Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,767 results · Clear filters · Feed

  • Medium max 5.3
    SUSE-SU-2022:2568-1 1 CVE

    Security update for SUSE Manager Server 4.2

    This update fixes the following issues: apache-commons-csv: - Fix the URL for the package - Declare the LICENSE file as license and not doc apache-commons-math3: - Fix the URL for the package - Declare the LICENSE file as license and not doc drools: - Declare…

    first Jul 27, 2022
  • Medium max 5.3
    SUSE-SU-2023:3239-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853)

    first Aug 8, 2023
  • Medium max 5.7
    openSUSE-SU-2025:14770-1 11 CVEs

    kernel-firmware-ath10k-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-ath10k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 6.5
    SUSE-SU-2022:1408-1 9 CVEs

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for…

    first Apr 26, 2022
  • Medium max 5.9
    SUSE-SU-2021:0954-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following security issue: * CVE-2021-3449: An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorith…

    first Mar 25, 2021
  • Medium max 6.5
    openSUSE-SU-2024:13003-1 2 CVEs

    kubernetes1.23-apiserver-1.23.17-4.1 on GA media

    These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2020:0921-1 11 CVEs

    Security update for exiv2

    This update for exiv2 fixes the following issues: exiv2 was updated to latest 0.26 branch, fixing bugs and security issues: - CVE-2017-1000126: Fixed an out of bounds read in webp parser (bsc#1068873). - CVE-2017-9239: Fixed a segmentation fault in TiffImageE…

    first Apr 3, 2020
  • Medium max 5.0
    openSUSE-SU-2025:15725-1 1 CVE

    binutils-2.45-2.1 on GA media

    These are all security issues fixed in the binutils-2.45-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 11, 2025
  • Medium max 6.8
    SUSE-SU-2023:2321-1 10 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: Fixed multiple out of bounds read/write security issues: CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023…

    first May 30, 2023
  • Medium max 6.5
    SUSE-SU-2024:3202-1 2 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-8096: OCSP stapling bypass with GnuTLS. (bsc#1230093) - CVE-2024-7264: ASN.1 date parser overread. (bsc#1228535)

    first Sep 11, 2024
  • Medium max 4.4
    SUSE-SU-2024:2003-1 1 CVE

    Security update for cups

    This update for cups fixes the following issues: - CVE-2024-35235: Fixed a bug in cupsd that could allow an attacker to change the permissions of other files in the system. (bsc#1225365) - Handle local 'Negotiate' authentication response for cli clients (bsc#…

    first Jun 12, 2024
  • Medium max 6.3
    SUSE-SU-2022:4248-1 5 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-3597: Fixed out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (bnc#1204641). - CVE-2022-3599: Fixed out-of-bounds read in writeSingleSection in tools/tiffcrop.c (bnc#1204643). - CVE-2022-3626:…

    first Nov 28, 2022
  • Medium max 6.3
    openSUSE-SU-2021:2125-1 9 CVEs

    Security update for wireshark

    This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can …

    first Jul 10, 2021
  • Medium max 6.2
    SUSE-SU-2023:1583-1 1 CVE

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537)

    first Mar 27, 2023
  • Medium max 5.3
    SUSE-SU-2023:4830-1 1 CVE

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: - CVE-2023-46137: Fixed issue inside serializing pipelined HTTP requests. (bsc#1216588)

    first Dec 14, 2023
  • Medium max 6.2
    openSUSE-SU-2024:14305-1 1 CVE

    tcpdump-4.99.5-1.1 on GA media

    These are all security issues fixed in the tcpdump-4.99.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 3, 2024
  • Medium max 6.2
    openSUSE-SU-2024:11870-1 1 CVE

    swtpm-0.7.1-1.1 on GA media

    These are all security issues fixed in the swtpm-0.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    openSUSE-SU-2020:1265-1 1 CVE

    Security update for python3

    This update for python3 fixes the following issues: - bsc#1174091, CVE-2019-20907: avoiding possible infinite loop in specifically crafted tarball. This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 26, 2020
  • Medium max 5.5
    openSUSE-SU-2024:13366-1 1 CVE

    libsystemd0-254.5-3.1 on GA media

    These are all security issues fixed in the libsystemd0-254.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.6
    SUSE-SU-2018:2092-1 22 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new feature was added: - NVDIMM memory error notification (ACPI 6.2) The following security bugs were fixed: - CVE-2018-13406: An integer overflow in the u…

    first Jul 27, 2018
  • Medium max 6.5
    openSUSE-SU-2019:1398-1 1 CVE

    Security update for bzip2

    This update for bzip2 fixes the following issues: Security issue fixed: - CVE-2016-3189: Fixed a use-after-free in bzip2recover (bsc#985657). This update was imported from the SUSE:SLE-15:Update update project.

    first May 15, 2019
  • Medium max 5.5
    SUSE-SU-2023:0547-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_60 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2cap_core.c of the Bluetooth component (bsc#1206314). - CVE-2023-0179: Fixed incorrect arithmetics w…

    first Feb 27, 2023
  • Medium max 5.4
    SUSE-SU-2025:0016-1 1 CVE

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: - CVE-2024-56326: sandbox breakout through indirect reference to format method in template file. (bsc#1234809)

    first Jan 6, 2025
  • Medium max 6.3
    SUSE-SU-2025:0554-1 1 CVE

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705)

    first Feb 14, 2025
  • Medium max 6.5
    SUSE-SU-2022:1149-1 1 CVE

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Mozilla NSS 3.68.3 (bsc#1197903): - CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use.

    first Apr 11, 2022
  • Medium max 5.7
    openSUSE-SU-2025:15100-1 1 CVE

    python311-oauthlib-3.2.2-5.4 on GA media

    These are all security issues fixed in the python311-oauthlib-3.2.2-5.4 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • Medium max 5.3
    SUSE-SU-2020:1798-1 2 CVEs

    Security update for mariadb-100

    This update for mariadb-100 fixes the following issues: mariadb-100 was updated to version 10.0.44 (bsc#1171550) - CVE-2020-2752: Fixed an issue which could have resulted in unauthorized ability to cause denial of service. - CVE-2020-2812: Fixed an issue whic…

    first Jun 30, 2020
  • Medium max 5.9
    openSUSE-SU-2024:13522-1 1 CVE

    libssh2-1-1.11.0-2.1 on GA media

    These are all security issues fixed in the libssh2-1-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2022:2569-1 10 CVEs

    Security update for xen

    This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-4…

    first Jul 27, 2022
  • Medium max 5.6
    SUSE-SU-2018:0040-1 32 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. This update adds mitigations for various side channel attacks against modern CPUs that could disclose content of otherwise unreadable memory (bnc#1068032). - CV…

    first Jan 8, 2018
  • Medium max 6.0
    SUSE-SU-2023:3929-1 1 CVE

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_19 fixes one issue. The following security issue was fixed: - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#12…

    first Oct 1, 2023
  • Medium max 5.6
    SUSE-SU-2022:2411-1 14 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak ar…

    first Jul 15, 2022
  • Medium max 5.5
    SUSE-SU-2017:0625-1 15 CVEs

    Security update for qemu

    This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-5898: The CCID Card device emulator support was vulnerable to an integer overflow flaw allowing a privileged user to crash the Qemu process on the host resulting in DoS (b…

    first Mar 7, 2017
  • Medium max 5.3
    SUSE-SU-2023:4522-1 1 CVE

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2023-5678: Fixed generating and checking of excessively long X9.42 DH keys that resulted in a possible Denial of Service (bsc#1216922).

    first Nov 21, 2023
  • Medium max 5.9
    SUSE-SU-2018:3686-1 1 CVE

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2018-15919: Remotely observable behaviour in auth-gss2.c in OpenSSH could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. OpenSSH developers do not want…

    first Nov 8, 2018
  • Medium max 5.4
    openSUSE-SU-2025:14928-1 2 CVEs

    libmbedcrypto7-2.28.10-1.1 on GA media

    These are all security issues fixed in the libmbedcrypto7-2.28.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2025
  • Medium max 6.0
    SUSE-SU-2024:3748-1 1 CVE

    Security update for cargo-c

    This update for cargo-c fixes the following issues: Security fixes: - CVE-2024-45405: Fixed gix-path improper path resolution (bsc#1230683) Other fixes: - Update to version 0.10.3~git0.ee7d7ef:

    first Oct 23, 2024
  • Medium max 6.5
    openSUSE-SU-2021:0605-1 1 CVE

    Security update for apache-commons-io

    This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string (bsc#1184755) This update was imported from the SUSE:SLE-15-SP2:Update update…

    first Apr 23, 2021
  • Medium max 6.2
    SUSE-SU-2024:1014-2 2 CVEs

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2023-38471: Fixed reachable assertion in dbus_set_host_name (bsc#1216594). - CVE-2023-38469: Fixed reachable assertions in avahi (bsc#1216598).

    first Mar 27, 2024
  • Medium max 5.5
    SUSE-SU-2022:2079-1 15 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650) -…

    first Jun 14, 2022