Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.8

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_88 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 19, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…

    first Aug 19, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 58 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_207 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 17, 2025
  • High max 7.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530) - CVE-2025-53015: Fixed specific XMP file conversion may cause an infinite loop (bsc#1246531) - CVE-2025…

    first Aug 14, 2025
  • High max 7.2

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: - Update to version 3.50.2 - CVE-2025-6965: Fixed an integer truncation to avoid assertion faults. (bsc#1246597)

    first Aug 4, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the li…

    first Aug 2, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 66 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_250 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limit v…

    first Aug 2, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-22115: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (bsc#1241579). - CVE-2025-21772: partitions: mac:…

    first Jul 21, 2025
  • High max 8.8
    SUSE-SU-2025:02321-1 260 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/…

    first Jul 15, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_33 fixes one issue. The following security issue was fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).

    first Jun 26, 2025
  • High max 8.8

    Security update for perl-File-Find-Rule

    This update for perl-File-Find-Rule fixes the following issues: - CVE-2011-10007: Fixed arbitrary code execution when `grep()` encounters a crafted filename (bsc#1244148).

    first Jun 25, 2025
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds a…

    first Jun 24, 2025
  • High max 8.6

    Security update for gstreamer

    This update for gstreamer fixes the following issues: - CVE-2024-47606: Fixed integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes (bsc#1234449)

    first Jun 20, 2025
  • High max 7.5

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled (bsc#1242015).

    first Jun 16, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow…

    first Jun 13, 2025
  • High max 7.5

    Security update for valkey

    This update for valkey fixes the following issues: - CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804) - CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913) - CVE-2025-21605: Output buffer denial of service (…

    first Jun 13, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…

    first Jun 13, 2025
  • High max 7.4

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 45. Security issues fixed: - Oracle April 15 2025 CPU (bsc#1242208) * CVE-2025-21587: unauthorized access, deletion and modification of critical data via …

    first May 30, 2025
  • High max 8.1

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Mozilla Firefox ESR 128.11 (MFSA 2025-44, bsc#1243353): - MFSA-TMP-2025-0001: Double-free in libvpx encoder (bmo#1962421) - CVE-2025-5263: Error handling for script execution was incorrectly…

    first May 30, 2025
  • High max 7.2

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: Upgrade to version 9.4.57.v20241219 - CVE-2024-6763: the HttpURI class does insufficient validation on the authority segment of a URI (bsc#1231652) - CVE-2024-13009: Gzip Request Body Buffer (bsc#12432…

    first May 29, 2025
  • High max 8.4

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-50115: KVM: nSVM: Ignore …

    first May 22, 2025
  • High max 7.5

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issues: - CVE-2025-47287: excessive logging when parsing malformed `multipart/form-data` can lead to a denial-of-service (bsc#1243268).

    first May 23, 2025
  • High max 7.8

    Recommended update for pam_pkcs11

    This update for pam_pkcs11 fixes the following issues: - Removes pam_env from auth stack for security reason [bsc#1243226]

    first Jul 15, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-202…

    first Sep 23, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-3…

    first Sep 23, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…

    first Sep 11, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sch…

    first Sep 11, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) - CVE-2025-38001: net_sched:…

    first Sep 11, 2025
  • High max 7.7

    Security update for jq

    This update for jq fixes the following issues: - CVE-2025-48060: Fixed stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (bsc#1244116).

    first Sep 5, 2025
  • High max 8.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218) - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494:…

    first Sep 1, 2025
  • High max 8.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_9

    This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350) - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350) - CVE-2025-38495: HID: co…

    first Sep 1, 2025
  • High max 7.5

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-8194: Fixed infinite loop and deadlock caused by tar archives with negative offsets (bsc#1247249)

    first Aug 27, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-4945: Fixed Integer Overflow in Cookie Expiration Date Handling (bsc#1243314) - CVE-2025-4948: Fixed Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service (bsc#124333…

    first Aug 21, 2025
  • High max 7.8

    Security update for libarchive

    This update for libarchive fixes the following issues: - CVE-2025-5918: reading past EOF may be triggered for piped file streams (bsc#1244279) - CVE-2025-5917: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c (bsc#1244336) - CVE-…

    first Aug 14, 2025
  • High max 8.7

    Security update for xz

    This update for xz fixes the following issues: - CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset (bsc#1240414)

    first Aug 8, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_8

    This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2…

    first Aug 25, 2025