pack 35 (bsc#1116574): * Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932 CVE-2018-3149 - IJ10894 CVE-2018-3180 - IJ10933 CVE-2018-3214 - IJ09315 FL…

    first Nov 27, 2018
  • Medium max 6.5
    SUSE-SU-2023:3209-1 2 CVEs

    Security update for libqt5-qtsvg

    This update for libqt5-qtsvg fixes the following issues: - CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654). - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#121129…

    first Aug 7, 2023
  • Medium max 5.1
    SUSE-SU-2020:3491-1 14 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-25656: Fixed a concurrency use-after-free in vt_do_kdgkb_ioctl (bnc#1177766). - CVE-2020-25285: Fixed a race…

    first Nov 23, 2020
  • Medium max 6.5
    SUSE-SU-2022:2382-1 15 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…

    first Jul 13, 2022
  • Medium max 5.5
    openSUSE-SU-2021:0810-1 1 CVE

    Security update for singularity

    This update for singularity fixes the following issues: singularity was updated to version 3.7.3: - Fix for CVE-2021-29136: A dependency used to extract docker/OCI image layers can be tricked into modifying host files by creating a malicious layer that has a …

    first May 30, 2021
  • Medium max 5.7
    openSUSE-SU-2025:14655-1 1 CVE

    hplip-3.24.4-4.1 on GA media

    These are all security issues fixed in the hplip-3.24.4-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 16, 2025
  • Medium max 5.4
    SUSE-SU-2024:1863-2 2 CVEs

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-34064, bsc#1223980, CVE-2024-22195, bsc#1218722)

    first May 30, 2024
  • Medium max 4.7
    SUSE-SU-2018:2163-1 1 CVE

    Security update for polkit

    This update for polkit fixes the following issues: Security issue fixed: - CVE-2018-1116: Fix uid comparison lacking in polkit_backend_interactive_authority_check_authorization (bsc#1099031).

    first Aug 1, 2018
  • Medium max 5.3
    openSUSE-SU-2024:12669-1 2 CVEs

    java-17-openjdk-17.0.6.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.1
    SUSE-SU-2020:3513-1 11 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 RT kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP por…

    first Nov 25, 2020
  • Medium max 5.3
    SUSE-RU-2021:0497-1 1 CVE

    Recommended update for ardana-db, ardana-horizon, ardana-logging, ardana-monasca, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, crowbar-openstack, kibana, openstack-dashboard, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, release-notes-suse-openstack-cloud, sleshammer

    This update for ardana-db, ardana-horizon, ardana-logging, ardana-monasca, ardana-opsconsole-ui, ardana-osconfig, crowbar-core, crowbar-openstack, kibana, openstack-dashboard, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-…

    first Feb 17, 2021
  • Medium max 5.5
    SUSE-SU-2023:4945-1 2 CVEs

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46836: Fixed BTC/SRSO fixes not fully effective (bsc#1216807). - CVE-2023-46835: Fixed mismatch in IOMMU quarantine page table levels on x86/AMD (bsc#1216654). Update to Xen 4.17.3 bug fix release (bs…

    first Dec 21, 2023
  • Medium max 4.8
    SUSE-SU-2025:0338-1 1 CVE

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.26+4 (January 2025 CPU) Security fixes: - CVE-2025-21502: Enhance array handling (JDK-8330045, bsc#1236278) Other changes: - JDK-8224624: Inefficiencies in CodeString…

    first Feb 3, 2025
  • Medium max 5.3
    SUSE-SU-2026:0061-1 3 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-68618: read a malicious SVG file may result in a DoS attack (bsc#1255821). - CVE-2025-68950: check for circular references in mvg files may lead to stack overflow (bsc#1255822). - CVE-2025-692…

    first Jan 7, 2026
  • Medium max 5.3
    SUSE-SU-2024:0265-1 1 CVE

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46839: Fixed phantom functions assigned to incorrect contexts (XSA-449) (bsc#1218851)

    first Jan 30, 2024
  • Medium max 5.3
    SUSE-SU-2024:0329-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638).

    first Feb 5, 2024
  • Medium max 6.5
    openSUSE-SU-2022:0020-1 1 CVE

    Security update for virtualbox

    This update for virtualbox fixes the following issues: - CVE-2022-21394: Fixed vulnerability where low privileged attacker could compromise Oracle VM VirtualBox. (boo#1194924)

    first Jan 24, 2022