Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_49 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#120311…

    first Sep 24, 2022
  • High max 8.6

    Security update for cups

    This update for cups fixes the following issues: - CVE-2024-47175: no validation of IPP attributes in `ppdCreatePPDFromIPP2` when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD (bsc#1230932). - CVE-20…

    first Sep 18, 2025
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflo…

    first Jan 5, 2026
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of…

    first Sep 21, 2023
  • High max 7.5

    parsec-tool-0.5.2-1.1 on GA media

    These are all security issues fixed in the parsec-tool-0.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive informa…

    first Sep 8, 2023
  • High max 8.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-46342: Server XvdiSelectVideoNoti…

    first Dec 14, 2022
  • High max 7.5

    Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc

    This update for containerd, docker, docker-runc, golang-github-docker-libnetwork, runc fixes the following issues: Security issues fixed: - CVE-2018-16875: Fixed a CPU Denial of Service (bsc#1118899). - CVE-2018-16874: Fixed a vulnerabity in go get command wh…

    first Mar 8, 2019
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer ca…

    first Aug 19, 2025
  • High max 7.5

    Security update for go1.21

    This update for go1.21 fixes the following issues: - CVE-2023-45288: Fixed denial of service via HTTP/2 continuation frames (bsc#1221400) Other changes: - go minor release upgrade to 1.21.9 (bsc#1212475)

    first Apr 5, 2024
  • High max 7.5

    Security update for postgresql10

    This update for postgresql10 to version 10.9 fixes the following issue: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034). More information at https://www.postgresql.org/docs/10/release-10-9.…

    first Jul 9, 2019
  • High max 8.0

    ffmpeg-5-5.1.4-7.1 on GA media

    These are all security issues fixed in the ffmpeg-5-5.1.4-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for dhcp

    This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382)

    first Jun 1, 2021
  • High max 7.5

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - Dropped support for libmfx to fix the following CVEs: * libmfx: improper input validation (CVE-2023-48368, bsc#1226897) * libmfx: improper buffer restrictions (CVE-2023-45221, bsc#1226898) * …

    first Sep 18, 2024
  • High max 7.4

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Updated to version 11.0.22 (January 2024 CPU): - CVE-2024-20918: Fixed an out of bounds access in the Hotspot JVM due to a missing bounds check (bsc#1218907). - CVE-2024-20919: Fixed a sandbox bypass…

    first Feb 2, 2024
  • High max 7.1

    Security update for crypto-policies, krb5

    This update for crypto-policies and krb5 fixes the following issues: Security issue fixed: - CVE-2025-24528: Fixed out-of-bounds write caused by overflow when calculating ulog block size can lead to process crash (bsc#1236619). Feature addition: - Add crypto-…

    first Feb 10, 2025
  • High max 7.5

    Security update for rubygem-activerecord-5_1

    This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2022-44566: Fixed possible denial of service vulnerability in ActiveRecord's PostgreSQL adapter (bsc#1207450).

    first Feb 23, 2023
  • High max 7.8
    SUSE-SU-2024:0515-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429). - …

    first Feb 15, 2024
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in t…

    first Dec 1, 2021
  • High max 7.5

    python311-ujson-5.10.0-1.5 on GA media

    These are all security issues fixed in the python311-ujson-5.10.0-1.5 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • High max 7.3

    Security update for zvbi

    This update for zvbi fixes the following issues: - CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222). - CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239…

    first Mar 24, 2025
  • High max 8.6

    Security update for less

    This update for less fixes the following issues: - CVE-2024-32487: Fixed mishandling of \n character in paths when LESSOPEN is set leads to OS command execution. (bsc#1222849)

    first May 10, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network sc…

    first Oct 24, 2023
  • High max 7.5

    python38-3.8.19-4.1 on GA media

    These are all security issues fixed in the python38-3.8.19-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2024
  • High max 8.1

    Security update for python-pysaml2

    This update for python-pysaml2 fixes the following issues: - CVE-2017-1000433: When python optimizations are enabled, any user is able to login without knowing their password. (bsc#1074662)

    first May 9, 2018
  • High max 8.8
    SUSE-SU-2024:3870-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27…

    first Nov 1, 2024
  • High max 7.5

    Security update for rubygem-rack

    This update for rubygem-rack fixes the following issues: - CVE-2025-25184: Fixed escape sequence injection vulnerability in rack leading to possible log injection (bsc#1237141) - CVE-2025-27111: Fixed escape sequence injection vulnerability in rack leading to…

    first Mar 14, 2025
  • High max 8.1

    corepack19-19.0.1-1.1 on GA media

    These are all security issues fixed in the corepack19-19.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading u…

    first Feb 29, 2024
  • High max 8.6
    SUSE-SU-2022:1257-1 33 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read…

    first Apr 19, 2022
  • High max 7.8

    podman-5.2.4-2.1 on GA media

    These are all security issues fixed in the podman-5.2.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 17, 2024
  • High max 7.5

    python310-Django-4.0.1-1.1 on GA media

    These are all security issues fixed in the python310-Django-4.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    rclone-1.67.0-1.1 on GA media

    These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 17, 2024
  • High max 7.5

    Security update for python3-sqlparse

    This update for python3-sqlparse fixes the following issues: - CVE-2024-4340: Fixed RecursionError catch to avoid a denial-of-service issue (bsc#1223603).

    first May 30, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_144 fixes several issues. The following security issues were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can somet…

    first Jun 28, 2023
  • High max 7.8

    ffmpeg-6-6.1.1-5.1 on GA media

    These are all security issues fixed in the ffmpeg-6-6.1.1-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    starboard-0.15.6-1.1 on GA media

    These are all security issues fixed in the starboard-0.15.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for SDL2

    This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image (bsc#1206727).

    first Jan 11, 2023
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading to a ker…

    first Jun 17, 2019
  • High max 7.5

    Security update for krb5

    This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Nov 27, 2020