Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    MozillaThunderbird-115.12.2-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-115.12.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 4, 2024
  • High max 7.5

    Security update for python36

    This update for python36 fixes the following issues: Update to 3.6.12, including the following fixes: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) - Fixed CRLF injection via HTTP request method in httplib/http.client (bsc…

    first Nov 30, 2020
  • High max 8.1

    Security update for libndp

    This update for libndp fixes the following issues: - CVE-2024-5564: Fixed buffer overflow in route information length field (bsc#1225771)

    first Jul 17, 2024
  • High max 8.1

    Security update for java-1_7_1-ibm

    IBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449]: Security fixes: - CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417

    first Oct 18, 2018
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - Update to 0.103.9 - CVE-2023-20197: Fixed a possible denial of service vulnerability in the HFS+ file parser. (bsc#1214342)

    first Aug 28, 2023
  • High max 7.1

    Security update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed

    This update for kernel-firmware-nvidia-gspx-G06, nvidia-open-driver-G06-signed fixes the following issues: Update to 550.54.14 * Added vGPU Host and vGPU Guest support. For vGPU Host, please refer to the README.vgpu packaged in the vGPU Host Package for more …

    first Mar 5, 2024
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel version 3.0.101 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, le…

    first Jun 18, 2019
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_7 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious ACP…

    first Sep 4, 2020
  • High max 8.8
    SUSE-SU-2022:0811-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

    first Mar 11, 2022
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user accou…

    first Sep 19, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_90 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in…

    first Sep 14, 2023
  • High max 8.1

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968): - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilities…

    first Jan 24, 2020
  • High max 7.5

    Security update for redis

    This update for redis fixes the following issues: - CVE-2021-32627: Fixed integer to heap buffer overflows with streams (bsc#1191305). - CVE-2021-32628: Fixed integer to heap buffer overflows handling ziplist-encoded data types (bsc#1191305). - CVE-2021-32687…

    first Nov 23, 2021
  • High max 8.8

    Security update for gzip

    This update for gzip fixes the following issues: - CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)

    first May 16, 2022
  • High max 8.1

    Security update for php7

    This update for php7 fixes the following security issues: - CVE-2016-5385: Setting HTTP_PROXY environment variable via Proxy header (httpoxy) (bsc#988486). - CVE-2016-9137: Fixing a Use After Free in unserialize() (bsc#1008029).

    first Nov 29, 2016
  • High max 7.5

    Security update for python-mechanize

    This update for python-mechanize fixes the following issues: Update to version 0.4.8: - CVE-2021-32837: Fixed a denial of service via regular expression (boo#1207242). - Fixed mechanize not found during build (boo#1202003).

    first Jan 23, 2023
  • High max 7.5

    Security update for php5

    This update for php5 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to de…

    first Mar 12, 2020
  • High max 7.8
    SUSE-SU-2025:0919-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_s…

    first Mar 19, 2025
  • High max 7.5

    Security update for python-libxml2-python

    This update for python-libxml2-python fixes the following issues: - CVE-2022-23308: Fixed a use-after-free of ID and IDREF attributes (bsc#1196490).

    first Mar 10, 2022
  • High max 8.4

    Security update for p7zip

    This update for p7zip fixes the following issues: - CVE-2023-52168: Fixed heap-based buffer overflow in the NTFS handler allows two bytes to be overwritten at multiple offsets (bsc#1227358) - CVE-2023-52169: Fixed out-of-bounds read in NTFS handler (bsc#12273…

    first Jul 30, 2024
  • High max 7.5

    tailscale-1.80.3-2.1 on GA media

    These are all security issues fixed in the tailscale-1.80.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 12, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity() that could cause memory corruption (bsc#1208600). - CVE-2023…

    first Oct 10, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_154 fixes several issues. The following security issues were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-3812: Fixed an out-of…

    first Sep 27, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 64 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_244 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race condi…

    first Oct 12, 2025
  • High max 7.8

    obs-service-source_validator-0.21-1.3 on GA media

    These are all security issues fixed in the obs-service-source_validator-0.21-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    libruby2_7-2_7-2.7.3-3.2 on GA media

    These are all security issues fixed in the libruby2_7-2_7-2.7.3-3.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.0

    postgresql11-11.13-1.3 on GA media

    These are all security issues fixed in the postgresql11-11.13-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.4

    Security update for libqt5-qtquick3d

    This update for libqt5-qtquick3d fixes the following issues: - CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228199) Other fixes: - Fix progressive anti-aliasing, which doesn't work if any object in the scene used …

    first Sep 2, 2024
  • High max 7.5

    Security update for python-wheel

    This update for python-wheel fixes the following issues: - CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).

    first Jan 16, 2023
  • High max 7.3

    Security update for openldap2

    This update for openldap2 fixes the following issues: - CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568).

    first Sep 25, 2020
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_40 fixes several issues. The following security issues were fixed: - CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994). - CVE-2022-42719: Fixed use-after-free in the ma…

    first Oct 18, 2022
  • High max 7.8

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).

    first Mar 31, 2023
  • High max 7.5

    pijul-1.0.0~beta.5-1.1 on GA media

    These are all security issues fixed in the pijul-1.0.0~beta.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.9
    SUSE-SU-2023:0488-1 11 CVEs 1 exploited

    Security update for the Linux-RT Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed an out-of-bounds memory access vulnerability that was found in vmwgfx driver in drivers/gpu/vmxgfx…

    first Feb 23, 2023
  • High max 8.1
    SUSE-SU-2025:0998-1 1 CVE 1 exploited

    Security update for freetype2

    This update for freetype2 fixes the following issues: - CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465).

    first Mar 25, 2025
  • High max 7.5
    SUSE-SU-2024:3344-1 4 CVEs 1 exploited

    Security update for kubernetes1.25

    This update for kubernetes1.25 fixes the following issues: - CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869) - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vuln…

    first Sep 19, 2024
  • High max 7.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.103 to receive various security and bugfixes. This update enables SMB encryption in the CIFS support in the Linux Kernel (fate#324404) The following security bugs were fixed: - CVE-2017-1000410: The L…

    first Dec 21, 2017
  • High max 8.8

    Security update for dovecot22

    This update for dovecot22 fixes the following issues: - CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).

    first Aug 1, 2022
  • High max 7.1

    Security update for u-boot

    This update for u-boot fixes the following issues: - CVE-2024-57256: integer overflow in U-Boot's ext4 symlink resolution function (bsc#1237284). - CVE-2024-57258: multiple integer overflows in U-Boot's memory allocator (bsc#1237287).

    first Feb 28, 2025
  • High max 8.7

    govulncheck-vulndb-0.0.20250409T170536-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250409T170536-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2025