Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.8

    Security update for amanda

    This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c [boo#1213701]

    first Aug 4, 2023
  • High max 7.5

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2019-20916: Fixed a directory traversal in _download_http_url (bsc#1176262)

    first Sep 21, 2020
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.82-6_6 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in t…

    first Aug 17, 2018
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. (bsc#1214099) - CVE-2022-40982: Fixed a potential security vulnerability in some Intel� Processors which may allow information disclosure. - CVE-2023-23…

    first Aug 11, 2023
  • High max 7.5

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 3.6.1: - CVE-2021-4185: RTMPT dissector infinite loop (bsc#1194166) - CVE-2021-4184: BitTorrent DHT dissector infinite loop (bsc#1194167) - CVE-2021-4183: pcapng file parser crash (bsc#11…

    first Feb 14, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_74 fixes several issues. The following security issues were fixed: - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). - CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() …

    first Jun 21, 2024
  • High max 7.5

    Security update for systemd

    This update for systemd fixes the following issues: * Fix security vulnerabilities CVE-2018-16864 and CVE-2018-16865 (bsc#1120323): Both issues were memory corruptions via attacker-controlled alloca which could have been used to gain root privileges by a loca…

    first Jan 9, 2019
  • High max 7.5

    kubeseal-0.17.4-1.1 on GA media

    These are all security issues fixed in the kubeseal-0.17.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    java-17-openjdk-17.0.3.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    Security update for cups-filters

    This update for cups-filters fixes the following issues: - CVE-2024-47850: cups-browsed can be abused to initiate remote DDoS against third-party targets (bsc#1231294) - CVE-2024-47076: Fixed lack of input sanitization in cfGetPrinterAttributes5 (bsc#1230937).

    first Nov 1, 2024
  • High max 8.6

    Security update for gstreamer

    This update for gstreamer fixes the following issues: - CVE-2024-47606: Avoid integer overflow when allocating sysmem. (bsc#1234449).

    first Jan 10, 2025
  • High max 7.5

    Security update for kubernetes1.24

    This update of kubernetes1.24 fixes the following issues: - rebuild the package with the current go 1.23 security release (bsc#1229122).

    first Oct 4, 2024
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834). - CVE-2024-8612: Fixed nformation leak in virtio devices (bsc#1230915). - CVE-2024-7409: Fixed denial of service via improper synchronizat…

    first Nov 8, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_5 fixes several issues. The following security issues were fixed: - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-40909: bpf: Fix a potential use-a…

    first Oct 15, 2024
  • High max 8.0

    Security update for freerdp

    This update for freerdp fixes the following issues: frerdp was updated to version 2.1.2 (bsc#1171441,bsc#1173247 and jsc#ECO-2006): - CVE-2020-11017: Fixed a double free which could have denied the server's service. - CVE-2020-11018: Fixed an out of bounds re…

    first Jul 29, 2020
  • High max 8.8

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617) - CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958) - CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615) - CVE-2024…

    first Feb 19, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - - CVE-2023-33952: Fixed a vmwgfx Driver Double Free Local Privilege Escalation Vulnerability (bsc#1212348). - CVE-2023-35788: Fixed an out-of-…

    first Aug 1, 2023
  • High max 7.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2023-0330: Fixed a stack overflow due to a DMA reentrancy issue. (bsc#1207205) - CVE-2023-3354: Fixed a remote unauthenticated DoS due to an improper I/O watch removal in VNC TLS handshake. (bsc#1212850) …

    first Aug 28, 2023
  • High max 7.8
    openSUSE-SU-2022:0768-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 9, 2022
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-1087: And an unprivileged KVM guest user could use this flaw to potentially escalate their privileges inside …

    first May 11, 2018
  • High max 7.5

    libcontainers-common-20210626-5.1 on GA media

    These are all security issues fixed in the libcontainers-common-20210626-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for krb5

    This update for krb5 fixes the following issues: - CVE-2022-42898: Fixed integer overflow in PAC parsing (bsc#1205126).

    first Nov 21, 2022
  • High max 7.8

    Security update for curl

    This update for curl fixes the following issues: Security issue fixed: - CVE-2019-5436: Fixed a heap buffer overflow in tftp_receive_packet() (bsc#1135170).

    first Jul 29, 2019
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - openvswitch was updated to 2.13.2 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

    first Feb 1, 2021
  • High max 7.4

    bubblewrap-0.5.0-1.1 on GA media

    These are all security issues fixed in the bubblewrap-0.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2021-27803: Fixed a P2P provision discovery processing vulnerability (bsc#1182805). This update was imported from the SUSE:SLE-15:Update update project.

    first Mar 14, 2021
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865). - CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds wr…

    first May 16, 2025
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2023-2828: Fixed DOS against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

    first Jul 6, 2023
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 3 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_11 fixes several issues. The following security issues were fixed: - CVE-2018-15471: An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c. The Linux netback driver allowed frontends t…

    first Sep 28, 2018
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2024-34750: Fixed improper handling of exceptional conditions (bsc#1227399)

    first Jul 16, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-3268: Fixed an out…

    first Aug 22, 2023
  • High max 8.1

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: Upgrade to 15.12: - CVE-2025-1094: Harden PQescapeString and allied functions against invalidly-encoded input strings (bsc#1237093).

    first Feb 21, 2025
  • High max 7.4

    Security update for python-Django

    This update for python-Django fixes the following security issues: - CVE-2016-2512: The utils.http.is_safe_url function allowed remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XS…

    first Jun 27, 2018
  • High max 8.8

    Security update for SUSE Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Add support for gpgautoimport in zypperpkg module - Update Salt to work with Jinja >= and <= 3.1.0 (bsc#1198744) - Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372) …

    first Sep 8, 2022
  • High max 7.5

    python311-cbor2-5.6.5-2.1 on GA media

    These are all security issues fixed in the python311-cbor2-5.6.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 5, 2025
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux kernel in Marvell WiFi chip driver. The flaw could…

    first Dec 20, 2019
  • High max 8.8

    MozillaFirefox-104.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-104.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    libopenssl-3-devel-3.1.4-1.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    frr-8.1-3.1 on GA media

    These are all security issues fixed in the frr-8.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_36 fixes several issues. The following security issues were fixed: - CVE-2023-6531: Fixed a use-after-free flaw due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_rea…

    first Mar 28, 2024