Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2023-40217: Fixed bypass TLS handshake on closed sockets (bsc#1214692). - CVE-2023-6597: Fixed symlink bug in cleanup (bsc#1219666).

    first Mar 6, 2024
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Updated to version 102.4.0 ESR (bsc#1204421) - CVE-2022-42927: Fixed same-origin policy violation that could have leaked cross-origin URLs. - CVE-2022-42928: Fixed memory Corruption in JS Engine. - …

    first Oct 25, 2022
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 57 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_204 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer …

    first Aug 18, 2025
  • High max 8.8
    openSUSE-SU-2024:12985-1 1 CVE 1 exploited

    chromedriver-114.0.5735.106-1.1 on GA media

    These are all security issues fixed in the chromedriver-114.0.5735.106-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for libgit2

    This update for libgit2 fixes the following issues: - Fixed DoS by oob write in constructed commit object with a very large number of parents (bsc#1158981). - CVE-2019-1352: Fixed git on Windows being unaware of NTFS Alternate Data Streams (bnc#1158790). - CV…

    first Oct 4, 2022
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2021-1252: Fix for Excel XLM parser infinite loop. (bsc#1184532) - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. (bsc#1184533) - CVE-2021-1405: Fix for mail parser NULL-dereference…

    first Apr 15, 2021
  • High max 7.8

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765). - CVE-2023-6478: Fixed out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (bsc#1217766).

    first Dec 13, 2023
  • High max 8.5

    Security update for git-lfs

    This update for git-lfs fixes the following issues: Update to 3.6.1: (boo#1235876): This release introduces a security fix for all platforms, which has been assigned CVE-2024-53263. When requesting credentials from Git for a remote host, prior versions of Git…

    first May 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…

    first Jan 14, 2025
  • High max 7.5

    Security update for golang-github-prometheus-alertmanager

    This update for golang-github-prometheus-alertmanager fixes the following issues: - Security: * CVE-2025-22870: Fix proxy bypassing using IPv6 zone IDs (bsc#1238686) * CVE-2023-45288: Fix HTTP/2 CONTINUATION flood in net/http (bsc#1236516)

    first Jun 18, 2025
  • High max 7.7

    Security update for inn

    This update for inn fixes the following issues: - CVE-2019-3692: Fixed a local privilage escalation from user to 'news' (bsc#1154302). This update was imported from the openSUSE:Leap:15.1:Update update project.

    first Feb 24, 2020
  • High max 8.8

    Security update for nextcloud

    This update for nextcloud fixes the following issues: Update to 20.0.14 Security issues fixed: * CVE-2021-41179: Fix boo#1192028 - (CWE-304): Two-Factor Authentication not enforced for pages marked as public * CVE-2021-41178: Fix boo#1192030 - (CWE-434): File…

    first Dec 20, 2021
  • High max 7.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 GA LTSS kernel was updated to 3.12.61 to receive various security and bugfixes. The following feature was implemented: - The ext2 filesystem got reenabled and supported to allow support for 'XIP' (Execute In Place) (FATE#320805). …

    first Feb 15, 2017
  • High max 7.5

    Security update for virtualbox

    This update for virtualbox fixes the following issues: Update to release 7.1.4: * NAT: Fixed DHCP problems with certain guests when domain is empty * VMSVGA: Improved flickering, black screen and other screen update issues with recent Linux kernels * Linux Gu…

    first Nov 10, 2024
  • High max 8.2

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2021-21708: Fixed a memory corruption issue when processing integers from an untrusted source (bsc#1196252).

    first Mar 15, 2022
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_97 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Mar 29, 2024
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973) - gconv: Fix assertion failure in ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256) - Fix parsing of /sys/de…

    first Feb 25, 2021
  • High max 8.8

    Security update for texlive

    This update for texlive fixes the following issues: - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389).

    first Jul 20, 2023
  • High max 8.4

    Security update for azure-cli-core

    This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally (bsc#1239460).

    first Mar 26, 2025
  • High max 8.1

    Security update for python-pyOpenSSL

    This update for python-pyOpenSSL fixes the following issues: - Fixed error caused by a regression in fix for CVE-2018-1000807 (bsc#1231700)

    first Oct 23, 2024
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).

    first Sep 23, 2021
  • High max 8.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 4 Fix Pack 70 [bsc#1175259, bsc#1174157] CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583 CVE-2019-17639 * Class Libraries…

    first Sep 3, 2020
  • High max 8.8

    Security update for freexl

    This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the read_legacy_biff function (bsc#1058433). - CVE-2017-2923: Prevent heap-based buffer overflow in the read…

    first Sep 21, 2017
  • High max 7.5

    Security update for openwsman

    This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection()…

    first Mar 20, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets (…

    first Dec 4, 2024
  • High max 7.8
    SUSE-SU-2025:0662-1 1 CVE 1 exploited

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 24, 2025
  • High max 7.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.103 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000410: The Linux kernel was affected by an information lea that lies in the processing of incoming L2…

    first Dec 21, 2017
  • High max 7.5

    fake-gcs-server-1.52.1-1.1 on GA media

    These are all security issues fixed in the fake-gcs-server-1.52.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 29, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_90 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointve…

    first Dec 17, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb->mac_header (bsc#1223514). - CVE-2023-6546: Fixed a race condition that …

    first May 20, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_delta_u…

    first Feb 10, 2025
  • High max 8.8

    Security update for postgresql, postgresql15, postgresql16

    This update for postgresql, postgresql15, postgresql16 fixes the following issues: This update ships postgresql 16. Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-…

    first Jan 15, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 (bsc#1201221): - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupt…

    first Jul 22, 2022
  • High max 7.8

    Security update for e2fsprogs

    This update for e2fsprogs fixes the following issues: - CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)

    first May 17, 2022
  • High max 7.5

    python313-3.13.0~rc2-1.1 on GA media

    These are all security issues fixed in the python313-3.13.0~rc2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 9, 2024
  • High max 8.8

    freexl-devel-1.0.6-1.3 on GA media

    These are all security issues fixed in the freexl-devel-1.0.6-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for ntpd-rs

    This update for ntpd-rs fixes the following issues: - Introducing ntpd-rs version 1.2.3.

    first Oct 11, 2024
  • High max 7.5

    Security update for e2fsprogs

    This update for e2fsprogs fixes the following issues: - CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).

    first Jan 30, 2020
  • High max 7.5

    libzzip-0-13-0.13.78-1.1 on GA media

    These are all security issues fixed in the libzzip-0-13-0.13.78-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 11, 2024
  • High max 7.5

    Security update for dovecot23

    This update for dovecot23 fixes the following issue: - CVE-2019-11500: Fixed the NUL byte handling in IMAP and ManageSieve protocol parsers. (bsc#1145559) - CVE-2019-11499: Fixed a vulnerability where the submission-login would crash over a TLS secured channe…

    first Oct 7, 2019