Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.0

    Security update for the Linux Kernel (Live Patch 24 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_92 fixes one issue. The following security issue was fixed: - CVE-2018-10853: A KVM guest userspace to guest kernel write was fixed, which could be used by guest users to crash the guest kernel (bsc#1097108).

    first Sep 11, 2018
  • High max 7.4

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521). This update was imported from the SUSE:SLE-15:Update update pro…

    first Sep 14, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes one issue. The following security issue was fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255).

    first Feb 7, 2024
  • High max 8.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication (bsc#1256399).

    first Jan 23, 2026
  • High max 7.8

    Security update for go1.18-openssl

    This update for go1.18-openssl fixes the following issues: - Add subpackage go1.x-libstd compiled shared object libstd.so (jsc#PED-1962) * Main go1.x package included libstd.so in previous versions * Split libstd.so into subpackage that can be installed stand…

    first May 30, 2023
  • High max 7.5

    Security update for libheimdal

    This update for libheimdal fixes the following issues: libheimdal was updated to version 7.7.0: + Bug fixes: - PKCS#11 hcrypto back-end: + initialize the p11_module_load function list + verify that not only is a mechanism present but that its mechanism info s…

    first Jul 1, 2019
  • High max 7.8

    ffmpeg-4-4.4.4-10.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.4-10.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7

    Security update for kubernetes1.23

    This update for kubernetes1.23 fixes the following issues: - CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400). - CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493). - CVE-2024-0793: Advance au…

    first Aug 13, 2025
  • High max 7.7

    python310-python3-saml-1.15.0-2.3 on GA media

    These are all security issues fixed in the python310-python3-saml-1.15.0-2.3 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kerne…

    first Oct 10, 2023
  • High max 7.4

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.27+6 (April 2025 CPU) CVEs: + CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data (bsc#1241274) + CVE-2025-30691: Fixed Oracle J…

    first Jun 16, 2025
  • High max 8.4

    Security update for libgsf

    This update for libgsf fixes the following issues: - CVE-2024-42415, CVE-2024-36474: Fixed integer overflows affecting memory allocation (bsc#1231282, bsc#1231283).

    first Nov 6, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1215118). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network sc…

    first Oct 25, 2023
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_116 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437). - CVE-2020-12653: Fixed …

    first Jun 26, 2020
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2025-46701: Refactored CGI servlet to access resources via WebResources (bsc#1243815). - CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers prov…

    first Jul 3, 2025
  • High max 8.3

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157) * Security fixes: + JDK-8230613: Better ASCII conversions + JDK-8231800: Better listing of arrays + JDK-8232014: Expand DTD support…

    first Aug 6, 2020
  • High max 7.5

    java-11-openjdk-11.0.15.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    Security update for virtualbox

    This update for virtualbox fixes the following issues: - Remove package virtualbox-guest-x11, which is no longer needed. - Fix screen resizing under Wayland (boo#1194126 and boo#1194126) Version bump to 6.1.36 released by Oracle July 19 2022 This is a mainten…

    first Sep 16, 2022
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2020-8286: Fixed improper OSCP verification in the client side (bsc#1179593). - CVE-2020-8285: Fixed a stack overflow due to FTP wildcard (bsc#1179399). - CVE-2020-8284: Fixed an issue where a malicius FT…

    first Dec 13, 2020
  • High max 8.2

    Security update for xerces-c

    This update for xerces-c fixes the following issues: - CVE-2023-37536: Fixed an integer overflow that could have led to a out-of-bounds memory accesses (bsc#1216156).

    first Dec 11, 2023
  • High max 8.8
    SUSE-SU-2023:2606-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web …

    first Jun 22, 2023
  • High max 7.8
    SUSE-SU-2022:0766-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mit…

    first Mar 9, 2022
  • High max 8.5

    Security update for udisks2

    This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon (bsc#1248502)

    first Aug 29, 2025
  • High max 8.8
    SUSE-SU-2022:3775-1 17 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514) - CVE-2022-316…

    first Oct 26, 2022
  • High max 7.8

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2017-0358: Missing sanitization of the environment during a call to modprobe allowed local users to escalate fo root privilege (bsc#1022500)

    first Oct 31, 2018
  • High max 8.2

    Security update for liboqs, oqs-provider

    This update for liboqs, oqs-provider fixes the following issues: This update supplies the new FIPS standardized ML-KEM, ML-DSA, SHL-DSA algorithms. This update liboqs to 0.12.0: - This release updates the ML-DSA implementation to the [final FIPS 204](https://…

    first Jan 2, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_170 fixes one issue. The following security issue was fixed: - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

    first Sep 11, 2025
  • High max 8.4

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: - Update Intel Wireless firmware for 9xxx (CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166, CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173, CVE-2021-0174,CVE-2021-0175…

    first Mar 4, 2022
  • High max 7.5

    Security update for jakarta-commons-fileupload

    This update for jakarta-commons-fileupload fixes the following issues: - CVE-2016-3092: Fixed a usage of vulnerable FileUpload package can result in denial of service (bsc#986359). - CVE-2023-24998: Fixed a FileUpload deny of service with excessive parts (bsc…

    first Mar 16, 2023
  • High max 8.8
    SUSE-SU-2016:0716-1 23 CVEs 1 exploited

    Security update for flash-player

    Adobe flash-player was updated to 11.2.202.577 to fix the following list of security issues (bsc#970547): These updates resolve integer overflow vulnerabilities that could lead to code execution (CVE-2016-0963, CVE-2016-0993, CVE-2016-1010). These updates res…

    first Mar 11, 2016
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976). - CVE-2021-47113: Abort btrfs rename_exchange if w…

    first May 14, 2024
  • High max 8.8

    Security update for libxslt

    This update for libxslt fixes the following issues: - CVE-2017-5029: The xsltAddTextString function in transform.c lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a cr…

    first May 16, 2017
  • High max 8.1

    nodejs-electron-28.2.10-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-28.2.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    tomcat-9.0.75-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.75-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for gssntlmssp

    This update for gssntlmssp fixes the following issues: Update to version 1.2.0 * Implement gss_set_cred_option. * Allow to gss_wrap even if NEGOTIATE_SEAL is not negotiated. * Move HMAC code to OpenSSL EVP API. * Fix crash bug when acceptor credentials are NU…

    first Feb 18, 2023
  • High max 7.5

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - Update to version 1.4.4.20~git3.e7ac6d87: - CVE-2024-3657: DOS via via specially crafted kerberos AS-REQ request. (bsc#1225512) - CVE-2024-5953: Malformed userPassword hashes may cause a denial of service. …

    first Sep 16, 2024
  • High max 7.5

    ruby3.4-rubygem-http-cookie-1.0.8-1.1 on GA media

    These are all security issues fixed in the ruby3.4-rubygem-http-cookie-1.0.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 6, 2025
  • High max 7.5

    python311-3.11.0-2.1 on GA media

    These are all security issues fixed in the python311-3.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 38 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_146 fixes several issues. The following security issues were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an auth…

    first Oct 22, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 56 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_201 fixes one issue. The following security issue was fixed: - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648).

    first Jul 21, 2025