Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: - CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894).

    first Dec 1, 2023
  • High max 7.5

    Security update for grub2

    This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to l…

    first Oct 16, 2023
  • High max 7.5

    Security update for python39

    This update for python39 fixes the following issues: - CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448) - CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447)

    first Jul 2, 2024
  • High max 8.2

    python3-virtualbox-7.0.8-1.1 on GA media

    These are all security issues fixed in the python3-virtualbox-7.0.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-Django

    python-Django was update to fix: - CVE-2023-24580: Prevent DOS in file uploads. (bsc#1208082)

    first Mar 14, 2023
  • High max 8.8

    wget-1.21.1-2.2 on GA media

    These are all security issues fixed in the wget-1.21.1-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    Security update for ansible

    This update for ansible to version 2.9.6 fixes the following issues: Security issues fixed: - CVE-2019-14904: Fixed a vulnerability in solaris_zone module via crafted solaris zone (boo#1157968). - CVE-2019-14905: Fixed an issue where malicious code could craf…

    first Apr 12, 2020
  • High max 7.8
    SUSE-SU-2023:2431-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_38 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 6, 2023
  • High max 7.0

    runc-1.1.5-1.1 on GA media

    These are all security issues fixed in the runc-1.1.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for compat-openssl098

    This update for compat-openssl098 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).

    first Sep 13, 2021
  • High max 8.1

    openssh-7.2p2-3.1 on GA media

    These are all security issues fixed in the openssh-7.2p2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…

    first Dec 6, 2023
  • High max 7.5

    Security update for cups

    This update for cups fixes the following issues: - CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).

    first Jun 1, 2023
  • High max 7.5

    Security update for harfbuzz

    This update for harfbuzz fixes the following issues: - CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922).

    first Apr 12, 2023
  • High max 7.8

    GraphicsMagick-1.3.38-1.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.38-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for python-Jinja2

    This update for python-Jinja2 fixes the following issues: Security issue fixed: - CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format

    first May 23, 2019
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: * CVE-2024-45230: Fixed Potential denial-of-service vulnerability in django.utils.html.urlize() (boo#1229823) * CVE-2024-45231: Potential user email enumeration via response status on password reset (b…

    first Sep 5, 2024
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2017-9050: heap-based buffer overflow (xmlDictAddString func) [bsc#1039069, bsc#1039661] - CVE-2017-9049: heap-based buffer overflow (xmlDictComputeFastKey func) [bsc#1039066] - CVE-2017-9048: stack ov…

    first Jun 16, 2017
  • High max 8.8
    openSUSE-SU-2024:13232-1 11 CVEs 2 exploited

    ungoogled-chromium-116.0.5845.179-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-116.0.5845.179-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    MozillaFirefox-121.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-121.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.7

    python313-3.13.1-1.1 on GA media

    These are all security issues fixed in the python313-3.13.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2025
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2024-53237: Bluetooth: fix use-after-free in device_for_each_child() (bsc#1235008). - CVE-2024-53082: virtio_net: Add hash_key_length che…

    first Apr 28, 2025
  • High max 8.8

    Security update for opencv

    This update for opencv fixes the following issues: - CVE-2016-1517: Fixed a denial of service (segfault) via vectors involving corrupt chunks (boo#1033150) - CVE-2016-1516: Fixed a double free issue that allows attackers to execute arbitrary code (boo#1033152…

    first May 11, 2018
  • High max 7.4

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: Security issue fixed: - CVE-2019-12855: Fixed TLS certificate verification to protecting against MITM attacks (bsc#1138461). This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 5, 2019
  • High max 8.1

    MozillaFirefox-137.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-137.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2025
  • High max 7.8
    SUSE-SU-2025:0885-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_se…

    first Mar 17, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow …

    first Jun 10, 2025
  • High max 7.5

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2024-24814: Fixed a denial of service when using `OIDCSessionType client-cookie` and manipulating cookies (bsc#1219911).

    first Mar 5, 2024
  • High max 7.5

    ruby3.4-rubygem-minitar-0.9-1.19 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-minitar-0.9-1.19 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_46 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#120311…

    first Sep 27, 2022
  • High max 7.8

    Security update for libfastjson

    This update for libfastjson fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).

    first May 24, 2024
  • High max 7.8
    SUSE-SU-2022:0762-1 7 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.2

    sudo-1.9.13p3-2.1 on GA media

    These are all security issues fixed in the sudo-1.9.13p3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    openSUSE-SU-2021:3018-1 1 CVE 1 exploited

    Security update for php7-pear

    This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

    first Sep 13, 2021
  • High max 7.8

    Security update for opusfile

    This update for opusfile fixes the following issues: - CVE-2022-47021: Fixed a NULL pointer dereference (boo#1207381)

    first Jan 7, 2024
  • High max 8.8

    libtiff-devel-32bit-4.3.0-1.3 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.3.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-afte…

    first Jun 21, 2024
  • High max 7.5

    Security update for go1.12

    This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset f…

    first Sep 7, 2019
  • High max 7.8

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2024-0450: Fixed 'quoted-overlap' issue inside the zipfile module (bsc#1221854). - CVE-2023-6597: Fixed removing tempfile.TemporaryDirectory in some edge cases related to symlinks (bsc#1219666). - CV…

    first May 8, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_26 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly pri…

    first Nov 5, 2020