Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,630 results · Clear filters · Feed

  • Critical max 9.1

    Security update for tpm2.0-tools

    This update for tpm2.0-tools fixes the following issues: - CVE-2024-29038: Fixed arbitrary quote data validation by tpm2_checkquote (bsc#1223687). - CVE-2024-29039: Fixed pcr selection value to be compared with the attest (bsc#1223689).

    first May 14, 2024
  • Critical max 9.8

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe (bsc#1192153). - CVE-2021-32803: Fixed insufficient symlink protection in node-tar allowing arbitrary file creation and overwrite…

    first Feb 24, 2022
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-31085: Fixed a divide-by-zero error in do_div(sz,mtd->erasesize) that could cause a local DoS. (bsc#1210778) - CVE…

    first Nov 6, 2023
  • Critical max 9.6

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13 - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753) - CVE-2025-55754: Fixed improper neutralization of escape, meta, or control…

    first Nov 12, 2025
  • Critical max 9.4

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - CVE-2025-7783: Switched away from Math.random() in boundary values for multipart form-encoded data (bsc#1246818)

    first Nov 3, 2025
  • Critical max 9.3

    Security update 4.3.16.1 for SUSE Manager Server 4.3 LTS

    This update fixes the following issues: susemanager-build-keys: - Update SUSE GPG key and make it available for Salt (bsc#1250911) susemanager-sls: - Version 4.3.50-0 * Fix OS Family grain name (bsc#1250911) - Version 4.3.49-0 * Fixed syntax error in Salt sta…

  • Critical max 9.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2025-43343: improved memory handling in web content processing to prevent process crash (bsc#1251975) - CVE-2025-43272: improved memory handling to prevent unexpected process crash (bsc#1250439) - …

    first Oct 21, 2025
  • Critical max 9.4

    jupyter-nbdime-7.0.2-21.1 on GA media

    These are all security issues fixed in the jupyter-nbdime-7.0.2-21.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 24, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-free i…

    first Jun 25, 2025
  • Critical max 9.4

    Security update for python311

    This update for python311 fixes the following issues: python311 was updated from version 3.11.10 to 3.11.13: - Security issues fixed: * CVE-2025-4516: Fixed blocking DecodeError handling vulnerability, which could lead to DoS (bsc#1243273). * CVE-2024-12718, …

    first Jun 20, 2025
  • Critical max 9.8

    ruby3.4-rubygem-activestorage-7.0-7.0.8.6-1.3 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-activestorage-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • Critical max 9.8

    grype-0.92.1-1.1 on GA media

    These are all security issues fixed in the grype-0.92.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 20, 2025
  • Critical max 9.8

    python311-pywayland-0.4.17-3.5 on GA media

    These are all security issues fixed in the python311-pywayland-0.4.17-3.5 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • Critical max 9.8

    MozillaFirefox-134.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-134.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 12, 2025
  • Critical max 9.8

    gio-branding-upstream-2.82.2-2.1 on GA media

    These are all security issues fixed in the gio-branding-upstream-2.82.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 13, 2024
  • Critical max 9.8

    tomcat10-10.1.33-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.33-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 25, 2024
  • Critical max 9.8

    libmozjs-78-0-78.15.0-5.1 on GA media

    These are all security issues fixed in the libmozjs-78-0-78.15.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2024
  • Critical max 9.1

    logcli-3.3.2-1.1 on GA media

    These are all security issues fixed in the logcli-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2024
  • Critical max 9.1

    helm-3.16.4-1.1 on GA media

    These are all security issues fixed in the helm-3.16.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 17, 2024
  • Critical max 9.8

    python310-Django4-4.2.15-1.1 on GA media

    These are all security issues fixed in the python310-Django4-4.2.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 8, 2024
  • Critical max 9.0
    openSUSE-SU-2024:14548-1 25 CVEs 3 exploited

    libQt5Pdf5-5.15.18-1.1 on GA media

    These are all security issues fixed in the libQt5Pdf5-5.15.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 5, 2024
  • Critical max 9.8

    MozillaFirefox-123.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-123.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    Security update for chromium

    This update for chromium fixes the following issue: Chromium 122.0.6261.128 (boo#1221335) * CVE-2024-2400: Use after free in Performance Manager Chromium 122.0.6261.111 (boo#1220131,boo#1220604,boo#1221105) * New upstream security release. * CVE-2024-2173: Ou…

    first Mar 18, 2024
  • Critical max 9.8

    php8-8.3.14-1.1 on GA media

    These are all security issues fixed in the php8-8.3.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 23, 2024
  • Critical max 9.6
    openSUSE-SU-2023:0397-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 105.0.4970.34 * DNA-112796 [Import] Import bookmarks and history don't work * DNA-113147 Add strength setting for Lucid Mode * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable sp…

    first Dec 11, 2023
  • Critical max 9.8

    Security update for libtorrent-rasterbar, qbittorrent

    This update for libtorrent-rasterbar, qbittorrent fixes the following issues: Changes in libtorrent-rasterbar: - Update to version 2.0.9 * fix issue with web seed connections when they close and re-open * fallocate() not supported is not a fatal error * fix p…

    first Dec 7, 2023
  • Critical max 10.0

    flatpak-1.14.4-1.1 on GA media

    These are all security issues fixed in the flatpak-1.14.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.1

    curl-7.88.1-1.1 on GA media

    These are all security issues fixed in the curl-7.88.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8

    chromedriver-111.0.5563.110-1.1 on GA media

    These are all security issues fixed in the chromedriver-111.0.5563.110-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2023:0114-1 43 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 99.0.4788.13 * CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 * DNA-107317 __delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following i…

    first May 27, 2023
  • Critical max 9.8

    apache-sshd-2.9.2-1.1 on GA media

    These are all security issues fixed in the apache-sshd-2.9.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.1

    Security update for Botan

    This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses (boo#1205509).

    first Nov 23, 2022
  • Critical max 9.1

    Security update for Botan

    This update for Botan fixes the following issues: - CVE-2022-43705: Fixed validation of embedded certificates was when checking OCSP responses (boo#1205509).

    first Nov 23, 2022
  • Critical max 9.8

    rxvt-unicode-9.31-1.1 on GA media

    These are all security issues fixed in the rxvt-unicode-9.31-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2022:10221-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 107.0.5304.121 (boo#1205736) * CVE-2022-4135: Heap buffer overflow in GPU

    first Nov 28, 2022
  • Critical max 9.8

    libksba-devel-1.6.2-1.1 on GA media

    These are all security issues fixed in the libksba-devel-1.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2023:0115-1 89 CVEs 4 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 99.0.4788.13 * CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 * DNA-107317 __delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following i…

    first May 27, 2023
  • Critical max 9.8

    MozillaFirefox-100.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-100.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2024:11909-1 7 CVEs 2 exploited

    MozillaThunderbird-91.7.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-91.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6

    MozillaThunderbird-91.6.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-91.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024