Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.8

    xorg-x11-server-21.1.4-6.1 on GA media

    These are all security issues fixed in the xorg-x11-server-21.1.4-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 45 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_165 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory a…

    first Sep 13, 2023
  • High max 8.8
    openSUSE-SU-2023:0277-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 117.0.5938.132 (boo#1215776): * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) * CVE-2023-5186: Use after free in Passwords * CVE-2023-5187: Use after free in Extensi…

    first Sep 29, 2023
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2023-4408: Fixed denial of service during DNS message parsing with different names (bsc#1219851) - CVE-2023-50387: Fixed denial of service during DNS messages validation with DNSSEC signatures (bsc#121982…

    first Jun 16, 2024
  • High max 7.3

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issues: - CVE-2024-2961: Fixed that the iconv() function in the GNU C Library may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set (bsc#…

    first May 28, 2024
  • High max 7.5

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783). - CVE-2021-36690: Fixed an issue with the SQLite Expert ex…

    first Sep 26, 2022
  • High max 8.8

    libkpathsea6-6.3.5-90.1 on GA media

    These are all security issues fixed in the libkpathsea6-6.3.5-90.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427). - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429). - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237…

    first Feb 26, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use…

    first Jul 10, 2023
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).

    first Mar 29, 2023
  • High max 7.5

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501) * CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270) * CVE-2022-461…

    first Sep 28, 2023
  • High max 7.8
    SUSE-SU-2023:2455-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_21 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 7, 2023
  • High max 7.2

    libecpg6-15.3-1.1 on GA media

    These are all security issues fixed in the libecpg6-15.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this f…

    first Feb 11, 2020
  • High max 7.5

    Security update for python-Werkzeug

    This update for python-Werkzeug fixes the following issues: Security issue fixed: - CVE-2019-14806: Fixed the development server in Docker, the debugger security pin is now unique per container (bsc#1145383).

    first Sep 19, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2022-4379: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allowed a…

    first Feb 6, 2023
  • High max 7.5

    Security update for python-Pygments

    This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in SML lexer which may lead to DoS (bsc#1183169)

    first May 4, 2021
  • High max 8.8

    nodejs-electron-27.2.2-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-27.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_153 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-1390: Fixed re…

    first Jun 28, 2023
  • High max 7.5

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - Update to version 2.0.20 - CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512) - CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. (bsc#1226277) - C…

    first Sep 12, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_244 fixes several issues. The following security issues were fixed: - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238920). - CVE-2025-21772: partitions: mac: fix handling of bo…

    first Jul 21, 2025
  • High max 7.3

    Security update for rust1.57

    This update for rust1.57 fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).

    first Jan 25, 2022
  • High max 7.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

    first Feb 5, 2025
  • High max 8.8
    openSUSE-SU-2018:1175-1 64 CVEs 1 exploited

    Security update for Chromium

    This update for Chromium to version 66.0.3359.181 fixes the following issues: - CVE-2018-6118: Use after free in Media Cache (bsc#1091288) - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after f…

    first May 27, 2018
  • High max 7.5
    openSUSE-SU-2021:1267-1 1 CVE 1 exploited

    Security update for php7-pear

    This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Sep 15, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escala…

    first Feb 29, 2024
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - Fixed CVE-2019-6975 (bsc#1124991) * Added CVE-2019-6975.patch to fix uncontrolled memory consumption * If ``django.utils.numberformat.format()`` -- used by ``contrib.admin`` as well as the the ``floa…

    first Aug 2, 2019
  • High max 8.8

    libeconf-devel-0.5.2-2.1 on GA media

    These are all security issues fixed in the libeconf-devel-0.5.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 112.0.5197.25 * CHR-9787 Update Chromium on desktop-stable-126-5197 to 126.0.6478.127 - The update to chromium 126.0.6478.127 fixes following issues: CVE-2024-6290, CVE-2024-6291, CVE-2024-6292, CV…

    first Jul 20, 2024
  • High max 7.8
    SUSE-SU-2025:0904-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 18, 2025
  • High max 8.8

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that…

    first Nov 14, 2023
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15213: An issue was discovered in the Linux kernel, there was a use-after-free caused by a malicious USB dev…

    first Dec 20, 2019
  • High max 7.7

    ldb-tools-2.7.2-1.1 on GA media

    These are all security issues fixed in the ldb-tools-2.7.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441).

    first Mar 4, 2022
  • High max 8.3

    Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer

    This update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer fixes the following issues: Rebuild aga…

    first Jun 11, 2024
  • High max 7.8
    SUSE-SU-2025:03535-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: fixed a local privilege escalation vulnerability (bnc#1250373).

    first Oct 10, 2025
  • High max 8.8

    Security update for libxslt

    This update for libxslt fixes the following issues: - CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574).

    first Feb 28, 2023
  • High max 7.8
    SUSE-SU-2022:1036-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_153 fixes one issue. The following security issue was fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1…

    first Mar 30, 2022
  • High max 7.0

    gtk2-branding-upstream-2.24.33-10.1 on GA media

    These are all security issues fixed in the gtk2-branding-upstream-2.24.33-10.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 15, 2024
  • High max 7.5

    python36-httplib2-0.19.1-1.2 on GA media

    These are all security issues fixed in the python36-httplib2-0.19.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024