Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended …

    first Jul 21, 2025
  • Critical max 9.3

    Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_91 fixes several issues. The following security issues were fixed: - CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235921). - CVE-2025-21772: partitions: mac: fix handling of bo…

    first Jul 21, 2025
  • Critical max 9.3

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extend…

    first Jul 21, 2025
  • Critical max 9.4

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point outs…

    first Jul 21, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has b…

    first Jul 21, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…

    first Jul 19, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been th…

    first Jul 19, 2025
  • Critical max 9.3

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234854). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extend…

    first Jul 19, 2025
  • Critical max 9.3

    Security update for FastCGI

    This update for FastCGI fixes the following issues: - CVE-2025-23016: Fixed integer overflow in FastCGI fcgi2 library (bsc#1243325)

    first Jul 18, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-49568: net/smc: chec…

    first Jul 16, 2025
  • Critical max 9.1

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-49794: Fixed a heap use after free which could lead to denial of service. (bsc#1244554) - CVE-2025-49796: Fixed type confusion which could lead to denial of service. (bsc#1244557) - CVE-2025-6170:…

    first Jul 10, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50127: net: sched: fix use-after-…

    first Jun 26, 2025
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to MozillaFirefox 128.12.0 (MFSA 2025-23, bsc#1244670): - CVE-2025-6424: Use-after-free in FontFaceSet - CVE-2025-6425: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID…

    first Jun 26, 2025
  • Critical max 9.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.10.2 (MFSA 2025-40, bsc#1243303): Security fixes: - CVE-2025-4918: Out-of-bounds access when resolving Promise objects (bmo#1966612) - CVE-2025-4919: Out-of-bound…

    first Jun 4, 2025
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.10.1 ESR. - MFSA 2025-37 (bsc#1243303) * CVE-2025-4918: Out-of-bounds access when resolving Promise objects * CVE-2025-4919: Out-of-bounds access when op…

    first May 24, 2025
  • Critical max 9.8

    Recommended update for the Azure SDK and CLI

    This update for the Azure SDK and CLI adds support for the AHB (Azure Hybrid Benefit). (bsc#1176784, jsc#ECO=3105)

    first Mar 30, 2021
  • Critical max 9.8

    Security update for ardana packages

    This update for ardana package fixes the following issues: - Update to version 9.0+git.1560211997.7ac9792: * Adds repository list parameter (bsc#1122825) - Update to version 9.0+git.1557219331.457b6e7: * Update gerrit location (SCRD-9140) - Switch to new Gerr…

    first Aug 5, 2019
  • Critical max 9.8

    Security update for ardana and crowbar

    This update for ardana and crowbar fixes the following issues: - Restrict rootwrap directories for cinder (bsc#1132542) - Change Cinder default log level from DEBUG to INFO (SCRD-7132) - Remove configuration from migration (bsc#1126391) - Configurable innodb …

    first Jul 17, 2019
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: t…

    first Dec 24, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676: scsi: t…

    first Dec 23, 2025
  • Critical max 10.0

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251209T172047 2025-12-09T17:20:47Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4006 CVE-2025-61725 * GO-2025-4176 CVE-2025-65…

    first Dec 15, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null…

    first Nov 24, 2025
  • Critical max 10.0

    Security update for squid

    This update for squid fixes the following issues: - CVE-2025-62168: Fixed failure to redact HTTP authentication credentials in error handling leading to information disclosure (bsc#1252281)

    first Nov 14, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that ca…

    first Oct 23, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…

    first Nov 26, 2025
  • Critical max 9.8

    Security update for mozjs128

    This update for mozjs128 fixes the following issues: - Update to version 128.14.0 (bsc#1248162): + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D comp…

    first Dec 3, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: …

    first Nov 25, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: …

    first Nov 25, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: tra…

    first Nov 13, 2025
  • Critical max 10.0

    Security update for samba

    This update for samba fixes the following issues: Update to 4.22.5: * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280). * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - Relax samba-gpupdate req…

    first Nov 18, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) -…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

    This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: f…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_10

    This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376) - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-49974: NFSD: limit the number of concurrent async COPY operations (bsc#1232384) - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - CVE…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: …

    first Oct 24, 2025