Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-4563: Fixed an use-after-free flaw in the nftables sub-component. This vulnerability could allow a local att…

    first Oct 12, 2023
  • High max 8.8

    Security update for pacemaker

    This update for pacemaker fixes the following issues: - CVE-2018-16877: Fixed an issue with insufficient local IPC client-server authentication on the client's side (bsc#1131356). - CVE-2018-16878: Fixed a denial of service related to insufficient verificatio…

    first Apr 22, 2020
  • High max 7.5

    bind-9.18.7-1.1 on GA media

    These are all security issues fixed in the bind-9.18.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2022:0189-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

    first Jan 25, 2022
  • High max 7.5

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: - CVE-2023-44271: Fixed uncontrolled resource consumption when textlength in an ImageDraw instance operates on a long text argument (bsc#1216894).

    first Nov 22, 2023
  • High max 7.5
    SUSE-SU-2023:4069-1 2 CVEs 1 exploited

    Security update for go1.21

    This update for go1.21 fixes the following issues: - Update to go1.21.3 (bsc#1212475) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109)

    first Oct 13, 2023
  • High max 7.8

    Security update for MozillaFirefox, MozillaFirefox-branding-SLE

    This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR * New: - Required fields are now highlighted in …

    first Jul 19, 2023
  • High max 8.2

    Security update for rubygem-nokogiri

    This update for rubygem-nokogiri fixes the following issues: - CVE-2022-24836: Fixes possibility to DoS because of inefficient RE in HTML encoding. (bsc#1198408) - CVE-2022-29181: Fixes Improper Handling of Unexpected Data Typesi. (bsc#1199782)

    first Nov 16, 2022
  • High max 7.8

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2022-40284: Fixed incorrect validation of some of the NTFS metadata that could cause buffer overflow (bsc#1204734).

    first Nov 3, 2022
  • High max 7.5

    Security update for java-1_7_1-ibm

    This update for java-1_7_1-ibm fixes the following issues: Security issue fixed: - CVE-2016-2183: The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billio…

    first Mar 17, 2017
  • High max 7.8

    xorg-x11-server-21.1.7-2.1 on GA media

    These are all security issues fixed in the xorg-x11-server-21.1.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2021-27803: P2P provision discovery processing vulnerability (bsc#1182805)

    first Mar 9, 2021
  • High max 8.6

    Security update for buildah

    This update for buildah fixes the following issues: Update to version 1.35.4: * CVE-2024-3727 updates (bsc#1224117) * Bump go-jose CVE-2024-28180 * Bump ocicrypt and go-jose CVE-2024-28180 Update to version 1.35.3: * correctly configure /etc/hosts and resolv.…

    first Sep 10, 2024
  • High max 7.5

    Security update for libmicrohttpd

    This update for libmicrohttpd fixes the following issues: - CVE-2025-59777: Fixed NULL pointer dereference via specially crafted packet sent by an attacker (bsc#1253177) - CVE-2025-62689: Fixed heap-based buffer overflow via specially crafted packet sent by a…

    first Nov 28, 2025
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - Fixed a possible denial of service vulnerability (affected only configurations using both DNS64 and RPZ, CVE-2017-3135, bsc#1024130)

    first Mar 2, 2017
  • High max 8.8

    nodejs-electron-28.2.5-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-28.2.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed …

    first Jul 10, 2021
  • High max 7.7

    libtiff-devel-32bit-4.5.0-1.1 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-py

    This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505).

    first Jul 2, 2021
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239).

    first Dec 1, 2020
  • High max 7.5

    cri-o-1.22.0-1.2 on GA media

    These are all security issues fixed in the cri-o-1.22.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.3

    pam_u2f-1.3.1-1.1 on GA media

    These are all security issues fixed in the pam_u2f-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 15, 2025
  • High max 8.8

    Security update for gstreamer-plugins-ugly

    This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks (bsc#1213751). - CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks (bsc#1213750).

    first Aug 7, 2023
  • High max 8.8
    SUSE-SU-2022:0703-1 15 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A…

    first Mar 3, 2022
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata block…

    first Dec 2, 2024
  • High max 8.8

    tmux-3.2a-1.2 on GA media

    These are all security issues fixed in the tmux-3.2a-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3

    Security update for spice

    This update for spice fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling (bsc#1104448) - CVE-2018-10893: Fixed a buffer overflow on image lz checks (bsc#1101295)

    first Dec 16, 2020
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 130.0.6723.116 (boo#1232843) - CVE-2024-10826: Use after free in Family Experiences - CVE-2024-10827: Use after free in Serial

    first Nov 8, 2024
  • High max 8.8

    ungoogled-chromium-118.0.5993.117-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-118.0.5993.117-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.4

    cargo-audit-advisory-db-20221102-1.1 on GA media

    These are all security issues fixed in the cargo-audit-advisory-db-20221102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007) - CVE-2024-8354: Fixed assertion failure in usb_ep_get() in usb (bsc#1230834) - CVE-2…

    first Dec 12, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an…

    first Aug 17, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_112 fixes several issues. The following security issues were fixed: - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() …

    first Apr 26, 2023
  • High max 7.4

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Updated to version jdk8u372 (icedtea-3.27.0): - CVE-2023-21930: Fixed an issue in the JSSE component that could allow an attacker to access critical data without authorization (bsc#1210628). - C…

    first May 18, 2023
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 11 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.74-92_32 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 5, 2018
  • High max 7.5

    istioctl-1.22.3-1.1 on GA media

    These are all security issues fixed in the istioctl-1.22.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 17, 2024
  • High max 8.8
    SUSE-SU-2023:2065-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…

    first Apr 28, 2023
  • High max 7.5

    Security update for libxslt

    This update for libxslt fixes the following issues: Security issues fixed: - CVE-2019-13118: Fixed a read of uninitialized stack data (bsc#1140101). - CVE-2019-13117: Fixed a uninitialized read which allowed to discern whether a byte on the stack contains cer…

    first May 25, 2020
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 26 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_89 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present i…

    first Aug 16, 2018
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-6932: Fixed a use-after-free vulnerability in the ipv4 igmp component that could lead to local privilege escalation (bsc#1218255). - …

    first Feb 7, 2024