Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 38 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_137 fixes one issue. The following security issue was fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).

    first Feb 6, 2024
  • High max 7.5

    libsoup-3_0-0-3.6.0-2.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 13, 2024
  • High max 7.5

    Security update for ldb, samba

    This update for ldb, samba fixes the following issues: Changes in samba: - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; (bso#14364); (bsc#1173159] + CVE-2020-10745: invalid DNS or NBT queries cont…

    first Jul 20, 2020
  • High max 7.8
    SUSE-SU-2025:0713-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_144 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 25, 2025
  • High max 7.8

    libwireshark16-4.0.11-2.1 on GA media

    These are all security issues fixed in the libwireshark16-4.0.11-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2022-2097: Fixed partial missing encryption in AES OCB mode (bsc#1201099).

    first Jul 7, 2022
  • High max 8.8
    openSUSE-SU-2022:0103-1 22 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController() - DNA-98278 Translations for O85 - DNA-98320…

    first Apr 4, 2022
  • High max 8.4

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847). - CVE-2024-43882: Fixed ToCToU betwe…

    first May 22, 2025
  • High max 7.5

    libopenvswitch-3_1-0-3.1.0-19.1 on GA media

    These are all security issues fixed in the libopenvswitch-3_1-0-3.1.0-19.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    MozillaThunderbird-115.6.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-115.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - Fixed a regression introduced with security update for CVE-2022-46340 (bsc#1205874).

    first Mar 8, 2023
  • High max 8.0

    ruby3.4-rubygem-puma-6.4.3-1.3 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-puma-6.4.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first May 17, 2025
  • High max 7.2

    Security update for postgresql12

    This update for postgresql12 fixes the following issues: Updated to version 12.15: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). …

    first May 15, 2023
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2024-25062: Fixed use-after-free in XMLReader (bsc#1219576).

    first Feb 20, 2024
  • High max 8.3

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: java-1_7_1-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 65 (bsc#1172277 and bsc#1169511) - CVE-2020-2654: Fixed an issue which could have resulted in unauthorized ability to cause a partial …

    first Jun 19, 2020
  • High max 7.9

    Security update for microcode_ctl

    This update for microcode_ctl fixes the following issues: - Intel CPU Microcode was updated to the 20250812 release (bsc#1248438) - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an…

    first Sep 9, 2025
  • High max 7.8
    SUSE-SU-2022:0984-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_37 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to …

    first Mar 29, 2022
  • High max 7.5

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.12.0 ESR (bsc#1201758): - CVE-2022-36319: Mouse Position spoofing with CSS transforms - CVE-2022-36318: Directory indexes for bundled resources reflected URL parame…

    first Jul 29, 2022
  • High max 7.5
    SUSE-SU-2019:0915-1 2 CVEs 1 exploited

    Security update for rubygem-actionpack-4_2

    This update for rubygem-actionpack-4_2 fixes the following issues: Security issues fixed: - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to …

    first Apr 9, 2019
  • High max 8.8

    MozillaFirefox-122.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-122.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2022-48912: Fix use-after-free in __nf_register_net…

    first Feb 12, 2025
  • High max 7.7

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964). - CVE-2022-0562: Fixed null source pointer passed as an argument to memc…

    first May 16, 2022
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to version 22.15.1. Security issues fixed: - CVE-2025-23166: remotely triggerable process crash due to improper error handling in async cryptographic operations (bsc#1243218). - CVE-2025-23165: memor…

    first Jun 11, 2025
  • High max 7.5

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: Update to Java 7.1 Service Refresh 5 Fix Pack 10 (bsc#1201643), including fixes for: - CVE-2022-21476 (bsc#1198671), CVE-2022-21449 (bsc#1198670), CVE-2022-21496 (bsc#1198673), CVE-2022-21434 (bsc#119…

    first Jul 23, 2022
  • High max 7.7

    Security update for python312-setuptools

    This update for python312-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write (bsc#1243313).

    first May 30, 2025
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed a denial of service (panic) inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c (bnc#1201940)…

    first Sep 14, 2022
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628). - CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631)…

    first Jun 13, 2023
  • High max 7.5

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331) This update was imported from…

    first Mar 16, 2021
  • High max 7.7

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2025-4478: Fixed initialization of function pointers after resource allocations (bsc#1243109) - CVE-2026-22851: Fixed RDPGFX ResetGraphics race leading to use-after-free in SDL client (sdl->primary) (b…

    first Jan 30, 2026
  • High max 8.6

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_54 fixes several issues. The following security issues were fixed: - CVE-2022-1016: Fixed a vulnerability in the nf_tables component of the netfilter subsystem. This vulnerability gives an attacker a powerful …

    first Apr 28, 2022
  • High max 8.8

    Security update for pacemaker

    This update for pacemaker fixes the following issues: Security issues fixed: - CVE-2018-16877: Fixed insufficient local IPC client-server authentication on the client's side. (bsc#1131356) - CVE-2018-16878: Fixed insufficient verification inflicted preference…

    first Sep 2, 2019
  • High max 8.8
    SUSE-SU-2023:3419-1 12 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…

    first Aug 24, 2023
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15916: Fixed a memory leak in register_queue_kobjects() which might have led denial of service (bsc#1149448). -…

    first Dec 13, 2019
  • High max 8.6

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM file parser (bsc#1199242). - CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the scan verdict cache check (bsc#1199…

    first May 12, 2022
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: There is an issue with the previous fix for CVE-2024-45230. Please consider the following vulnerability fixed only after the installation of this update. - CVE-2024-45230: Fixed potential denial-of-ser…

    first Sep 10, 2024
  • High max 7.5

    Security update for wireshark

    This update for wireshark fixes the following issues: - Update to Wireshark 3.4.7 - CVE-2021-22235: Fixed DNP dissector crash (bsc#1188375). This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 16, 2021
  • High max 7.0

    Security update for redis

    This update for redis fixes the following issues: - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193).

    first Jul 20, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_133 fixes several issues. The following security issues were fixed: - CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230998). - CVE-2022-48923: btrfs: prevent copying too big compres…

    first Feb 12, 2025
  • High max 8.7

    Security update for python312

    This update for python312 fixes the following issues: - CVE-2024-12254: Fixed unbounded memory buffering in SelectorSocketTransport.writelines() (bsc#1234290) Other fixes: - Updated to version 3.12.8 - Remove -IVendor/ from python-config (bsc#1231795)

    first Dec 11, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform…

    first Jun 9, 2021