Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.8

    Security update for flatpak

    This update for flatpak fixes the following issues: - CVE-2021-41133: Fixed sandbox bypass via recent syscalls (bsc#1191507).

    first Sep 27, 2022
  • High max 7.5

    go1.21-1.21.8-1.1 on GA media

    These are all security issues fixed in the go1.21-1.21.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    postgresql15-15.9-1.1 on GA media

    These are all security issues fixed in the postgresql15-15.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • High max 8.8

    php-composer-1.10.22-2.2 on GA media

    These are all security issues fixed in the php-composer-1.10.22-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2020-1935: Fixed an HTTP request smuggling vulnerability (bsc#1164860). - CVE-2020-13935: Fixed a WebSocket DoS (bsc#1174117).

    first Sep 11, 2020
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_63 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-4…

    first Apr 16, 2024
  • High max 7.4

    python39-3.9.17-1.1 on GA media

    These are all security issues fixed in the python39-3.9.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for grub2

    This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…

    first Jun 10, 2022
  • High max 8.3

    buildah-1.35.4-1.1 on GA media

    These are all security issues fixed in the buildah-1.35.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1240840). - CVE-2024-56650: netfilter: x_tables: fix LED ID che…

    first Apr 29, 2025
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: podman was updated to version 4.3.1: 4.3.1: * Bugfixes - Fixed a deadlock between the `podman ps` and `podman container inspect` commands * Misc - Updated the containers/image library to v5.23.1 4.3.0: * Feat…

    first Jan 27, 2023
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: - Upgrade to 15.8 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)

    first Sep 6, 2024
  • High max 8.1

    Security update for openvswitch3

    This update for openvswitch3 fixes the following issues: - CVE-2025-0650: Fixed egress ACLs that may be bypassed via specially crafted UDP packet (bsc#1236353).

    first Feb 28, 2025
  • High max 7.4

    java-17-openjdk-17.0.15.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 24, 2025
  • High max 7.0

    Security update for redis

    This update for redis fixes the following issues: - CVE-2024-31228: Fixed unbounded recursive pattern matching (bsc#1231265) - CVE-2024-31449: Fixed integer overflow bug in Lua bit_tohex (bsc#1231264)

    first Oct 9, 2024
  • High max 7.8

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2021-32142: Fixed buffer overflow in the LibRaw_buffer_datastream:gets function (bsc#1208470).

    first Feb 24, 2023
  • High max 7.5

    python310-bugzilla-3.2.0-2.3 on GA media

    These are all security issues fixed in the python310-bugzilla-3.2.0-2.3 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • High max 7.8
    SUSE-SU-2018:3083-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via a…

    first Oct 9, 2018
  • High max 7.5

    Security update for cadvisor

    This update for cadvisor fixes the following issues: - update to 0.52.1: * Make resctrl optional/pluggable - update to 0.52.0: * bump containerd related deps: api v1.8.0; errdefs v1.0.0; ttrpc v1.2.6 * chore: Update Prometheus libraries * bump runc to v1.2.4 …

    first Mar 24, 2025
  • High max 7.5

    coredns-1.11.1-5.1 on GA media

    These are all security issues fixed in the coredns-1.11.1-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_20 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…

    first Jun 10, 2025
  • High max 8.8

    postgresql12-12.20-1.1 on GA media

    These are all security issues fixed in the postgresql12-12.20-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2024
  • High max 7.5

    spotifyd-0.3.3-5.1 on GA media

    These are all security issues fixed in the spotifyd-0.3.3-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: - Update to 104.0.4944.36 * CHR-9492 Update Chromium on desktop-stable-118-4944 to 118.0.5993.118 * DNA-112757 [Tab close button] Close button is cutted when a lot tabs are opened - The update to chromium 118.…

    first Nov 4, 2023
  • High max 7.8

    perl-32bit-5.38.2-1.1 on GA media

    These are all security issues fixed in the perl-32bit-5.38.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: Security issues fixed: - CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer (bsc#1249191). - CVE-2025-10148: predictable websocket mask can lead t…

    first Sep 18, 2025
  • High max 7.8
    SUSE-SU-2025:0922-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_s…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2021:0629-1 25 CVEs 1 exploited

    Security update for Chromium

    This update for chromium fixes the following issues: - Chromium was updated to 90.0.4430.93 (boo#1184764,boo#1185047,boo#1185398) * CVE-2021-21227: Insufficient data validation in V8. * CVE-2021-21232: Use after free in Dev Tools. * CVE-2021-21233: Heap buffe…

    first Apr 30, 2021
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 114.0.5735.133 (boo#1212302): - CVE-2023-3214: Use after free in Autofill payments - CVE-2023-3215: Use after free in WebRTC - CVE-2023-3216: Type Confusion in V8 - CVE-2023-3217: Use after free in…

    first Jun 16, 2023
  • High max 8.8
    openSUSE-SU-2023:0123-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to version 114.0.5735.106: - CVE-2023-3079: Type Confusion in V8 (boo#1212044)

    first Jun 9, 2023
  • High max 8.8

    Security update for salt

    This update for salt fixes the following issues: - CVE-2022-22967: Fixed missing check for PAM_ACCT_MGM return value that could be used to bypass authentication when using PAM (bsc#1200566)

    first Jul 6, 2022
  • High max 7.4

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).

    first Sep 7, 2021
  • High max 8.8

    ffmpeg-6-6.1.1-4.1 on GA media

    These are all security issues fixed in the ffmpeg-6-6.1.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for gzip

    This update for gzip fixes the following issues: - CVE-2022-1271: Add hardening for zgrep. (bsc#1198062)

    first May 12, 2022
  • High max 7.5

    Security update for python-bleach

    This update for python-bleach fixes the following issues: - CVE-2021-23980: Fixed mutation XSS on bleach.clean with specific combinations of allowed tags (boo#1184547) Update to 3.1.5: * replace missing ``setuptools`` dependency with ``packaging``. Thank you …

    first Apr 17, 2021
  • High max 7.9
    SUSE-SU-2023:0779-1 21 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3606: Fixed a null pointer dereference inside the function find_prog_by_sec_insn of the file tools/lib/bpf/libb…

    first Mar 16, 2023
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033). - CVE-2024-35949: btrfs: make sure t…

    first Mar 19, 2025
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: - Upgrade to 16.4 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)

    first Sep 9, 2024
  • High max 8.1

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119). - Update to version 2.0.16~git56.d15a0a7. - Failure to migrate from openldap if pwdPolicyChecker present (bsc#1205146). - Resolve …

    first Nov 18, 2022
  • High max 7.8

    Security update for buildah

    This update for buildah fixes the following issues: Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount (bsc#1231499) - CVE-2024-9407: Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction (bsc#1231208)…

    first Dec 12, 2024