Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.4

    Security update for xdg-desktop-portal

    This update for xdg-desktop-portal fixes the following issues: - CVE-2024-32462: Fixed sandbox escape via RequestBackground portal (bsc#1223110).

    first May 28, 2024
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - A regression in the fix for CVE-2017-3137 caused an assert in name.c (bsc#1034162)

    first Apr 18, 2017
  • High max 8.2

    libopenvswitch-3_1-0-3.1.0-14.1 on GA media

    These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-14.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178). - CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182). Other: - Bump upstream SBAT generation to 3

    first Nov 21, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_66 fixes several issues. The following security issues were fixed: - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() …

    first Jun 21, 2024
  • High max 7.5

    docker-compose-2.15.1-1.1 on GA media

    These are all security issues fixed in the docker-compose-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for python-ecdsa

    This update for python-ecdsa to version 0.13.3 fixes the following issues: Security issues fixed: - CVE-2019-14853: Fixed unexpected exceptions during signature decoding (bsc#1153165). - CVE-2019-14859: Fixed a signature malleability caused by insufficient ch…

    first Nov 21, 2019
  • High max 7.1

    kernel-devel-6.6.11-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.6.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    Security update for procps

    This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled direct…

    first Oct 26, 2019
  • High max 7.8
    SUSE-SU-2015:1770-1 1 CVE 1 exploited

    Security update for flash-player

    flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).

    first Oct 16, 2015
  • High max 7.5

    Security update for python-Werkzeug

    This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).

    first Sep 12, 2019
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_18 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…

    first Sep 19, 2023
  • High max 8.8

    Security update for python312-setuptools

    This update for python312-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)

    first Aug 14, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: openssl-1_1: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877). - Fix PAC pointer authentication in ARM (bsc#1195856) - Pull libopenssl-1_1 when updating o…

    first Mar 16, 2022
  • High max 7.5
    openSUSE-SU-2024:11821-1 12 CVEs 1 exploited

    ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for libxslt

    This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a cr…

    first May 15, 2017
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2023-50387: Fixed validating DNS messages containing a lot of DNSSEC signatures that could have let to a denial-of-service (bsc#1219823). - CVE-2023-50868: Fixed NSEC3 closest encloser proof that could ha…

    first Jun 3, 2024
  • High max 8.8
    openSUSE-SU-2017:1501-1 16 CVEs 1 exploited

    Security update for chromium

    This update to Chromium 59.0.3071.86 fixes the following security issues: - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-…

    first Jun 7, 2017
  • High max 7.5

    Initial release of python-numpy for HPC (v1.13.3, gcc)

    This update introduces the NumPy packages version 1.13.3 built for environment modules to the HPC (module FATE#321709). NumPy is a general-purpose array-processing package for Python designed to manipulate large multi-dimensional arrays of arbitrary records. …

    first Nov 14, 2017
  • High max 9.8

    Security update for openssl-1_1-livepatches

    This update for openssl-1_1-livepatches fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)

    first Jun 25, 2024
  • High max 7.5

    python310-sqlparse-0.5.0-1.1 on GA media

    These are all security issues fixed in the python310-sqlparse-0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt …

    first Jul 31, 2023
  • High max 7.5

    Security update for python

    This update for python fixes the following issues: - CVE-2022-45061: Fixed a quadratic IDNA decoding time (bsc#1205244). The following non-security bug was fixed: - Making compileall.py compliant with year 2038, backport of fix to Python 2.7 (bsc#1202666, gh#…

    first Nov 29, 2022
  • High max 8.8

    kafka-kit-2.1.0-3.1 on GA media

    These are all security issues fixed in the kafka-kit-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3
    SUSE-SU-2021:2409-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables…

    first Jul 20, 2021
  • High max 7.9
    SUSE-SU-2023:1647-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 28, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_86 fixes several issues. The following security issues were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device th…

    first Jan 31, 2022
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180559). - CVE-2020-27825: F…

    first Jan 13, 2021
  • High max 8.8

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)

    first Aug 14, 2024
  • High max 7.5

    python310-mysql-connector-python-9.1.0-1.1 on GA media

    These are all security issues fixed in the python310-mysql-connector-python-9.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 22, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…

    first Nov 4, 2025
  • High max 7.5

    Security update for helm-mirror

    This update for helm-mirror to version 0.2.1 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote command execution (bsc#1118897) - CVE-2018-16874: Fixed a directory traversal in 'go get' via curly braces in import path (bsc#111…

    first Jan 9, 2019
  • High max 7.5

    Security update for freeradius-server

    This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abina…

    first Dec 27, 2022
  • High max 7.5

    Security update for expat

    This update for expat fixes the following issues: - CVE-2025-59375: memory amplification vulnerability allows attackers to trigger excessive dynamic memory allocations by submitting crafted XML input (bsc#1249584).

    first Oct 16, 2025
  • High max 7.8
    SUSE-SU-2021:1275-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • High max 8.8

    MozillaFirefox-111.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-111.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.5

    Security update for python-rpyc

    This update for python-rpyc to 4.1.5 fixes the following issues: Security issue fixed: - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution (boo#1152987).

    first May 22, 2020
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2024-45230: Fixed potential denial-of-service vulnerability in django.utils.html.urlize(). (bsc#1229823) - CVE-2024-45231: Fixed potential user email enumeration via response status on password r…

    first Sep 4, 2024
  • High max 7.5

    python310-Mako-1.3.0-2.1 on GA media

    These are all security issues fixed in the python310-Mako-1.3.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for wireshark

    This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, Lo…

    first Apr 8, 2020