Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,767 results · Clear filters · Feed

  • Medium max 6.8
    SUSE-SU-2025:1338-1 1 CVE

    Security update for haproxy

    This update for haproxy fixes the following issues: - CVE-2025-32464: Fixed heap-based buffer overflow in sample_conv_regsub. (bsc#1240971)

    first Apr 17, 2025
  • Medium max 5.3
    openSUSE-SU-2024:12848-1 1 CVE

    irssi-1.4.4-2.1 on GA media

    These are all security issues fixed in the irssi-1.4.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.7
    openSUSE-SU-2024:13858-1 1 CVE

    kernel-devel-6.8.5-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.8.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3
    SUSE-SU-2019:2798-1 2 CVEs

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2018-20852: Fixed an incorrect domain validation that could lead to cookies being sent to the wrong server. (bsc#1141853)

    first Oct 28, 2019
  • Medium max 6.5
    SUSE-SU-2024:1814-1 1 CVE

    Security Beta update for SUSE Manager Client Tools and Salt

    This update fixes the following issues: golang-github-prometheus-node_exporter: - Add `device_error` label for filesystem metrics. - Update rtnetlink library to fix errors during ARP metrics collection. - update to 1.7.0 (jsc#PED-7893, jsc#PED-7928): * [FEATU…

    first May 29, 2024
  • Medium max 6.7
    openSUSE-SU-2020:1162-1 1 CVE

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628) This update was imported from the SUSE:SLE-15:Update update project.

    first Aug 7, 2020
  • Medium max 5.3
    openSUSE-SU-2024:13097-1 1 CVE

    libopenssl-3-devel-3.1.2-1.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.9
    SUSE-SU-2019:1910-1 4 CVEs

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: This update contains the Intel QSR 2019.1 Microcode release (bsc#1111331) Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microa…

    first Jul 19, 2019
  • Medium max 5.1
    SUSE-SU-2019:2776-1 1 CVE

    Security update for nfs-utils

    This update for nfs-utils fixes the following issues: - CVE-2019-3689: Fixed root-owned files stored in insecure /var/lib/nfs. (bsc#1150733)

    first Oct 24, 2019
  • Medium max 5.3
    openSUSE-SU-2021:0101-1 1 CVE

    Security update for php7

    This update for php7 fixes the following issue: - CVE-2020-7071: Fixed an insufficient filter in parse_url() that accepted URLs with invalid userinfo (bsc#1180706). This update was imported from the SUSE:SLE-15:Update update project.

    first Jan 17, 2021
  • Medium max 5.6
    SUSE-RU-2018:0779-1 1 CVE

    Recommended update for drbd and drbd-utils

    This update for drbd and drbd-utils provides the following fixes: Changes in drbd: - Fix a possible kernel trace while starting the initial syncing of a stacked drbd. (bsc#1058770) - Fix auto promotion after split-brain. (bsc#1074228) - Support passing '--for…

    first Mar 22, 2018
  • Medium max 6.3
    SUSE-SU-2024:1256-1 1 CVE

    Security update for perl-Net-CIDR-Lite

    This update for perl-Net-CIDR-Lite fixes the following issues: - CVE-2021-47154: Fixed leading zeroes in IPv4 octets may allow attackers to bypass certain access controls (bsc#1221564).

    first Apr 12, 2024
  • Medium max 5.1
    SUSE-SU-2020:0111-1 1 CVE

    Security update for Mesa

    This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability (bsc#1156015).

    first Jan 16, 2020
  • Medium max 5.4
    openSUSE-SU-2024:14110-1 1 CVE

    rmt-server-2.18-1.1 on GA media

    These are all security issues fixed in the rmt-server-2.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 5, 2024
  • Medium max 4.3
    SUSE-SU-2022:3879-1 3 CVEs

    Security update for release-notes-susemanager, release-notes-susemanager-proxy

    This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to SUSE Manager 4.2.10 * Apache exporter has been upgraded to version 0.11.0 * CVEs fixed: CVE-2022-43753, CVE-2022…

    first Nov 4, 2022
  • Medium max 5.7
    openSUSE-SU-2025:14794-1 11 CVEs

    kernel-firmware-qlogic-20250206-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-qlogic-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 5.3
    SUSE-SU-2021:0494-1 1 CVE

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2021-21702 [bsc#1182049]: NULL pointer dereference in SoapClient

    first Feb 17, 2021
  • Medium max 5.5
    openSUSE-SU-2021:0548-1 1 CVE

    Security update for umoci

    This update for umoci fixes the following issues: - Update to umoci v0.4.6. - CVE-2021-29136: malicious layer allows overwriting of host files (bsc#1184147) This update was imported from the SUSE:SLE-15:Update update project.

    first Apr 13, 2021
  • Medium max 6.5
    SUSE-SU-2020:1277-1 2 CVEs

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2020-10703: Fixed a daemon crash caused by pools without target paths (bsc#1168683). - CVE-2020-12430: Fixed a memory leak in qemuDomainGetStatsIOThread (bsc#1170765). Non-securi…

    first May 14, 2020
  • Medium max 5.7
    openSUSE-SU-2025:14798-1 11 CVEs

    kernel-firmware-sound-20250210-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-sound-20250210-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 12, 2025
  • Medium max 4.7
    openSUSE-SU-2024:12816-1 4 CVEs

    binutils-2.40-3.1 on GA media

    These are all security issues fixed in the binutils-2.40-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.4
    openSUSE-SU-2025:14626-1 1 CVE

    kubo-0.32.1-1.1 on GA media

    These are all security issues fixed in the kubo-0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 9, 2025
  • Medium max 6.5
    SUSE-SU-2019:0196-1 10 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-9568: In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to …

    first Jan 29, 2019
  • Medium max 5.6
    SUSE-SU-2018:0069-1 2 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. This update is only provided as a fix update for IBM Z platform. - CVE-2017-5753 / 'Spectre Attack': IBM Z fixes were included but not enabled in the previous update…

    first Jan 11, 2018
  • Medium max 6.3
    openSUSE-SU-2024:12510-1 6 CVEs

    libtiff-devel-32bit-4.4.0-5.1 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.4.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    openSUSE-SU-2024:11834-1 1 CVE

    libmruby3-3.0.0-4.1 on GA media

    These are all security issues fixed in the libmruby3-3.0.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2023:2478-1 1 CVE

    Security update for mariadb

    This update for mariadb fixes the following issues: Updated to version 10.5.20: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404).

    first Jun 9, 2023
  • Medium max 5.5
    openSUSE-SU-2022:10253-1 1 CVE

    Security update for multimon-ng

    This update for multimon-ng fixes the following issues: - Update to new upstream release 1.2.0 * Separated FLEX and FLEX_NEXT. The former is identical to 1.1.9, while FLEX_NEXT gained new features, as well as known regressions. (See #168) * Fix CVE-2020-36619…

    first Dec 27, 2022
  • Medium max 5.6
    SUSE-SU-2018:2141-1 5 CVEs

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092885). - CVE-2018-1064: Fix denial…

    first Jul 30, 2018
  • Medium max 5.3
    SUSE-SU-2024:1789-1 1 CVE

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2024-4603: Fixed DSA parameter checks for excessive sizes before validating (bsc#1224388).

    first May 27, 2024
  • Medium max 4.2
    SUSE-SU-2019:1203-1 1 CVE

    Security update for samba

    This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). Non-security issues fixed: - Fixed …

    first May 10, 2019
  • Medium max 6.5
    openSUSE-SU-2019:2205-1 1 CVE

    Security update for expat

    This update for expat fixes the following issues: Security issues fixed: - CVE-2019-15903: Fixed heap-based buffer over-read caused by crafted XML input. (bsc#1149429) This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 28, 2019
  • Medium max 6.5
    openSUSE-SU-2024:13273-1 2 CVEs

    glibc-2.38-3.1 on GA media

    These are all security issues fixed in the glibc-2.38-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.3
    SUSE-SU-2022:3309-1 2 CVEs

    Security update for wireshark

    This update for wireshark fixes the following issues: Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop (bsc#1203388). - CVE-2021-4186: Fixed Gryphon dissector crash (bsc#1194165).

    first Sep 19, 2022
  • Medium max 6.2
    openSUSE-SU-2024:11432-1 2 CVEs

    texlive-collection-basic-2021.185.svn56569-52.2 on GA media

    These are all security issues fixed in the texlive-collection-basic-2021.185.svn56569-52.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    SUSE-SU-2022:1196-1 22 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful primitive that can be us…

    first Apr 14, 2022
  • Medium max 4.7
    openSUSE-SU-2024:12697-1 2 CVEs

    kernel-devel-6.1.12-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 4.8
    openSUSE-SU-2024:14280-1 1 CVE

    python310-aiohttp-3.10.5-1.1 on GA media

    These are all security issues fixed in the python310-aiohttp-3.10.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 20, 2024
  • Medium max 5.9
    SUSE-SU-2023:4108-1 1 CVE

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968).

    first Oct 18, 2023
  • Medium max 5.7
    openSUSE-SU-2022:0064-1 1 CVE

    Security update for python39-pip

    This update for python39-pip fixes the following issues: - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references (bsc#1186819).

    first Jan 12, 2022