Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for rmt-server

    This update for rmt-server fixes the following issues: Update to version 2.10: - Add option to turn off system token support (bsc#1205089) - Update the `last_seen_at` column on zypper service refresh - Do not retry to import non-existing files in air-gapped m…

    first Jan 3, 2023
  • High max 8.3

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding quer…

    first Dec 23, 2025
  • High max 8.8

    Security update for ghostscript

    This update for ghostscript fixes the following issues: - CVE-2024-33871: Prevent OPVP device arbitrary code execution via custom Driver library. (bsc#1225491)

    first Jun 25, 2024
  • High max 7.8

    Security update for openssh

    This update for openssh fixes several issues. These security issues were fixed: - CVE-2016-8858: The kex_input_kexinit function in kex.c allowed remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests (bsc…

    first Jan 23, 2017
  • High max 7.5

    Security update for corosync

    This update for corosync provides the following fixes: - CVE-2018-1084: Integer overflow in totemcrypto:authenticate_nss_2_3() could lead to command execution (bsc#1089346) - Providing an empty uid or gid results in coroparse adding uid 0. (bsc#1066585) - Fix…

    first May 2, 2018
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_110 fixes several issues. The following security issues were fixed: - CVE-2019-10220: Fixed a relative path escape in the Samba client module (bsc#1144903, bsc#1153108). - CVE-2019-17133: Fixed a buffer overflow …

    first Oct 30, 2019
  • High max 7.2

    postgresql14-14.8-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_20 fixes one issue. The following security issue was fixed: - CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235431).

    first Apr 28, 2025
  • High max 7.8
    SUSE-SU-2023:2425-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 6, 2023
  • High max 8.1

    Security update for grub2

    This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…

    first Jun 13, 2022
  • High max 7.3

    Security update for vim

    This update for vim fixes the following issues: - CVE-2023-0512: Fixed a divide By Zero (bsc#1207780). - CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957). - CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959). - CVE-2023-1…

    first Apr 27, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_129 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…

    first Sep 27, 2023
  • High max 7.5

    Security update for openssl

    This update for openssl fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)

    first Mar 19, 2021
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.103-6_38 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 11, 2018
  • High max 8.2

    alloy-1.4.3-1.1 on GA media

    These are all security issues fixed in the alloy-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 (bsc#1201980): - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp document…

    first Aug 16, 2022
  • High max 7.5

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). Bugfixes: - Solve a program error in the Python Garbage Collection. (bsc#1188607) - Fixed issue where email.generator…

    first Mar 3, 2023
  • High max 8.1

    Security update for SUSE Manager Server 3.2

    This update fixes the following issues: release-notes-susemanager: - Fix invalid characters in ncurses mode (bsc#1102770) spacewalk-backend: - Fix for CVE-2019-10136. An attacker with a valid, but expired, authenticated set of headers could move some digits a…

    first Jul 9, 2019
  • High max 8.4

    Security update for assimp

    This update for assimp fixes the following issues: - CVE-2024-48425: Fixed SEGV in Assimp:SplitLargeMeshesProcess_Triangle:UpdateNode (boo#1232324) - CVE-2024-48423: Fixed a arbitrary code execution via CallbackToLogRedirector() (boo#1232322) - CVE-2024-48424…

    first Apr 2, 2025
  • High max 7.9

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) - CVE-2023-45733: Fixed a potential security vulnerability in some Intel® Processors that may have allowed information disclosure. - …

    first May 23, 2024
  • High max 7.8
    SUSE-SU-2015:0722-1 22 CVEs 1 exploited

    Security update for Adobe Flash Player

    Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabiliti…

    first Apr 15, 2015
  • High max 7.5

    Security update for freeradius-server

    This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abina…

    first Dec 27, 2022
  • High max 7.5

    libopenssl-3-devel-3.0.7-2.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.0.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for ffmpeg

    This update for ffmpeg fixes the following issues: - CVE-2019-13390: Fixed a potential crash when processing a crafted AVI stream (bsc#1140754). - CVE-2022-3341: Fixed a potential crash when processing a crafted NUT stream (bsc#1206778). - CVE-2022-48434: Fix…

    first May 5, 2023
  • High max 7.5

    Security update for SUSE Manager Server 3.2

    This update fixes the following issues: apache-mybatis: - Install missing LICENSE.txt file (bsc#1114814) cobbler: - Fix service restart after logrotate for cobblerd (bsc#1113747) - Rotate cobbler logs at higher frequency to prevent disk fillup (bsc#1113747) h…

    first Dec 7, 2018
  • High max 7.5

    Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go sec…

    first Jun 3, 2019
  • High max 7.5

    Security update for syslog-ng

    This update for syslog-ng fixes the following issues: - CVE-2022-38725: Fixed an integer overflow in the RFC3164 protocol parser (bsc#1207460).

    first Feb 8, 2023
  • High max 8.8

    Security update for gstreamer-plugins-base

    This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128) - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code ex…

    first Aug 8, 2023
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 3 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_13 fixes several issues. The following security issues were fixed: - CVE-2018-10938: It was found that a crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cips…

    first Sep 28, 2018
  • High max 7.5

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2022-3358: Fixed vulnerability where a custom cipher passed to EVP_CipherInit() could lead into NULL encryption being unexpectedly used (bsc#1204226). - CVE-2022-3602: Fixed a buffer overflow in the …

    first Nov 1, 2022
  • High max 7.5

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230) * Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338) * CVE-2023-5721: Que…

    first Nov 22, 2023
  • High max 8.4

    Security update for virtualbox

    This update for virtualbox fixes the following issues: - Version bump to 6.1.20 (released April 20 2021 by Oracle) Fixes boo#1183329 'virtualbox 6.1.18 crashes when it runs nested VM' Fixes boo#1183125 'Leap 15.3 installation in Virtualbox without VBox integr…

    first Apr 30, 2021
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_28 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…

    first Sep 19, 2023
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while co…

    first Jun 21, 2019
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder (bsc#1213126).

    first Sep 27, 2023
  • High max 7.7

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2023-0568: Fixed NULL byte off-by-one in php_check_specific_open_basedir (bnc#1208366). - CVE-2023-0662: Fixed DoS vulnerability when parsing multipart request body (bnc#1208367). - CVE-2023-0567: Fixed …

    first Feb 24, 2023
  • High max 7.5

    Security update for libssh2_org

    This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490). - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message c…

    first Mar 19, 2019
  • High max 7.3

    Security update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk

    This update for flatpak, libostree, xdg-desktop-portal, xdg-desktop-portal-gtk fixes the following issues: libostree: Update to version 2020.8 - Enable LTO. (bsc#1133120) - This update contains scalability improvements and bugfixes. - Caching-related HTTP hea…

    first Apr 8, 2021
  • High max 8.5

    Security update for udisks2

    This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)

    first Aug 29, 2025
  • High max 7.5

    Security update for python-rsa

    This update for python-rsa fixes the following issues: - CVE-2020-13757: Fixed an issue where leading null bytes in a ciphertext would be ignored during decryption, leading to a potential information leak (bsc#1172389).

    first Sep 16, 2022