Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_138 fixes several issues. The following security issues were fixed: - CVE-2023-39198: Fixed a race condition leading to a use-after-free in qxl_mode_dumb_create() (bsc#1217116). - CVE-2023-51780: Fixed a use-a…

    first Feb 29, 2024
  • High max 7.5

    Security update for osc

    This update for osc fixes the following issues: osc was updated to version 0.182.0 (bsc#1154972, bsc#1144211, bsc#1142662, bsc#1140697, bsc#1138165): - Added MFA support (jsc#OBS-203). - CVE-2019-3681: Fixed vulnerability where osc stored downloaded RPMs in n…

    first Dec 7, 2022
  • High max 7.5

    Security update for python2-numpy

    This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_fro…

    first Sep 12, 2022
  • High max 7.5

    python311-scikit-learn-1.6.1-1.1 on GA media

    These are all security issues fixed in the python311-scikit-learn-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 4, 2025
  • High max 7.5

    Security update for tar

    This update for tar fixes the following issues: - Fix the POINTYFEATHER vulnerability - GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line [bsc#1007188] …

    first Nov 24, 2016
  • High max 7.5

    Security update for python-Authlib

    This update for python-Authlib fixes the following issues: - CVE-2025-61920: limited the size of the header to prevent DoS (bsc#1251921).

    first Oct 23, 2025
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: Security fixes: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) - CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) - …

    first Jul 16, 2025
  • High max 7.1

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).

    first Nov 27, 2023
  • High max 7.5

    sccache-0.8.0~3-1.1 on GA media

    These are all security issues fixed in the sccache-0.8.0~3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7

    libmunge2-0.5.14-2.6 on GA media

    These are all security issues fixed in the libmunge2-0.5.14-2.6 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for rubygem-activejob-4_2

    This update for rubygem-activejob-4_2 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632).

    first Jan 24, 2019
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432). - CVE-2021-34866: Fixed possible eBPF Type Confusion privil…

    first Nov 19, 2021
  • High max 7.5

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - C…

    first Dec 16, 2021
  • High max 7.5

    Security update for nodejs10

    This update for nodejs10 to version 10.16.0 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Update to new upstream LTS version …

    first Aug 7, 2019
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 104.0.4944.36 * CHR-9492 Update Chromium on desktop-stable-118-4944 to 118.0.5993.118 * DNA-112757 [Tab close button] Close button is cutted when a lot tabs are opened - The update to chromium 118.…

    first Nov 4, 2023
  • High max 7.8

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to 3.6.19: - CVE-2023-6175: NetScreen file parser crash (bsc#1217272).

    first Dec 20, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel rt was updated. The following security bugs were fixed: - CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514) - CVE-2022-…

    first Oct 31, 2022
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 31 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_119 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …

    first Aug 16, 2018
  • High max 8.2

    miller-5.10.2-1.3 on GA media

    These are all security issues fixed in the miller-5.10.2-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.5.15 (bsc#1196016): * 10.5.15: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.5.14: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659,…

    first Mar 4, 2022
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel version 4.12.14 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-10638: Attackers used to be able to track the Linux kernel by the IP ID values the kernel produces for…

    first Jul 15, 2019
  • High max 7.5

    OpenImageIO-2.4.8.1-1.1 on GA media

    These are all security issues fixed in the OpenImageIO-2.4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: Security issues fixed: - CVE-2018-5740: Fixed a denial of service vulnerability in the 'deny-answer-aliases' feature (bsc#1104129). - CVE-2018-5743: Limiting simultaneous TCP clients is ineffective. (bsc#113318…

    first Jun 6, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 pac…

    first Jun 11, 2025
  • High max 7.8

    Security update for vim

    This update for vim fixes the following issues: - CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996). - CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256). - CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).

    first Aug 10, 2023
  • High max 7.5

    Security update for grafana

    This update for grafana fixes the following issues: - CVE-2022-23552: Fixed SVG processing by adding a dompurify preprocessor step (bsc#1207749). - CVE-2022-39324: Fixed originalUrl spoof security issue (bsc#1207750). - CVE-2022-41723: Fixed go issue to avoid…

    first Mar 20, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 pac…

    first Jun 9, 2025
  • High max 8.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)', introduced in October 2020 CPU. - Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157, and October 2020 C…

    first Nov 5, 2020
  • High max 7.4

    python310-3.10.12-1.1 on GA media

    These are all security issues fixed in the python310-3.10.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for virtualbox

    This update for virtualbox fixes the following issues: Version bump to 6.1.28 (released October 19 2021 by Oracle) This is a maintenance release. The following items were fixed and/or added: - VMM: Fixed guru meditation while booting nested-guests accessing d…

    first Oct 26, 2021
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.6 (bsc#1236946): - CVE-2025-24143: A maliciously crafted webpage may be able to fingerprint the user. - CVE-2025-24150: Copying a URL from Web Inspector may lead to command injecti…

    first Feb 21, 2025
  • High max 8.8

    MozillaFirefox-109.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-109.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: Update to 20.12.1 Security fixes: - CVE-2024-27983: Fixed failed assertion in node::http2::Http2Session::~Http2Session() that could lead to HTTP/2 server crash (bsc#1222244) - CVE-2024-27982: Fixed HTTP Req…

    first Apr 16, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_14 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-42133: Bluetooth: Ignore too large handle values in BIG (bsc#122…

    first Dec 5, 2024
  • High max 7.5

    Security update for go1.17

    This update for go1.17 fixes the following issues: Updated to upstream version 1.17.5 to include fixes to the compiler, linker, syscall, runtime, the net/http, go/types, and time packages (bsc#1190649) - CVE-2021-44717: syscall: don't close fd 0 on ForkExec e…

    first Dec 23, 2021
  • High max 7.8

    gvim-9.0.0626-1.1 on GA media

    These are all security issues fixed in the gvim-9.0.0626-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46842: Fixed x86 HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984). - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355).

    first Jul 16, 2024
  • High max 7.1

    matrix-synapse-1.127.1-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.127.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2025
  • High max 7.1

    Security update for curl

    This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP (bsc#1123378). - CVE-2019-3822: Fixed a stack based buffer overflow in the function crea…

    first Feb 6, 2019
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447). - CVE-2023-25775: Fixed improper a…

    first Dec 12, 2023