Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.1

    glibc-2.34-1.2 on GA media

    These are all security issues fixed in the glibc-2.34-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for rubygem-bundler

    This update for rubygem-bundler fixes the following issues: - CVE-2020-36327: Fixed bundler choosing a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen (bsc#1185842) Other fixes: - …

    first Apr 16, 2025
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)

    first Sep 27, 2023
  • High max 7.5

    Security update for python

    This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916)

    first Dec 11, 2020
  • High max 7.5

    Security update for graphite-web

    This update for graphite-web fixes the following issues: - CVE-2017-18638: Fixed an SSRF vulnerability in send_email (bsc#1154007).

    first Oct 29, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_134 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…

    first Sep 26, 2023
  • High max 7.4

    Security update for java-1_8_0-openj9

    This update for java-1_8_0-openj9 fixes the following issues: - CVE-2025-4447: Fixed buffer overflow in Eclipse OpenJ9 (bsc#1243429). - CVE-2025-30698: Fixed 2D unauthorized data access and DoS (bsc#1241276). - CVE-2025-30691: Fixed Compiler Unauthorized Data…

    first Jun 13, 2025
  • High max 8.8
    SUSE-SU-2019:1137-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8…

    first May 3, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_78 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a …

    first Mar 17, 2021
  • High max 7.5

    Security update for rubygem-activerecord-5_1

    This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169).

    first Nov 9, 2021
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 12 SP4 Realtime Kernel was updated to fix bugs and security issues. Security issues fixed: - CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c. There was an unchecked …

    first Sep 24, 2019
  • High max 8.4
    openSUSE-SU-2024:11775-1 1 CVE 1 exploited

    kernel-devel-5.16.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-5.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-Django

    python-django was updated to 1.6.11 to fix security issues and non-security bugs. The following vulnerabilities were fixed: * Made is_safe_url() reject URLs that start with control characters to mitigate possible XSS attack via user-supplied redirect URLs (bn…

    first Mar 30, 2015
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-3635: Fixed a use-after-free in the …

    first Dec 23, 2022
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issues: - Update to version 4.1.0+git.1614156984.f4f5e146: * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571) * Fix: bootstrap: setup authorized s…

    first Mar 8, 2021
  • High max 8.6

    Security update for git

    This update for git fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)

    first Jul 30, 2024
  • High max 7.5

    Security update for dpdk

    This update for dpdk to version 18.11.3 fixes the following issues: dpdk was updated to 18.11.3 Security issue fixed: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146). Other iss…

    first Feb 19, 2020
  • High max 8.6

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.0 cut from the go1.25-fips-release branch at the revision tagged go1.25.0-1-openssl-fips. ( jsc#SLE-18320 ) * Rebase to 1.25.0 * Fix HKDF-Extract The latest OpenSSL in c9s/c10s …

    first Sep 9, 2025
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Oracle Critical Patch Update of January 2017 (bsc#1020905) Upgrade to version jdk8u121 (icedtea 3.3.0): - S8138725: Add options for Javadoc generation - S8140353: Improve signature checking - S815…

    first Jan 31, 2017
  • High max 8.8

    Security update for Chromium

    Chromium was updated to 52.0.2743.82 to fix the following security issues (boo#989901): - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly…

    first Jul 25, 2016
  • High max 7.8

    ffmpeg-4-4.4.4-9.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.4-9.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for perl

    This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

    first Jul 19, 2023
  • High max 7.5

    Security update for dovecot23

    This update for dovecot23 to 2.3.10 fixes the following issues: Security issues fixed: - CVE-2020-10957: Fixed a crash caused by malformed NOOP commands (bsc#1171457). - CVE-2020-10958: Fixed a use-after-free when receiving too many newlines (bsc#1171458). - …

    first May 26, 2020
  • High max 7.5

    teleport-15.2.4-1.1 on GA media

    These are all security issues fixed in the teleport-15.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol (bsc#1193227).

    first Aug 25, 2022
  • High max 7.7

    Security update for kubernetes1.23

    This update for kubernetes1.23 fixes the following issues: - Upgrade from v1.26.9 to v1.26.14 - CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)

    first Apr 8, 2024
  • High max 8.6

    python36-Jinja2-3.0.1-3.2 on GA media

    These are all security issues fixed in the python36-Jinja2-3.0.1-3.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). - CVE-2024-43861: Fix memory leak for not ip packets …

    first Dec 9, 2024
  • High max 7.5

    python312-3.12.0b3-1.1 on GA media

    These are all security issues fixed in the python312-3.12.0b3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_142 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209672). - CVE…

    first Jun 28, 2023
  • High max 7.5

    Security update for kvm

    This update for kvm fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the ne…

    first Dec 5, 2018
  • High max 7.8

    python310-Babel-2.14.0-1.5 on GA media

    These are all security issues fixed in the python310-Babel-2.14.0-1.5 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • High max 7.5

    Security update for nodejs16

    This update for nodejs16 fixes the following issues: Security issues fixed: * CVE-2023-46809: Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) (bsc#1219997). * CVE-2024-22019: http: Reading u…

    first Feb 29, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_11 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-28466: Fi…

    first Jun 28, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26088: Fixed an improper CAP_NET_RAW check in NFC socket creation could have been used by local attackers to…

    first Oct 13, 2020
  • High max 8.1

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968): - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilities…

    first Jan 30, 2020
  • High max 8.1

    corepack21-21.7.3-1.1 on GA media

    These are all security issues fixed in the corepack21-21.7.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    velero-plugin-for-microsoft-azure-1.3.1-1.1 on GA media

    These are all security issues fixed in the velero-plugin-for-microsoft-azure-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    python311-ecdsa-0.19.1-1.1 on GA media

    These are all security issues fixed in the python311-ecdsa-0.19.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 3, 2025
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-13372: Fixed SQL Injection in FilteredRelation (bsc#1254437) - CVE-2025-64460: Fixed denial of service via specially crafted XML input in django.core.serializers.xml_serializer.getInnerText(…

    first Dec 12, 2025