Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,602 results · Clear filters · Feed

  • High max 8.1
    SUSE-SU-2023:0620-1 3 CVEs

    Security update for samba

    This update for samba fixes the following issues: - CVE-2021-20251: Fixed bad password count that was not incremented atomically (bsc#1206546). - CVE-2022-38023: Fixed weak RC4/HMAC-MD5 NetLogon Secure Channel usage should be avoided (bsc#1206504). - CVE-2022…

    first Mar 6, 2023
  • High max 7.0
    openSUSE-SU-2024:13817-1 3 CVEs

    kernel-devel-6.8.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.0
    SUSE-SU-2019:2951-1 12 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of …

    first Nov 12, 2019
  • High max 7.5
    openSUSE-SU-2024:13847-1 1 CVE

    syncthing-1.27.6-1.1 on GA media

    These are all security issues fixed in the syncthing-1.27.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    SUSE-SU-2025:0579-1 2 CVEs

    Security update for podman

    This update for podman fixes the following issues: - CVE-2024-6104: possible sensitive data exposure due to hashicorp/go-retryablehttp not sanitizing URLs when writing them to log files. (bsc#1227052) - CVE-2023-45288: possible excessive CPU consumption due t…

    first Feb 18, 2025
  • High max 7.5
    SUSE-SU-2021:0440-1 1 CVE

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).

    first Feb 11, 2021
  • High max 7.3
    SUSE-SU-2025:0371-1 2 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

    first Feb 5, 2025
  • High max 8.7
    SUSE-SU-2025:1137-1 1 CVE

    Security update for xz

    This update for xz fixes the following issues: - CVE-2025-31115: Fixed heap use after free and writing to an address based on the null pointer plus an offset (bsc#1240414)

    first Apr 3, 2025
  • High max 7.3
    SUSE-SU-2021:1094-1 1 CVE

    Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk

    This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues: libostree: Update to version 2020.8 - Enable LTO. (bsc#1133120) - This update contains scalability improvements and bugfixes. - Caching-related HTTP hea…

    first Apr 7, 2021
  • High max 7.5
    openSUSE-SU-2021:1806-1 2 CVEs

    Security update for python-httplib2

    This update for python-httplib2 fixes the following issues: - Update to version 0.19.0 (bsc#1182053). - CVE-2021-21240: Fixed regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed unescaped part of uri where an attac…

    first Jul 11, 2021
  • High max 8.8
    SUSE-SU-2019:1643-1 4 CVEs

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wi…

    first Jun 21, 2019
  • High max 7.5
    SUSE-SU-2020:2673-1 15 CVEs

    Security update for samba

    This update for samba to version 4.10.17 fixes the following issues: - Fixed net command unable to negotiate SMB2; (bsc#1174120); - Update to 4.10.17 - CVE-2020-10745: Invalid DNS or NBT queries containing dots use several seconds of CPU each; (bso#14378); (b…

    first Sep 17, 2020
  • High max 7.5
    SUSE-SU-2019:1835-1 1 CVE

    Security update for expat

    This update for expat fixes the following issues: Security issue fixed: - CVE-2018-20843: Fixed a denial of service triggered by high resource consumption in the XML parser when XML names contain a large amount of colons (bsc#1139937).

    first Jul 12, 2019
  • High max 7.4
    SUSE-SU-2023:0482-1 1 CVE

    Security update for openssl-1_1-livepatches

    This update for openssl-1_1-livepatches fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GeneralName via livepatch (bsc#1207533).

    first Feb 23, 2023
  • High max 8.0
    SUSE-SU-2019:3019-1 1 CVE

    Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_37 fixes one issue. The following security issue was fixed: - CVE-2019-10220: Added sanity checks on the pathnames passed to the user space (bsc#1153108).

    first Nov 20, 2019
  • High max 7.5
    SUSE-SU-2023:0341-1 3 CVEs

    Security update for bind

    This update for bind fixes the following issues: - Updated to version 9.16.37 (jsc#SLE-24600): - CVE-2022-3094: Fixed an issue where a message flood could exhaust all available memory (bsc#1207471). - CVE-2022-3736: Fixed a potential crash upon receiving an R…

    first Feb 10, 2023
  • High max 7.1
    SUSE-SU-2025:0763-1 2 CVEs

    Security update for u-boot

    This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287).

    first Mar 3, 2025
  • High max 7.8
    SUSE-SU-2023:2502-1 21 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-202…

    first Jun 13, 2023
  • High max 8.8
    SUSE-SU-2022:2178-1 1 CVE

    Security update for salt

    This update for salt fixes the following issues: - CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass PAM authentication (bsc#1200566)

    first Jun 24, 2022
  • High max 7.5
    SUSE-SU-2023:2504-1 1 CVE

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2023-28709: Mended an incomplete fix for CVE-2023-24998 (bsc#1211608).

    first Jun 13, 2023
  • High max 7.5
    SUSE-SU-2021:0720-1 1 CVE

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805).

    first Mar 8, 2021
  • High max 7.5
    SUSE-SU-2023:2975-1 1 CVE

    Security update for xmltooling

    This update for xmltooling fixes the following issues: - CVE-2023-36661: Fixed a server-side-request-forgery (SSRF) vulnerability (bsc#1212359).

    first Jul 26, 2023
  • High max 7.8
    SUSE-SU-2023:4280-1 3 CVEs

    Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_157 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation …

    first Oct 30, 2023
  • High max 7.8
    SUSE-SU-2024:1189-1 1 CVE

    Security update for less

    This update for less fixes the following issues: - CVE-2022-48624: Fixed LESSCLOSE handling in less that does not quote shell metacharacters (bsc#1219901).

    first Apr 10, 2024
  • High max 8.2
    SUSE-SU-2024:1039-1 5 CVEs

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_g…

    first Mar 28, 2024
  • High max 7.5
    SUSE-SU-2021:1779-1 2 CVEs

    Security update for python-httplib2

    This update for python-httplib2 contains the following fixes: Security fixes included in this update: - CVE-2021-21240: Fixed a regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed an issue where an attacker could c…

    first May 27, 2021
  • High max 7.5
    SUSE-SU-2024:1121-1 1 CVE

    Security update for go1.22

    This update for go1.22 fixes the following issues: - CVE-2023-45288: Fixed denial of service via HTTP/2 continuation frames (bsc#1221400) Other changes: - go minor release upgrade to 1.22.2 (bsc#1218424)

    first Apr 5, 2024
  • High max 7.5
    SUSE-SU-2022:3793-1 4 CVEs

    Security update for netty

    This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932) - CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#118210…

    first Oct 27, 2022
  • High max 7.5
    openSUSE-SU-2024:11925-1 1 CVE

    firecracker-1.0.0-2.1 on GA media

    These are all security issues fixed in the firecracker-1.0.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2022:4542-1 4 CVEs

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_33 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…

    first Dec 17, 2022
  • High max 7.5
    SUSE-SU-2017:0594-1 1 CVE

    Security update for bind

    This update for bind fixes the following issues: - Fixed a possible denial of service vulnerability (affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130)

    first Mar 2, 2017
  • High max 7.6
    openSUSE-SU-2019:2308-1 4 CVEs

    Security update for the Linux Kernel

    The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15291: There was a NULL pointer dereference caused by a malicious USB device in the flexcop_usb_probe function in the driver…

    first Oct 10, 2019
  • High max 7.8
    SUSE-SU-2025:0916-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 18, 2025
  • High max 7.8
    SUSE-SU-2023:3627-1 7 CVEs

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_115 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…

    first Sep 17, 2023
  • High max 8.0
    SUSE-SU-2018:1221-1 11 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-1087: And an unprivileged KVM guest user could use this flaw to potentially escalate their privileges inside a…

    first May 11, 2018
  • High max 8.8
    SUSE-SU-2024:4167-1 5 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747), including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path (bsc#1233631). - CVE-2024-44309: Fixed a dat…

    first Dec 4, 2024
  • High max 7.7
    SUSE-SU-2020:0845-1 6 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper …

    first Apr 1, 2020
  • High max 7.5
    SUSE-RU-2019:1006-1 1 CVE

    Security update for SUSE Manager Server 3.2

    This update includes the following new features: to the repository metadata (fate#325676) This update fixes the following issues: apache-commons-lang3: - Run fdupes on javadoc - Specify java target and source level 1.6 to make package compatible with JDK >= 1…

    first Apr 24, 2019
  • High max 7.8
    SUSE-SU-2023:2507-1 15 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadloc…

    first Jun 14, 2023
  • High max 8.8
    SUSE-SU-2020:0599-1 60 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 real-time kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14615: An information disclosure vulnerability existed due to insufficient control flow in certain data …

    first Mar 5, 2020