Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 5.3

    Security update for php72

    This update for php72 fixes the following issues: - CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient

    first Feb 17, 2021
  • Medium max 5.3

    libopenssl-1_0_0-devel-1.0.2u-15.1 on GA media

    These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-15.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    forgejo-7.0.3-1.1 on GA media

    These are all security issues fixed in the forgejo-7.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: Updated to version 9.4.51.v20230217: - CVE-2023-26048: Fixed an excessive memory consumption when processing a large multipart request (bsc#1210620) - CVE-2023-26049: Fixed a cookie exfiltration issue …

    first Jun 19, 2023
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_80 fixes several issues. The following security issues were fixed: - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege wit…

    first Jul 20, 2022
  • Medium max 6.4

    libwireshark17-4.2.5-1.1 on GA media

    These are all security issues fixed in the libwireshark17-4.2.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9

    Security update for perl

    This update for perl fixes the following issues: - CVE-2025-40909: do not change the current directory when cloning an open directory handle (bsc#1244079)

    first Jun 20, 2025
  • Medium max 6.5

    Security update for apache-commons-io

    This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string (bsc#1184755).

    first Apr 26, 2021
  • Medium max 5.3

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u392 build 08 with OpenJ9 0.41.0 virtual machine - CVE-2023-22067: Fixed an IOR deserialization issue in CORBA (bsc#1216379). - CVE-2023-22081: Fixed a certificate path validatio…

    first Nov 29, 2023
  • Medium max 6.3

    Security update for python-PyMySQL

    This update for python-PyMySQL fixes the following issues: - CVE-2024-36039: Fixed SQL injection if used with untrusted JSON input (bsc#1225070).

    first May 30, 2024
  • Medium max 5.9

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-9824: Fixed an information leak in slirp (bsc#1129622) - CVE-2018-20815: Fix DOS possibility in device tree processing (bsc#1130675) - CVE-2018-12126 CVE-2018-12127 CVE-2018-12…

    first May 16, 2019
  • Medium max 5.3

    Security update for lftp

    This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code det…

    first Apr 2, 2019
  • Medium max 6.3

    go1.19-1.19.3-1.1 on GA media

    These are all security issues fixed in the go1.19-1.19.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3

    libopenssl-3-devel-3.1.4-8.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.4-8.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6

    Security update for crash

    This update for crash fixes the following issues: - Exclude openSUSE from RT KMP build (bsc#1013843) This update also rebuilds the crash kernel module packages with retpoline support to mitigate Spectre Variant 2. (bsc#1068032 CVE-2017-5715)

    first Mar 21, 2018
  • Medium max 6.3

    obs-service-cargo-4.5.0-2.1 on GA media

    These are all security issues fixed in the obs-service-cargo-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 16, 2025
  • Medium max 5.3

    cargo1.66-1.66.0-2.1 on GA media

    These are all security issues fixed in the cargo1.66-1.66.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

    first Jan 12, 2026
  • Medium max 6.1

    Security update for python-Django

    This update for python-Django fixes the following issues: - Fixed potential XSS in admin ForeignKeyRawIdWidget (bsc#1172166, CVE-2020-13596)

    first Jul 27, 2020
  • Medium max 6.3

    Security update for ant

    This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Jul 20, 2020
  • Medium max 4.3

    trivy-0.37.3-1.1 on GA media

    These are all security issues fixed in the trivy-0.37.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2021-33910: Fixed a denial of service in systemd via unit_name_path_escape() (bsc#1188063) - Skip udev rules if 'elevator=' is used (bsc#1184994)

    first Jul 20, 2021
  • Medium max 5.1

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: - Update slab to version 0.4.11: * CVE-2025-55159: Fixed incorrect bounds check in get_disjoint_mut function (bsc#1248006) - Update to version 0.2.8+12: * build(deps): bump actions/checkout from 4 to 5 …

    first Aug 22, 2025
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bnc#1207237). - CVE-2023-23454: Fixed …

    first Feb 14, 2023
  • Medium max 5.0

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. (bsc#1188282)

    first Jul 20, 2021
  • Medium max 6.5

    xen-4.18.1_02-1.1 on GA media

    These are all security issues fixed in the xen-4.18.1_02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.2

    python311-pydantic-2.10.6-1.1 on GA media

    These are all security issues fixed in the python311-pydantic-2.10.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 29, 2025
  • Medium max 5.5

    Security update for osc

    This update for osc fixes the following issues: 0.183.0 - Fix possibility to overwrite special files in .osc (CVE-2024-22034 bsc#1225911) Source files are now stored in the 'sources' subdirectory which prevents name collisons. This requires changing version o…

    first Aug 19, 2024
  • Medium max 6.7

    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_144 fixes several issues. The following security issues were fixed: - CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212347). - CVE-2023-2002: Fixed a flaw that a…

    first Jul 31, 2023
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-2056: Fixed a division by zero denial of service (bsc#1201176). - CVE-2022-2057: Fixed a division by zero denial of service (bsc#1201175). - CVE-2022-2058: Fixed a division by zero denial of service …

    first Aug 3, 2022
  • Medium max 5.7

    Security update for aws-nitro-enclaves-cli

    This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2023-50711: Fixed out of bounds memory accesses in embedded vmm-sys-util (bsc#1218501).

    first Jun 11, 2024
  • Medium max 6.2

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - Update to 2.8 - Added `target` parameter to urlize function. - Added support for `followsymlinks` to the file system loader. - The truncate filter now counts the length. - Added equalto filter that h…

    first Feb 25, 2019
  • Medium max 4.0

    libntpc1-1.2.1-1.2 on GA media

    These are all security issues fixed in the libntpc1-1.2.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for samba

    This update for samba fixes the following issues: - CVE-2019-14907: Fixed a Server-side crash after charset conversion failure during NTLMSSP processing (bsc#1160888).

    first Jan 24, 2020
  • Medium max 4.2

    Security update for slurm_22_05

    This update for slurm_22_05 fixes the following issues: - CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator (bsc#1243666).

    first May 29, 2025
  • Medium max 5.9

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).

    first Dec 9, 2020
  • Medium max 4.3

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2021-30004: Fixed an issue where forging attacks might have occured because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c (bsc#1184348). This update was imported …

    first Apr 16, 2021
  • Medium max 6.3

    obs-service-download_url-0.2.1-1.1 on GA media

    These are all security issues fixed in the obs-service-download_url-0.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • Medium max 6.3

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop (bsc#1195866) - CVE-2022-0585: Large loops in multiple dissectors (bsc#1195867) - CVE-2022-0583: PVFS dissector crash (bsc#1195868)…

    first Mar 4, 2022
  • Medium max 5.9

    Security update for expat

    This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579).

    first Nov 18, 2024