Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.5

    Security update for pidgin

    This update for pidgin fixes the following issues: The following security vulnerability was fixed: - CVE-2017-2640: Fixed an out of bound write in purple_markup_unescape_entity, which could be triggered by a server controlled by an attacker and could lead to …

    first Aug 7, 2018
  • High max 7.5

    Security update for openssl1

    This update for openssl1 fixes the following issues: - CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).

    first Apr 4, 2023
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-38177: Fixed a memory leak that could be externally tri…

    first Oct 4, 2022
  • High max 7.8

    Security update for nvidia-open-driver-G06-signed

    This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access to memory outside bounds permitted under normal use cases in NVIDIA Display Driver (bsc#1247528). - CVE-2025-23278: Fix…

    first Sep 17, 2025
  • High max 7.5
    openSUSE-SU-2024:11832-1 2 CVEs 1 exploited

    ruby3.1-rubygem-railties-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-railties-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2019:2421-1 2 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio

    first Nov 2, 2019
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: Update to 9.16.50: - Bug Fixes: * A regression in cache-cleaning code enabled memory use to grow significantly more quickly than before, until the configured max-cache-size limit was reached. This has been fixe…

    first Aug 9, 2024
  • High max 7.5

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239197)

    first Mar 14, 2025
  • High max 7.8

    Security update for curl

    This update for curl fixes the following issues: - CVE-2020-8177: Fixed an issue where curl could have been tricked by a malicious server to overwrite a local file when using the -J option (bsc#1173027).

    first Jun 24, 2020
  • High max 8.8

    Recommended update for NetworkManager-vpnc

    This update for NetworkManager-vpnc fixes the following issues: Security issue fixed: - CVE-2018-10900: Check configurations that contain newline characters and invalidate them to avoid security attacks (bsc#1101147).

    first Aug 10, 2018
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).

    first Feb 7, 2023
  • High max 8.8

    Security update for webkit2gtk3

    Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user inte…

    first Nov 29, 2022
  • High max 8.1

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2016-3092: Usage of vulnerable FileUpload package can result in denial of service. (bsc#986359) - CVE-2016-5388: Setting HTTP_PROXY environment variable via Proxy header. (bsc#988489)

    first Aug 30, 2016
  • High max 8.8

    chromedriver-128.0.6613.119-1.1 on GA media

    These are all security issues fixed in the chromedriver-128.0.6613.119-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 5, 2024
  • High max 7.5

    Security update for salt

    This update for salt fixes the following issues: - Support querying for JSON data in external sql pillar. - Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265, CVE-2021-21996) This update was imported from the SUSE:SL…

    first Nov 2, 2021
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation - CVE-2022-1529: Untrusted input used in JavaScript obj…

    first May 24, 2022
  • High max 8.8

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.45 bsc#1038505 - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in inftrees.c - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in inffast.c - CVE-2016-9842: zl…

    first May 23, 2017
  • High max 8.3
    SUSE-SU-2021:2407-1 5 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …

    first Jul 20, 2021
  • High max 8.8

    postgresql12-12.21-1.1 on GA media

    These are all security issues fixed in the postgresql12-12.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_154 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…

    first Sep 29, 2023
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2024-31080: Fixed ProcXIGetSelectedEvents to use unswapped length (bsc#1222309). - CVE-2024-31081: Fixed ProcXIPassiveGrabDevice to use unswapped length to send reply (bsc#1222310). - CVE-2024-…

    first Apr 12, 2024
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-0494: Fixed a use-after-free in DeepCopyPointerClasses (bsc#1207783).

    first Feb 7, 2023
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: - Amended documentation referring to rule types 'krb5-subdomain' and 'ms-subdomain'. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive t…

    first Jul 15, 2020
  • High max 8.8

    chromedriver-131.0.6778.139-1.1 on GA media

    These are all security issues fixed in the chromedriver-131.0.6778.139-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 13, 2024
  • High max 7.8
    SUSE-SU-2025:0893-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 17, 2025
  • High max 8.8

    Security update for bluez

    This update for bluez fixes the following issues: - CVE-2019-8922: Fixed a buffer overflow in the implementation of the Service Discovery Protocol (bsc#1193227).

    first Aug 22, 2022
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239). This update was imported from the SUSE:SLE-15:Update update project.

    first Sep 7, 2020
  • High max 8.1

    zram-generator-1.1.1~git5.8612dbb-1.1 on GA media

    These are all security issues fixed in the zram-generator-1.1.1~git5.8612dbb-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for ruby2.5

    This update for ruby2.5 to version 2.5.8 fixes the following issues: - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON (bsc#1167244). - CVE-2020-10933: Heap exposure vulnerability in the socket library (bsc#1168938). This update was imported from…

    first May 1, 2020
  • High max 8.5

    Security update for postgresql94

    This update for postgresql94 to 9.4.19 fixes the following security issue: - CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with 'host' or 'hostaddr' connection parameters from u…

    first Nov 26, 2018
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_138 fixes several issues. The following security issues were fixed: - CVE-2024-0565: Fixed an out-of-bounds memory read flaw in receive_encrypted_standard in fs/smb/client/smb2ops.c (bsc#1219078). - CVE-2023-5…

    first Apr 11, 2024
  • High max 7.5

    Security update for python3-numpy

    This update for python3-numpy fixes the following issues: - CVE-2021-41495: missing return value validation can lead to null pointer dereference. (bsc#1193911) Other bug fixes: - Correction of advance in PCG with emulated int128.

    first Feb 11, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following new features were implemented: - jsc#SLE-4875: [CML] New device IDs for CML - jsc#SLE-7294: Add cpufreq driver for Raspberry Pi - fate#322438: Integrat…

    first Sep 20, 2019
  • High max 7.5

    docker-24.0.5_ce-2.1 on GA media

    These are all security issues fixed in the docker-24.0.5_ce-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989). - CVE-2023-28466: Fi…

    first Jun 29, 2023
  • High max 7.5

    python39-3.9.13-1.1 on GA media

    These are all security issues fixed in the python39-3.9.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - …

    first Nov 17, 2023
  • High max 8.2

    Security update for ardana-neutron, ardana-swift, cassandra, crowbar-openstack, grafana, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, rubygem-activerecord-session_store, venv-openstack-keystone

    This update for ardana-neutron, ardana-swift, cassandra, crowbar-openstack, grafana, kibana, openstack-dashboard, openstack-ironic, openstack-neutron, openstack-neutron-gbp, openstack-nova, python-Django1, python-py, python-pysaml2, python-xmlschema, rubygem-…

    first Jun 11, 2021
  • High max 8.1

    Security update for libzypp, zypper

    This update for libzypp, zypper provides the following fixes: libzypp security fixes: - CVE-2018-7685: Validate RPMs before caching (bsc#1091624, bsc#1088705) - CVE-2017-9269: Be sure bad packages do not stay in the cache (bsc#1045735) - CVE-2017-7435, CVE-20…

    first Aug 30, 2018
  • High max 7.5

    Security update for nginx

    This update for nginx fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed a denial of service by manipulating the window size and stream prioritization (bsc#1145579). - CVE-2019-9513: Fixed a denial of service caused by resource loops (b…

    first Oct 6, 2019