Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.4
    SUSE-SU-2022:0169-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalat…

    first Jan 25, 2022
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 3 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_13 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (a…

    first Oct 23, 2018
  • High max 7.0
    SUSE-SU-2016:2658-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 14 for SLE 12

    This update for the Linux Kernel 3.12.60-52_49 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 26, 2016
  • High max 8.8

    php-composer2-2.7.7-1.1 on GA media

    These are all security issues fixed in the php-composer2-2.7.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    conmon-2.1.2-1.1 on GA media

    These are all security issues fixed in the conmon-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2025-4565: Fix parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that can lead to crash due to RecursionError (bsc#1244663).

    first Jul 15, 2025
  • High max 7.0

    Security update for saphanabootstrap-formula

    This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 * revert changes to spec file to re-enable SLES RPM builds * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990) - Versi…

    first Jan 2, 2023
  • High max 7.5

    libsoup-2_4-1-2.74.3-4.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 13, 2024
  • High max 7.5

    java-17-openjdk-17.0.8.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532) - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533) - CVE-2021-1405: Fix for mail parser NULL-dereference…

    first Apr 13, 2021
  • High max 7.0

    libsoup-2_4-1-2.74.3-8.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-8.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2025
  • High max 7.5

    corepack19-19.7.0-1.1 on GA media

    These are all security issues fixed in the corepack19-19.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for opensuse-welcome

    This update for opensuse-welcome fixes the following issues: - CVE-2023-32184: Fixed possible security issues when using the feature to change the Xfce desktop layout, caused by a fixed temporary file path used in /tmp/layout (boo#1213708)

    first Aug 18, 2023
  • High max 7.5

    cups-2.4.2-5.1 on GA media

    These are all security issues fixed in the cups-2.4.2-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU): - CVE-2023-21930: Fixed AES support (bsc#1210628). - CVE-2023-21937: Fixed String platform support (bsc#1210631). - CVE-2023-21938: Fixed runtim…

    first May 5, 2023
  • High max 7.8

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2020-1712 (bsc#bsc#1162108) Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this f…

    first Mar 18, 2020
  • High max 7.8
    SUSE-SU-2021:1274-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • High max 8.2

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: Upgrade to upstream version 4.1.126. Security issues fixed: - CVE-2025-58057: decompression codecs allocating a large number of buffers after processing specially crafted input can cause a deni…

    first Sep 9, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). - CVE-2024-40954: net: do not leave a dangli…

    first Oct 30, 2024
  • High max 8.1

    greetd-0.8.0-2.1 on GA media

    These are all security issues fixed in the greetd-0.8.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgrade to 16.8: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).

    first Feb 21, 2025
  • High max 8.3
    SUSE-SU-2021:2422-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909:…

    first Jul 21, 2021
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to…

    first Oct 13, 2020
  • High max 8.1

    Security update for libxml2

    This update for libxml2 fixes the following security issues: - CVE-2016-2073, CVE-2015-8806, CVE-2016-1839: A Heap-buffer overread was fixed in libxml2/dict.c [bsc#963963, bsc#965283, bsc#981114]. - CVE-2016-4483: Code was added to avoid an out of bound acces…

    first Jun 17, 2016
  • High max 7.3

    Security update for giflib

    This update for giflib fixes the following issues: - CVE-2025-31344: Fixed a buffer overflow in function DumpScreen2RGB (bsc#1240416)

    first Apr 8, 2025
  • High max 7.5

    expat-2.5.0-1.1 on GA media

    These are all security issues fixed in the expat-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for nginx

    This update for nginx to version 1.14.2 fixes the following issues: Security vulnerabilities addressed: - CVE-2018-16843 CVE-2018-16844: Fixed an issue whereby a client using HTTP/2 might cause excessive memory consumption and CPU usage (bsc#1115025 bsc#11150…

    first Feb 12, 2019
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596)

    first Feb 7, 2025
  • High max 7.5

    Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go sec…

    first May 27, 2019
  • High max 7.1

    Security update for emacs

    This update for emacs fixes the following issues: - CVE-2024-30203: Fixed denial of service via MIME contents (bsc#1222053) - CVE-2024-30204: Fixed denial of service via LaTeX preview in e-mail attachments (bsc#1222052) - CVE-2024-30205: Fixed Org mode consid…

    first Apr 16, 2024
  • High max 7.5

    tuigreet-0.7.1-4.1 on GA media

    These are all security issues fixed in the tuigreet-0.7.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Update to version jdk8u302 (icedtea 3.20.0) - CVE-2021-2341: Improve file transfers. (bsc#1188564) - CVE-2021-2369: Better jar file validation. (bsc#1188565) - CVE-2021-2388: Enhance compiler va…

    first Aug 21, 2021
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940). - CVE-2022-20166…

    first Aug 9, 2022
  • High max 8.6

    Security update for python-Jinja2

    This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format…

    first May 13, 2019
  • High max 7.4

    Security update for ovmf

    This update for ovmf fixes the following issues: - CVE-2019-14560: Fixed potential secure boot bypass via an improper check of GetEfiGlobalVariable2 (bsc#1174246). - CVE-2021-38578: Fixed underflow in MdeModulePkg/PiSmmCore SmmEntryPointAdd (bsc#1196741).

    first Apr 24, 2023
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 (bsc#1182286): + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT d…

    first Mar 3, 2021
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…

    first Feb 7, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_14 fixes one issue. The following security issue was fixed: - CVE-2024-40909: Fix a potential use-after-free in bpf_link_free() (bsc#1228349).

    first Sep 23, 2024
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 131.0.6778.108 (stable released 2024-12-04) (boo#1234118) - CVE-2024-12053: Type Confusion in V8

    first Dec 12, 2024
  • High max 7.0

    Security update for erlang

    This update for erlang fixes the following issues: - CVE-2025-26618: Fixed SSH SFTP packet size not verified properly in Erlang OTP (bsc#1237467).

    first Mar 18, 2025