Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5
    SUSE-SU-2016:1146-1 10 CVEs 1 exploited

    Security update for portus

    Portus was updated to version 2.0.3, which brings several fixes and enhancements: - Fixed crono job when a repository could not be found. - Fixed compatibility issues with Docker 1.10 and Distribution 2.3. - Handle multiple scopes in token requests. - Add opt…

    first Apr 25, 2016
  • High max 7.8

    Security update for liblouis

    This update for liblouis fixes the following issues: Security issues fixed: - CVE-2017-15101: Buffer overflow in findTable (bsc#1067336). - CVE-2014-8184: stack-based buffer overflow in findTable() (bsc#1062458).

    first Nov 24, 2017
  • High max 7.9

    ucode-intel-20240514-1.1 on GA media

    These are all security issues fixed in the ucode-intel-20240514-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented: - jsc#SLE-4875: [CML] New device IDs for CML - jsc#SLE-7294: Add cpufreq driver for Raspberry Pi - fate#321840: Reduce memor…

    first Sep 20, 2019
  • High max 8.6

    podman-5.0.1-1.1 on GA media

    These are all security issues fixed in the podman-5.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-22869: Fixed Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239330).

    first Mar 27, 2025
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_38 fixes several issues. The following security issues were fixed: - CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). - CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unse…

    first May 21, 2024
  • High max 7.8
    SUSE-SU-2024:1545-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_148 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • High max 7.8
    SUSE-SU-2025:0924-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 7.5

    Security update for dpdk

    This update for dpdk to version 16.11.9 following issue: - CVE-2019-14818: Fixed a memory leak vulnerability caused by a malicious container may lead to to denial of service (bsc#1156146). - CVE-2020-12693: Fixed an authentication bypass via an alternate path…

    first Aug 11, 2020
  • High max 8.8

    nodejs-electron-19.0.15-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-19.0.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for redis7

    This update for redis7 fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service (bsc#1231266) - CVE-2024-31228: Fixed unbounded recursive pattern matching (bsc#1231265) - CVE-2024-31449: Fixed integer overflow bug in Lua …

    first Oct 7, 2024
  • High max 7.7

    Security update for salt

    This update for salt fixes the following issues: Security issues fixed: - CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430) - CVE-2024-22232: Prevent directory traversal attacks in the master's serve_…

    first Feb 15, 2024
  • High max 8.1
    SUSE-SU-2017:3059-1 5 CVEs 2 exploited

    Security update for tomcat

    Apache Tomcat was updated to 7.0.82 adding features, fixing bugs and security issues. This is another bugfix release, for full details see: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Fixed security issues: - CVE-2017-5664: A problem in handling e…

    first Nov 23, 2017
  • High max 7.5

    pijul-1.0.0~beta.2-1.1 on GA media

    These are all security issues fixed in the pijul-1.0.0~beta.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for openscad

    This update for openscad fixes the following issues: - CVE-2020-28600: A specially crafted STL file could lead to code execution via out-of-bounds write in import_stl.cc:import_stl() (bsc#1185975) This update was imported from the openSUSE:Leap:15.2:Update up…

    first Aug 15, 2021
  • High max 7.5

    Security update for python-Django1

    This update for python-Django1 fixes the following issues: - CVE-2022-22818: Fixed possible XSS via {% debug %} template tag (bsc#1195086) - CVE-2022-23833: Fixed denial-of-service possibility in file uploads. (bsc#1195088)

    first Feb 1, 2022
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of serv…

    first Apr 13, 2017
  • High max 7.3

    Security update for rust

    This update for rust fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).

    first Jan 26, 2022
  • High max 8.8

    chromedriver-118.0.5993.70-1.1 on GA media

    These are all security issues fixed in the chromedriver-118.0.5993.70-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_109 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…

    first Sep 15, 2023
  • High max 7.7

    Security update for nodejs8

    This update for nodejs8 to version 8.17.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field (bsc#1159352).

    first Jan 8, 2020
  • High max 8.4
    SUSE-SU-2016:1275-1 5 CVEs 3 exploited

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable MAGIC…

    first May 11, 2016
  • High max 7.8

    Security update for json-c

    This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479)

    first Feb 17, 2022
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235218). - CVE-2024-41090: tap: add missing verification …

    first Apr 14, 2025
  • High max 7.1

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100)

    first May 9, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Apr 12, 2024
  • High max 7.5

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2022-35737: Fixed an array-bounds overflow if billions of bytes are used in a string argument to a C API (bnc#1201783). - CVE-2021-36690: Fixed an issue with the SQLite Expert ex…

    first Nov 2, 2022
  • High max 7.8

    python3-virtualbox-6.1.28-1.1 on GA media

    These are all security issues fixed in the python3-virtualbox-6.1.28-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Recommended update for Maven

    This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: - Key changes across versions: * Bug fixes and improved support of dynamic types * Dependency upgrades (ASM, Maven core, and notably the rem…

    first Feb 26, 2025
  • High max 8.8

    chromedriver-128.0.6613.137-1.1 on GA media

    These are all security issues fixed in the chromedriver-128.0.6613.137-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 13, 2024
  • High max 9.8

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2024-4741: Fixed a use-after-free with SSL_free_buffers. (bsc#1225551)

    first Jun 19, 2024
  • High max 7.8
    openSUSE-SU-2022:0760-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.5

    Security update for rustup

    This update for rustup fixes the following issues: - CVE-2022-31394: Fixed possible HTTP2 attacks by specifying the HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE (bsc#1208552). - CVE-2023-26964: Fixed high memory and CPU usage when stream stacking occurs when H2 proce…

    first Jun 22, 2023
  • High max 7.5

    Security update for python-Django

    This update fixes the following security issues: - (bnc#955412, CVE-2015-8213) Possible settings leak in date template filter - (bnc#937522, CVE-2015-5143) Possible denial-of-service in session store - (bnc#937523, CVE-2015-5144) Possible Header injection - (…

    first Jan 7, 2016
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 0 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-120 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of serv…

    first Jan 22, 2020
  • High max 7.5

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).

    first Apr 1, 2022
  • High max 7.7

    Security update for openldap2

    This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698). - Changed DB_CONFIG to root:ldap permissions (bsc#1172704).

    first Jul 6, 2020
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed inf…

    first Aug 16, 2023
  • High max 8.7

    python311-aiohttp-3.11.16-1.1 on GA media

    These are all security issues fixed in the python311-aiohttp-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2025