Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.8

    chromedriver-126.0.6478.126-1.1 on GA media

    These are all security issues fixed in the chromedriver-126.0.6478.126-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2024
  • High max 8.5

    Security update for postgresql96

    This update for postgresql96 to 9.6.10 fixes the following issues: These security issues were fixed: - CVE-2018-10915: libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with 'host' or 'hostaddr' co…

    first Oct 24, 2018
  • High max 7.5

    helmfile-0.170.1-1.1 on GA media

    These are all security issues fixed in the helmfile-0.170.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2025
  • High max 7.8

    Security update for python-Babel

    This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal leading to loading arbitrary locale files on disk and executing arbitrary code (bsc#1185768).

    first Jan 5, 2022
  • High max 8.2

    icedtea-web-1.8.6-1.3 on GA media

    These are all security issues fixed in the icedtea-web-1.8.6-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.2

    python3-virtualbox-7.0.12-1.1 on GA media

    These are all security issues fixed in the python3-virtualbox-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7

    ctdb-4.18.1+git.298.4ccf830b2a4-1.1 on GA media

    These are all security issues fixed in the ctdb-4.18.1+git.298.4ccf830b2a4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2011-5325: Fixed tar directory traversal (bsc#951562). - CVE-2015-9261: Fixed segfalts and application crashes in huft_build (bsc#1102912). - CVE-2016-2147: Fixed out of bounds write (heap) due to inte…

    first Jan 20, 2022
  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow (bsc#1215792).

    first Dec 26, 2023
  • High max 7.0

    Security update for mariadb

    This update for mariadb fixes the following issues: - Update to 10.4.24 (bsc#1196016): * 10.4.24: CVE-2021-46665 CVE-2021-46664 CVE-2021-46661 CVE-2021-46668 CVE-2021-46663 * 10.4.23: CVE-2022-24052 CVE-2022-24051 CVE-2022-24050 CVE-2022-24048 CVE-2021-46659,…

    first Mar 4, 2022
  • High max 8.1

    Security update for sccache

    This update for sccache fixes the following issues: Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service (bsc#1196972). - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119). - Added hardening to systemd service(s) …

    first Nov 18, 2022
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: - CVE-2025-1713: Fixed potential deadlock with VT-d and legacy PCI device pass-through (bsc#1238043) Other fixes: - Xen channels and domU console (bsc#1219354) - Fixed attempting to start guest vm's libxl fills …

    first Apr 7, 2025
  • High max 7.8

    Security update for vim

    This update for vim fixes the following issues: - CVE-2023-5344: Heap-based Buffer Overflow in vim prior to 9.0.1969 (bsc#1215940) - CVE-2023-5441: segfault in exmode when redrawing (bsc#1216001) - CVE-2023-5535: use-after-free from buf_contents_changed() (bs…

    first Nov 27, 2023
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or t…

    first Sep 26, 2022
  • High max 8.2

    Security update for opencv

    This update for opencv fixes the following issues: Security issues fixed: - CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered<cv:HaarEvaluator>, leading to DOS (bsc#1144352). - CVE-2019-14492: Fixed an out of bounds read/write in t…

    first Dec 11, 2019
  • High max 8.4

    python310-yt-dlp-2024.04.09-1.1 on GA media

    These are all security issues fixed in the python310-yt-dlp-2024.04.09-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.6

    squid-6.6-2.1 on GA media

    These are all security issues fixed in the squid-6.6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.1

    rustup-1.24.3~git1.0a74fef5-2.1 on GA media

    These are all security issues fixed in the rustup-1.24.3~git1.0a74fef5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: Fixed client process termination when receiving an unexpected message type in response to a key listing or signing request (bsc#1253542)

    first Nov 21, 2025
  • High max 7.2

    python310-aiohttp-3.9.3-2.1 on GA media

    These are all security issues fixed in the python310-aiohttp-3.9.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2018-25032: Fixed memory corruption on deflate (bsc#1197459).

    first Apr 1, 2022
  • High max 7.8

    Security update for hawk2

    This update for hawk2 fixes the following issues: - Update to version 2.6.3: * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459) * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314) * Sanitize filename to contains whitelis…

    first Mar 24, 2021
  • High max 8.8
    openSUSE-SU-2021:0276-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 88.0.4324.150 boo#1181827 - CVE-2021-21148: Heap buffer overflow in V8 This update was imported from the openSUSE:Leap:15.2:Update update project.

    first Feb 11, 2021
  • High max 8.0

    Security update for the Linux Kernel

    The openSUSE Leap 15.0 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-11477: A sequence of SACKs may have been crafted by a remote attacker such that one can trigger an integer overflow, leading…

    first Jun 18, 2019
  • High max 7.5

    kernel-firmware-all-20240809-1.1 on GA media

    These are all security issues fixed in the kernel-firmware-all-20240809-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 14, 2024
  • High max 8.1

    go1.21-1.21.2-1.1 on GA media

    These are all security issues fixed in the go1.21-1.21.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47589: igbvf: fix double free in `igbvf_probe` (bsc#1226557). - CVE-2024-35937: wifi: cfg80211: check A-MSDU format mo…

    first Nov 19, 2024
  • High max 8.8

    libecpg6-16.1-1.1 on GA media

    These are all security issues fixed in the libecpg6-16.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2024-26130: Fixed NULL pointer dereference in pkcs12.serialize_key_and_certificates() (bsc#1220210).

    first Mar 5, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_145 fixes several issues. The following security issues were fixed: - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (b…

    first Oct 30, 2023
  • High max 7.5

    xml-security-2.1.7-1.1 on GA media

    These are all security issues fixed in the xml-security-2.1.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.4

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2021-3712: a bug in the code for printing certificate details could lead to a buffer overrun that a malicious actor could exploit to crash the application, causing a denial-of-service attack. [bs…

    first Aug 24, 2021
  • High max 7.8
    SUSE-SU-2018:2879-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a h…

    first Sep 26, 2018
  • High max 7.3

    Security update for rubygem-actionview-4_2

    This update for rubygem-actionview-4_2 fixes the following issues: - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (bsc#968849)

    first Mar 23, 2016
  • High max 8.8

    chromedriver-131.0.6778.108-1.1 on GA media

    These are all security issues fixed in the chromedriver-131.0.6778.108-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 6, 2024
  • High max 7.7

    corepack22-22.13.0-1.1 on GA media

    These are all security issues fixed in the corepack22-22.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 28, 2025
  • High max 7.5

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-7062: Fixed a null pointer dereference when using file upload functionality under specific circumstances (bsc#1165280). - CVE-2020-7063: Fixed an issue where adding files change the permissions to de…

    first Mar 15, 2020
  • High max 8.8
    SUSE-SU-2023:3946-1 1 CVE 1 exploited

    Security update for libvpx

    This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

    first Oct 3, 2023
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2024-52530: Fixed HTTP request smuggling via stripping null bytes from the ends of header names (bsc#1233285) - CVE-2024-52531: Fixed buffer overflow via UTF-8 conversion in soup_header_parse_param_lis…

    first Dec 17, 2024
  • High max 7.5

    Security update for go1.21

    This update for go1.21 fixes the following issues: - Upgrade go to version 1.21.8 - CVE-2023-45289: net/http, net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect (bsc#1221000) - CVE-2023-45290: net/http: memory exhaustio…

    first Mar 7, 2024