Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for vim

    This update for vim fixes the following issues: Updated to version 9.0 with patch level 0814: - CVE-2021-3928: Fixed stack-based buffer overflow (bsc#1192478). - CVE-2022-3234: Fixed heap-based buffer overflow (bsc#1203508). - CVE-2022-3235: Fixed use-after-f…

    first Nov 29, 2022
  • High max 7.5

    python-furo-doc-2024.8.6-2.1 on GA media

    These are all security issues fixed in the python-furo-doc-2024.8.6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 6, 2024
  • High max 7.8

    emacs-28.2-1.1 on GA media

    These are all security issues fixed in the emacs-28.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    libunbound8-1.20.0-1.1 on GA media

    These are all security issues fixed in the libunbound8-1.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.132-94_33 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present i…

    first Aug 17, 2018
  • High max 8.8

    Security update for aubio

    This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was…

    first Aug 16, 2018
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902)

    first Jan 27, 2026
  • High max 7.5

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues: - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial of service via crafted packet (bsc#1197872).

    first Apr 22, 2022
  • High max 8.7

    Security update for python311

    This update for python311 fixes the following issues: - Update python311 to version 3.11.10. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) - CVE-2024-7592: quadratic algorithm used when parsing cookies lead…

    first Sep 24, 2024
  • High max 8.4

    Security update for xdg-desktop-portal

    This update for xdg-desktop-portal fixes the following issues: - CVE-2024-32462: Fixed sandbox escape via RequestBackground portal (bsc#1223110).

    first May 29, 2024
  • High max 7.4

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual machine. CVE-2023-21930: Unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edi…

    first Aug 14, 2023
  • High max 7.8
    SUSE-SU-2024:1410-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…

    first Apr 23, 2024
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-1393: Fixed use-after-free overlay window (ZDI-CAN-19866) (bsc#1209543).

    first Mar 29, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation …

    first Apr 15, 2021
  • High max 8.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).

    first Mar 14, 2023
  • High max 7.5

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to 10.4.25 (bsc#1199928): - CVE-2021-46669 (bsc#1199928) - CVE-2022-21427 (bsc#1199928) - CVE-2022-27376 (bsc#1198628) - CVE-2022-27377 (bsc#1198603) - CVE-2022-27378 (bsc#1198604) - CVE-2022-27379 (b…

    first Jun 27, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_108 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (b…

    first Dec 17, 2022
  • High max 8.6

    Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_60 fixes several issues. The following security issues were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful …

    first Apr 25, 2022
  • High max 7.5

    Security update for singularity

    This update for singularity fixes the following issues: - CVE-2019-19724: Fixed incorrect file permissions on user configuration and cache directories (boo#1159550).

    first Jan 14, 2020
  • High max 7.5

    clamav-0.103.5-1.1 on GA media

    These are all security issues fixed in the clamav-0.103.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 71 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_269 fixes several issues. The following security issues were fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_AD…

    first Oct 21, 2025
  • High max 8.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2022-46340: Server XTestSwapFakeInput stack overflow (bsc#1205874) - CVE-2022-46341: Server XIPassiveUngrabDevice out-of-bounds access (bsc#1205877) - CVE-2022-46342: Server XvdiSelectVideoNoti…

    first Dec 14, 2022
  • High max 7.5

    Security update for dovecot23

    This update for dovecot23 fixes the following issues: Security issues fixed: - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - CVE-2020-1…

    first May 22, 2020
  • High max 7.5

    Security update for go1.19

    This update for go1.19 fixes the following issues: - CVE-2022-41722: Fixed path traversal in filepath.Clean on Windows (bsc#1208269). - CVE-2022-41723: Fixed quadratic complexity in HPACK decoding (bsc#1208270). - CVE-2022-41724: Fixed panic with arge handsha…

    first Mar 14, 2023
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: CVE-2021-25122: Apache Tomcat h2c request mix-up (bsc#1182912) CVE-2021-25329: Complete fix for CVE-2020-9484 (bsc#1182909) This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Apr 2, 2021
  • High max 8.8
    SUSE-SU-2020:0078-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 13, 2020
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds re…

    first Oct 10, 2023
  • High max 7.3

    Security update for procps

    This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled direct…

    first Oct 26, 2019
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_108 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-…

    first Jun 6, 2023
  • High max 7.5

    Security update for java-1_7_0-openjdk

    This update for java-1_7_0-openjdk fixes the following issues: - Oracle Critical Patch Update of January 2017 to OpenJDK 7u131 (bsc#1020905): * Security Fixes - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S8151934, CV…

    first Feb 17, 2017
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec …

    first Dec 19, 2022
  • High max 7.8

    kernel-firmware-nvidia-gspx-G06-550.90.07-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-nvidia-gspx-G06-550.90.07-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm to 8.0.5.20 fixes the following issues: - CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Ja…

    first Oct 9, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). - CVE-2024-26852: F…

    first Jun 21, 2024
  • High max 7.5

    Security update for python-requests

    This update for python-requests fixes the following issues: - CVE-2018-18074: Fixed an issue which could ease attackers to discover credentials by sniffing the network (bsc#1111622).

    first Jul 31, 2019
  • High max 7.5

    rage-encryption-0.9.0+0-4.1 on GA media

    These are all security issues fixed in the rage-encryption-0.9.0+0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for go1.22

    This update for go1.22 fixes the following issues: Updated to version 1.22.5 (bsc#1218424): - CVE-2024-24791: Fixed a potential denial of service due to improper handling of HTTP 100-continue headers (bsc#1227314).

    first Jul 3, 2024
  • High max 7.1

    nvidia-open-driver-G06-signed-default-devel-550.144.03-1.1 on GA media

    These are all security issues fixed in the nvidia-open-driver-G06-signed-default-devel-550.144.03-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 17, 2025
  • High max 7.5

    Security update for go1.19

    This update for go1.19 fixes the following issues: Update to go version 1.19.1 (bsc#1200441): - CVE-2022-27664: Fixed DoS in net/http caused by mishandled server errors after sending GOAWAY (bsc#1203185). - CVE-2022-32190: Fixed missing stripping of relative …

    first Sep 21, 2022
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_11 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-4…

    first Apr 9, 2024