Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,767 results · Clear filters · Feed

  • Medium max 6.8

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2022-27651: Fixed incorrect default inheritable capabilities for linux container (bsc#1197870). Update to version 1.25.1. The following non-security bugs were fixed: - add workaround for https://bugzil…

    first Aug 5, 2022
  • Medium max 5.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968). - CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973). - CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971). …

    first Oct 20, 2022
  • Medium max 5.5

    Security update for cairo

    This update for cairo fixes the following issues: - CVE-2017-7475: Fixed a segfault in get_bitmap_surface due to malformed font (bsc#1036789). - CVE-2016-9082: fix a segfault when using >4GB images since int values were used for pointer operations (bsc#100725…

    first Jun 26, 2017
  • Medium max 6.5

    Version update for docker, docker-runc, containerd, golang-github-docker-libnetwork

    This update for docker, docker-runc, containerd, golang-github-docker-libnetwork fixes several issues. These security issues were fixed: - CVE-2017-16539: The DefaultLinuxSpec function in oci/defaults.go docker did not block /proc/scsi pathnames, which allowe…

    first Feb 7, 2018
  • Medium max 5.3

    cargo1.65-1.65.0-4.1 on GA media

    These are all security issues fixed in the cargo1.65-1.65.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807). - CVE-2021-28689: Fixed speculative vulnerabilities with bare…

    first Nov 9, 2022
  • Medium max 5.7

    kernel-firmware-mediatek-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-mediatek-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…

    first Jul 28, 2022
  • Medium max 6.5

    Security update for bzip2

    This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657).

    first May 10, 2019
  • Medium max 5.5

    vagrant-2.2.18-1.3 on GA media

    These are all security issues fixed in the vagrant-2.2.18-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5

    kubernetes1.31-apiserver-1.31.7-1.1 on GA media

    These are all security issues fixed in the kubernetes1.31-apiserver-1.31.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2025
  • Medium max 5.9

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2022-40897: Fixed an excessive CPU usage that could be triggered by fetching a malicious HTML document (bsc#1206667).

    first Jan 26, 2023
  • Medium max 5.3

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248).

    first Mar 9, 2023
  • Medium max 5.7

    sevctl-0.4.3-2.1 on GA media

    These are all security issues fixed in the sevctl-0.4.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5

    python310-3.10.14-6.1 on GA media

    These are all security issues fixed in the python310-3.10.14-6.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 10, 2024
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u282 (icedtea 3.18.0) * January 2021 CPU (bsc#1181239) * Security fixes + JDK-8247619: Improve Direct Buffering of Characters (CVE-2020-14803) * Import of OpenJDK 8 u282 bu…

    first Mar 3, 2021
  • Medium max 5.3

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_7 fixes one issue. The following security issue was fixed: This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).

    first Jul 18, 2019
  • Medium max 4.8

    Security update for gnome-shell

    This update for gnome-shell fixes the following issues: Security issue fixed: - CVE-2019-3820: Fixed a partial lock screen bypass (bsc#1124493). This update was imported from the SUSE:SLE-15:Update update project.

    first Jun 18, 2019
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2023-3301: Fixed incorrect cleanup of the vdpa/vhost-net structures if peer nic is present (bsc#1213414). - CVE-2023-0330: Fixed reentrancy issues in the LSI controller (bsc#1207205). - CVE-2023-2861: Fix…

    first Nov 15, 2023
  • Medium max 6.5

    Security update for rubygem-actionview-5_1

    This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2022-27777: Fixed possible cross-site scripting vulnerability in Action View tag helpers (bsc#1199060). - CVE-2020-15169: Fixed cross-site scripting in translation helpers (bsc#1176421).…

    first Apr 27, 2023
  • Medium max 5.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2cap_reassemble_sdu of the fil…

    first Jan 26, 2023
  • Medium max 6.1

    Security update for python-markdown2

    This update for python-markdown2 fixes the following issues: - CVE-2020-11888: Fixed unsanitized input for cross-site scripting (boo#1171379) This update was imported from the openSUSE:Leap:15.1:Update update project.

    first May 12, 2020
  • Medium max 6.7

    Security update for xorg-x11-libX11

    This update for xorg-x11-libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628)

    first Aug 5, 2020
  • Medium max 5.5

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.5.13: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL (bsc#1192497).

    first Dec 1, 2021
  • Medium max 4.4

    Security update for cifs-utils

    This update for cifs-utils fixes the following issues: - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs (bsc#1174477). - Fixed an invalid free in mount.cifs; (bsc#1152930). This update was imported from the SUSE:SLE-15-SP1:Update …

    first Sep 29, 2020
  • Medium max 5.3

    Security update for php8

    This update for php8 fixes the following issues: - CVE-2024-5458: Fixed an issue that allows to bypass filters in filter_var FILTER_VALIDATE_URL. (bsc#1226073)

    first Jun 13, 2024
  • Medium max 5.9

    Recommended update for glibc

    This update of glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931) Other issues fixed: - S390: Fix relocation of _nl_current_LC_CATETORY_used in static build (bsc#12…

    first Oct 12, 2023
  • Medium max 4.7

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935). Other bugfixes: - logs-show: get timestamp and boot I…

    first Jul 8, 2025
  • Medium max 5.5

    Security update for chafa

    This update for chafa fixes the following issues: - CVE-2022-1507: Fix NULL pointer deref in gif_internal_decode_frame (boo#1198965)

    first Jun 23, 2022
  • Medium max 5.3

    Security update for warewulf4

    This update for warewulf4 fixes the following issues: Update to version 4.6.4. Security issues fixed: - CVE-2025-58058: xz: excessive memory consuption when unpacking a large number of corrupted LZMA archives (bsc#1248906). Other issues fixed: - Convert disk …

    first Oct 2, 2025
  • Medium max 5.9

    Security update for perl-Crypt-OpenSSL-RSA

    This update for perl-Crypt-OpenSSL-RSA fixes the following issues: - CVE-2024-2467: Side-channel attack in PKCS#1 v1.5 padding mode (Marvin Attack) (bsc#1221446)

    first Jun 11, 2025
  • Medium max 5.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u282 (icedtea 3.18.0) * January 2021 CPU (bsc#1181239) * Security fixes + JDK-8247619: Improve Direct Buffering of Characters (CVE-2020-14803) * Import of OpenJDK 8 u282 bu…

    first Mar 1, 2021
  • Medium max 5.1

    Security update for Mesa

    This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).

    first Jul 7, 2020
  • Medium max 6.7

    Security update for icinga

    This update for icinga fixes the following issues: Security issues fixed: - CVE-2015-8010: Fixed XSS in the icinga classic UI (boo#952777) - CVE-2016-8641 / CVE-2016-10089: fixed a possible symlink attack for files/dirs created by root (boo#1011630 and boo#10…

    first Nov 5, 2018
  • Medium max 6.5

    govulncheck-vulndb-0.0.20250416T165455-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250416T165455-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 17, 2025
  • Medium max 4.5

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command (bsc#1229685). - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer …

    first Feb 26, 2025
  • Medium max 6.8

    Security update for openssh

    This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during f…

    first Feb 26, 2019
  • Medium max 6.1

    Security update for python-djangorestframework

    This update for python-djangorestframework fixes the following issues: Update to 3.11.2 * Security: Drop urlize_quoted_links template tag in favour of Django's built-in urlize. Removes a XSS vulnerability for some kinds of content in the browsable API. (boo#1…

    first Feb 21, 2021
  • Medium max 6.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel for Azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-19407: The vcpu_scan_ioapic function in arch/x86/kvm/x86.c allowed local users to cause a denial of serv…

    first Jan 23, 2019
  • Medium max 5.9

    Security update for dovecot22

    This update for dovecot22 fixes the following issues: - CVE-2017-14461: dovecot22: rfc822_parse_domain (bsc#1082826) Information Leak Vulnerability

    first May 2, 2018