Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    go1.19-1.19.9-1.1 on GA media

    These are all security issues fixed in the go1.19-1.19.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3777: Fixed a use-after-free vulnerability in netfilter: nf_tables component can be exploited to achieve local …

    first Nov 2, 2023
  • Critical max 9.3

    Security update for SUSE Manager Server 4.0

    This update fixes the following issues: hibernate5: - Address CVE-2019-14900 (bsc#1172079) image-sync-formula: - Allow image-sync state on regular minion. Image sync state requires branch-network pillars to get the directory where to sync images. Use default …

    first Sep 16, 2020
  • Critical max 9.4

    Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_191 fixes several issues. The following security issues were fixed: - CVE-2021-47383: Fixed out-of-bound vmalloc access in imageblit (bsc#1225211). - CVE-2024-26923: Fixed false-positive lockdep splat for spin…

    first Jul 9, 2024
  • Critical max 9.8

    Recommended update for grafana

    This update for grafana fixes the following issues: - Fixed changelog entries for the Bugzilla trackers related to previously implemented security fixes (no source code changes)

    first Feb 15, 2024
  • Critical max 9.4

    Security update for the Linux Kernel (Live Patch 46 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_183 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…

    first Aug 5, 2024
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.94 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1254451). - CVE-2022-50409: ne…

    first Jan 21, 2026
  • Critical max 9.8

    ansible-2.2.0.0-1.1 on GA media

    These are all security issues fixed in the ansible-2.2.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2 decryption code could lead to buffer overflows. [bsc#1189520] - CVE-2021-3712: a bug in the code for printing certificate details could le…

    first Aug 25, 2021
  • Critical max 10.0

    Security update for buildah, docker

    This update for buildah, docker fixes the following issues: Changes in docker: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267) - CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#121926…

    first Sep 3, 2024
  • Critical max 9.8

    python39-3.9.16-7.1 on GA media

    These are all security issues fixed in the python39-3.9.16-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.3

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros (bsc#1174955). - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces() (bsc#1177155). - qemu: Adjust max memlock on…

    first Oct 30, 2020
  • Critical max 9.8

    ffmpeg-6-6.1.2-3.1 on GA media

    These are all security issues fixed in the ffmpeg-6-6.1.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2025
  • Critical max 9.8
    SUSE-SU-2025:0229-1 80 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-48742: rtne…

    first Jan 24, 2025
  • Critical max 9.8

    python310-numpy1-1.26.4-1.1 on GA media

    These are all security issues fixed in the python310-numpy1-1.26.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 4, 2024
  • Critical max 9.8

    Security update for cacti, cacti-spine

    This update for cacti, cacti-spine fixes the following issues: cacti-spine 1.2.25: * Spine should see if script to be executed is executable * Enhance number recognition * When polling devices, sort by larger number of items first * Log format may be corrupte…

    first Sep 26, 2023
  • Critical max 10.0

    ruby3.1-rubygem-rack-2.2-2.2.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2022:0139-1 2 CVEs 1 exploited

    Security update for grafana

    This update for grafana fixes the following issues: - CVE-2021-39226: Fixed snapshot authentication bypass (bsc#1191454) - CVE-2021-43813: Fixed markdown path traversal (bsc#1193688)

    first Jan 20, 2022
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010). - CVE-2021-47191: Fix out-of-bound read in resp_readcap16()…

    first Jul 10, 2024
  • Critical max 9.8

    python39-3.9.16-1.1 on GA media

    These are all security issues fixed in the python39-3.9.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52752: smb: client: fix use…

    first Oct 9, 2024
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). - CVE-2023-52752: smb: client: fix use-after-free bug …

    first Oct 31, 2024
  • Critical max 9.8

    libmozjs-115-0-115.4.0-5.1 on GA media

    These are all security issues fixed in the libmozjs-115-0-115.4.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2024
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_158 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…

    first Dec 9, 2024
  • Critical max 9.8
    openSUSE-SU-2024:14393-1 1 CVE 1 exploited

    MozillaFirefox-131.0.2-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-131.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 11, 2024
  • Critical max 9.8

    Security update for libheimdal

    This update for libheimdal fixes the following issues: Update to version 7.8.0 - CVE-2022-42898 PAC parse integer overflows - CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour - CVE-2022-41916 Fix Unicode normalization read of 1 bytes…

    first Jan 16, 2023
  • Critical max 9.8

    Security update for aws-efs-utils

    This update for aws-efs-utils fixes the following issues: Update to version 2.3.3 (bsc#1240044). Security issues fixed: - CVE-2025-55159: slab: incorrect bounds check in `get_disjoint_mut` function can lead to potential crash due to out-of-bounds access (bsc#…

    first Nov 5, 2025
  • Critical max 9.8
    SUSE-SU-2015:1509-1 17 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    IBM Java was updated to version 6 SR16 FP7 (6.0-16.7) to fix several security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to…

    first Aug 21, 2015
  • Critical max 10.0

    Security update for xen

    This update fixes the following security issues: - bsc#956832 - CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list - bsc#956592 - xen: virtual PMU is unsupported (XSA-163) - bsc#956408 - CVE-2015-8339, CVE-2015-8340: xen: …

    first Dec 19, 2015
  • Critical max 9.1

    ruby3.1-rubygem-puma-4-4.3.12-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-puma-4-4.3.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0

    Security update for flatpak

    This update for flatpak fixes the following issues: - CVE-2023-28101: Fixed misleading terminal output with metadata with ANSI control codes (bsc#1209410). - CVE-2023-28100: Fixed unsandboxed TIOCLINUX commands (bsc#1209411).

    first Mar 31, 2023
  • Critical max 9.8

    MozillaFirefox-131.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-131.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2024
  • Critical max 9.1

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has b…

    first Jul 21, 2025
  • Critical max 9.8

    Security update for git

    This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands (bsc#1207033). - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file (…

    first Jan 20, 2023
  • Critical max 9.8

    python310-kubernetes-28.1.0-4.3 on GA media

    These are all security issues fixed in the python310-kubernetes-28.1.0-4.3 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • Critical max 9.8

    Security update for clamav

    This update for clamav fixes the following issues: Security issue fixed: - CVE-2019-12625: Fixed a ZIP bomb issue by adding detection and heuristics for zips with overlapping files (bsc#1144504). - CVE-2019-12900: Fixed an out-of-bounds write in decompress.c …

    first Nov 30, 2019
  • Critical max 9.3

    libraptor-devel-2.0.16-4.1 on GA media

    These are all security issues fixed in the libraptor-devel-2.0.16-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 14, 2025
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Firefox Extended Support Release 91.2.0 ESR * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#119133…

    first Oct 18, 2021
  • Critical max 9.8

    go1.19-1.19.8-1.1 on GA media

    These are all security issues fixed in the go1.19-1.19.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    etcd-for-k8s1.25-3.5.9-1.1 on GA media

    These are all security issues fixed in the etcd-for-k8s1.25-3.5.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024