Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.5

    python39-3.9.19-3.1 on GA media

    These are all security issues fixed in the python39-3.9.19-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2024
  • High max 7.5

    Recommended update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures, python-coverage, python-oniconfig, python-unittest-mixins

    This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency …

    first Aug 17, 2022
  • High max 7.8

    Security update for transfig

    This update for transfig fixes the following issues: Update to fig2dev version 3.2.9a - CVE-2025-46397: Fixed a stack buffer overflow in fig2dev in bezier_spline function (bsc#1243260). - CVE-2025-46398: Fixed a stack buffer overflow in fig2dev in read_object…

    first Jun 11, 2025
  • High max 8.6

    Security update for libgit2

    This update for libgit2 fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)

    first Jul 22, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_q…

    first Mar 16, 2023
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.103-6_33 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 11, 2018
  • High max 7.5
    openSUSE-SU-2024:13376-1 2 CVEs 1 exploited

    cmctl-1.13.2-1.1 on GA media

    These are all security issues fixed in the cmctl-1.13.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    MozillaThunderbird-102.1.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-102.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for libcap

    This update for libcap fixes the following issues: - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).

    first Jul 3, 2023
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.8.0 ESR (bsc#1197903): MFSA 2022-14 (bsc#1197903) * CVE-2022-1097: Fixed memory safety violations that could occur when PKCS#11 tokens are removed while in use * CV…

    first Apr 7, 2022
  • High max 7.4

    Security update for yelp-xsl

    This update for yelp-xsl fixes the following issues: - CVE-2025-3155: JavaScript code execution and arbitrary file read through specially crafted help files and ghelp scheme URLs (bsc#1240688).

    first Jun 27, 2025
  • High max 7.5

    Security update for go1.12

    This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset f…

    first Sep 14, 2019
  • High max 8.1

    Security update for samba

    This update for samba fixes the following issues: - CVE-2021-20251: Fixed an issue where the bad password count would not be properly incremented, which could allow attackers to brute force a user's password (bsc#1206546). - CVE-2022-37966: Fixed an issue whe…

    first Jan 26, 2023
  • High max 8.8

    postgresql16-16.4-1.1 on GA media

    These are all security issues fixed in the postgresql16-16.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237930)…

    first Sep 11, 2025
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel-azure was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-19531: Fixed a use-after-free due to a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05…

    first Dec 12, 2019
  • High max 7.7

    Security update for ldb, samba

    This update for ldb, samba fixes the following issues: ldb: - CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490). - CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485…

    first Mar 29, 2023
  • High max 7.8

    libwireshark18-4.4.1-1.1 on GA media

    These are all security issues fixed in the libwireshark18-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 11, 2024
  • High max 8.8

    postgresql12-12.18-1.1 on GA media

    These are all security issues fixed in the postgresql12-12.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).

    first Jan 19, 2023
  • High max 7.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.162 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in …

    first Nov 9, 2018
  • High max 7.1

    Security update for nginx

    This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526) - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527)

    first Feb 7, 2023
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed …

    first Sep 8, 2023
  • High max 7.5

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-prometheus-alertmanager: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208051) prometheus-blackbox_exporter: - Security issues fixed: * CVE-2022-46146: Fix …

    first May 11, 2023
  • High max 7.5

    Security update for python3

    This update for python3 fixes the following issues: Update to 3.6.12 (bsc#1179193), including: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) This update was imported from the SUSE:SLE-15:Update update project.

    first Dec 3, 2020
  • High max 8.8
    SUSE-SU-2022:3136-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • High max 8.7

    govulncheck-vulndb-0.0.20250204T220613-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250204T220613-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 5, 2025
  • High max 7.3

    Security update for libuv

    This update for libuv fixes the following issues: - CVE-2024-24806: Fixed improper Domain Lookup that potentially leads to SSRF attacks (bsc#1219724)

    first Nov 28, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_31 fixes one issue. The following security issue was fixed: - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059).

    first Jun 25, 2024
  • High max 7.5

    golang-github-prometheus-prometheus-2.46.0-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-2.46.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for liblouis

    This update for liblouis fixes the following issues: - CVE-2023-26768: Fixed buffer overflow in lou_logFile() (bsc#1209431).

    first Apr 13, 2023
  • High max 7.5

    govulncheck-vulndb-0.0.20250226T025151-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250226T025151-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2025
  • High max 7.4

    Security update for samba

    This update for samba fixes several issues. These security issues were fixed: - CVE-2017-12163: Prevent client short SMB1 write from writing server memory to file, leaking information from the server to the client (bsc#1058624). - CVE-2017-12150: Always enfor…

    first Nov 10, 2017
  • High max 8.8

    nodejs-electron-29.4.3-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-29.4.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2024
  • High max 8.8

    Security update for mercurial

    This update for mercurial fixes the following issues: Security issues fixed: - CVE-2016-3105: Versionsprior to 3.8 allowed arbitrary code execution when using the convert extension on Git repo. (bsc#978391)

    first May 30, 2016
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. (bsc#1214099) - CVE-2022-40982: Fixed a potential security vulnerability in some Intel� Processors which may allow information disclosure. - CVE-2023-23…

    first Aug 23, 2023
  • High max 7.5

    Security update for python-pyxdg

    This update for python-pyxdg fixes the following issues: - CVE-2019-12761: Fixed a code injection issue in Category elements of a Menu XML (bsc#1137627).

    first Sep 2, 2022
  • High max 7.1

    Security update for podman

    This update for podman fixes the following issues: - CVE-2022-2989: Fixed possible information disclosure and modification (bsc#1202809).

    first Oct 31, 2022
  • High max 7.5

    Security update for python-waitress

    This update for python-waitress fixes the following issues: - CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. (bsc#1197255)

    first Oct 25, 2022
  • High max 7.5

    Security update for cups-filters

    This update for cups-filters fixes the following issues: - cups-browsed would bind on UDP INADDR_ANY:631 and trust any packet from any source to trigger a Get-Printer-Attributes IPP request to an attacker controlled URL. This patch removes support for the leg…

    first Oct 17, 2024