Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.8

    Security update for busybox

    This update for busybox fixes the following issues: - Enable switch_root With this change virtme --force-initramfs works as expected. - Enable udhcpc busybox was updated to 1.35.0 - Adjust busybox.config for new features in find, date and cpio - Annotate CVEs…

    first Nov 11, 2022
  • High max 7.5

    Security update for spice

    This security update for spice fixes the following issues: CVE-2016-9577: A buffer overflow in the spice server could have potentially been used by unauthenticated attackers to execute arbitrary code. (bsc#1023078) CVE-2016-9578: Unauthenticated attackers cou…

    first Feb 6, 2017
  • High max 7.5

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2023-5363: Incorrect cipher key and IV length processing. (bsc#1216163) - CVE-2023-3817: Add test of DH_check() with q = p + 1. (bsc#1213853)

    first Oct 25, 2023
  • High max 7.5

    Security update for nodejs10

    This update for nodejs10 to version 10.16.3 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denia…

    first Sep 2, 2019
  • High max 8.6

    python311-mistune-3.1.0-1.1 on GA media

    These are all security issues fixed in the python311-mistune-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_160 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).

    first Dec 13, 2023
  • High max 8.3

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157] CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CV…

    first Sep 2, 2020
  • High max 7.0

    ovmf-202308-9.1 on GA media

    These are all security issues fixed in the ovmf-202308-9.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to creat…

    first Oct 13, 2020
  • High max 8.3

    java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    go1.10-1.10.8-8.2 on GA media

    These are all security issues fixed in the go1.10-1.10.8-8.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2025-26594: Use-after-free of the root cursor (bsc#1237427). - CVE-2025-26595: Buffer overflow in XkbVModMaskText() (bsc#1237429). - CVE-2025-26596: Heap overflow in XkbWriteKeySyms() (bsc#1237…

    first Feb 26, 2025
  • High max 7.5

    squid-6.12-1.1 on GA media

    These are all security issues fixed in the squid-6.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 9, 2024
  • High max 8.2

    element-web-1.11.26-1.1 on GA media

    These are all security issues fixed in the element-web-1.11.26-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 (bsc#1201980): - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp document…

    first Aug 16, 2022
  • High max 8.2

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers (bsc#1191601). - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body (bsc#1191602). - CVE-2021-37701: Fixed arbitrary f…

    first Dec 12, 2021
  • High max 8.8
    SUSE-SU-2025:0260-1 16 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…

    first Jan 27, 2025
  • High max 7.5

    python312-3.12.3-1.1 on GA media

    These are all security issues fixed in the python312-3.12.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB race…

    first Jan 18, 2024
  • High max 7.8
    openSUSE-SU-2024:13294-1 1 CVE 1 exploited

    glibc-2.38-4.1 on GA media

    These are all security issues fixed in the glibc-2.38-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-59681: SQL injection via the `QuerySet` annotate()`, `alias()`, `aggregate()`, or `extra()` methods when processing a specially crafted dictionary with dictionary expansion (bsc#1250485). - …

    first Oct 2, 2025
  • High max 7.7

    element-desktop-1.11.73-1.1 on GA media

    These are all security issues fixed in the element-desktop-1.11.73-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2024
  • High max 7.5

    python310-Werkzeug-2.2.3-1.1 on GA media

    These are all security issues fixed in the python310-Werkzeug-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_18 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215…

    first Oct 24, 2023
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765).

    first Dec 21, 2023
  • High max 8.8
    openSUSE-SU-2021:0436-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium was updated to 89.0.4389.90 (boo#1183515) - CVE-2021-21191: Use after free in WebRTC. - CVE-2021-21192: Heap buffer overflow in tab groups. - CVE-2021-21193: Use after free in Blink.

    first Mar 17, 2021
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).

    first Feb 7, 2023
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).

    first Jan 12, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930).…

    first Sep 12, 2025
  • High max 7.5

    apache2-mod_auth_openidc-2.4.15.3-1.1 on GA media

    These are all security issues fixed in the apache2-mod_auth_openidc-2.4.15.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 54 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_195 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the li…

    first Aug 4, 2025
  • High max 8.7

    liblzma5-32bit-5.8.1-1.1 on GA media

    These are all security issues fixed in the liblzma5-32bit-5.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_26 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious AC…

    first Sep 4, 2020
  • High max 7.5

    go1.22-1.22.5-1.1 on GA media

    These are all security issues fixed in the go1.22-1.22.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 4, 2024
  • High max 7.5

    Security update for expat

    This update for expat fixes the following issues: - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused by stack overflow by resolving use of recursion (bsc#1239618) Other fixes: - version update to 2.7.1 (jsc#PED-12500) Bug…

    first Apr 11, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-2…

    first Aug 10, 2022
  • High max 8.8
    openSUSE-SU-2024:13283-1 1 CVE 1 exploited

    nodejs-electron-25.8.4-2.1 on GA media

    These are all security issues fixed in the nodejs-electron-25.8.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    etcd-for-k8s1.30-3.5.15-1.1 on GA media

    These are all security issues fixed in the etcd-for-k8s1.30-3.5.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2024
  • High max 8.3

    java-1_8_0-openj9-1.8.0.292-3.2 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.292-3.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this f…

    first Feb 6, 2020