Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.4

    dcmtk-3.6.9-1.1 on GA media

    These are all security issues fixed in the dcmtk-3.6.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 14, 2025
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 110.0.5481.177 (boo#1208589) * CVE-2023-0927: Use after free in Web Payments API * CVE-2023-0928: Use after free in SwiftShader * CVE-2023-0929: Use after free in Vulkan * CVE-2023-0930: Heap buffe…

    first Feb 27, 2023
  • High max 7.8

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (bsc#1246296)

    first Jul 30, 2025
  • High max 7.7

    Security update for dpdk

    This update for dpdk fixes the following issues: Security issues fixed: - CVE-2020-10722: Fixed an integer overflow in vhost_user_set_log_base() (bsc#1171477). - CVE-2020-10723: Fixed an integer truncation in vhost_user_check_and_alloc_queue_pair() (bsc#11714…

    first May 19, 2020
  • High max 7.5

    Security update for postgresql12

    This update for postgresql12 fixes the following issues: - Update to 12.16 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059)

    first Aug 17, 2023
  • High max 8.8

    Security update for zlib

    This update for zlib fixes the following issues: CVE-2016-9843: Big-endian out-of-bounds pointer CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579) Inc…

    first Jan 2, 2017
  • High max 7.5

    Security update for python-wheel

    This update for python-wheel fixes the following issues: - CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).

    first Jan 16, 2023
  • High max 7.7

    Security update for dovecot23

    This update for dovecot23 fixes the following issues: dovecot was updated to 2.3.3 release, bringing lots of bugfixes (bsc#1124356). Also the following security issue was fixed: - CVE-2019-3814: A vulnerability in Dovecot related to SSL client certificate aut…

    first Feb 15, 2019
  • High max 7.8

    ImageMagick-7.1.1.17-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.1.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.7

    python312-3.12.8-1.1 on GA media

    These are all security issues fixed in the python312-3.12.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 13, 2024
  • High max 7.3

    obs-scm-bridge-0.5.4-1.1 on GA media

    These are all security issues fixed in the obs-scm-bridge-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 4, 2024
  • High max 8.6

    Security update for squid

    This update for squid fixes the following issues: Updated squid to version 5.7: - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677). - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680).

    first Oct 6, 2022
  • High max 8.8

    govulncheck-vulndb-0.0.20250128T150132-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250128T150132-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 29, 2025
  • High max 8.8

    chromedriver-128.0.6613.113-1.1 on GA media

    These are all security issues fixed in the chromedriver-128.0.6613.113-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2024
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2022-3554: Fixed memory leak in XRegisterIMInstantiateCallback() (bsc#1204422). - CVE-2022-3555: Fixed memory leak in _XFreeX11XCBStructure() (bsc#1204425).

    first Nov 15, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointv…

    first Dec 19, 2022
  • High max 7.8

    git-2.37.1-1.1 on GA media

    These are all security issues fixed in the git-2.37.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    chromedriver-130.0.6723.69-1.1 on GA media

    These are all security issues fixed in the chromedriver-130.0.6723.69-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2024
  • High max 8.2

    Security update for xmlgraphics-batik

    This update for xmlgraphics-batik fixes the following issues: - CVE-2017-5662: Fixed Apache Batik information disclosure vulnerability (bsc#1034675). - CVE-2019-17566: Fixed SSRF vulnerability (bsc#1172961). - CVE-2020-11987: Fixed Apache XML Graphics Batik S…

    first Mar 6, 2024
  • High max 8.0

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Security issue fixed: - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301).

    first Feb 19, 2019
  • High max 7.5

    dnsmasq-2.90-1.1 on GA media

    These are all security issues fixed in the dnsmasq-2.90-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-0725: Fixed gzip integer overflow (bsc#1236590) - CVE-2025-0167: Fixed netrc and default credential leak (bsc#1236588)

    first Feb 5, 2025
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033). - CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218…

    first Jan 2, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140). - CVE-2023-53117: fs: prevent out-of-bounds array speculation when …

    first Sep 18, 2025
  • High max 7.5

    Security update for libtirpc

    This update for libtirpc fixes the following issues: - CVE-2021-46828: Fixed denial of service vulnerability with lots of connections (bsc#1201680). - Exclude ipv6 addresses in client protocol version 2 code (bsc#1200800)

    first Oct 27, 2022
  • High max 8.8
    SUSE-SU-2021:2762-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…

    first Aug 17, 2021
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2023-24998: Fixed FileUpload DoS with excessive parts (bsc#1208513).

    first Mar 10, 2023
  • High max 8.8
    openSUSE-SU-2022:0042-1 8 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 98.0.4758.102 (boo#1195986) * CVE-2022-0603: Use after free in File Manager * CVE-2022-0604: Heap buffer overflow in Tab Groups * CVE-2022-0605: Use after free in Webstore API * CVE-2022-0606: Us…

    first Feb 17, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_46 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-28466: Fi…

    first Jun 29, 2023
  • High max 7.5

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: Update AMD ucode to 20231030 (bsc#1215831): - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…

    first Dec 6, 2023
  • High max 7.5

    radare2-5.8.6-1.1 on GA media

    These are all security issues fixed in the radare2-5.8.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-7425: Fixed heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr (bsc#1246296)

    first Aug 4, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (b…

    first Sep 14, 2022
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2020-36691: Fixed an issue which coul…

    first Apr 18, 2023
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_124 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Mar 28, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_134 fixes several issues. The following security issues were fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic …

    first Feb 2, 2023
  • High max 8.3

    Security update for nim

    This update for nim fixes the following issues: num was updated to version 1.2.12: * Fixed GC crash resulting from inlining of the memory allocation procs * Fixed “incorrect raises effect for $(NimNode)” (#17454) From version 1.2.10: * Fixed “JS backend doesn…

    first Apr 29, 2021
  • High max 7.5

    bind-9.18.3-1.1 on GA media

    These are all security issues fixed in the bind-9.18.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to 22.13.1: - CVE-2025-23083: Fixed worker permission bypass via InternalWorker leak in diagnostics (bsc#1236251) - CVE-2025-23085: Fixed HTTP2 memory leak on premature close and ERR_PROTO (bsc#12362…

    first Jan 29, 2025
  • High max 8.2

    Security update for nodejs14

    This update for nodejs14 fixes the following issues: nodejs14 was updated to 14.18.1: * deps: update llhttp to 2.1.4 Security fixes: - HTTP Request Smuggling due to spaced in headers (bsc#1191601, CVE-2021-22959) - HTTP Request Smuggling when parsing the body…

    first Dec 2, 2021