Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for cryptctl

    This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move r…

    first Jun 24, 2021
  • Critical max 9.0
    openSUSE-SU-2024:11681-1 2 CVEs 1 exploited

    log4j-2.16.0-2.1 on GA media

    These are all security issues fixed in the log4j-2.16.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2016:1248-1 6 CVEs 1 exploited

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following security issues - April 2016 Oracle CPU (bsc#976340): - CVE-2016-0686: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Seri…

    first May 6, 2016
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_138 fixes several issues. The following security issues were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local privilege escalatio…

    first Dec 14, 2023
  • Critical max 10.0

    Security update for redis7

    This update for redis7 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995]…

    first Oct 8, 2025
  • Critical max 9.8

    libzbar-devel-0.23.90-5.1 on GA media

    These are all security issues fixed in the libzbar-devel-0.23.90-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46925: Fixed kernel panic caused by race of smc_sock (bsc#1220466). - CVE-2021-46926: Fixed bug when detecting control…

    first Apr 30, 2024
  • Critical max 9.8

    Security update for python310

    This update for python310 fixes the following issues: - Make marshalling of `set` and `frozenset` deterministic (bsc#1211765) python310 was updated to 3.10.12: - urllib.parse.urlsplit() now strips leading C0 control and space characters following the specific…

    first Jul 19, 2023
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488). - CVE-2024-26828: Fix underflow in parse_server_interfa…

    first Jun 25, 2024
  • Critical max 9.8

    Security update for emacs

    This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515). - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512). - CVE-2022-48338: Fixed ruby-mode.el loc…

    first Mar 2, 2023
  • Critical max 9.8

    python36-urllib3-1.26.6-1.2 on GA media

    These are all security issues fixed in the python36-urllib3-1.26.6-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2026:0202-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.11 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-386…

    first Jan 21, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…

    first Oct 30, 2024
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-27389: Fixed pstore inode handling with d_invalidate() (bsc#1223705). - CVE-2024-27043: Fixed a use-after-free in e…

    first May 14, 2024
  • Critical max 9.8
    SUSE-SU-2026:0209-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-396…

    first Jan 21, 2026
  • Critical max 9.8

    erlang-25.1.1-1.1 on GA media

    These are all security issues fixed in the erlang-25.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for librsvg

    This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: * Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 (bsc#1183403) This update was imported from the SUSE:SLE-…

    first Apr 30, 2021
  • Critical max 10.0

    velociraptor-0.7.0.4.git142.862ef23-1.1 on GA media

    These are all security issues fixed in the velociraptor-0.7.0.4.git142.862ef23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 17, 2025
  • Critical max 9.8
    openSUSE-SU-2023:0366-1 3 CVEs 1 exploited

    Security update for vlc

    This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel …

    first Nov 12, 2023
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.0 ESR (MFSA-2024-47, bsc#1230979): - CVE-2024-8900: Clipboard write permission bypass - CVE-2024-9392: Compromised content process can bypass site isol…

    first Oct 3, 2024
  • Critical max 9.1

    Security update for python

    This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect …

    first Apr 25, 2019
  • Critical max 9.8

    python310-Django-4.2.1-1.1 on GA media

    These are all security issues fixed in the python310-Django-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.0
    openSUSE-SU-2025:14708-1 1 CVE 1 exploited

    owasp-modsecurity-crs-4.9.0-1.1 on GA media

    These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 28, 2025
  • Critical max 9.6
    openSUSE-SU-2024:10681-1 1081 CVEs 24 exploited

    chromedriver-93.0.4577.82-1.1 on GA media

    These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for MozillaFirefox, rust-cbindgen

    This update for MozillaFirefox, rust-cbindgen fixes the following issues: MozillaFirefox was updated to Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332) * CVE-2021-38496: Use-after-fr…

    first Oct 18, 2021
  • Critical max 10.0

    Security update for xen

    This update fixes the following security issues: - bsc#956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - Revert x86/IO-APIC: don't create pIRQ mapping from masked RTE until kernel maintenance release goes out. …

    first Dec 19, 2015
  • Critical max 9.1

    Security update for cacti, cacti-spine

    This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.27: * CVE-2024-34340: Authentication Bypass when using using older password hashes (boo#1224240) * CVE-2024-25641: RCE vulnerability when importing packages (boo#1224229) * CVE-2024-31…

    first Sep 2, 2024
  • Critical max 9.8

    Security update for nodejs14

    This update for nodejs14 fixes the following issues: - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156). - CVE-2…

    first Aug 23, 2023
  • Critical max 9.1

    Security update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock

    This update for aws-cli, local-npm-registry, python-boto3, python-botocore, python-coverage, python-flaky, python-pluggy, python-pytest, python-pytest-cov, python-pytest-html, python-pytest-metadata, python-pytest-mock contains the following fixes: Changes in…

    first Oct 23, 2025
  • Critical max 10.0
    SUSE-SU-2025:0499-1 257 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref (bsc#1236703). - CVE-2025-21678: gtp:…

    first Feb 13, 2025
  • Critical max 9.8

    Security update for perl-CryptX

    This update for perl-CryptX fixes the following issues: Updated to version 0.080: 0.080 2023-10-04 - fix #95 AES-NI troubles on MS Windows (gcc compiler) - fix #96 Tests failure with Math::BigInt >= 1.999840 - Enabled AES-NI for platforms with gcc/clang/llvm …

    first Apr 20, 2024
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null…

    first Dec 4, 2025
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-35910: tcp: properly…

    first Apr 9, 2025
  • Critical max 9.8

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459). - CVE-2018-14647: Fixed a denial of service vulnerability caused by a crafted XML docu…

    first Aug 6, 2019
  • Critical max 9.3
    openSUSE-SU-2024:0328-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Update to 1.6.8 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: * Fix XSS vulnerability in post-processing of …

    first Oct 9, 2024
  • Critical max 9.8

    helm-mirror-0.3.1-1.9 on GA media

    These are all security issues fixed in the helm-mirror-0.3.1-1.9 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2022-1292: Fixed command injection in c_rehash (bsc#1199166). - CVE-2022-2068: Fixed more shell code injection issues in c_rehash. (bsc#1200550)

    first Jul 4, 2022
  • Critical max 9.2

    grafana-11.3.0-5.1 on GA media

    These are all security issues fixed in the grafana-11.3.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 16, 2025
  • Critical max 9.8

    libmozjs-102-0-102.5.0-1.1 on GA media

    These are all security issues fixed in the libmozjs-102-0-102.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.0

    Security update for tensorflow2

    This update for tensorflow2 fixes the following issues: - updated to 2.1.2 with following fixes (boo#1177022): * Fixes an undefined behavior causing a segfault in tf.raw_ops.Switch (CVE-2020-15190) * Fixes three vulnerabilities in conversion to DLPack format …

    first Oct 29, 2020