Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 111.0.5168.43 * DNA-115228 Adblocker is blocking ads when turned off * DNA-116605 Crash at opera::BrowserContentsView:: NonClientHitTestPoint(gfx::Point const&) * DNA-116855 Cannot close tab island…

    first Jul 6, 2024
  • High max 8.6

    Security update for grub2

    This update for grub2 fixes the following issues: Security Fixes: - CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178). - CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182). Other: - Bump upstream SBAT generation …

    first Nov 21, 2022
  • High max 7.5

    Security update for redis

    This update for redis fixes the following issues: redis was updated to 6.0.13: * CVE-2021-29477: Integer overflow in STRALGO LCS command (bsc#1185729) * CVE-2021-29478: Integer overflow in COPY command for large intsets (bsc#1185730) * Cluster: Skip unnecessa…

    first May 19, 2021
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).

    first Mar 16, 2024
  • High max 7.5

    libnghttp2-14-1.55.1-1.1 on GA media

    These are all security issues fixed in the libnghttp2-14-1.55.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2021-21703: Fixed local privilege escalation via PHP-FPM (bsc#1192050). - CVE-2021-21707: Fixed special character breaks path in xml parsing (bsc#1193041). - CVE-2017-8923: Fixed denial of service (applic…

    first Mar 2, 2022
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.20.3 fixes the following issues: These security issues were fixed: - CVE-2018-4190: An unspecified issue allowed remote attackers to obtain sensitive credential information that is transmitted during a CSS mask-image f…

    first Jul 26, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_33 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…

    first Jun 13, 2025
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 112.0.5197.53 * CHR-9814 Update Chromium on desktop-stable-126-5197 to 126.0.6478.226 * DNA-116974 Site settings popup size not expanding causing display issues * DNA-117115 Tab islands are extendi…

    first Aug 18, 2024
  • High max 7.5

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)

    first Nov 26, 2025
  • High max 7.8

    Security update for jasper

    This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder (bsc#1218802).

    first Jan 26, 2024
  • High max 7.8
    SUSE-SU-2022:0543-1 9 CVEs 1 exploited

    Security update for the Linux RT Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). …

    first Feb 21, 2022
  • High max 7.8

    Security update for LibreOffice

    This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.3.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java …

    first Jun 7, 2019
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_116 fixes several issues. The following security issues were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing boun…

    first Feb 10, 2021
  • High max 7.8

    Security update for singularity

    This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Fixed a local root exploit, related to joining arbitrary mount namespaces (boo#1111411).

    first Mar 23, 2019
  • High max 7.7

    Security update for syslog-ng

    This update for syslog-ng fixes the following issues: - CVE-2020-8019: Fixed a local privilege escalation during package update (bsc#1169385).

    first May 14, 2020
  • High max 7.5

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Security issues fixed: * CVE-2022-32149: Fix denial of service vulnerability (bsc#1204501) * CVE-2022-41723: Fix uncontrolled resource consumption (bsc#1208270) * CVE-2022-461…

    first Sep 28, 2023
  • High max 7.8

    xwayland-23.2.2-1.1 on GA media

    These are all security issues fixed in the xwayland-23.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential perm…

    first May 11, 2023
  • High max 7.8
    SUSE-SU-2023:2369-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_18 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 5, 2023
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_51 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-1749: Fixed a flaw in IPsec where some IPv6 protocols were n…

    first Sep 4, 2020
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempot…

    first Sep 25, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_128 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid …

    first Jan 17, 2025
  • High max 7.5

    Security update for apache-commons-compress

    This update for apache-commons-compress fixes the following issues: - Updated to 1.21 - CVE-2021-35515: Fixed an infinite loop when reading a specially crafted 7Z archive. (bsc#1188463) - CVE-2021-35516: Fixed an excessive memory allocation when reading a spe…

    first Aug 5, 2021
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 7 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods…

    first Jan 18, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 26 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_78 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bs…

    first Dec 19, 2022
  • High max 7.0

    Security update for redis7

    This update for redis7 fixes the following issues: - CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) - CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collec…

    first Jan 17, 2025
  • High max 8.0

    Security update for postgresql12

    This update for postgresql12 fixes the following issues: Upgrade to 12.18: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).

    first Feb 16, 2024
  • High max 7.8

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: * CVE-2016-9190: Pillow allows context-dependent attackers to execute arbitrary code by using the \'crafted image file\' approach, related to an \'Insecure Sign Extension\' issue affecting the ImagingN…

    first May 9, 2018
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2025-2761: unvalidated user input in FLI file parsing may lead to an out-of-bounds write (bsc#1241691).

    first Jun 5, 2025
  • High max 7.3

    Security update for plasma5-workspace

    plasma5-workspace was updated to fix the following issue: - Fixed ksmserver authentication (CVE-2024-36041, boo#1225774). - Fixed a regression introduced by the preceding change (kde#487912, boo#1226110):

    first Jun 13, 2024
  • High max 7.5

    Security update for python-Pygments

    This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812).

    first Dec 1, 2021
  • High max 8.1

    glibc-2.39-6.1 on GA media

    These are all security issues fixed in the glibc-2.39-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    go1.19-1.19.4-1.1 on GA media

    These are all security issues fixed in the go1.19-1.19.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Recommended update for podman

    This update for podman fixes the following issues: - Added patch to remove using rw as a default mount option (bsc#1239776)

    first Jun 24, 2025
  • High max 7.7

    Security update for google-gson

    This update for google-gson fixes the following issues: - CVE-2022-25647: Fixed deserialization of untrusted data (bsc#1199064).

    first Jun 10, 2022
  • High max 7.0

    Security update for orc

    This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow in the orc compiler when formatting error messages for certain input files (bsc#1228184)

    first Jul 30, 2024
  • High max 7.8

    gvim-9.0.0224-1.1 on GA media

    These are all security issues fixed in the gvim-9.0.0224-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-aft…

    first Aug 15, 2022
  • High max 7.5

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…

    first Dec 6, 2023