Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for postgresql96

    This update for postgresql96 fixes the following issues: Security issue fixed: - CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092).

    first Oct 15, 2019
  • High max 8.8
    openSUSE-SU-2023:0247-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - CVE-2023-4863: temporary build with the bundled library on Leap (boo#1215231)

    first Sep 15, 2023
  • High max 7.0

    Security update for erlang26

    This update for erlang26 fixes the following issues: - CVE-2025-26618: Fixed incorrect verification of SSH SFTP packet size in Erlang OTP (bsc#1237467)

    first Mar 28, 2025
  • High max 7.5

    corosync-2.4.5+git70.64010f57-1.2 on GA media

    These are all security issues fixed in the corosync-2.4.5+git70.64010f57-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for nginx

    This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (b…

    first Sep 5, 2019
  • High max 7.8

    libwireshark18-4.4.4-2.1 on GA media

    These are all security issues fixed in the libwireshark18-4.4.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 21, 2025
  • High max 8.2

    chromedriver-132.0.6834.110-1.1 on GA media

    These are all security issues fixed in the chromedriver-132.0.6834.110-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 26, 2025
  • High max 7.1

    Security update for dbus-1

    This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).

    first Feb 18, 2020
  • High max 7.5

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239339).

    first Mar 26, 2025
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-21102: Fixed possible bypass o…

    first Jun 27, 2023
  • High max 7.5

    Security update for dnsdist

    This update for dnsdist fixes the following issues: - CVE-2025-30193: stack exhaustion when processing too many queries on incoming TCP connections leads to a denial-of-service (bsc#1243378).

    first May 29, 2025
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909)

    first Apr 1, 2021
  • High max 8.8
    openSUSE-SU-2022:0077-1 8 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to 84.0.4316.21: - CHR-8762 Update chromium on desktop-stable-98-4316 to 98.0.4758.102 - DNA-97333 ‘Add a site’ label on start page tile barely visible - DNA-97691 Opera 84 translations - DNA…

    first Mar 7, 2022
  • High max 7.9

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: Update to 20.11.1: (security updates) * CVE-2024-21892: Code injection and privilege escalation through Linux capabilities (bsc#1219992). * CVE-2024-22019: http: Reading unprocessed HTTP request with unboun…

    first Feb 28, 2024
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of th…

    first Nov 12, 2019
  • High max 7.5

    krb5-1.21.2-3.1 on GA media

    These are all security issues fixed in the krb5-1.21.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    libwireshark15-3.6.1-2.1 on GA media

    These are all security issues fixed in the libwireshark15-3.6.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_37 fixes one issue. The following security issue was fixed: - CVE-2020-1749: Fixed a vulnerability where in some cases IPv6 traffic would not be encrypted over an IPsec tunnel (bsc#1165629).

    first Apr 21, 2020
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 131.0.6778.108 (stable released 2024-12-04) (boo#1234118) - CVE-2024-12053: Type Confusion in V8

    first Dec 12, 2024
  • High max 8.8
    SUSE-SU-2024:4292-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution (bsc#1233631) - CVE-2024-44309: Fixed data isolation bypass vulnerability (bsc#1233632)

    first Dec 11, 2024
  • High max 8.8

    Security update for samba

    This update for samba fixes the following issues: - CVE-2021-44142: Fixed out-of-Bound Read/Write on Samba vfs_fruit module. (bsc#1194859)

    first Feb 1, 2022
  • High max 8.8

    Security update for podman

    This update for podman fixes the following issues: Updated to version 3.4.7: - CVE-2022-1227: Fixed an issue that could allow an attacker to publish a malicious image to a public registry and run arbitrary code in the victim's context via the 'podman top' com…

    first Aug 17, 2022
  • High max 8.1

    MozillaThunderbird-128.9.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2025
  • High max 7.5

    Security update for redis

    This update for redis fixes the following issues: - CVE-2025-21605: Fixed an output buffer denial of service. (bsc#1241708)

    first Apr 30, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - C…

    first Jul 14, 2023
  • High max 7.0
    SUSE-SU-2016:2637-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 6 for SLE 12 SP1

    This update for the Linux Kernel 3.12.59-60_45 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_23 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulner…

    first Aug 4, 2025
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-46842: Fixed denial of service due to Xen bug check triggered by HVM hypercalls (XSA-454) in xen x86 (bsc#1221984) - CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455) in xen x86…

    first Apr 12, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnera…

    first Sep 26, 2023
  • High max 8.2

    apache2-mod_auth_openidc-2.4.16.11-1.1 on GA media

    These are all security issues fixed in the apache2-mod_auth_openidc-2.4.16.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2025
  • High max 8.8

    nodejs-electron-33.4.4-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-33.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 12, 2025
  • High max 8.1

    Security update for nodejs16

    This update for nodejs16 fixes the following issues: - Update to LTS versino 16.18.1. - CVE-2022-43548: Fixed DNS rebinding in --inspect via invalid octal IP address (bsc#1205119). - Update to LTS version 16.18.0: * http: throw error on content-length mismatc…

    first Nov 14, 2022
  • High max 7.8

    Security update for ctags

    This update for ctags fixes the following issues: - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename (bsc#1206543).

    first Feb 1, 2023
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-1749: Use ip6_dst_lookup_flow instead of ip6_dst_lookup (bsc#1165629). - CVE-2020-14314: Fixed a potential n…

    first Sep 4, 2020
  • High max 7.8

    python312-3.12.2-4.1 on GA media

    These are all security issues fixed in the python312-3.12.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    oci-cli-3.23.3-1.1 on GA media

    These are all security issues fixed in the oci-cli-3.23.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Securitys update for open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to 12.3.0 (build 22234872) (bsc#1214850) - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, includin…

    first Sep 27, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow…

    first Jun 12, 2025
  • High max 8.7

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in th…

    first Dec 2, 2021
  • High max 7.5

    git-bug-0.8.0+git.1742269202.0ab94c9-1.1 on GA media

    These are all security issues fixed in the git-bug-0.8.0+git.1742269202.0ab94c9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 26, 2025