Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.7

    libprotobuf-lite28_3_0-28.3-15.1 on GA media

    These are all security issues fixed in the libprotobuf-lite28_3_0-28.3-15.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2025
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-28374: Fixed a LIO security issue (bsc#1178372). - CVE-2020-36158: Fixed a potential remote code execution in the …

    first Jan 15, 2021
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_99 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - CVE-2…

    first Jun 6, 2023
  • High max 7.7

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405) This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Jun 29, 2020
  • High max 7.5

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: - CVE-2022-21716: Fixed that ssh server accepts an infinite amount of data using all the available memory (bsc#1196739).

    first Jul 6, 2022
  • High max 7.7

    corepack20-20.3.1-1.1 on GA media

    These are all security issues fixed in the corepack20-20.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2018:4143-1 27 CVEs 1 exploited

    Security update for Chromium

    This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed (boo#1118529): - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use …

    first Dec 15, 2018
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 56 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_216 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#1238788…

    first Apr 14, 2025
  • High max 8.6

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381). - CVE-2025-21700: net: sched: Disall…

    first Jun 25, 2025
  • High max 7.8
    SUSE-SU-2024:1359-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 20, 2024
  • High max 7.7

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2020-8022: Fixed a local root exploit due to improper permissions (bsc#1172405)

    first Jun 26, 2020
  • High max 7.5

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to de…

    first Mar 9, 2020
  • High max 8.8
    openSUSE-SU-2021:0413-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 74.0.3911.203 - CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358) - DNA-90762 Replace “Don’t show again” with “Discard” - DNA-90974 Crash at opera::Persistent…

    first Mar 15, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238324). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 pac…

    first Jun 9, 2025
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 1 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_3 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for ever…

    first Aug 21, 2018
  • High max 8.0
    SUSE-SU-2019:3228-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • High max 8.1

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2022-49043: Fixed a use-after-free in xmlXIncludeAddNode. (bsc#1236460)

    first Feb 4, 2025
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force …

    first Apr 23, 2024
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2022-27781: Fixed CERTINFO never-ending busy-loop (bsc#1199223) - CVE-2022-27782: Fixed TLS and SSH connection too eager reuse (bsc#1199224)

    first May 23, 2022
  • High max 7.8
    SUSE-SU-2025:0961-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 19, 2025
  • High max 7.8

    Security update for python39

    This update for python39 fixes the following issues: - CVE-2023-52425: Fixed denial of service (resource consumption) caused by processing large tokens in expat (bsc#1219559). - CVE-2023-6597: Fixed symlink race condition in tempfile.TemporaryDirectory (bsc#1…

    first Mar 27, 2024
  • High max 7.5

    go1.16-1.16.12-1.1 on GA media

    These are all security issues fixed in the go1.16-1.16.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for xrdp

    This update for xrdp fixes the following issues: - Security fixes (bsc#1173580, CVE-2020-4044): + Add patches: * xrdp-cve-2020-4044-fix-0.patch * xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: * xrdp-fate318398-change-expired-password.patch

    first Jul 15, 2020
  • High max 8.1

    Security update for grub2

    This update for grub2 fixes the following issues: Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184) - CVE-2021-3696: Fix…

    first Jun 14, 2022
  • High max 8.8
    openSUSE-SU-2020:0060-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 15, 2020
  • High max 7.5

    macchina-6.0.6~git0.c21ce78-2.1 on GA media

    These are all security issues fixed in the macchina-6.0.6~git0.c21ce78-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bound…

    first Oct 17, 2023
  • High max 8.1

    Security update for bind

    This update for bind fixes the following issues: - CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack [bsc#1182246, CVE-2020-8625]

    first Feb 18, 2021
  • High max 7.5

    Security update for rubygem-rack

    This update for rubygem-rack fixes the following issues: - CVE-2022-44570: Fixed a potential denial of service when parsing a RFC2183 multipart boundary (bsc#1207597). - CVE-2022-44571: Fixed a potential denial of service when parsing a Range header (bsc#1207…

    first Feb 6, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…

    first Feb 6, 2024
  • High max 7.8

    kernel-devel-5.16.4-1.1 on GA media

    These are all security issues fixed in the kernel-devel-5.16.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    python310-nltk-3.7-1.1 on GA media

    These are all security issues fixed in the python310-nltk-3.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_93 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc…

    first Dec 20, 2022
  • High max 8.0

    Security update for git

    This update for git fixes the following issues: Update from version 2.26.2 to version 2.31.1 (jsc#SLE-18152) Security fixes: - CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capab…

    first Jul 29, 2021
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Security Vulnerabilities fixed in Firefox ESR 128.8 (MFSA 2025-16) (bsc#1237683) - CVE-2024-43097: Overflow when growing an SkRegion's RunArray - CVE-2025-1930: AudioIPC StreamData could trigger a use…

    first Mar 5, 2025
  • High max 7.5

    Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-38…

    first May 16, 2019
  • High max 8.1

    zypper-1.14.49-1.2 on GA media

    These are all security issues fixed in the zypper-1.14.49-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2021:1073-1 7 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …

    first Jul 21, 2021
  • High max 7.3

    Security update for vim

    This update for vim fixes the following issues: - CVE-2023-0512: Fixed a divide By Zero (bsc#1207780). - CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957). - CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959). - CVE-2023-1…

    first Mar 16, 2023
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel-azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19051: There was a memory leak in the i2400m_op_rfkill_sw_toggle() function in drivers/net/wimax/i2400m/op-r…

    first Dec 17, 2019