Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for go1.21-openssl

    This update for go1.21-openssl fixes the following issues: - CVE-2024-34158: Fixed stack exhaustion in Parse in go/build/constraint (bsc#1230254). - CVE-2024-34156: Fixed stack exhaustion in Decoder.Decode in encoding/gob (bsc#1230253). - CVE-2024-34155: Fixe…

    first Oct 30, 2024
  • High max 7.5

    argocd-cli-2.14.10-1.1 on GA media

    These are all security issues fixed in the argocd-cli-2.14.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 17, 2025
  • High max 7.8
    SUSE-SU-2024:1558-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_127 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 8, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_106 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw i…

    first Sep 13, 2023
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_34 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limi…

    first Aug 4, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fix…

    first Mar 16, 2023
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.59-92_20 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 5, 2018
  • High max 7.5

    Security update for docker-runc

    This update for docker-runc fixes the following issues: - CVE-2019-16884: Fixed an LSM bypass via malicious Docker images that mount over a /proc directory. (bsc#1152308)

    first Oct 25, 2019
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user ac…

    first Sep 14, 2023
  • High max 7.8

    Security update for clamav

    This update for clamav fixes the following issues: - Updated to version 0.103.11: - CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625).

    first Oct 31, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_98 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116). -…

    first Sep 23, 2022
  • High max 7.5

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: Fixed heap buffer overflow in gdk_pixbuf__jpeg_image_load_increment function (bsc#1246114)

    first Aug 28, 2025
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Extended Support Release 102.11.0 ESR (bsc#1211175): - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential perm…

    first May 11, 2023
  • High max 7.1

    Security update for postgresql-jdbc

    This update for postgresql-jdbc fixes the following issues: - CVE-2022-31197: Fixed SQL injection vulnerability (bsc#1202170).

    first Oct 6, 2022
  • High max 7.5

    python38-3.8.16-5.1 on GA media

    These are all security issues fixed in the python38-3.8.16-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently (bsc#1223100)

    first May 9, 2024
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239).

    first Nov 27, 2020
  • High max 7.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-25435: Heap-buffer-overflow in extractContigSamplesShifted8bits() in tiffcrop.c (bsc#1212607). - CVE-2023-52356: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (bsc#12…

    first Feb 28, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 31 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_118 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).…

    first Feb 6, 2024
  • High max 7.8

    Security update for libcap

    This update for libcap fixes the following issues: - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).

    first Jul 25, 2023
  • High max 7.5

    govulncheck-vulndb-0.0.20250331T171002-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250331T171002-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 2, 2025
  • High max 7.8

    Security update for wireshark

    This update for wireshark fixes the following issues: - Updated to Wireshark 3.6.20: - CVE-2024-0208: Fixed a crash in the GVCP dissector (bsc#1218504). - CVE-2024-0209: Fixed a crash in the IEEE 1609.2 dissector (bsc#1218505).

    first Jan 8, 2024
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 (bsc#1182286): + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT d…

    first Feb 24, 2021
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).

    first Jan 12, 2021
  • High max 7.3

    containerd-1.7.29-1.1 on GA media

    These are all security issues fixed in the containerd-1.7.29-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 11, 2025
  • High max 7.5

    dovecot23-2.3.21.1-1.1 on GA media

    These are all security issues fixed in the dovecot23-2.3.21.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 20, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_188 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race …

    first Oct 10, 2025
  • High max 7.5

    Security update for dovecot23

    This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 (jsc#SLE-19970): Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled…

    first Aug 31, 2021
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - Fix buffer overrun in EUC-KR conversion module (CVE-2019-25013, bsc#1182117, BZ #24973) - x86: Harden printf against non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649) - gconv: Fix assert…

    first Feb 27, 2021
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issues: - Update to version 4.3.0+20210305.9db5c9a8: * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415) * Dev: cibconfig: remove related code about detect…

    first Mar 12, 2021
  • High max 8.8

    chromedriver-130.0.6723.91-1.1 on GA media

    These are all security issues fixed in the chromedriver-130.0.6723.91-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2024
  • High max 7.8

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-34323: Fixed a potential crash in C Xenstored due to an incorrect assertion (XSA-440) (bsc#1215744). - CVE-2023-34326: Fixed a missing IOMMU TLB flush on x86 AMD systems with IOMMU hardware and PCI pa…

    first Oct 24, 2023
  • High max 8.8
    SUSE-SU-2023:0490-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 23, 2023
  • High max 7.4

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Upgrade to upsteam tag jdk-11.0.19+7 (April 2023 CPU): - CVE-2023-21930: Fixed AES support (bsc#1210628). - CVE-2023-21937: Fixed String platform support (bsc#1210631). - CVE-2023-21938: Fixed runtim…

    first May 16, 2023
  • High max 7.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.69 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8962: Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kerne…

    first Feb 14, 2017
  • High max 8.1

    Security update for expat

    This update for expat fixes the following issues: - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).

    first Sep 29, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_136 fixes one issue. The following security issue was fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440).

    first Oct 25, 2023
  • High max 7.5

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: Security issues fixed: - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071). - CVE-2019-11324: Fixed invalid CA certificat verification (bsc#1132900). - CVE-2019-11236: Fixed CRLF injection via r…

    first Sep 9, 2019
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 130.0.6723.58 (boo#1231694) * CVE-2024-9954: Use after free in AI * CVE-2024-9955: Use after free in Web Authentication * CVE-2024-9956: Inappropriate implementation in Web Authentication * CVE-202…

    first Oct 18, 2024
  • High max 7.5

    Security update for dnsdist

    This update for dnsdist fixes the following issues: Update to version 1.9.10. - CVE-2025-30194: illegal memory access (double-free) when processing specially crafted DoH exchanges leads to a denial-of-service (bsc#1242028). - CVE-2025-30193: stack exhaustion …

    first May 29, 2025