Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,630 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2016:1475-1 10 CVEs 1 exploited

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - IBM Java 80-3.0 released: (bsc#977646 bsc#977648 bsc#977650 bsc#979252) CVE-2016-0376 CVE-2016-0264 CVE-2016-0363 CVE-2016-3443 CVE-2016-0687 CVE-2016-0686 CVE-2016-3427 CVE-2016-3449 CVE-2016-3422 …

    first Jun 2, 2016
  • Critical max 9.8

    Security update for go1.21-openssl

    This update for go1.21-openssl fixes the following issues: - CVE-2024-24791: Fixed denial of service due to improper 100-continue handling (bsc#1227314) - CVE-2024-24789: Fixed mishandling of corrupt central directory record in archive/zip (bsc#1225973) - CVE…

    first Oct 24, 2024
  • Critical max 9.8

    Security update for log4j

    This update for log4j fixes the following issues: - CVE-2019-17571: Fixed a remote code execution by deserialization of untrusted data in SocketServer (bsc#1159646).

    first Jan 9, 2020
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7509: Mounting a prepared ext2 filesystem as ext4 could lead to a local denial of service (crash) (bsc#956709…

    first Dec 23, 2015
  • Critical max 9.1

    Security update for libxml2

    This update for libxml2 fixes the following issues: Security issues fixed: - CVE-2017-8872: Out-of-bounds read in htmlParseTryOrFinish. (bsc#1038444)

    first Aug 11, 2017
  • Critical max 9.2

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: - CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 (bsc#1235575) Full changelog: https://github.com/aws/amazon-ssm-agent/compar…

    first Jan 28, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607). - CVE-2022-48911: kabi: add __nf…

    first Oct 9, 2024
  • Critical max 9.1

    python311-h11-0.16.0-1.1 on GA media

    These are all security issues fixed in the python311-h11-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2025
  • Critical max 9.1

    apache2-2.4.62-1.1 on GA media

    These are all security issues fixed in the apache2-2.4.62-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 8, 2024
  • Critical max 9.8
    SUSE-SU-2024:2385-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467). - CVE-2021-47571: staging: rtl8192e: Fix use…

    first Jul 10, 2024
  • Critical max 9.1

    ctdb-4.19.1+git.312.c912b3d2ef6-1.1 on GA media

    These are all security issues fixed in the ctdb-4.19.1+git.312.c912b3d2ef6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0

    Security update for radare2

    This update for radare2 fixes the following issues: - CVE-2025-1864: Fix buffer overflow and potential code execution. (boo#1238451) - CVE-2025-1744: Fix heap-based buffer over-read or buffer overflow. (boo#1238075)

    first Mar 23, 2025
  • Critical max 9.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 115.13 (MFSA 2024-31, bsc#1226316): Security fixes: - CVE-2024-6600: Memory corruption in WebGL API (bmo#1888340) - CVE-2024-6601: Race condition in permission assign…

    first Aug 6, 2024
  • Critical max 9.3

    harfbuzz-devel-10.1.0-2.1 on GA media

    These are all security issues fixed in the harfbuzz-devel-10.1.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 2, 2025
  • Critical max 9.8

    freerdp2-2.11.7-1.1 on GA media

    These are all security issues fixed in the freerdp2-2.11.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    curl-8.0.1-1.1 on GA media

    These are all security issues fixed in the curl-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47659: drm/plane: Move range check for format_count earlier (bsc#1237839). - CVE-2022-49044: dm integrity: fix memory …

    first May 20, 2025
  • Critical max 9.1

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…

    first Jul 24, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2023-52489: Fix race in accessing memory_section->usag…

    first Sep 10, 2024
  • Critical max 9.8
    SUSE-SU-2015:1329-1 20 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    IBM Java was updated to 7.1-3.10 to fix several security issues. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in …

    first Jul 28, 2015
  • Critical max 9.8

    Security update for openvpn

    This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).

    first Mar 29, 2022
  • Critical max 9.8
    SUSE-SU-2015:1345-1 17 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    IBM Java was updated to 6.0-16.7 to fix several security issues. The following vulnerabilities were fixed: * CVE-2015-1931: IBM Java Security Components store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in …

    first Aug 3, 2015
  • Critical max 9.8
    SUSE-SU-2024:4346-1 23 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590). - CVE-2024-44932: idpf: fix UAFs when destroying the …

    first Dec 17, 2024
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2024-26610: Fixed memory corruption…

    first May 21, 2024
  • Critical max 10.0

    Security update for redis

    This update for redis fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] …

    first Oct 9, 2025
  • Critical max 9.8

    go1.20-1.20.3-1.1 on GA media

    These are all security issues fixed in the go1.20-1.20.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.0

    corosync-3.1.9-2.1 on GA media

    These are all security issues fixed in the corosync-3.1.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 27, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_154 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed a heap out-of-bounds write vulnerability in perf_read_group() (bsc#1216644). - CVE-2022-48651: Fixed an out-of-bound b…

    first May 21, 2024
  • Critical max 9.2

    php8-8.3.19-1.1 on GA media

    These are all security issues fixed in the php8-8.3.19-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 15, 2025
  • Critical max 9.8

    Security update for php7

    This update for php7 fixes the following issues: - Version update to 7.4.33: - CVE-2022-31630: Fixed out-of-bounds read due to insufficient input validation in imageloadfont() (bsc#1204979). - CVE-2022-37454: Fixed buffer overflow in hash_update() on long par…

    first Nov 18, 2022
  • Critical max 9.6
    SUSE-SU-2020:2998-1 1 CVE 1 exploited

    Security update for freetype2

    This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914).

    first Oct 22, 2020
  • Critical max 9.8
    SUSE-SU-2016:1303-1 10 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This IBM Java 1.6.0 SR16 FP25 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix …

    first May 13, 2016
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph: Fi…

    first Nov 28, 2025
  • Critical max 9.8

    obex-data-server-0.4.6-15.8 on GA media

    These are all security issues fixed in the obex-data-server-0.4.6-15.8 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.4

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103)

    first Sep 5, 2023
  • Critical max 9.8

    Security update for expat

    This update for expat fixes the following issues: - Fixed a regression caused by the patch for CVE-2022-25236 (bsc#1196784).

    first Mar 15, 2022
  • Critical max 9.1

    Security update for helm

    This update for helm fixes the following issues: Update to version 3.17.1: - CVE-2024-45338: Fixed denial of service due to non-linear parsing of case-insensitive content (bsc#1235318). - CVE-2024-45337: Fixed misuse of ServerConfig.PublicKeyCallback to preve…

    first Feb 20, 2025
  • Critical max 9.6
    openSUSE-SU-2021:1300-1 28 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 93.0.4577.63 (boo#1190096): * CVE-2021-30606: Use after free in Blink * CVE-2021-30607: Use after free in Permissions * CVE-2021-30608: Use after free in Web Share * CVE-2021-30609: Use after free …

    first Sep 21, 2021
  • Critical max 9.8

    traefik2-2.11.10-1.1 on GA media

    These are all security issues fixed in the traefik2-2.11.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 25, 2024
  • Critical max 9.8

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via r…

    first Sep 12, 2019