Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.1
    SUSE-SU-2017:3039-1 3 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security issues fixed: - CVE-2017-5664: A problem in handling error pages was fixed, to avoid potential file overwrites during error page handling. (bsc#1042910). - CVE-2017-7674: A CORS Filter issue could le…

    first Nov 22, 2017
  • High max 7.8

    cargo1.71-1.71.1-1.1 on GA media

    These are all security issues fixed in the cargo1.71-1.71.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2023:0297-1 3 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 103.0.4928.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89 * CHR-9449 Update Chromium on desktop-stable-117-4928 …

    first Oct 11, 2023
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_61 fixes several issues. The following security issues were fixed: - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). - CVE-2024-43861: Fix memory leak for not ip packets …

    first Dec 2, 2024
  • High max 8.8
    SUSE-SU-2023:0489-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 23, 2023
  • High max 7.5

    owasp-modsecurity-crs-4.10.0-1.1 on GA media

    These are all security issues fixed in the owasp-modsecurity-crs-4.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 30, 2025
  • High max 7.8

    xorg-x11-server-21.1.9-1.1 on GA media

    These are all security issues fixed in the xorg-x11-server-21.1.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.2

    Security update for cni-plugins

    This update for cni-plugins fixes the following issues: - CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).

    first Dec 20, 2022
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. (bsc#1214099) - CVE-2022-40982: Fixed a potential security vulnerability in some Intel� Processors which may allow information disclosure. - CVE-2023-23…

    first Aug 23, 2023
  • High max 7.5

    keepass-2.54-1.1 on GA media

    These are all security issues fixed in the keepass-2.54-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    expat-2.6.2-1.1 on GA media

    These are all security issues fixed in the expat-2.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    crmsh-4.3.1+20210913.d7356663-1.2 on GA media

    These are all security issues fixed in the crmsh-4.3.1+20210913.d7356663-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3

    c-ares-devel-1.34.5-1.1 on GA media

    These are all security issues fixed in the c-ares-devel-1.34.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 9, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_83 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vuln…

    first Aug 4, 2025
  • High max 8.8

    Security update for dovecot23

    This update for dovecot23 fixes the following issues: - CVE-2022-30550: Fixed privilege escalation in dovecot when similar master and non-master passdbs are used (bsc#1201267).

    first Jul 20, 2022
  • High max 7.5

    Security update for python-wheel

    This update for python-wheel fixes the following issues: - CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).

    first Mar 9, 2023
  • High max 7.3

    Security update for rust1.57

    This update for rust1.57 fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).

    first Jan 25, 2022
  • High max 7.8
    SUSE-SU-2025:0946-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_vali…

    first Mar 19, 2025
  • High max 7.4

    Security update for grub2

    This update for grub2 provides the following fixes and enhancements: Security issue fixed: - Fix buffer overflows when reading username and password. (bsc#956631, CVE-2015-8370) Non security issues fixed: - Expand list of grub.cfg search path in PV Xen guests…

    first Dec 30, 2015
  • High max 7.4

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bs…

    first Aug 24, 2021
  • High max 7.5

    Security update for strongswan

    This update for strongswan fixes the following issues: - CVE-2017-9022: Insufficient Input Validation in gmp Plugin leads to Denial of service (bsc#1039514) - CVE-2017-9023: Incorrect x509 ASN.1 parser error handling could lead to Denial of service (bsc#10395…

    first Jun 1, 2017
  • High max 7.5

    Security update for python-Pygments

    This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Dec 3, 2021
  • High max 7.0

    Security update for redis

    This update for redis fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service (bsc#1231266) - CVE-2024-31228: Fixed unbounded recursive pattern matching (bsc#1231265) - CVE-2024-31449: Fixed integer overflow bug in Lua b…

    first Oct 7, 2024
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 129.0.6668.58 (stable released 2024-09-17) (boo#1230678) * CVE-2024-8904: Type Confusion in V8 * CVE-2024-8905: Inappropriate implementation in V8 * CVE-2024-8906: Incorrect security UI in Downlo…

    first Sep 24, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_37 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116). - C…

    first Sep 27, 2022
  • High max 8.3

    Security update for spice-gtk

    This update for spice-gtk fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)

    first Dec 16, 2020
  • High max 8.8
    openSUSE-SU-2024:13353-1 1 CVE 1 exploited

    qutebrowser-3.0.2-1.1 on GA media

    These are all security issues fixed in the qutebrowser-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3

    Security update for libreoffice

    This update for libreoffice fixes the following issues: - CVE-2023-6186: Fixed link targets allow arbitrary script execution (bsc#1217578). - CVE-2023-6185: Fixed Improper input validation enabling arbitrary Gstreamer pipeline injection (bsc#1217577).

    first Dec 28, 2023
  • High max 7.1

    Security update for php8-pear

    This update for php8-pear fixes the following issues: - Add php8-pear to SLE15-SP4 (jsc#SLE-24728) - Update to 1.10.21 - PEAR 1.10.13 * unsupported protocol - use --force to continue * Add $this operator to _determineIfPowerpc calls - Update to 1.10.20 - Arch…

    first Sep 8, 2022
  • High max 7.4

    python39-3.9.19-2.1 on GA media

    These are all security issues fixed in the python39-3.9.19-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2024
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-3555 (bsc#1204425, bsc#1208881)

    first Apr 27, 2023
  • High max 7.5

    ruby3.2-rubygem-sprockets-4.1.1-1.6 on GA media

    These are all security issues fixed in the ruby3.2-rubygem-sprockets-4.1.1-1.6 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    kubetui-1.5.1-1.1 on GA media

    These are all security issues fixed in the kubetui-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in th…

    first Dec 6, 2021
  • High max 8.5

    Security update for icingaweb2

    This update for icingaweb2 fixes the following issues: icingaweb2 was updated to 2.8.6 This is a security release. * Security Fixes - CVE-2022-24715: SSH resources allow arbitrary code execution for authenticated users (GHSA-v9mv-h52f-7g63 boo#1196911) - CVE-…

    first Mar 21, 2022
  • High max 7.5

    Security update for python2-numpy

    This update for python2-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArray_NewFromDescr_int function of ctors.c (bsc#1193913). - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in array_fro…

    first Sep 12, 2022
  • High max 7.5

    parsec-1.0.0~rc3-1.1 on GA media

    These are all security issues fixed in the parsec-1.0.0~rc3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_27 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Mar 26, 2024
  • High max 7.3

    libzvbi-chains0-0.2.44-1.1 on GA media

    These are all security issues fixed in the libzvbi-chains0-0.2.44-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2025
  • High max 7.5

    Security update for libtasn1

    This update for libtasn1 fixes the following issues: - CVE-2025-13151: stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).

    first Jan 13, 2026