Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315)

    first Oct 7, 2025
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - tool_operate: fix return code when --retry is used but not triggered [bsc#1249367] - Security fixes: * CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191) * CVE-2025-10148: Fixed predictable…

    first Sep 26, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…

    first Sep 23, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862) - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025…

    first Sep 23, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499) - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc…

    first Sep 23, 2025
  • High max 8.1

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched:…

    first Sep 11, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc…

    first Sep 11, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…

    first Sep 23, 2025
  • High max 7.8

    Security update for nvidia-open-driver-G06-signed

    This update for nvidia-open-driver-G06-signed fixes the following issues: Update non-CUDA variant to 580.82.07 (bsc#1249235) Update non-CUDA variant to 580.76.05 (bsc#1247907) - get rid of rule of older KMPs not to load nvidia_drm module, which are still inst…

    first Sep 23, 2025
  • High max 7.5

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issues: - CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory leak (bsc#1245227) - CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#124611…

    first Sep 16, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499) - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc…

    first Sep 23, 2025
  • High max 8.1

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched:…

    first Sep 11, 2025
  • High max 8.1

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…

    first Sep 11, 2025
  • High max 8.1

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…

    first Sep 11, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc…

    first Sep 11, 2025
  • High max 8.1

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched:…

    first Sep 11, 2025
  • High max 7.5

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: Uninitialized memory could lead to leak arbitrary memory contents (bsc#1246114). - CVE-2025-6199: Heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#12452…

    first Sep 8, 2025
  • High max 8.3

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-6032: Machine init command fails to verify TLS certificate when downloading VM images from an OCI registry (bsc#1245320).

    first Sep 8, 2025
  • High max 8.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HI…

    first Sep 1, 2025
  • High max 8.8

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HI…

    first Aug 29, 2025
  • High max 8.7

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2024-2410: Use after free when parsing JSON from a stream (bsc#1223947). - CVE-2024-7254: StackOverflow vulnerability in Protocol Buffers (bsc#1230778). - CVE-2025-4565: Parsing of untrusted Protocol …

    first Sep 5, 2025
  • High max 8.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…

    first Aug 29, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912) - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_grou…

    first Jul 30, 2025
  • High max 8.7

    Security update for xz

    This update for xz fixes the following issues: - CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset (bsc#1240414)

    first Aug 8, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238912) - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups(…

    first Aug 1, 2025
  • High max 8.5

    Security update for helm

    This update for helm fixes the following issues: Update to version 3.18.4 (bsc#1246152, CVE-2025-53547): * Disabling linter due to unknown issue f20a4ad (Matt Farina) * build(deps): bump the k8s-io group with 7 updates 563b094 (dependabot[bot]) * Updating lin…

    first Jul 30, 2025
  • High max 7.8

    Security update for pam-config

    This update for pam-config fixes the following issues: - CVE-2025-6018: Stop adding pam_env in AUTH stack, and be sure to put this module at the really end of the SESSION stack. (bsc#1243226)

    first Jul 29, 2025
  • High max 8.0

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231) - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when res…

    first Jun 23, 2025
  • High max 7.5

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issues: - CVE-2025-47287: Fixed denial of service via generation of an extremely high volume of logs due to multipart/form-data parser (bsc#1243268).

    first Jun 23, 2025
  • High max 7.7

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2025-47273: Fixed a path traversal vulnerability. (bsc#1243313, gh#pypa/setuptools@250a6d17978f)

    first Jun 16, 2025
  • High max 8.4

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_…

    first May 28, 2025
  • High max 8.4

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678) - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in h…

    first May 22, 2025
  • High max 7.8

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2025-4802: Fixed local root exploits when using static built setuid root applications. (elf: Ignore LD_LIBRARY_PATH and debug env var for setuid for static) (bsc#1243317) - pthreads NPTL: lost wakeup fix…

    first May 21, 2025