Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

697 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2025:20246-1 507 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register sp…

    first Mar 27, 2025
  • Critical max 9.8
    SUSE-SU-2025:20188-1 8 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-2024-4…

    first Apr 17, 2025
  • Critical max 10.0
    SUSE-SU-2025:20166-1 610 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397:…

    first Mar 28, 2025
  • Critical max 9.8
    SUSE-SU-2025:20164-1 507 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill…

    first Mar 27, 2025
  • Critical max 10.0
    SUSE-SU-2025:20008-1 848 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41013: xfs: do not walk off …

    first Feb 3, 2025
  • Critical max 9.8
    SUSE-SU-2025:03602-1 149 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-39782: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526). - CVE-2025-39773: ne…

    first Oct 15, 2025
  • Critical max 9.8
    SUSE-SU-2025:03383-1 17 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824). - CVE-2024-53177: …

    first Sep 26, 2025
  • Critical max 10.0
    SUSE-SU-2025:02766-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability …

    first Aug 12, 2025
  • Critical max 9.8
    SUSE-SU-2025:20870-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: P…

    first Oct 23, 2025
  • Critical max 10.0
    SUSE-SU-2025:20602-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-36028: …

    first Aug 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:20601-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-3602…

    first Aug 25, 2025
  • Critical max 9.8
    SUSE-SU-2025:20247-1 507 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill…

    first Mar 27, 2025
  • Critical max 9.8
    SUSE-SU-2025:20189-1 6 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0_Update_3

    This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-56648: Fixed net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452) - C…

    first Apr 17, 2025
  • Critical max 10.0
    SUSE-SU-2025:20028-1 826 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41013: xfs: do not walk o…

    first Feb 3, 2025
  • Critical max 9.8
    SUSE-SU-2025:03633-1 196 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-46733: btrfs: fix qgroup res…

    first Oct 17, 2025
  • Critical max 9.8
    SUSE-SU-2025:03600-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resched…

    first Oct 15, 2025
  • Critical max 10.0
    SUSE-SU-2025:02997-1 264 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695) - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS…

    first Aug 27, 2025
  • Critical max 10.0
    SUSE-SU-2025:20586-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-36028: …

    first Aug 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:20577-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-3602…

    first Aug 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:20249-1 610 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397:…

    first Mar 28, 2025
  • Critical max 10.0
    SUSE-SU-2025:20248-1 357 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: ne…

    first Mar 27, 2025
  • Critical max 9.8
    SUSE-SU-2025:03601-1 96 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resched…

    first Oct 15, 2025
  • Critical max 9.8
    SUSE-SU-2025:03344-1 35 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110). - CVE-2022-50116: kernel: tty: n_gsm: f…

    first Sep 24, 2025
  • Critical max 10.0
    SUSE-SU-2025:03011-1 265 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695). - CVE-2024-36028: mm/hugetlb: fix DEBU…

    first Aug 28, 2025
  • Critical max 9.8
    SUSE-SU-2025:20191-1 7 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-45016: Fixed netem: fix return value if duplicate enqueue fails (bsc#1230998) - CVE-2024-47684: Fixed tcp: check skb is non-NULL in tcp_rto_delta_us() (bsc#1231993) …

    first Apr 17, 2025
  • Critical max 9.8
    SUSE-SU-2025:20186-1 8 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-202…

    first Apr 17, 2025
  • Critical max 9.8
    SUSE-SU-2025:20898-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: P…

    first Oct 23, 2025
  • Critical max 10.0
    SUSE-SU-2025:02996-1 238 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707). - CVE-2024-36348, CVE-…

    first Aug 27, 2025
  • Critical max 10.0
    SUSE-SU-2025:02765-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. (bsc#1247564) - CVE-2025-31278: Fixed a vulnerability …

    first Aug 12, 2025
  • Critical max 9.8
    SUSE-SU-2025:02322-1 221 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/…

    first Jul 15, 2025
  • Critical max 10.0
    SUSE-SU-2025:02973-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.5: + CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247564) + CVE-2025-43265: Fixed processing maliciously crafted web conten…

    first Aug 25, 2025
  • Critical max 9.8
    SUSE-SU-2026:0284-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3847…

    first Jan 23, 2026
  • Critical max 9.6
    openSUSE-SU-2026:10376-1 31 CVEs 2 exploited

    chromedriver-146.0.7680.80-1.1 on GA media

    These are all security issues fixed in the chromedriver-146.0.7680.80-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 16, 2026
  • Critical max 9.8
    SUSE-SU-2025:02537-1 221 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/sch…

    first Jul 28, 2025
  • Critical max 9.8
    SUSE-SU-2025:03314-1 17 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824). - CVE-2024-53177: smb…

    first Sep 23, 2025
  • Critical max 10.0
    openSUSE-SU-2025:14897-1 2 CVEs 1 exploited

    tomcat10-10.1.35-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.35-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 15, 2025
  • Critical max 10.0
    openSUSE-SU-2025:14896-1 2 CVEs 1 exploited

    tomcat-9.0.99-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.99-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 15, 2025
  • Critical max 9.8
    SUSE-SU-2020:1147-1 2 CVEs 2 exploited

    Security update for salt

    This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)

    first Apr 29, 2020
  • Critical max 9.8
    openSUSE-SU-2024:14376-1 4 CVEs 1 exploited

    php8-8.3.12-1.1 on GA media

    These are all security issues fixed in the php8-8.3.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2024
  • Critical max 9.8
    SUSE-SU-2023:4016-1 6 CVEs 1 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814) - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575) - CVE-2023-5169: Out-of-bounds write in…

    first Oct 9, 2023