Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    netty-4.1.118-1.1 on GA media

    These are all security issues fixed in the netty-4.1.118-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 11, 2025
  • High max 7.5

    python310-ciscoconfparse-1.7.7-1.1 on GA media

    These are all security issues fixed in the python310-ciscoconfparse-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-waitress

    This update for python-waitress fixes the following issues: - CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)

    first Oct 18, 2022
  • High max 8.8
    openSUSE-SU-2024:13284-1 1 CVE 1 exploited

    libopencv408-4.8.1-1.1 on GA media

    These are all security issues fixed in the libopencv408-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-bleach

    This update for python-bleach fixes the following issues: - CVE-2021-23980: Fixed mutation XSS on bleach.clean with specific combinations of allowed tags (boo#1184547) Update to 3.1.5: * replace missing ``setuptools`` dependency with ``packaging``. Thank you …

    first Apr 14, 2021
  • High max 8.8

    Security update for storm, storm-kit

    This update for storm, storm-kit fixes the following issues: - Update storm to version 1.0.5 (bsc#1059463, CVE-2017-9799) - Update storm-kit to version 1.0.5 (bsc#1059463, CVE-2017-9799) - Initial package (bsc#1048688, fate#323204)

    first Nov 13, 2017
  • High max 7.5

    python36-nltk-3.5-1.10 on GA media

    These are all security issues fixed in the python36-nltk-3.5-1.10 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.4

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). - CVE-2024-53156: wifi: ath9k: add rang…

    first May 20, 2025
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in th…

    first Dec 6, 2021
  • High max 7.5

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodejs…

    first Mar 15, 2023
  • High max 7.5

    google-guest-agent-20250116.00-3.1 on GA media

    These are all security issues fixed in the google-guest-agent-20250116.00-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 11, 2025
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed integer overflow causing out of bounds writes when handling invalid uncompressed video (bsc#1215796). - CVE-2023-40476: Fixed possible overflow using max_sub_layers_minu…

    first Nov 28, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow …

    first Aug 3, 2023
  • High max 7.5

    docker-compose-2.17.3-1.1 on GA media

    These are all security issues fixed in the docker-compose-2.17.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2024-38875: Fixed potential denial-of-service attack via certain inputs with a very large number of brackets (bsc#1227590) - CVE-2024-39329: Fixed username enumeration through timing difference f…

    first Jul 17, 2024
  • High max 7.5
    openSUSE-SU-2024:11823-1 5 CVEs 1 exploited

    ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2015:2402-1 19 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-20…

    first Dec 30, 2015
  • High max 8.6

    kubernetes1.21-apiserver-1.21.5-1.1 on GA media

    These are all security issues fixed in the kubernetes1.21-apiserver-1.21.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_17 fixes one issue. The following security issue was fixed: - CVE-2024-40909: Fix a potential use-after-free in bpf_link_free() (bsc#1228349).

    first Sep 23, 2024
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2022-20698: Fixed invalid pointer read allowing denial of service crash. (bsc#1194731)

    first Feb 9, 2022
  • High max 7.9
    SUSE-SU-2023:1591-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_106 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 27, 2023
  • High max 7.5

    Security update for xmltooling

    This update for xmltooling fixes the following issues: - CVE-2023-36661: Fixed a server-side-request-forgery (SSRF) vulnerability (bsc#1212359).

    first Jul 3, 2023
  • High max 7.5

    Security update for go1.24

    This update for go1.24 fixes the following issues: go1.24.4 (released 2025-06-05) includes security fixes to the crypto/x509, net/http, and os packages, as well as bug fixes to the linker, the go command, and the hash/maphash and os packages. ( bsc#1236217 go…

    first Jun 9, 2025
  • High max 8.1

    Security update for php74

    This update for php74 fixes the following issues: - CVE-2022-31625: Fixed uninitialized pointers free in Postgres extension. (bsc#1200645) - CVE-2022-31626: Fixed buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver. (…

    first Jun 23, 2022
  • High max 7.5

    postgresql13-13.12-1.1 on GA media

    These are all security issues fixed in the postgresql13-13.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    nodejs-electron-33.4.2-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-33.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 1, 2025
  • High max 7.5

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues: - CVE-2023-28450: Fixed default maximum size for EDNS.0 UDP packets (bsc#1209358).

    first Apr 20, 2023
  • High max 7.1

    Security update for curl

    This update for curl fixes the following issues: Security issues fixed: - CVE-2019-3822: Fixed a NTLMv2 type-3 header stack buffer overflow (bsc#1123377). - CVE-2019-3823: Fixed an out-of-bounds read in the SMTP end-of-response (bsc#1123378). - CVE-2018-16890…

    first Feb 13, 2019
  • High max 7.5

    Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_35 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force …

    first Apr 20, 2024
  • High max 7.8

    Security update for gdm

    This update for gdm fixes the following issues: - CVE-2025-6018: pam.d: removes pam_env from auth stack for security reason (bsc#1243226).

    first Jun 19, 2025
  • High max 7.8

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49177: Data leak in X…

    first Jun 17, 2025
  • High max 7.8

    Security update for shadowsocks-libev

    This update for shadowsocks-libev fixes the following issues: - Update version to 3.3.3 * Refine the handling of suspicious connections. * Fix exploitable denial-of-service vulnerability exists in the UDPRelay functionality (boo#1158251, CVE-2019-5163) * Fix …

    first Dec 11, 2019
  • High max 8.0
    SUSE-SU-2019:3247-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_14 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privil…

    first Dec 11, 2019
  • High max 8.6

    kubernetes1.19-apiserver-1.19.15-1.1 on GA media

    These are all security issues fixed in the kubernetes1.19-apiserver-1.19.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3

    Security update for skopeo

    This update for skopeo fixes the following issues: - CVE-2024-3727: Added missing image digest verification (bsc#1224123).

    first Jul 10, 2024
  • High max 7.8

    Security update for binutils

    This update for binutils fixes the following issues: Update to version 2.41 [jsc#PED-5778]: * The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a s…

    first Sep 20, 2023
  • High max 7.8

    Security update for systemd

    This update for systemd provides the following fixes: Security issues fixed: - CVE-2018-16864, CVE-2018-16865: Fixed two memory corruptions through attacker-controlled alloca()s (bsc#1120323) - CVE-2018-16866: Fixed an information leak in journald (bsc#112032…

    first Mar 23, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2024-47684: tcp: check skb is non-NULL in tcp_rto_d…

    first Feb 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() …

    first Jun 25, 2024
  • High max 7.5

    Security update for openssl

    This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behavior …

    first Oct 5, 2016