Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.5

    crun-1.20-1.1 on GA media

    These are all security issues fixed in the crun-1.20-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 11, 2025
  • High max 7.5

    podman-4.0.3-1.1 on GA media

    These are all security issues fixed in the podman-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of service upo…

    first Sep 16, 2022
  • High max 8.3

    python-Twisted-doc-24.3.0-2.1 on GA media

    These are all security issues fixed in the python-Twisted-doc-24.3.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331) - Fixed unresolved error codes …

    first Mar 16, 2021
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 128.0.6613.113 (boo#1229897) * CVE-2024-7969: Type Confusion in V8 * CVE-2024-8193: Heap buffer overflow in Skia * CVE-2024-8194: Type Confusion in V8 * CVE-2024-8198: Heap buffer overflow in Skia

    first Aug 30, 2024
  • High max 7.8
    SUSE-SU-2025:03585-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: fixed a local privilege escalation vulnerability (bnc#1250373).

    first Oct 13, 2025
  • High max 7.5

    Security update for wicked

    This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020…

    first Feb 7, 2020
  • High max 7.5

    Security update for bind

    This update for bind fixes several issues. This security issue was fixed: - CVE-2017-3145: Improper sequencing during cleanup could have lead to a use-after-free error that triggered an assertion failure and crash in named (bsc#1076118). These non-security is…

    first Jan 30, 2018
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.13.0 ESR (bsc#1202645): - CVE-2022-38472: Fixed a potential address bar spoofing via XSLT error handling. - CVE-2022-38473: Fixed an issue where cross-origin XSLT d…

    first Sep 5, 2022
  • High max 8.1
    openSUSE-SU-2020:0544-1 5 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…

    first Apr 23, 2020
  • High max 7.8

    Recommended update for cpio

    This update for cpio fixes the following issues: - A regression in the previous update could lead to crashes (bsc#1189465)

    first Aug 19, 2021
  • High max 8.6

    Security update for gstreamer-plugins-good

    This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421) - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414) - CVE-2024-47539…

    first Jan 10, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute cod…

    first Feb 9, 2021
  • High max 8.1

    mybatis-3.5.6-1.6 on GA media

    These are all security issues fixed in the mybatis-3.5.6-1.6 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_27 fixes one issue. The following security issue was fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).

    first Feb 5, 2024
  • High max 8.4

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). - CVE-2024-53156: wifi: ath9k: add …

    first May 22, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_145 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…

    first Sep 27, 2023
  • High max 7.5

    Security update for rubygem-puma

    This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1…

    first Jul 18, 2020
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_18 fixes several issues. The following security issues were fixed: - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escala…

    first Feb 26, 2024
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free (bsc#1217213). - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).

    first Jan 2, 2024
  • High max 7.7

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2020-7039: Fixed a heap buffer overflow in tcp_emu() routine while emulating IRC and other protocols (bsc#1161066). - CVE-2019-15034: Fixed a buffer overflow in hw/display/bochs-display.c due to improper …

    first Apr 1, 2020
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.59-92_24 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 5, 2018
  • High max 8.8

    Security update for mercurial

    This update for mercurial fixes the following issues: Security issue fixed: - CVE-2017-9462: Fix the arbitrary code exec by remote users via 'hg serve --stdio' (bsc#1043063):

    first Jun 19, 2017
  • High max 7.5
    SUSE-SU-2024:0573-1 5 CVEs 1 exploited

    Security update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2

    This update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2 fixes the following issues: abseil-cpp was updated to: Update to 20230802.1: * Add StdcppWaiter to the end of the list of waiter implementations Update to 20230802…

    first Feb 21, 2024
  • High max 8.8

    Security update for snakeyaml

    This update for snakeyaml fixes the following issues: - CVE-2022-38750: Fixed uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject (bsc#1203158). - CVE-2022-38749: Fixed StackOverflowError for many open unmatched brackets (bsc#…

    first Sep 26, 2022
  • High max 7.0
    SUSE-SU-2016:2633-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 11 for SLE 12

    This update for the Linux Kernel 3.12.51-52_39 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 25, 2016
  • High max 7.5

    Security update for postgresql10

    This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).

    first Oct 17, 2019
  • High max 8.8

    ungoogled-chromium-117.0.5938.149-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-117.0.5938.149-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for tiff

    This update for tiff fixes the following issues: Update to 4.7.1: - CVE-2025-8851: Fixed stack-based buffer overflow (bsc#1248278). - CVE-2025-9900: Fixed write-what-where via TIFFReadRGBAImageOriented (bsc#1250413).

    first Nov 5, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2…

    first Aug 16, 2023
  • High max 8.2

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Mar 28, 2024
  • High max 7.5

    apache2-mod_wsgi-4.9.4-1.1 on GA media

    These are all security issues fixed in the apache2-mod_wsgi-4.9.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    snakeyaml-1.28-2.2 on GA media

    These are all security issues fixed in the snakeyaml-1.28-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    flannel-0.14.0-1.2 on GA media

    These are all security issues fixed in the flannel-0.14.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated from 102.2.0esr to 102.3.0esr (bsc#1203477): - CVE-2022-40959: Fixed bypassing FeaturePolicy restrictions on transient pages. - CVE-2022-40960: Fixed data-race when parsing…

    first Sep 27, 2022
  • High max 7.5

    python-2.7.18-16.1 on GA media

    These are all security issues fixed in the python-2.7.18-16.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code (bsc#1156275).

    first Nov 15, 2019
  • High max 7.5

    Security update for Salt

    This update fixes the following issues: salt: - Support querying for JSON data in external sql pillar - Exclude the full path of a download URL to prevent injection of malicious code (bsc#1190265, CVE-2021-21996) - Fix wrong relative paths resolution with Jin…

    first Oct 27, 2021
  • High max 8.3
    SUSE-SU-2021:2538-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_127 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…

    first Jul 27, 2021