Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.0

    libecpg6-16.2-1.1 on GA media

    These are all security issues fixed in the libecpg6-16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.103-92_56 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in …

    first Jun 5, 2018
  • High max 7.5

    strongswan-5.9.0-1.9 on GA media

    These are all security issues fixed in the strongswan-5.9.0-1.9 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-3389: F…

    first Jul 13, 2023
  • High max 7.3

    Security update for pam_u2f

    This update for pam_u2f fixes the following issues: - CVE-2025-23013: Fixed problematic PAM_IGNORE return values in `pam_sm_authenticate()` (bsc#1233517)

    first Jan 17, 2025
  • High max 8.8

    Security update for buildah

    This update for buildah fixes the following issues: buildah was updated to version 1.23.1: Update to version 1.22.3: * Update dependencies * Post-branch commit * Accept repositories on login/logout Update to version 1.22.0: * c/image, c/storage, c/common vend…

    first Mar 9, 2022
  • High max 7.8
    SUSE-SU-2022:0370-1 11 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - C…

    first Feb 11, 2022
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460, bsc#1228574) - CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461, bsc#1228575) Other fixes: - Update to X…

    first Sep 3, 2024
  • High max 7.7

    Security update for openldap2

    This update for openldap2 fixes the following issues: - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAP_CONFIG_BACKEND='ldap' was used (bsc#1172698).

    first Jul 6, 2020
  • High max 8.8
    SUSE-SU-2020:1135-1 30 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potenti…

    first Apr 29, 2020
  • High max 7.5

    xstream-1.4.19-1.1 on GA media

    These are all security issues fixed in the xstream-1.4.19-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).

    first Sep 9, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_34 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a …

    first Mar 17, 2021
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: Security issue fixed: - CVE-2020-1983: Fixed a use-after-free in the ip_reass function of slirp (bsc#1170940). Non-security issue fixed: - Fixed an issue where limiting the memory bandwidth was not possible (bs…

    first Jun 2, 2020
  • High max 8.8

    Security update for chromium

    This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflo…

    first Dec 8, 2017
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped tw…

    first Sep 15, 2022
  • High max 7.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 rt-kernel was updated to 3.12.69 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8962: Fixed a double free vulnerability in the SCSI subsystem that allowed local users to gain privilege…

    first Feb 6, 2017
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_108 fixes one issue. The following security issue was fixed: - CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219296).

    first Apr 12, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_173 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…

    first Oct 22, 2025
  • High max 8.8
    openSUSE-SU-2021:1096-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.277: - DNA-94291 Video conference popout doesnt remember its size after resizing - DNA-94399 Incorrect icon for wp.pl in address bar dropdown - DNA-94462 Low quality of default wall…

    first Aug 5, 2021
  • High max 8.0
    SUSE-SU-2019:3246-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_28 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privile…

    first Dec 11, 2019
  • High max 7.4

    java-21-openjdk-21.0.2.0-1.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for salt

    This update for salt fixes the following issues: - CVE-2021-21996: Exclude the full path of a download URL to prevent injection of malicious code. (bsc#1190265)

    first Oct 27, 2021
  • High max 8.8

    Security update for phpMyAdmin

    This update for phpMyAdmin to version 4.8.0.1 fixes the following issues: - CVE-2018-10188: Possible execution of arbitrary SQL statements via manipulated URLs (boo#1090309) This version also contains a number of upstream changes, improvements, new functions …

    first Apr 23, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). - CVE-2024-40954: net: do not leave a dangling sk …

    first Oct 16, 2024
  • High max 7.5

    Recommended update for postgresql, postgresql10, postgresql12

    This update for postgresql, postgresql10, postgresql12 fixes the following issues: Changes in the postgresql wrapper package: - Sync ownership of /run/postgresql in the file list with tmpfiles. - Use the correct content for .bash_profile (bsc#1153168). - Stop…

    first May 14, 2020
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2021-3638: hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609) - CVE-2023-3180: virtio-crypto: verify src and dst buffer length for sym request (bsc#1213925) - CVE-2023-3354: io: remove io …

    first Dec 6, 2023
  • High max 7.4

    Security update for redis7

    This update for redis7 fixes the following issues: - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193). - CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548). - CVE-2022-36021: Fixed integer overflow via Spec…

    first Jul 20, 2023
  • High max 8.8

    chromedriver-106.0.5249.91-1.1 on GA media

    These are all security issues fixed in the chromedriver-106.0.5249.91-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for SUSE Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security fixes on Python 3.11 interpreter: * CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with backslashes (bsc#1229873, bsc#1230059) * CVE-2024-8088: Prevent malformed …

    first Nov 18, 2024
  • High max 7.5

    Security update for iperf

    This update for iperf fixes the following issues: - Update to version 3.18 - CVE-2024-53580: Fixed a segmentation violation via the iperf_exchange_parameters() function. (bsc#1234705)

    first Jan 29, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_125 fixes one issue. The following security issue was fixed: - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210989).

    first Jun 29, 2023
  • High max 7.5

    trivy-0.28.0-1.1 on GA media

    These are all security issues fixed in the trivy-0.28.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:3626-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…

    first Sep 15, 2023
  • High max 8.8
    openSUSE-SU-2024:12547-1 1 CVE 1 exploited

    chromedriver-108.0.5359.94-1.1 on GA media

    These are all security issues fixed in the chromedriver-108.0.5359.94-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239).

    first Sep 3, 2020
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2022-49025: net/mlx5e: Fix use-after-free when reverting termination table (bsc#1233023). - CVE-2024-41062: Sync sock recv cb and relea…

    first Apr 3, 2025
  • High max 7.5

    Security update for python-Flask

    This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching (bsc#1211246).

    first Jul 20, 2023
  • High max 8.6

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM file parser (bsc#1199242). - CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the scan verdict cache check (bsc#1199…

    first May 12, 2022
  • High max 8.8

    Security update for tiff

    This update for tiff fixes the following issues: - A crafted TIFF image could cause a crash and potential code execution when processed by the 'tiffcp' utility (CVE-2017-5225, bsc#1019611). Also a regression from the version update to 4.0.7 was fixed in handl…

    first Feb 13, 2017