Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.5

    Security update for strongswan

    This update for strongswan fixes the following issues: Security issues fixed: - CVE-2018-5388: Fixed a buffer underflow which may allow to a remote attacker with local user credentials to resource exhaustion and denial of service while reading from the socket…

    first Nov 30, 2019
  • High max 8.1

    python3-bandit-1.7.6-1.1 on GA media

    These are all security issues fixed in the python3-bandit-1.7.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for osc

    This update for osc to version 0.165.4 fixes the following issues: Security issue fixed: - CVE-2019-3685: Fixed broken TLS certificate handling allowing for a Man-in-the-middle attack (bsc#1142518). Non-security issues fixed: - support different token operati…

    first Aug 12, 2019
  • High max 7.5

    Security update for python-Pygments

    This update for python-Pygments fixes the following issues: - CVE-2021-20270: Fixed an infinite loop in the SML lexer (bsc#1183169). This update was imported from the SUSE:SLE-15-SP1:Update update project.

    first Oct 31, 2021
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2019-20388: Fixed a memory leak in xmlSchemaPreRun (bsc#1161521). - CVE-2019-19956: Fixed a memory leak (bsc#1159928). - CVE-2020-7595: Fixed an infinite loop in an EOF situation (bsc#1161517).

    first May 18, 2020
  • High max 7.5

    libmariadbd-devel-10.9.3-1.1 on GA media

    These are all security issues fixed in the libmariadbd-devel-10.9.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_161 fixes several issues. The following security issues were fixed: - CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650). - CVE-2025-38477: net/sched: sch_qfq: Fix race…

    first Oct 13, 2025
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed GStreamer SRT File Parsing Heap-based Buffer Overflow (bsc#1213126).

    first Nov 26, 2023
  • High max 7.8
    SUSE-SU-2024:1406-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_31 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 23, 2024
  • High max 8.6

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2024-1753: Fixed an issue to prevent a full container escape at build time. (bsc#1221677) - Update to version 1.34.1 for compatibility with Docker 25.0 (which is not in SLES yet, but will eventually be…

    first Apr 8, 2024
  • High max 7.5

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2022-3996: Fixed X.509 Policy Constraints Double Locking (bsc#1206374)

    first Dec 20, 2022
  • High max 7.5

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - CVE-2024-22201: Fixed denial-of-service via HTTP/2 connection leak (bsc#1220437).

    first Mar 8, 2024
  • High max 8.8

    buildah-1.23.0-1.1 on GA media

    These are all security issues fixed in the buildah-1.23.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20231114 pre-release (labeled 20231113). (bsc#1215278) - CVE-2023-23583: Fixed potential CPU deadlocks or privilege escalation. (bsc#1215278)

    first Nov 14, 2023
  • High max 7.5

    Security update for podman, slirp4netns and libcontainers-common

    This is a version update for podman to version 1.4.4 (bsc#1143386). Additional changes by SUSE on top: - Remove fuse-overlayfs because it's (currently) an unsatisfied dependency on SLE (bsc#1143386) - Update libpod.conf to use correct infra_command - Update l…

    first Sep 1, 2019
  • High max 7.8

    Security update for libcroco

    This update for libcroco fixes the following issues: Security issues fixed: - CVE-2017-7960: Fixed heap overflow (input: check end of input before reading a byte) (bsc#1034481). - CVE-2017-7961: Fixed undefined behavior (tknzr: support only max long rgb value…

    first Jun 12, 2019
  • High max 8.8

    bcm43xx-firmware-20180314-14.1 on GA media

    These are all security issues fixed in the bcm43xx-firmware-20180314-14.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2023-6377: Fixed out-of-bounds memory write in XKB button actions (bsc#1217765).

    first Dec 20, 2023
  • High max 8.1

    Security update for libzypp, zypper

    This update for libzypp, zypper fixes the following issues: libzypp security fixes: - PackageProvider: Validate delta rpms before caching (bsc#1091624, bsc#1088705, CVE-2018-7685) - PackageProvider: Validate downloaded rpm package signatures before caching (b…

    first Sep 11, 2018
  • High max 8.7

    python-onionshare-2.5-1.1 on GA media

    These are all security issues fixed in the python-onionshare-2.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages …

    first Nov 11, 2025
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and exe…

    first Oct 4, 2023
  • High max 7.5

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).

    first Mar 30, 2022
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issue: - CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Jan 13, 2021
  • High max 8.2

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2023-6931: Fixed an out of…

    first Jun 21, 2024
  • High max 7.5

    Security update for ruby2.5

    This update for ruby2.5 fixes the following issues: - CVE-2021-41819: Fixed cookie prefix spoofing in CGI::Cookie.parse (bsc#1193081).

    first Sep 16, 2022
  • High max 7.5

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2024-24814: Fixed a denial of service when using `OIDCSessionType client-cookie` and manipulating cookies (bsc#1219911).

    first Mar 5, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc …

    first May 13, 2021
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2024-22563: Fixed memory leak via the function xmalloc__ in /lib/util.c (bsc#1219059).

    first Feb 17, 2024
  • High max 8.1

    Security update for expat

    This update for expat fixes the following issues: - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438).

    first Oct 1, 2022
  • High max 7.5

    Security update for openssl

    This update for openssl fixes the following issues: OpenSSL Security Advisory [22 Sep 2016] (bsc#999665) Severity: High * OCSP Status Request extension unbounded memory growth (CVE-2016-6304) (bsc#999666) Severity: Low * Pointer arithmetic undefined behaviour…

    first Sep 27, 2016
  • High max 8.5

    postgresql10-10.18-1.3 on GA media

    These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:3233-1 12 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…

    first Aug 8, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_174 fixes several issues. The following security issues were fixed: - CVE-2022-49014: net: tun: Fix use-after-free in tun_detach() (bsc#1232818). - CVE-2022-49563: crypto: qat - add param check for RSA (bsc#12…

    first Apr 14, 2025
  • High max 8.8

    Security update for the Linux Kernel

    The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-29568: An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch ev…

    first Jan 16, 2021
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_29 fixes one issue. The following security issue was fixed: - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239077).

    first Jun 9, 2025
  • High max 7.8

    kernel-devel-6.8.9-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.8.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-2004: Fix the uUsage of disabled protocol logic. (bsc#1221665) - CVE-2024-2398: Fix HTTP/2 push headers memory-leak. (bsc#1221667)

    first Apr 5, 2024
  • High max 7.5
    SUSE-SU-2016:0599-1 1 CVE 1 exploited

    Security update for rubygem-actionview-4_1

    This update for rubygem-actionview-4_1 fixes the following issues: - CVE-2016-0752: directory traversal and information leak in Action View (bsc#963332)

    first Feb 26, 2016
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_37 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly pri…

    first Nov 6, 2020