Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-56664: bpf, sockmap: fix race between element replace and close() (bsc#1235250) - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776) - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793) - CVE-2025…

    first Aug 25, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_94 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …

    first Oct 11, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_167 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).

    first Oct 11, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_153 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race…

    first Oct 10, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_201 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class …

    first Sep 10, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class …

    first Sep 10, 2025
  • High max 8.3

    Security update for ovmf

    This update for ovmf fixes the following issues: - CVE-2023-45229: Fixed integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message (bsc#1218879) - CVE-2023-45230: Fixed buffer overflow in the DHCPv6 client via a long Server ID option…

    first Sep 4, 2025
  • High max 8.6
    SUSE-SU-2025:03037-1 5 CVEs 1 exploited

    Security update for git

    This update for git fixes the following issues: Updated to 2.43.7 (jsc#PED-13447): - CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk (bsc#1245938) - CVE-2025-27614: Fixed arbitrary script execution via repo clonation in Gitk (bsc…

    first Sep 1, 2025
  • High max 7.5

    Security update for ignition

    This update for ignition fixes the following issues: - CVE-2022-28948: Fixed an issue during unmarshaling in Go-Yaml v3 can lead to DoS via invalid input (bsc#1248548)

    first Aug 27, 2025
  • High max 8.8

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: Upgrade to 15.14: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…

    first Sep 3, 2025
  • High max 8.8

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Upgrade to 13.22: - CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table (bsc#1248120). - CVE-2025-8714: untrusted data inclusion in `pg_dump` lets superu…

    first Aug 27, 2025
  • High max 7.5

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).

    first Aug 25, 2025
  • High max 7.5

    Security update for python312

    This update for python312 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).

    first Aug 25, 2025
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgraded to 16.10: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump all…

    first Aug 25, 2025
  • High max 8.6

    Security update for kubernetes1.18

    This update for kubernetes1.18 fixes the following issues: - Update to version 1.18.20: - CVE-2021-3121: Fixed a lack of certain index validation in plugin/unmarshal/unmarshal.go. (bsc#1182185)

    first Aug 25, 2025
  • High max 7.5

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249).

    first Aug 21, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_188 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 21, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 21, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can c…

    first Aug 21, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…

    first Aug 21, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 20, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_50 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…

    first Aug 20, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…

    first Aug 19, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_100 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…

    first Aug 19, 2025
  • High max 8.6

    Security update for go1.24-openssl

    This update for go1.24-openssl fixes the following issues: Updated to go1.24.6 (released 2025-08-06) (bsc#1236217): - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go (bsc#1246118) - CVE-2025-47906: Fixed incorrect exp…

    first Aug 18, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_158 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…

    first Aug 17, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…

    first Aug 17, 2025
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_7_8 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can …

    first Aug 16, 2025
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer can co…

    first Aug 16, 2025
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 4 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_14 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…

    first Aug 16, 2025
  • High max 8.6

    Security update for go1.23-openssl

    This update for go1.23-openssl fixes the following issues: Updated to go1.23.12 (released 2025-08-06) (bsc#1229122): - CVE-2025-4674: Fixed unexpected command execution in untrusted VCS repositories in cmd/go (bsc#1246118) - CVE-2025-47906: Fixed incorrect ex…

    first Aug 15, 2025
  • High max 7.5

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: - Update to version 0.2.7+141: * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193) - Update to version 0.2.7+117: * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing …

    first Aug 15, 2025
  • High max 7.5

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: - Update to version 0.2.7+141: * CVE-2025-58266: shlex: Fixed command injection (bsc#1247193) - Update to version 0.2.7+117: * CVE-2023-26964: rust-keylime: hyper,h2: stream stacking when H2 processing …

    first Aug 15, 2025
  • High max 8.3

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-6032: Fixed machine init command failing to verify TLS certificate (bsc#1245320)

    first Aug 15, 2025
  • High max 7.5

    Security update for python313

    This update for python313 fixes the following issues: - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249). - CVE-2025-6069: Avoid worst case quadratic complexity when processing certain crafted malformed inputs …

    first Aug 12, 2025
  • High max 7.0

    Security update for go1.24

    This update for go1.24 fixes the following issues: - Update to go1.24.6: * CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719) * CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720) * go#73800 runtime: RSS seems to…

    first Aug 12, 2025
  • High max 7.0

    Security update for go1.23

    This update for go1.23 fixes the following issues: - Update to go1.23.12: * CVE-2025-47906: Fixed LookPath returning unexpected paths (bsc#1247719) * CVE-2025-47907: Fixed incorrect results returned from Rows.Scan (bsc#1247720) * go#74415 runtime: use-after-f…

    first Aug 12, 2025