Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.34 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…

    first Nov 24, 2025
  • High max 7.5

    Security update for nodejs14

    This update for nodejs14 fixes the following issues: Update to 14.21.3: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA envi…

    first Mar 8, 2023
  • High max 8.8
    openSUSE-SU-2021:0898-1 4 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.114 (boo#1187481) * CVE-2021-30554: Use after free in WebGL * CVE-2021-30555: Use after free in Sharing * CVE-2021-30556: Use after free in WebAudio * CVE-2021-30557: Use after free in Ta…

    first Jun 21, 2021
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports.…

    first Nov 26, 2020
  • High max 8.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk to version jdk8u252 fixes the following issues: - CVE-2020-2754: Forward references to Nashorn (bsc#1169511) - CVE-2020-2755: Improve Nashorn matching (bsc#1169511) - CVE-2020-2756: Better mapping of serial ENUMs (bsc#116951…

    first Jun 12, 2020
  • High max 7.5

    libQt6Concurrent6-6.5.2-1.1 on GA media

    These are all security issues fixed in the libQt6Concurrent6-6.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713).

    first Oct 17, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_150 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory a…

    first Sep 11, 2023
  • High max 7.5

    Security update for compat-openssl097g

    This update for compat-openssl097g fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: Low * Pointer arithmetic undefined behaviour (CVE-2016-2177) (bsc#982575) * OOB write in BN_bn2dec() (CVE-2016-2182) (bsc#993819) * B…

    first Oct 14, 2016
  • High max 8.7

    Security update for azure-cli

    This update for azure-cli fixes the following issues: - CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result in certain service management operations being performed with System level permissions …

    first Feb 28, 2025
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgraded to 16.10: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump all…

    first Sep 11, 2025
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-44446: Fixed use-after-free remote code execution vulnerability via MXF file (bsc#1217213).

    first Mar 7, 2024
  • High max 8.5

    Security update for git

    This update for git fixes the following issues: - CVE-2022-39260: Fixed overflow in split_cmdline() (bsc#1204456). - CVE-2022-39253: Fixed dereference issue with symbolic links via the `--local` clone mechanism (bsc#1204455).

    first Nov 10, 2022
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: Security vulnerabilities fixed: - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a De…

    first Jan 2, 2019
  • High max 7.5

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Dec 1, 2020
  • High max 7.8
    SUSE-SU-2022:0760-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309). - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310). - CVE-2024-…

    first Apr 12, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_90 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE-…

    first Jun 29, 2023
  • High max 8.0
    SUSE-SU-2025:0652-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix po…

    first Feb 22, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_21 fixes several issues. The following security issues were fixed: - CVE-2022-41674: Fixed buffer overflow that can be triggered by injected WLAN frames (bsc#1203994). - CVE-2022-42719: Fixed use-after-free i…

    first Oct 17, 2022
  • High max 7.3

    grafana-8.3.10-1.1 on GA media

    These are all security issues fixed in the grafana-8.3.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-52628: Fixed 4-byte s…

    first Jun 21, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).

    first Jul 6, 2022
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_21 fixes several issues. The following security issue was fixed: - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). The following bugs were fixe…

    first Dec 10, 2019
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 106.0.5249.91 (boo#1203808): * CVE-2022-3370: Use after free in Custom Elements * CVE-2022-3373: Out of bounds write in V8 includes changes from 106.0.5249.61: * CVE-2022-3304: Use after free in CS…

    first Oct 3, 2022
  • High max 7.5

    python310-3.10.14-1.1 on GA media

    These are all security issues fixed in the python310-3.10.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for unbound

    This update for unbound fixes the following issues: unbound was updated to 1.20.0: * A lot of bugfixes and added features. For a complete list take a look at the changelog located at: /usr/share/doc/packages/unbound/Changelog or https://www.nlnetlabs.nl/proje…

    first Jun 4, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 0 for SLE 15)

    This update for the Linux Kernel 4.12.14-23 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every …

    first Aug 21, 2018
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36557: Fixed race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could lead to a use-…

    first Aug 9, 2022
  • High max 8.8

    MozillaThunderbird-102.9.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-102.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to rea…

    first Apr 12, 2022
  • High max 7.6

    Security update for qemu

    This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-9330: USB OHCI Emulation in qemu allowed local guest OS users to cause a denial of service (infinite loop) by leveraging an incorrect return value (bsc#1042159). - CVE-201…

    first Jul 4, 2017
  • High max 8.8
    SUSE-SU-2016:0400-1 22 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - Security update to 11.2.202.569 (bsc#965901): * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-20…

    first Feb 10, 2016
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_6 fixes several issues. The following security issues were fixed: - CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while conn…

    first Jun 21, 2019
  • High max 7.5

    pdns-recursor-4.8.1-1.1 on GA media

    These are all security issues fixed in the pdns-recursor-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665) - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)

    first May 6, 2024
  • High max 8.3

    Security update for nim

    This update for nim fixes the following issues: Includes upstream security fixes for: * (boo#1175333, CVE-2020-15693) httpClient is vulnerable to a CR-LF injection * (boo#1175334, CVE-2020-15692) mishandle of argument to browsers.openDefaultBrowser * (boo#117…

    first Aug 27, 2022
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnera…

    first Aug 4, 2025
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2019-15961: Fixed a denial of service which might occur when scanning a specially crafted email file as (bsc#1157763).

    first Dec 5, 2019
  • High max 8.6

    Security update for libgit2

    This update for libgit2 fixes the following issues: Update to 1.7.2: Security fixes: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660) - CVE-2024-24575: Fixed potential infinite loop condition in git_revpar…

    first Jul 22, 2024