Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for nodejs10

    This update for nodejs10 to version 10.16.0 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Update to new upstream LTS version …

    first Aug 12, 2019
  • High max 8.8

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323). - CVE-2024-10977: Make libpq discard error messages r…

    first Nov 28, 2024
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: podman was updated to version 4.3.1: 4.3.1: * Bugfixes - Fixed a deadlock between the `podman ps` and `podman container inspect` commands * Misc - Updated the containers/image library to v5.23.1 4.3.0: * Feat…

    first Feb 9, 2023
  • High max 7.3

    Security update for xen

    This update for xen fixes the following issues: - CVE-2024-45817: Fixed a deadlock in vlapic_error (XSA-462, bsc#1230366)

    first Sep 25, 2024
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684). - CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685). - CVE-2023…

    first Oct 5, 2023
  • High max 8.0

    postgresql14-14.11-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for python-paramiko

    This update for python-paramiko to version 2.4.2 fixes the following issues: Security issue fixed: - CVE-2018-1000805: Fixed an authentication bypass in auth_handler.py (bsc#1111151) Non-security issue fixed: - Disable experimental gssapi support (bsc#1115769)

    first Jan 25, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_89 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user pri…

    first Apr 14, 2022
  • High max 7.5

    Security update for apache-commons-compress

    This update for apache-commons-compress fixes the following issues: - Updated to 1.21 - CVE-2021-35515: Fixed an infinite loop when reading a specially crafted 7Z archive. (bsc#1188463) - CVE-2021-35516: Fixed an excessive memory allocation when reading a spe…

    first Aug 5, 2021
  • High max 7.6

    Security update for containerd, docker, runc

    This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.6-ce (bsc#1184768, bsc#1182947, bsc#1181594) * Switch version to use -ce suffix rather than _ce to avoid confusing other tools (bsc#1182476). * CVE-2021-21284: Fi…

    first Jun 16, 2021
  • High max 8.2

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2021-21708: Fixed use after free due to php_filter_float() failing for ints (bsc#1196252).

    first Mar 1, 2022
  • High max 7.5

    Security update for openstack-nova

    This update for openstack-nova fixes the following bugs and security issues: The following security-issue has been fixed: - CVE-2017-18191: libvirt: Block swap volume attempts with encrypted volumes. (bsc#1081685) Additionally, the following bugs have been fi…

    first May 28, 2018
  • High max 7.5
    openSUSE-SU-2024:13350-1 4 CVEs 1 exploited

    apache2-2.4.58-1.1 on GA media

    These are all security issues fixed in the apache2-2.4.58-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1418-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 24, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 35 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_133 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …

    first Aug 16, 2018
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-10942: In get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attacker…

    first Apr 30, 2020
  • High max 8.1

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: Java was updated to 7.1 Service Refresh 4 Fix Pack 60 [bsc#1162972, bsc#1160968]. Security issues fixed: - CVE-2020-2583: Fixed a serialization vulnerability in BeanContextSupport (bsc#1162972). - CVE…

    first Apr 7, 2020
  • High max 8.2

    Security update for virtualbox

    This update for virtualbox fixes the following issues: Version bump to 6.1.38r86 released by Oracle September 02 2022 This is a maintenance release. The following items were fixed and/or added: - GUI: Improvements in Native Language Support area - Main: OVF E…

    first Sep 23, 2022
  • High max 8.6

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 50. Security issues fixed: - Oracle July 15 2025 CPU (bsc#1247754). - CVE-2025-30749: heap corruption allows unauthenticated attacker with network access …

    first Sep 18, 2025
  • High max 7.0
    SUSE-SU-2016:2635-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 5 for SLE 12 SP1

    This update for the Linux Kernel 3.12.59-60_41 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • High max 8.0

    grafana-8.5.10-1.1 on GA media

    These are all security issues fixed in the grafana-8.5.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for wireshark

    This update for wireshark fixes the following issues: - CVE-2024-8250: Fixed NTLMSSP dissector crash (bsc#1229907).

    first Sep 16, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE…

    first Jun 6, 2023
  • High max 7.5

    Security update for 389-ds

    This update for 389-ds to version 1.4.0.26 fixes the following issues: Security issues fixed: - CVE-2016-5416: Fixed an information disclosure where a anonymous user could read the default ACI (bsc#991201). - CVE-2018-1054: Fixed a denial of service via searc…

    first Aug 15, 2019
  • High max 7.5

    corepack16-16.17.0-1.1 on GA media

    These are all security issues fixed in the corepack16-16.17.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    kubernetes1.20-apiserver-1.20.11-1.1 on GA media

    These are all security issues fixed in the kubernetes1.20-apiserver-1.20.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    sccache-0.2.15~git0.6b6d2f7-11.1 on GA media

    These are all security issues fixed in the sccache-0.2.15~git0.6b6d2f7-11.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7

    Security update for trousers

    This update for trousers fixes the following issues: - CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package (bsc#1157651).

    first Dec 19, 2019
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_111 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by uns…

    first May 22, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: openssl-1_1: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). - Fix PAC pointer authentication in ARM (bsc#1195856) - Pull libopenssl-1_1 when updating o…

    first Apr 13, 2022
  • High max 8.8
    openSUSE-SU-2024:13229-1 1 CVE 1 exploited

    chromedriver-116.0.5845.187-1.1 on GA media

    These are all security issues fixed in the chromedriver-116.0.5845.187-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes one issue. The following security issue was fixed: - CVE-2023-51779: Fixed a use-after-free because of a bt_sock_ioctl race condition in bt_sock_recvmsg (bsc#1218610).

    first Apr 8, 2024
  • High max 7.5

    Security update for snakeyaml

    This update for snakeyaml fixes the following issues: - Upgrade to 1.28 - CVE-2017-18640: The Alias feature allows entity expansion during a load operation (bsc#1159488, bsc#1186088)

    first Jul 11, 2021
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47145: btrfs: do not BUG_ON in link_to_fixup_dir (bsc#1222005). - CVE-2021-47201: iavf: free q_vectors before queue…

    first Jul 16, 2024
  • High max 8.8
    openSUSE-SU-2021:1095-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.277 - DNA-94291 Video conference popout doesnt remember its size after resizing - DNA-94399 Incorrect icon for wp.pl in address bar dropdown - DNA-94462 Low quality of default wallp…

    first Aug 5, 2021
  • High max 7.6

    Security update 5.1.1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: dracut-saltboot was updated from version 0.1 to version 1.0.0: - Version 1.0.0 bugs fixed: * Reboot on salt key timeout (bsc#1237495) * Fixed parsing files with space in the name (bsc#1252100) golang-github-prometheus-a…

    first Oct 28, 2025
  • High max 7.5

    Security update for kubernetes1.26

    This update of kubernetes1.26 fixes the following issues: - rebuild the package with the current go 1.23 security release (bsc#1229122).

    first Oct 2, 2024
  • High max 7.5

    Security update for go1.17

    This update for go1.17 fixes the following issues: Updated to upstream version 1.17.5 to include fixes to the compiler, linker, syscall, runtime, the net/http, go/types, and time packages (bsc#1190649) - CVE-2021-44717: syscall: don't close fd 0 on ForkExec e…

    first Dec 23, 2021
  • High max 7.8

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2022-40284: Fixed incorrect validation of some of the NTFS metadata that could cause buffer overflow (bsc#1204734).

    first Nov 3, 2022
  • High max 8.6

    squid-6.8-1.1 on GA media

    These are all security issues fixed in the squid-6.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024