Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 10.0

    Security update for xen

    This update fixes the following security issues: - bsc#956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc#956592 - xen: virtual PMU is unsupported (XSA-163) - bsc#956408 - CVE-2015-8339, CVE-2015-8340: xen: …

    first Dec 19, 2015
  • Critical max 9.8

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: POS_Image-Graphical7 was updated to version 0.1.1710765237.46af599: - Version 0.1.1710765237.46af599 * Moved image services to dracut-saltboot package * Use salt bundle - Version 0.1.1645440615.7f1328c * Removed depreca…

    first May 6, 2024
  • Critical max 9.8

    Security update for python-Django

    This update for python-Django fixes the following issues: Security issues fixed: - CVE-2018-7537: Fixed catastrophic backtracking in django.utils.text.Truncator. (bsc#1083305) - CVE-2018-7536: Fixed catastrophic backtracking in urlize and urlizetrunc template…

    first Apr 27, 2018
  • Critical max 9.8

    Security update for jakarta-commons-fileupload

    This update for jakarta-commons-fileupload fixes the following issue: Security issue fixed: - CVE-2016-1000031: Fixed remote execution (bsc#1128963, bsc#1128829).

    first May 10, 2019
  • Critical max 9.1

    glibc-2.38-6.1 on GA media

    These are all security issues fixed in the glibc-2.38-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).

    first Jun 15, 2023
  • Critical max 9.1

    libQt6Pdf6-6.8.1-2.1 on GA media

    These are all security issues fixed in the libQt6Pdf6-6.8.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 29, 2024
  • Critical max 9.0

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) - CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#124342…

    first Jun 10, 2025
  • Critical max 9.1

    Security update for wget

    This update for wget fixes the following issues: - CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)

    first Jun 24, 2024
  • Critical max 10.0
    SUSE-SU-2025:0557-1 256 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705). - CVE-2024-46858: mptcp: pm:…

    first Feb 14, 2025
  • Critical max 9.3

    Security update for raptor

    This update for raptor fixes the following issues: - CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser (bsc#1235673) - CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser (bsc#1235674)

    first Sep 17, 2025
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_in…

    first Oct 30, 2024
  • Critical max 9.8

    MozillaFirefox-135.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-135.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 5, 2025
  • Critical max 9.4

    Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…

    first Aug 5, 2024
  • Critical max 9.8

    python310-Django-4.2.11-2.1 on GA media

    These are all security issues fixed in the python310-Django-4.2.11-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2022:10148-1 4 CVEs 2 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: roundcubemail was updated to 1.5.3 * Enigma: Fix initial synchronization of private keys * Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413) * Fix various …

    first Oct 16, 2022
  • Critical max 9.8
    SUSE-SU-2017:1632-1 10 CVEs 1 exploited

    Security update for tomcat6

    This update for tomcat6 fixes the following issues: Tomcat was updated to version 6.0.53: The full changelog is: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html Security issues fixed: - CVE-2017-5647: A bug in the handling of pipelined requests could l…

    first Jun 21, 2017
  • Critical max 9.8

    ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 25, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_53_6 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - CVE-2021-44906: Fixed a prototype pollution in node-minimist (bsc#1198247). - CVE-2021-44907: Fixed a potential Denial of Service vulnerability in node-qs (bsc#1197283). - CVE-2022-0235: Fixed an exposure…

    first Apr 29, 2022
  • Critical max 9.8

    Security update for erlang

    This update for erlang fixes the following issues: - CVE-2022-37026: fixed a client authorization bypass vulnerability for SSL, TLS, and DTLS in Erlang/OTP. [bsc#1205318]

    first Nov 24, 2022
  • Critical max 9.8

    Security update for SUSE Manager Server 4.2

    This update fixes the following issues: cobbler: - Fix improper authorization (bsc#1197027, CVE-2022-0860) - Prevent error when starting up logrotate.service (bsc#1188191) drools: - Deserialization of Untrusted Data: unsafe data deserialization in DroolsStrea…

    first Mar 2, 2023
  • Critical max 9.8

    MozillaThunderbird-102.6.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-102.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for python-numpy

    This update for python-numpy fixes the following issue: Security issue fixed: - CVE-2019-6446: Set allow_pickle to false by default to restrict loading untrusted content (bsc#1122208). With this update we decrease the possibility of allowing remote attackers …

    first Feb 18, 2019
  • Critical max 9.8

    exim-4.96.1-1.1 on GA media

    These are all security issues fixed in the exim-4.96.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for release-notes-susemanager, release-notes-susemanager-proxy

    This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues: Release notes for SUSE Manager: - Update to SUSE:Manager 4.2.9 * Notification about SUSE Manager end-of-life has been added * CVEs fixed: CVE-2021-43138, CV…

    first Sep 19, 2022
  • Critical max 10.0

    Security update for bubblewrap and flatpak

    This update for bubblewrap and flatpak fixes the following issues: - CVE-2024-42472: Fixed access to files outside sandbox for apps using persistent (bsc#1229157)

    first Sep 3, 2024
  • Critical max 9.8
    SUSE-SU-2015:1319-1 24 CVEs 1 exploited

    Security update for java-1_7_0-openjdk

    OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple…

    first Jul 23, 2015
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…

    first May 22, 2024
  • Critical max 9.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 110.0.5130.23 * CHR-9706 Update Chromium on desktop-stable-124-5130 to 124.0.6367.62 * DNA-116450 Promote 110 to stable - Complete Opera 110 changelog at: https://blogs.opera.com/desktop/changelog-…

    first May 16, 2024
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-26930: Fixed double free of the…

    first Jul 8, 2024
  • Critical max 9.4

    Security update for grafana

    This update for grafana fixes the following issues: grafana was updated from version 9.5.18 to 10.4.13 (jsc#PED-11591,jsc#PED-11649): - Security issues fixed: * CVE-2024-45337: Prevent possible misuse of ServerConfig.PublicKeyCallback by upgrading golang.org/…

    first Feb 14, 2025
  • Critical max 9.8
    SUSE-SU-2022:0183-1 52 CVEs 6 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…

    first Jan 25, 2022
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.0 ESR (MFSA 2022-17)(bsc#1198970): - CVE-2022-29914: Fullscreen notification bypass using popups - CVE-2022-29909: Bypassing permission prompt in nested browsing …

    first May 18, 2022
  • Critical max 10.0

    buildkit-0.12.5-1.1 on GA media

    These are all security issues fixed in the buildkit-0.12.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    libruby3_0-3_0-3.0.3-1.1 on GA media

    These are all security issues fixed in the libruby3_0-3_0-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2025:0556-1 94 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969). - CVE-2024-57893: ALSA: seq: oss: Fix rac…

    first Feb 14, 2025
  • Critical max 9.1

    python36-cryptography-3.3.2-2.4 on GA media

    These are all security issues fixed in the python36-cryptography-3.3.2-2.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_151 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound b…

    first May 21, 2024
  • Critical max 9.8

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).

    first Jun 8, 2023