Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    python310-Django-4.2.3-1.1 on GA media

    These are all security issues fixed in the python310-Django-4.2.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_126 fixes one issue. The following security issue was fixed: - CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#…

    first Feb 2, 2023
  • High max 8.4
    SUSE-SU-2022:0254-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 1, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 60 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_228 fixes several issues. The following security issues were fixed: - CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235250). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerabi…

    first Aug 4, 2025
  • High max 7.8
    SUSE-SU-2018:3088-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerabilit…

    first Oct 9, 2018
  • High max 8.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to version 102.11: - fixed: During Account Setup, the 'Checking password...' message was not removed after a failure (bmo#1826022) - fixed: Miscellaneous UI fixes (bmo#1827070) - fixed: Sec…

    first May 16, 2023
  • High max 7.5

    golang-github-prometheus-alertmanager-0.26.0-4.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.26.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_211 fixes several issues. The following security issues were fixed: - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-21971: net_sched…

    first Oct 20, 2025
  • High max 8.8
    SUSE-SU-2022:4642-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). - CVE-2022-42852: Fixed disclosure of process memory …

    first Dec 30, 2022
  • High max 7.5

    Botan-doc-2.19.5-1.1 on GA media

    These are all security issues fixed in the Botan-doc-2.19.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_114 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_doin…

    first Dec 16, 2022
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes one issue. The following security issue was fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712).

    first Jan 14, 2025
  • High max 7.0

    kernel-devel-6.6.1-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for xstream

    This update for xstream fixes the following issues: - Upgrade to 1.4.16 - CVE-2021-21351: remote attacker to load and execute arbitrary code (bsc#1184796) - CVE-2021-21349: SSRF can lead to a remote attacker to request data from internal resources (bsc#118479…

    first Jun 2, 2021
  • High max 7.5

    389-ds-2.0.10~git0.21dd2802c-1.1 on GA media

    These are all security issues fixed in the 389-ds-2.0.10~git0.21dd2802c-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for singularity

    This update for singularity fixes the following issues: singularity was updated to version 3.4.1: This point release addresses the following issues: - Fixes an issue where a PID namespace was always being used - Fixes compilation on non 64-bit architectures -…

    first Oct 7, 2019
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2025-49175: Out-of-bounds access in X Rendering extension (Animated cursors) (bsc#1244082). - CVE-2025-49176: Integer overflow in Big Requests Extension (bsc#1244084). - CVE-2025-49177: Data le…

    first Jun 17, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 1 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_3 fixes several issues. The following security issues were fixed: - CVE-2018-10938: It was found that a crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso…

    first Sep 28, 2018
  • High max 7.5

    caddy-2.7.6-1.1 on GA media

    These are all security issues fixed in the caddy-2.7.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - Update to 2.4.17.1 (bsc#1248806 / PED-14130). - Remove many patches, as they've been merged upstream.

    first Dec 29, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-39193: Fixed an out of bounds read i…

    first Oct 10, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_d…

    first Mar 21, 2023
  • High max 7.5

    Security update for python36

    This update for python36 fixes the following issues: - Update to 3.6.15: - CVE-2021-3737: Fixed a DoS caused by infinitely reading potential HTTP headers after a 100 Continue status response from the server. (bsc#1189241) - CVE-2021-3426: Fixed an information…

    first Oct 20, 2021
  • High max 7.5

    Security update for firewalld, golang-github-prometheus-prometheus

    This update for firewalld, golang-github-prometheus-prometheus fixes the following issues: Security fixes for golang-github-prometheus-prometheus: - CVE-2022-21698: Denial of Service through unbounded cardinality, and potential memory exhaustion, when handlin…

    first Apr 27, 2022
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: Security fixes: - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834) - CVE-2024-8612: Fixed information leak in virtio devices (bsc#1230915) Update version to 8.2.7: Security fixes: - CVE-2024…

    first Oct 22, 2024
  • High max 7.1

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

    first Aug 31, 2023
  • High max 8.8

    nodejs-electron-33.4.6-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-33.4.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 21, 2025
  • High max 8.2

    Security update for virtualbox

    This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: - CVE-2023-22098 (boo#1216363) - CVE-2023-22099 (boo#1216364) - CVE-2023-22100 (boo#1216365) This is a mainten…

    first Nov 4, 2023
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-23252: Fixed denial of service via crafted web content (bsc#1222010). - CVE-2024-23254: Fixed possible audio data exilftration cross-origin via malicious website (bsc#1222010). - CVE-2024-2326…

    first Apr 12, 2024
  • High max 7.0

    Security update for runc

    This update for runc fixes the following issues: Update to runc v1.1.5: Security fixes: - CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884). - CVE-2023-27561: Fixed regression that reintroduced CVE-2019-199…

    first Apr 3, 2023
  • High max 8.8

    nodejs-electron-22.2.0-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-22.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2023-28625: Fixed NULL pointer dereference when OIDCStripCookies was set and a crafted Cookie header was supplied (bsc#1210073).

    first Apr 14, 2023
  • High max 7.5

    Security update for python-Flask-Cors

    This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability (bsc#1175986).

    first Sep 9, 2020
  • High max 7.5

    python310-3.10.10-1.1 on GA media

    These are all security issues fixed in the python310-3.10.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for systemd

    This update for systemd fixes the following issues: - CVE-2025-4598: Race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump (bsc#1243935). - CVE-2023-26604: Privilege escalation via the less pager (…

    first Jun 19, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350). - CVE-2025-38495: HID: core: ensure the allocated report buffer…

    first Aug 19, 2025
  • High max 7.5

    Security update for Salt

    This update fixes the following issues: salt: - Fix the regression of docker_container state module - Support querying for JSON data in external sql pillar - Exclude the full path of a download URL to prevent injection of malicious code (bsc#1190265) (CVE-202…

    first Oct 27, 2021
  • High max 8.1

    postgresql16-16.7-1.1 on GA media

    These are all security issues fixed in the postgresql16-16.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 13, 2025
  • High max 8.8

    Security update for Chromium

    Chromium was updated to 52.0.2743.82 to fix the following security issues (boo#989901): - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly…

    first Jul 25, 2016
  • High max 7.8

    Security update for python3

    This update for python3 fixes the following issues: Security issues fixed: - CVE-2021-3572: Update bundled pip wheel to the latest SLE version (bsc#1186819) - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). Other bugs fixed: - Rem…

    first Jul 11, 2022