Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2022-23648: A specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host (bsc#1196441).

    first Apr 19, 2022
  • High max 7.8
    SUSE-SU-2025:0927-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 8.2

    Security update for nodejs16

    This update for nodejs16 fixes the following issues: - CVE-2024-27983: Fixed failed assertion in node::http2::Http2Session::~Http2Session() that could lead to HTTP/2 server crash (bsc#1222244) - CVE-2024-27982: Fixed HTTP Request Smuggling via Content Length …

    first Apr 16, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensitive L…

    first Mar 4, 2020
  • High max 8.1

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed …

    first May 4, 2021
  • High max 7.8

    Security update for nvidia-open-driver-G06-signed

    This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access memory outside bounds permitted under normal use cases in NVIDIA Display Driver (bsc#1247528). - CVE-2025-23278: Fixed …

    first Sep 29, 2025
  • High max 7.5

    bind-9.18.24-1.1 on GA media

    These are all security issues fixed in the bind-9.18.24-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for tomcat

    This update for tomcat to version 9.0.21 fixes the following issues: Security issue fixed: - CVE-2019-0199: Added additional fixes to address HTTP/2 connection window exhaustion (bsc#1139924). This update was imported from the SUSE:SLE-15:Update update projec…

    first Jul 19, 2019
  • High max 7.5

    Security update for ceph

    This update for ceph fixes the following issues: - A previous update introduced a regression with the potential to cause RocksDB data corruption in Nautilus (bsc#1156282). - Support for iSCSI target-level CHAP authentication was added (bsc#1145617). - Impleme…

    first Nov 18, 2019
  • High max 7.5

    xstream-1.4.21-1.1 on GA media

    These are all security issues fixed in the xstream-1.4.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 8, 2024
  • High max 7.8

    Security update for libarchive

    This update for libarchive fixes the following issues: - CVE-2024-20697: Fixed Out of bounds Remote Code Execution Vulnerability (bsc#1225972). - CVE-2024-48958: Fixed out-of-bounds access via a crafted archive file in execute_filter_delta function (bsc#12316…

    first Nov 7, 2024
  • High max 7.5

    wicked-0.6.66-1.2 on GA media

    These are all security issues fixed in the wicked-0.6.66-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for osc

    This update for osc fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths (bsc#1122675).

    first Jun 3, 2020
  • High max 8.8

    Security update for gzip

    This update for gzip fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

    first Apr 20, 2022
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execut…

    first Oct 4, 2023
  • High max 8.8

    cups-filters-1.28.15-3.1 on GA media

    These are all security issues fixed in the cups-filters-1.28.15-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2016-3709: Fixed possible XSS vulnerability (bsc#1201978). - CVE-2022-40303: Fixed integer overflows with XML_PARSE_HUGE (bsc#1204366). - CVE-2022-40304: Fixed dict corruption caused by entity referenc…

    first Oct 25, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…

    first Nov 7, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_125 fixes several issues. The following security issues were fixed: - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-va…

    first Oct 16, 2024
  • High max 8.6

    Security update for squid

    This update for squid fixes the following issues: - CVE-2023-49285: Fixed buffer over read bug on HTTP Message processing flow (bsc#1217813) - CVE-2023-49286: Fixed Denial of Service vulnerability in helper process management (bsc#1217815) - Fix X-Forwarded-F…

    first Dec 8, 2023
  • High max 7.1

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398).

    first Jun 22, 2023
  • High max 7.5

    Security update for openvswitch3

    This update for openvswitch3 fixes the following issues: - CVE-2023-3966: Fixed invalid memory access in Geneve with HW offload (bsc#1219465).

    first Mar 1, 2024
  • High max 8.8

    Security update for SUSE Manager 4.1.14.1 Release Notes

    This update for SUSE Manager 4.1.14.1 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.1.14.1 * CVEs fixed CVE-2022-22934, CVE-2022-22935, CVE-2022-22936, CVE-2022-22941 * Bugs mentioned bsc#1197417

    first Mar 30, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi …

    first Jun 25, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_153 fixes one issue. The following security issue was fixed: - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    first Jun 12, 2025
  • High max 7.5

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 3.6.1: - CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166) - CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167) - CVE-2021-4183: pcapng file parser crash (bsc#11…

    first Feb 14, 2022
  • High max 7.5

    python-Twisted-doc-21.7.0-3.2 on GA media

    These are all security issues fixed in the python-Twisted-doc-21.7.0-3.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2015:0236-1 18 CVEs 1 exploited

    Security update for flash-player

    flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322). - Memory corruption …

    first Feb 6, 2015
  • High max 7.5

    tomcat-9.0.43-14.1 on GA media

    These are all security issues fixed in the tomcat-9.0.43-14.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform…

    first Jun 9, 2021
  • High max 7.8

    Security update for vim

    This update for vim fixes the following issues: - CVE-2023-48231: Fixed Use-After-Free in win_close() (bsc#1217316). - CVE-2023-48232: Fixed Floating point Exception in adjust_plines_for_skipcol() (bsc#1217320). - CVE-2023-48233: Fixed overflow with count for…

    first Mar 6, 2024
  • High max 7.1
    SUSE-SU-2023:3504-1 2 CVEs 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

    first Aug 31, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in …

    first Apr 25, 2023
  • High max 8.6

    Security update for git

    This update for git fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)

    first Jul 22, 2024
  • High max 7.5

    Security update for python3

    This update for python3 fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)

    first Dec 2, 2020
  • High max 7.5

    Security update for gstreamer-plugins-rs

    This update for gstreamer-plugins-rs fixes the following issues: - CVE-2022-31394: Fixed a potential denial of service in the HTTP/2 implementation (bsc#1208556).

    first Jan 11, 2024
  • High max 7.8

    libwireshark17-4.2.1-1.1 on GA media

    These are all security issues fixed in the libwireshark17-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_151 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-3567: Fixed a use-af…

    first Sep 15, 2023
  • High max 7.5

    Security update for bea-stax, xstream

    This update for bea-stax, xstream fixes the following issues: - CVE-2024-47072: Fixed possible remote denial-of-service via a stack overflow (bsc#1233085).

    first Nov 19, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_29 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly pri…

    first Nov 6, 2020