Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_40 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-35001: Fixed an o…

    first Sep 19, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 18 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_52 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a …

    first Mar 17, 2021
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Security issue fixed: - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billio…

    first Mar 28, 2017
  • High max 8.8
    SUSE-SU-2015:1476-1 16 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities. - Firefox was updated to 38.2.1 ESR (bsc#943608) * MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during …

    first Sep 1, 2015
  • High max 8.4

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252376) - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related…

    first Nov 12, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-39197: Fixed a out-of-bounds read in nf_c…

    first Dec 12, 2023
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web content processing that could have led to arbitrary code execution. - CVE-2023-23518: Fixed web content processing that could have led …

    first Feb 13, 2023
  • High max 7.5

    Security update for python310

    This update for python310 fixes the following issues: - CVE-2023-52425: Fixed using the system libexpat (bsc#1219559).

    first May 20, 2024
  • High max 7.5

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: Update to version 9.4.42.v20210604 - Fix: bsc#1187117, CVE-2021-28169 - possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory …

    first Jul 11, 2021
  • High max 7.5

    Security update for python-gunicorn

    This update for python-gunicorn fixes the following issues: - CVE-2024-1135: Fixed HTTP Request Smuggling (bsc#1222950)

    first Apr 26, 2024
  • High max 7.5

    jasper-4.2.3-2.1 on GA media

    These are all security issues fixed in the jasper-4.2.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for tomcat

    This update for tomcat to version 9.0.30 fixes the following issues: Security issue fixed: - CVE-2019-12418: Fixed a local privilege escalation through by manipulating the RMI registry and performing a man-in-the-middle attack (bsc#1159723). - CVE-2019-17563:…

    first Jan 7, 2020
  • High max 7.5

    tar-1.29-2.1 on GA media

    These are all security issues fixed in the tar-1.29-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for go1.18

    This update for go1.18 fixes the following issues: Update to version 1.18.9, includes the following security fixes: - CVE-2022-41717: net/http: limit canonical header cache by bytes, not entries (bsc#1206135) - CVE-2022-41720: os, net/http: avoid escapes from…

    first Dec 9, 2022
  • High max 8.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read random memory from the kernel space. (b…

    first Apr 13, 2022
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - Fixed regression introduced with security update for CVE-2022-3555 (bsc#1204425, bsc#1208881)

    first Mar 8, 2023
  • High max 7.1

    Security update for python-waitress

    This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2…

    first Nov 10, 2020
  • High max 8.1

    Security update for Cloud7 packages

    This update provides fixes for the following packages issues: caasp-openstack-heat-templates: - Update to version 1.0+git.1553079189.3bf8922: * SCRD-2813 Add support for CPI parameters - Update to version 1.0+git.1547562889.43707e7: * Switch LB protocol from …

    first Jun 7, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_141 fixes one issue. The following security issue was fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619).

    first Dec 14, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2006: Fixed a race condition in the RxRPC network protocol (bsc#1210447). - CVE-2023-25775: Fixed improper acce…

    first Dec 12, 2023
  • High max 7.8

    jhead-3.06.0.1-3.1 on GA media

    These are all security issues fixed in the jhead-3.06.0.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)

    first Sep 23, 2020
  • High max 8.8

    Security update for krb5

    This update for krb5 fixes the following issues: - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

    first Dec 6, 2022
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-31083: Fixed race condition in hci_uar…

    first Dec 15, 2023
  • High max 7.8
    SUSE-SU-2022:1038-1 24 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in n…

    first Mar 30, 2022
  • High max 7.5

    ruby3.1-rubygem-sprockets-4.0.3-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-sprockets-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for glibc

    This update for glibc fixes the following issues: - nscd: Fixed use-after-free in addgetnetgrentX (BZ #23520) - CVE-2024-33599: nscd: Fixed Stack-based buffer overflow in netgroup cache (bsc#1223423, BZ #31677) - CVE-2024-33600: nscd: Avoid null pointer crash…

    first May 17, 2024
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: Update to Java 8.0 Service Refresh 7 Fix Pack 10 (bsc#1201643), including fixes for: - CVE-2022-21476 (bsc#1198671), CVE-2022-21449 (bsc#1198670), CVE-2022-21496 (bsc#1198673), CVE-2022-21434 (bsc#119…

    first Jul 23, 2022
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 72 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_272 fixes one issue. The following security issue was fixed: - CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250302).

    first Oct 20, 2025
  • High max 7.5

    Recommended update for mariadb104

    This update for mariadb104 fixes the following issues: - Implement version 10.4 of MariaDB (jsc#PED-2455): * It is possible to use more than one authentication plugin for each user account. * The root user account is being created with the ability to use two …

    first Dec 29, 2023
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 132.0.6834.83 (stable released 2024-01-14) (boo#1235892) * CVE-2025-0434: Out of bounds memory access in V8 * CVE-2025-0435: Inappropriate implementation in Navigation * CVE-2025-0436: Integer ov…

    first Jan 20, 2025
  • High max 7.5

    ruby3.2-rubygem-http-cookie-1.0.5-1.4 on GA media

    These are all security issues fixed in the ruby3.2-rubygem-http-cookie-1.0.5-1.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.0

    Security update for hsqldb

    This update for hsqldb fixes the following issues: - CVE-2022-41853: Fixed insufficient input sanitization (bsc#1204521).

    first Nov 1, 2022
  • High max 7.0

    Security update for gtk3

    This update for gtk3 fixes the following issues: - CVE-2024-6655: Fixed library injection from current working directory (bsc#1228120)

    first Jul 30, 2024
  • High max 8.1

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2024-38474: Fixed substitution encoding issue in mod_rewrite (bsc#1227278) - CVE-2024-38473: Fixed encoding problem in mod_proxy (bsc#1227276)

    first Aug 22, 2024
  • High max 8.8
    SUSE-SU-2023:4211-1 8 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to exec…

    first Oct 26, 2023
  • High max 8.8

    nodejs-electron-29.3.1-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-29.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2025:0903-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_vali…

    first Mar 18, 2025
  • High max 7.5

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: Security issues fixed: - CVE-2019-9513: Fixed HTTP/2 implementation that is vulnerable to resource loops, potentially leading to a denial of service (bsc#1146184). - CVE-2019-9511: Fixed HTTP/2 implementatio…

    first Oct 1, 2019
  • High max 7.1

    apptainer-1.1.8-1.1 on GA media

    These are all security issues fixed in the apptainer-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024