Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI pa…

    first Oct 24, 2023
  • High max 7.3

    Security update for rpm

    This update for rpm fixes the following issues: These security issues were fixed: - CVE-2017-7500: rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbi…

    first Nov 23, 2018
  • High max 7.8

    Security update for Salt

    This update fixes the following issues: salt: - Parsing Epoch out of version provided during pkg remove (bsc#1173692) - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607) - Tra…

    first Jun 21, 2021
  • High max 7.5

    forgejo-runner-6.2.2-3.1 on GA media

    These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure th…

    first Oct 22, 2025
  • High max 7.5

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…

    first Jul 9, 2024
  • High max 8.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…

    first Jan 28, 2026
  • High max 7.8

    Security update for pam_pkcs11

    This update for pam_pkcs11 fixes the following issues: - CVE-2025-6018: Removes pam_env from auth stack for security reason (bsc#1243226).

    first Jun 20, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use…

    first Sep 18, 2023
  • High max 7.5

    Security update for liblouis

    This update for liblouis fixes the following issues: - CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429). - CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431). - CVE-2023-26769: Fixed buffer Overflow v…

    first Apr 12, 2023
  • High max 7.8

    obs-service-set_version-0.5.3-4.2 on GA media

    These are all security issues fixed in the obs-service-set_version-0.5.3-4.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 on GA media

    These are all security issues fixed in the ruby3.3-rubygem-sprockets-3.7-3.7.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 24, 2024
  • High max 8.8

    nodejs-electron-31.7.5-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-31.7.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 19, 2024
  • High max 7.0

    valkey-8.0.1-1.1 on GA media

    These are all security issues fixed in the valkey-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 18, 2024
  • High max 7.5

    ruby3.2-rubygem-minitar-0.9-1.13 on GA media

    These are all security issues fixed in the ruby3.2-rubygem-minitar-0.9-1.13 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for redis

    This update for redis fixes the following issues: - Upgrade to 6.0.14 - CVE-2021-32625: An integer overflow bug could be exploited by using the STRALGO LCS command to cause remote remote code execution (bsc#1186722) - Fix crash in UNLINK on a stream key with …

    first Jul 12, 2021
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).

    first Sep 27, 2023
  • High max 7.5

    go1.18-1.18.6-1.1 on GA media

    These are all security issues fixed in the go1.18-1.18.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_97 fixes one issue. The following security issue was fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).

    first Jun 21, 2024
  • High max 7.5

    Security update for krb5

    This update for krb5 fixes the following security issue: - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message (bsc#1178512).

    first Nov 19, 2020
  • High max 8.1

    Security update for openssh-openssl1

    This update for openssh-openssl1 fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malici…

    first Jan 14, 2016
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 128.0.6613.119 (released 2024-09-02) (boo#1230108) * CVE-2024-8362: Use after free in WebAudio * CVE-2024-7970: Out of bounds write in V8

    first Sep 5, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_60 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…

    first Nov 6, 2025
  • High max 7.8

    znc-1.8.2-1.11 on GA media

    These are all security issues fixed in the znc-1.8.2-1.11 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for bash

    This update for bash fixes the following issues: - CVE-2012-6711: Fixed a heap-based buffer overflow during echo of unsupported characters (bsc#1138676).

    first Nov 14, 2019
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - openvswitch was updated to 2.11.5 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

    first Feb 3, 2021
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15-SP1 Azure Kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit…

    first Nov 12, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-49860: ACPI: sysfs: validate return type of _STR method (bsc#1231862). - CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (…

    first Sep 24, 2025
  • High max 7.8
    SUSE-SU-2024:1382-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_176 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-1086: Fixed a use-af…

    first Apr 22, 2024
  • High max 7.5

    Security update for node_exporter

    This security update for golang-github-prometheus-node_exporter provides: Update golang-github-prometheus-node_exporter from version 1.1.2 to version 1.3.0 (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239) - CVE-2022-21698: Denial of service using InstrumentHandler…

    first Jun 20, 2022
  • High max 8.8

    mercurial-4.0-1.1 on GA media

    These are all security issues fixed in the mercurial-4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 115.6.0 ESR changelog-entry (bsc#1217974). * CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver (bmo#1843782). * CV…

    first Dec 20, 2023
  • High max 8.0
    SUSE-SU-2019:3225-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_16 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a pare…

    first Dec 10, 2019
  • High max 8.6

    Security update for java-21-openjdk

    This update for java-21-openjdk fixes the following issues: Update to upstream tag jdk-21.0.8+9 (July 2025 CPU): Security fixes: - CVE-2025-30749: several scenarios can lead to heap corruption (bsc#1246595) - CVE-2025-30754: incomplete handshake may lead to w…

    first Aug 4, 2025
  • High max 7.5

    libopenssl-3-devel-3.1.4-13.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.4-13.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 5, 2024
  • High max 7.8
    openSUSE-SU-2021:0602-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936) This update was imported from the SUSE:SLE-15:Update update project.

    first Apr 23, 2021
  • High max 7.8

    python311-salt-3006.0-52.1 on GA media

    These are all security issues fixed in the python311-salt-3006.0-52.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 28, 2025
  • High max 8.8

    Security update for tomcat6

    This update for tomcat6 fixes the following issues: The version was updated from 6.0.41 to 6.0.45. Security issues fixed: * CVE-2015-5174: Directory traversal vulnerability in RequestUtil.java in Apache Tomcat allowed remote authenticated users to bypass inte…

    first Mar 21, 2016
  • High max 7.4

    java-17-openj9-17.0.10.0-1.1 on GA media

    These are all security issues fixed in the java-17-openj9-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    gvim-9.0.0032-1.2 on GA media

    These are all security issues fixed in the gvim-9.0.0032-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024