Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_16 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privi…

    first Apr 15, 2022
  • High max 7.5

    Security update for nodejs8

    This update for nodejs8 to version 8.11.3 fixes the following issues: These security issues were fixed: - CVE-2018-7167: Calling Buffer.fill() or Buffer.alloc() with some parameters could have lead to a hang which could have resulted in a DoS (bsc#1097375). -…

    first Jul 9, 2018
  • High max 7.5

    Security update for syslog-ng

    This update for syslog-ng fixes the following issues: - CVE-2022-38725: Fixed integer overflow in parsers that allowed a remote denial of service (boo#1207460)

    first Feb 3, 2023
  • High max 8.2

    Security update for python-ipython

    This update for python-ipython fixes the following issues: - CVE-2022-21699: Confining executed process to have limited privileges. (boo#1194936).

    first Jul 7, 2022
  • High max 7.5

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: Update nodejs10 to 10.24.1. Including fixes for - CVE-2021-22918: libuv upgrade - Out of bounds read (bsc#1187973) - CVE-2021-27290: ssri Regular Expression Denial of Service (bsc#1187976) - CVE-2021-23362:…

    first Jul 19, 2021
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - Fixed CVEs: * CVE-2020-13934 (bsc#1174121) * CVE-2020-13935 (bsc#1174117)

    first Jul 24, 2020
  • High max 7.5

    iperf-3.18-1.1 on GA media

    These are all security issues fixed in the iperf-3.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 27, 2025
  • High max 8.1

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Update java-1_8_0-openjdk to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU, bsc#1160968): - CVE-2020-2583: Unlink Set of LinkedHashSets - CVE-2020-2590: Improve Kerberos interop capabilities…

    first Jan 29, 2020
  • High max 8.8

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: - CVE-2024-10976: Ensure cached plans are marked as dependent on the calling role when RLS applies to a non-top-level table reference (bsc#1233323). - CVE-2024-10977: Make libpq discard error messages r…

    first Dec 4, 2024
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 10 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_17 fixes several issues. The following security issues were fixed: - CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow when handling TCP Sele…

    first Jul 18, 2019
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issues: - CVE-2023-38406: Fixed nlri length of zero mishandling, aka 'flowspec overflow'. (bsc#1216900) - CVE-2023-47235: Fixed a crash on malformed BGP UPDATE message with an EOR, because the presence of EOR does not l…

    first Jun 28, 2024
  • High max 7.5

    Security update for qt6-base

    This update for qt6-base fixes the following issues: - CVE-2023-34410: Fixed certificate validation flaw (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). - CVE-2023-32762: Fixed strict-transport-security (HSTS) header parsin…

    first Aug 22, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. - CVE-2022-3523: Fixed use after free related to device private page handling (bsc#1204363). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (…

    first Mar 20, 2023
  • High max 7.5

    postgresql12-12.16-1.1 on GA media

    These are all security issues fixed in the postgresql12-12.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container

    This update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container fixes the following issues: - CVE-2023-26484: Limit operator secrets permission.…

    first Apr 24, 2023
  • High max 7.5

    python310-Django4-4.2.16-1.1 on GA media

    These are all security issues fixed in the python310-Django4-4.2.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 4, 2024
  • High max 7.8

    openssh-8.4p1-7.4 on GA media

    These are all security issues fixed in the openssh-8.4p1-7.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_102 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmap_mapping_range() and munmap() on VM_PFNMAP mappings leads to stale TLB entry (bsc#1203116). - …

    first Sep 30, 2022
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_61 fixes several issues. The following security issues were fixed: - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-41059: hfsplus: fix uninit-val…

    first Oct 15, 2024
  • High max 7.3

    perl-HTTP-Daemon-6.14-2.1 on GA media

    These are all security issues fixed in the perl-HTTP-Daemon-6.14-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.6

    rke-1.3.3-1.1 on GA media

    These are all security issues fixed in the rke-1.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    gvim-9.0.1538-1.1 on GA media

    These are all security issues fixed in the gvim-9.0.1538-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for grafana

    This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call (bsc#1183803) - Update to version 7.5.7: * Updated relref to 'Configuring exemplars' section (#34240) (…

    first Aug 13, 2021
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncation …

    first May 18, 2021
  • High max 7.5

    Security update for ruby2.5

    This update for ruby2.5 fixes the following issues: - Update to 2.5.9 - CVE-2021-28965: XML round-trip vulnerability in REXML (bsc#1184644)

    first Apr 20, 2021
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 114.0.5735.133 (boo#1212302): - CVE-2023-3214: Use after free in Autofill payments - CVE-2023-3215: Use after free in WebRTC - CVE-2023-3216: Type Confusion in V8 - CVE-2023-3217: Use after free in…

    first Jun 16, 2023
  • High max 7.8
    SUSE-SU-2025:0250-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_103 fixes one issue. The following security issue was fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).

    first Jan 27, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_120 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim(…

    first Apr 26, 2023
  • High max 7.5

    Security update for wicked

    This update for wicked fixes the following issues: - CVE-2019-18902: Fixed a use-after-free when receiving invalid DHCP6 client options (bsc#1160903). - CVE-2019-18903: Fixed a use-after-free when receiving invalid DHCP6 IA_PD option (bsc#1160904). - CVE-2020…

    first Feb 7, 2020
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351). - CVE-2021-3655: Fixed a missing size validations…

    first Nov 9, 2021
  • High max 8.2

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2025-31492: Fixed a bug where OIDCProviderAuthRequestMethod POSTs can leak protected data. (bsc#1240893)

    first Apr 16, 2025
  • High max 8.4

    libpcp-devel-5.2.2-3.4 on GA media

    These are all security issues fixed in the libpcp-devel-5.2.2-3.4 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    freetype2-devel-2.12.1-1.1 on GA media

    These are all security issues fixed in the freetype2-devel-2.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    golang-github-lusitaniae-apache_exporter-1.0.0-1.1 on GA media

    These are all security issues fixed in the golang-github-lusitaniae-apache_exporter-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2023:2428-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_60 fixes several issues. The following security issues were fixed: - CVE-2023-0386: Fixed privileges escalation for low-privileged users in the OverlayFS subsystem (bsc#1210499). - CVE-2023-2162: Fixed an use…

    first Jun 6, 2023
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940). Non-security issues fixed: - Fixed an issue where limiting the memory bandwidth was not possible (b…

    first May 29, 2020
  • High max 7.4

    Security update for libnbd

    This update for libnbd fixes the following issues: - CVE-2024-7383: Fixed incorrect verification of a NBD server's certificate when using TLS to connect to the server (bsc#1228872) Other fixes: - Update to version 1.18.5.

    first Aug 7, 2024
  • High max 8.1

    tealdeer-1.5.0+0-1.1 on GA media

    These are all security issues fixed in the tealdeer-1.5.0+0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    Security update for rpm

    This update for rpm fixes the following issues: These security issues were fixed: - CVE-2017-7500: rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbi…

    first Apr 27, 2019
  • High max 7.8
    SUSE-SU-2015:1255-1 2 CVEs 2 exploited

    Security update for flash-player

    flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute a…

    first Jul 16, 2015