Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for gnutls

    This update for gnutls fixes the following issues: - CVE-2024-0567: Fixed an incorrect rejection of certificate chains with distributed trust (bsc#1218862). - CVE-2024-0553: Fixed a timing attack against the RSA-PSK key exchange, which could lead to the leaka…

    first May 13, 2024
  • High max 7.4

    Security update for java-1_7_0-ibm

    This update for java-1_7_0-ibm fixes the following issues: Security issues fixed: - CVE-2018-1517: Fixed a flaw in the java.math component in IBM SDK, which may allow an attacker to inflict a denial-of-service attack with specially crafted String data. - CVE-…

    first Aug 31, 2018
  • High max 7.8
    SUSE-SU-2024:0476-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2024-24860: Fixed a denial…

    first Feb 14, 2024
  • High max 7.5

    Security update for python-rsa

    This update for python-rsa fixes the following issues: - CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)

    first Jun 17, 2021
  • High max 8.6

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2020-27153: Fixed possible crash on disconnect (bsc#1177895). This update was imported from the SUSE:SLE-15:Update update project.

    first Nov 9, 2020
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-44429: Fixed GStreamer AV1 Codec Parsing Heap-based Buffer Overflow (bsc#1217211).

    first Dec 14, 2023
  • High max 7.8

    Security update for vim

    This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). - CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). - CVE-2023-4735: Fixed out of b…

    first Oct 3, 2023
  • High max 7.8

    gvim-9.0.0453-1.1 on GA media

    These are all security issues fixed in the gvim-9.0.0453-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    containerd-1.4.13-1.1 on GA media

    These are all security issues fixed in the containerd-1.4.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Update to version 130.0.6723.91 (boo#1232566): - CVE-2024-10487: Out of bounds write in Dawn - CVE-2024-10488: Use after free in WebRTC

    first Nov 5, 2024
  • High max 8.8

    nodejs-electron-27.2.3-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-27.2.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    Security update for exim

    This update for exim fixes the following issues: - CVE-2023-42117: Fixes Improper Neutralization of Special Elements Remote Code Execution Vulnerability (boo#1215787) - CVE-2023-42119: Fixes dnsdb Out-Of-Bounds Read Information Disclosure Vulnerability (boo#1…

    first Oct 18, 2023
  • High max 7.1

    Security update for cobbler

    This update for cobbler fixes the following issues: - CVE-2021-45083: Fixed unsafe permissions on sensitive files (bsc#1193671). The following non-security bugs were fixed: - Move configuration files ownership to apache (bsc#1195906)

    first Feb 18, 2022
  • High max 7.4

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Updated to version 11.0.24+8 (July 2024 CPU): - CVE-2024-21131: Fixed a potential UTF8 size overflow (bsc#1228046). - CVE-2024-21138: Fixed an infinite loop due to excessive symbol length (bsc#122804…

    first Jul 22, 2024
  • High max 7.8

    Security update for libfastjson

    This update for libfastjson fixes the following issues: - CVE-2020-12762: Fixed an integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).

    first May 9, 2023
  • High max 7.4

    Security update for grub2

    This update for grub2 provides the following fixes: A security issues with a bufferoverflow when reading username and password was fixed (bsc#956631, CVE-2015-8370) Bugs fixed: - Expand list of grub.cfg search path in PV Xen guests for systems installed on bt…

    first Dec 29, 2015
  • High max 7.8

    Security update for singularity

    This update for singularity to version 2.6.1 fixes the following issues: Security issues fixed: - CVE-2018-19295: Mount points are not mounted with shared mount propagation by default anymore, as this may result in privilege escalation (boo#1111411). - CVE-20…

    first Jan 29, 2019
  • High max 7.4

    java-11-openjdk-11.0.22.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.22.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Updated to version 2.36.8 (bsc#1203530): - CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution. - CVE-2022-32912: Fixed an out-of-bounds read that could potentiall…

    first Oct 1, 2022
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds…

    first Jun 26, 2025
  • High max 7.4

    python311-PyJWT-2.10.1-2.1 on GA media

    These are all security issues fixed in the python311-PyJWT-2.10.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2025
  • High max 8.8

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issues: - CVE-2019-15690: Fixed a heap buffer overflow (bsc#1160471). - CVE-2019-15681: Fixed a memory leak which could have allowed to a remote attacker to read stack memory (bsc#1155419). - CVE-2019-20788: Fi…

    first May 4, 2020
  • High max 7.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. Four new speculative execution information leak issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampl…

    first May 14, 2019
  • High max 7.8
    SUSE-SU-2015:1136-1 1 CVE 1 exploited

    Security update for flash-player

    Adobe Flash Player was updated to 11.2.202.468, fixing a security issue, where attackers could trigger a heap overflow and could execute code. https://helpx.adobe.com/security/products/flash-player/apsb15-14.html

    first Jun 24, 2015
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issues: - CVE-2025-10921: Fixed HDR file parsing heap-based buffer overflow that can lead to remote code execution. (bsc#1250496)

    first Dec 12, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability foun…

    first Mar 31, 2023
  • High max 8.1

    Security update for samba

    This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1…

    first Dec 27, 2016
  • High max 7.9

    corepack21-21.6.2-1.1 on GA media

    These are all security issues fixed in the corepack21-21.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 133.0.6943.126 (boo#1237343) - CVE-2025-0999: Heap buffer overflow in V8 - CVE-2025-1426: Heap buffer overflow in GPU - CVE-2025-1006: Use after free in Network

    first Feb 21, 2025
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378). - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak ps…

    first Nov 14, 2025
  • High max 7.5

    Security update for python-py

    This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).

    first Jun 4, 2021
  • High max 7.3

    Security update for openldap2

    This update for openldap2 fixes the following issues: - CVE-2020-8027: openldap_update_modules_path.sh starts daemons unconditionally and uses fixed paths in /tmp (bsc#1175568). This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 26, 2020
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_53_16 fixes one issue. The following security issue was fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534).

    first Oct 23, 2025
  • High max 7.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in …

    first Nov 9, 2018
  • High max 7.5
    SUSE-SU-2016:3105-1 9 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026): - CVE-2016-9079: Use-after-free in SVG Animation (bsc#1012964 MFSA 2016-92) - CVE-2016-5297: Incorrect ar…

    first Dec 13, 2016
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_lis…

    first Dec 17, 2024
  • High max 7.5

    Recommended update for SUSE Manager 4.2.3 Release Notes

    This update for SUSE Manager 4.2.3 Release Notes provides the following additions: Release notes for SUSE Manager: - Update to 4.2.3 - aarch64 support for CentOS 7/8, Oracle Linux 7/8, Rocky Linux 8, AlmaLinux 8, Amazon Linux 2 and openSUSE Leap 15.3 - Packag…

    first Oct 27, 2021
  • High max 7.5

    Security update for go1.12

    This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset f…

    first Sep 2, 2019
  • High max 7.3

    Security update for containerd

    This update for containerd fixes the following issues: - Update to containerd v1.7.29 - CVE-2024-25621: Fixed an overly broad default permission vulnerability. (bsc#1253126) - CVE-2025-64329: Fixed a goroutine leaks which can lead to memory exhaustion on the …

    first Nov 28, 2025
  • High max 7.8

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issues: gdk-pixbuf was updated to version 2.42.12: - Security issues fixed: * CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276) - Changes in version 2.42.12: + ani: Reject files with multip…

    first Jun 19, 2024