Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for postgresql10

    This update for postgresql10 fixes the following issues: Security issue fixed: - CVE-2019-10208: Fixed arbitrary SQL execution via suitable SECURITY DEFINER function under the identity of the function owner (bsc#1145092). This update was imported from the SUS…

    first Sep 3, 2019
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.114-94_11 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in …

    first Jun 11, 2018
  • High max 8.5

    Security update for postgresql94

    This update for postgresql94 fixes the following issues: postgresql was updated to 9.4.19: https://www.postgresql.org/docs/current/static/release-9-4-19.html * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state fully between connection attempts. …

    first Oct 22, 2018
  • High max 8.8

    Security update for emacs

    This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. (bsc#1237091)

    first Feb 18, 2025
  • High max 8.0

    Security update for ansible

    This update for ansible fixes the following issues: Security vulnerabilities fixed: - CVE-2018-16876: Respect no_log on retry and high verbosity (bsc#1118896) - CVE-2018-16859: Windows - prevent sensitive content from appearing in scriptblock logging (bsc#111…

    first Feb 23, 2019
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973) - x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - gconv: Fix assert…

    first Feb 26, 2021
  • High max 7.1

    podman-4.3.1-1.1 on GA media

    These are all security issues fixed in the podman-4.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2023-45853: Fixed an integer overflow that would lead to a buffer overflow in the minizip subcomponent (bsc#1216378).

    first Oct 26, 2023
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-3635: Fixed a use-after-free in t…

    first Dec 16, 2022
  • High max 7.3

    Security update for SDL2_sound

    This update for SDL2_sound fixes the following issues: - Update to release 2.0.4: * Update bundled stb_vorbis to address CVE-2023-45676, CVE-2023-45677, CVE-2023-45679, CVE-2023-45680, CVE-2023-45681, CVE-2023-45682. - Update to release 2.0.2 * No further cha…

    first Jan 30, 2025
  • High max 7.8

    ffmpeg-6-6.1.2-4.1 on GA media

    These are all security issues fixed in the ffmpeg-6-6.1.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2025
  • High max 7.8

    Security update for git

    This update for git fixes the following issues: - CVE-2022-29187: Incomplete fix for CVE-2022-24765: potential command injection via git worktree (bsc#1201431). - Allow to opt-out from the check added in the security fix for CVE-2022-24765 (bsc#1200119)

    first Jul 22, 2022
  • High max 7.5

    Security update for jasper

    This update for jasper fixes the following issues: - CVE-2022-2963: Fixed memory leaks in function cmdopts_parse (bsc#1202642).

    first Oct 20, 2022
  • High max 7.8

    gdk-pixbuf-devel-2.42.12-1.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    gstreamer-1.24.10-2.1 on GA media

    These are all security issues fixed in the gstreamer-1.24.10-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 13, 2024
  • High max 8.3

    matrix-synapse-1.112.0-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.112.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 31, 2024
  • High max 8.8
    openSUSE-SU-2021:0296-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement client_capabilities negotiation for Flow / Sync - DNA-90560 [Search Tabs] Open Tabs…

    first Feb 15, 2021
  • High max 8.4

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768). - CVE-2022-49080: mm/mempolicy: fix mpol_new …

    first Mar 13, 2025
  • High max 8.6

    Security update for qt6-base

    This update for qt6-base fixes the following issues: - CVE-2024-33861: Fixed an invalid pointer being passed as a callback which coud lead to modification of the stack (bsc#1223917) - CVE-2024-39936: Fixed information leakage due to process HTTP2 communicatio…

    first Aug 12, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 (bsc#1217210): - CVE-2023-41983: Processing web content may lead to a denial-of-service. - CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already pr…

    first Nov 24, 2023
  • High max 7.8

    Security update for curl

    This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow exists in tftp_receive_packet that receives data from a TFTP server (bsc#1135170).

    first May 24, 2019
  • High max 7.8

    erofs-utils-1.7-1.1 on GA media

    These are all security issues fixed in the erofs-utils-1.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for gstreamer-rtsp-server

    This update for gstreamer-rtsp-server fixes the following issues: - CVE-2020-6095: Fixed a NULL pointer dereference when handling an invalid basic Authorization header (boo#1168026).

    first Apr 17, 2020
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…

    first Jan 17, 2025
  • High max 8.0
    SUSE-SU-2019:2984-1 49 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of th…

    first Nov 20, 2019
  • High max 8.1

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2024-33599: Fixed a stack-based buffer overflow in netgroup cache in nscd (bsc#1223423) - CVE-2024-33600: Avoid null pointer crashes after notfound response in nscd (bsc#1223424) - CVE-2024-33600: Do not…

    first Jun 3, 2024
  • High max 7.5

    Security update for python-future

    This update for python-future fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header (bsc#1206673).

    first Jan 12, 2023
  • High max 8.8

    libecpg6-17.1-1.1 on GA media

    These are all security issues fixed in the libecpg6-17.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 70 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_266 fixes one issue. The following security issue was fixed: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315).

    first Oct 8, 2025
  • High max 7.5

    ruby3.1-rubygem-rack-2.2-2.2.6.2-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-rack-2.2-2.2.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_45 fixes several issues. The following security issues were fixed: - CVE-2020-14331: Fixed a buffer over-write in vgacon_scroll (bsc#1174247). - CVE-2020-15780: Fixed a lockdown bypass via injection of malicious AC…

    first Sep 4, 2020
  • High max 7.3

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).

    first Jul 1, 2025
  • High max 8.3

    Security update for nim

    This update for nim fixes the following issues: Includes upstream security fixes for: * (boo#1175333, CVE-2020-15693) httpClient is vulnerable to a CR-LF injection * (boo#1175334, CVE-2020-15692) mishandle of argument to browsers.openDefaultBrowser * (boo#117…

    first Aug 24, 2022
  • High max 7.6

    Security update for qemu

    This update for qemu fixes several issues. These security issues were fixed: - CVE-2017-15289: The mode4and5 write functions allowed local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors r…

    first Nov 9, 2017
  • High max 7.8

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240813 release (bsc#1229129) - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0…

    first Sep 3, 2024
  • High max 7.3

    Security update for rust1.56

    This update for rust1.56 fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).

    first Jan 21, 2022
  • High max 7.5

    Security update for rmt-server

    This update for rmt-server fixes the following issues: Updated to version 2.13: - CVE-2023-28120: Fixed a potential XSS issue in an embedded dependency (bsc#1209507). - CVE-2023-27530: Fixed a denial of service issue in multipart request parsing (bsc#1209096)…

    first May 24, 2023
  • High max 7.5

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Backported fixes for OpenSSL 1.1.1 from nodejs8 (bsc#11…

    first Aug 15, 2019
  • High max 8.4

    Security update for flatpak

    This update for flatpak fixes the following issues: - CVE-2024-32462: Fixed arbitrary code execution outside sandbox via malicious app due to insufficient 'command' argument sanitization (bsc#1223110)

    first May 7, 2024
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execu…

    first Feb 9, 2021