Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460, bsc#1228574) - CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461, bsc#1228575) Other fixes: - Migrate CVE…

    first Aug 26, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 67 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_255 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race condi…

    first Oct 7, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.16 fixes one security issue The following security issue was fixed: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

    first Nov 28, 2025
  • High max 8.0

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660). - Enable switch_root With this change virtme --force-initramfs works as expected. - Enable udhcpc Update to 1.35.0: - aw…

    first Nov 28, 2022
  • High max 7.5

    Security update for xrdp

    This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch - Update patch…

    first Jul 21, 2020
  • High max 8.6

    python311-pdfminer.six-20251107-1.1 on GA media

    These are all security issues fixed in the python311-pdfminer.six-20251107-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 11, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes one issue. The following security issue was fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683).

    first Aug 8, 2024
  • High max 7.3

    Security update for libarchive

    This update for libarchive fixes the following issues: - CVE-2024-20696: Fixed heap based out-of-bounds write (bsc#1225971).

    first Jun 19, 2024
  • High max 7.5

    perl-Email-MIME-1.954.0-1.1 on GA media

    These are all security issues fixed in the perl-Email-MIME-1.954.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218). - CVE-2024-41090: tap: add missing verification f…

    first Apr 12, 2025
  • High max 7.0

    Security update for saphanabootstrap-formula

    This update for saphanabootstrap-formula fixes the following issues: - Version bump 0.13.1 * revert changes to spec file to re-enable SLES RPM builds * CVE-2022-45153: Fixed privilege escalation for arbitrary users in hana/ha_cluster.sls (bsc#1205990) - Versi…

    first Jan 2, 2023
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 129.0.6668.70 (stable released 2024-09-24) (boo#1230964) * CVE-2024-9120: Use after free in Dawn * CVE-2024-9121: Inappropriate implementation in V8 * CVE-2024-9122: Type Confusion in V8 * CVE-2024…

    first Sep 27, 2024
  • High max 8.1

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2025-0650: ovn: egress ACLs may be bypassed via specially crafted UDP packet (bsc#1236353).

    first Feb 18, 2025
  • High max 8.8

    Security update for texlive

    This update for texlive fixes the following issues: - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).

    first May 24, 2023
  • High max 8.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2022-27776: Fixed Auth/cookie leak on redirect (bsc#1198766) - CVE-2022-22576: Fixed OAUTH2 bearer bypass in connection re-use (bsc#1198614)

    first May 16, 2022
  • High max 7.8

    Feature update for LibreOffice

    This update for LibreOffice fixes the following issues: libreoffice: - Version update from 7.3.6.2 to 7.5.4.1 (jsc#PED-3561, jsc#PED-3550, jsc#PED-1785): * For the highlights of changes of version 7.5 please consult the official release notes: https://wiki.do…

    first Sep 20, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-2732: Fixed an issue affecting Intel CPUs where an L2 guest may trick the L0 hypervisor into accessing sensi…

    first Mar 2, 2020
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the n…

    first Dec 14, 2018
  • High max 8.4
    openSUSE-SU-2022:0169-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalat…

    first Jan 25, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_194 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (bsc#1210619).

    first Feb 28, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2483: Fixed a use after free bug in emac_remove due caused by a race condition (bsc#1211037). - CVE-2023-212…

    first May 10, 2023
  • High max 8.8

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zlib: Undefined left shift of negative numbe…

    first May 30, 2017
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.155 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13093: Prevent NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when …

    first Sep 20, 2018
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

    first Jun 7, 2024
  • High max 7.8

    Security update for emacs

    This update for emacs fixes the following issues: - CVE-2024-53920: Fixed arbitrary code execution via Lisp macro expansion (bsc#1233894)

    first Dec 20, 2024
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.180 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted such that one can trigger an integer overflow, leading…

    first Jun 17, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_126 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-3567: Fixed a use-af…

    first Sep 15, 2023
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3344: Fixed a bug where nested shutdown interception could lead to host crash (bsc#1204652) - CVE-2022-4662: Fixed…

    first Jan 26, 2023
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_104 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-fre…

    first Oct 16, 2018
  • High max 8.6

    Security update for grub2

    This update for grub2 fixes the following issues: Security Fixes: - CVE-2022-2601: Fixed buffer overflow in grub_font_construct_glyph (bsc#1205178). - CVE-2022-3775: Fixed integer underflow in blit_comb() (bsc#1205182). Other: - Bump upstream SBAT generation …

    first Dec 1, 2022
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inf…

    first Aug 15, 2023
  • High max 8.0

    Security update for ansible and monasca-installer

    This update for ansible provides version 2.2.3.0 and fixes the following security issues: - CVE-2017-7481: Data for lookup plugins used as variables was not being marked as 'unsafe' and could lead to unintentional disclosure of information. (bsc#1038785) - CV…

    first Nov 17, 2017
  • High max 8.6

    system-user-velociraptor-1.0.0-5.1 on GA media

    These are all security issues fixed in the system-user-velociraptor-1.0.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for arpwatch

    This update for arpwatch fixes the following issues: - CVE-2021-25321: Fixed local privilege escalation from runtime user to root (bsc#1186240).

    first Jun 28, 2021
  • High max 7.5

    Security update for rubygem-activejob-5_1

    This update for rubygem-activejob-5_1 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632).

    first Dec 6, 2018
  • High max 7.5

    java-jwt-4.4.0-1.1 on GA media

    These are all security issues fixed in the java-jwt-4.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 11, 2024
  • High max 8.3

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157] CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CV…

    first Sep 2, 2020
  • High max 7.5

    Security update for ffmpeg-4

    This update for ffmpeg-4 fixes the following issues: - CVE-2025-63757: Fixed swscale/output: Fix integer overflow in yuv2ya16_X_c_template() (bsc#1255392).

    first Jan 19, 2026
  • High max 7.5

    libgit2-1_7-1.7.2-2.1 on GA media

    These are all security issues fixed in the libgit2-1_7-1.7.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

    first Jun 7, 2024