Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.8

    Security update for xz

    This update for xz fixes the following issues: - CVE-2022-1271: Fixed an incorrect escaping of malicious filenames (ZDI-CAN-16587). (bsc#1198062)

    first Apr 12, 2022
  • High max 7.8

    Security update for crmsh

    This update for crmsh fixes the following issues: Update to version 4.3.1+20210624.67223df2: - Fix: ocfs2: Skip verifying UUID for ocfs2 device on top of raid or lvm on the join node (bsc#1187553) - Fix: history: use Path.mkdir instead of mkdir command(bsc#11…

    first Jul 2, 2021
  • High max 7.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.178 to receive various security and bugfixes. Four new speculative execution issues have been identified in Intel CPUs. (bsc#1111331) - CVE-2018-12126: Microarchitectural Store Buffer Data Sampling (M…

    first May 14, 2019
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_139 fixes several issues. The following security issues were fixed: - CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128). - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (b…

    first Dec 16, 2022
  • High max 8.8
    openSUSE-SU-2024:13269-1 3 CVEs 1 exploited

    chromedriver-117.0.5938.132-1.1 on GA media

    These are all security issues fixed in the chromedriver-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…

    first Jan 28, 2026
  • High max 7.5

    proftpd-1.3.8c-2.1 on GA media

    These are all security issues fixed in the proftpd-1.3.8c-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 20, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-52628: Fixed 4-byte stack OOB write in nftables (bsc#1222118). - CVE-2022-48687: Fixed fix out-of-bounds read when setting HMAC data …

    first Jun 19, 2024
  • High max 7.8

    kernel-devel-6.4.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a passwor dof seven characters or fewer and using the crypt() password backend (bsc#1204986). - Fix wrong information output in the …

    first Nov 18, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_63 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead …

    first Oct 1, 2018
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_182 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-50279: dm cache: fix out-of-bounds…

    first Jun 26, 2025
  • High max 7.5

    Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

    This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go sec…

    first Jun 13, 2019
  • High max 8.1

    Security update for grub2

    This update for grub2 fixes the following issues: This update provides security fixes and hardenings for Boothole 3 / Boothole 2022 (bsc#1198581) - CVE-2021-3695: Fixed that a crafted PNG grayscale image could lead to out-of-bounds write in heap (bsc#1191184)…

    first Jun 10, 2022
  • High max 7.6

    Security update for kvm

    This update for kvm fixes several issues. These security issues were fixed: - CVE-2016-9602: The VirtFS host directory sharing via Plan 9 File System(9pfs) support was vulnerable to an improper link following issue which allowed a privileged user inside guest…

    first Nov 9, 2017
  • High max 7.8

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2024-9676: Fixed github.com/containers/storage: symlink traversal vulnerability in the containers/storage library can cause Denial of Service (DoS) (bsc#1231698): - CVE-2024-9675: VUL-0: CVE-2024-9675:…

    first Nov 14, 2024
  • High max 7.5

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: salt: - Exclude the full path of a download URL to prevent injection of malicious code (bsc#1190265) (CVE-2021-21996) spacecmd: - Version 4.2.13-1 * Update translation strings * configchannel_updatefile handles director…

    first Oct 27, 2021
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 129.0.6668.89 (stable released 2024-09-24) (boo#1231232) * CVE-2024-7025: Integer overflow in Layout * CVE-2024-9369: Insufficient data validation in Mojo * CVE-2024-9370: Inappropriate implementat…

    first Oct 7, 2024
  • High max 8.8
    openSUSE-SU-2024:0020-1 17 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302, boo#1218533, boo#1218719) * CVE-2024-0333: Insufficient data validation in Extensions * CVE-2024-0222: Use after free in ANGLE * CVE-2024-02…

    first Jan 16, 2024
  • High max 7.3

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2025-49176: Fixed the integer overflow in Big Requests Extension (bsc#1244084).

    first Jul 4, 2025
  • High max 7.5

    Security update for rubygem-bson-1_11, rubygem-easy_diff, rubygem-redcarpet, and rubygem-sprockets-2_11

    This update for rubygem-bson-1_11, rubygem-easy_diff, rubygem-redcarpet, and rubygem-sprockets-2_11 fixes the following issues: - Avoid monodb data injection (bnc#933961, CVE-2015-4410) - Fixes merging of Arrays of Hashes (bsc#982364) - Fix XSS via autolinkin…

    first Aug 9, 2016
  • High max 7.5

    docker-26.1.5_ce-2.1 on GA media

    These are all security issues fixed in the docker-26.1.5_ce-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 6, 2024
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - openvswitch was updated to 2.11.5 - CVE-2020-27827: Fixed a memory leak when parsing lldp packets (bsc#1181345)

    first Feb 2, 2021
  • High max 8.0
    SUSE-SU-2019:3248-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent…

    first Dec 11, 2019
  • High max 7.5

    cadvisor-0.52.1-1.1 on GA media

    These are all security issues fixed in the cadvisor-0.52.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 18, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 63 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_237 fixes one issue. The following security issue was fixed: - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234847).

    first May 20, 2025
  • High max 7.5

    Security update for python3-requests

    This update for python3-requests provides the following fix: python-requests was updated to 2.20.1. Update to version 2.20.1: * Fixed bug with unintended Authorization header stripping for redirects using default ports (http/80, https/443). Update to version …

    first Jun 26, 2020
  • High max 7.5

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-52356: Fixed segfault in TIFFReadRGBATileExt() (bsc#1219213).

    first Feb 22, 2024
  • High max 7.2

    Security update for postgresql12

    This update for postgresql12 fixes the following issues: Updated to version 12.15: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). …

    first May 15, 2023
  • High max 8.8

    python310-Django-4.1-1.1 on GA media

    These are all security issues fixed in the python310-Django-4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.7

    Security update for python311

    This update for python311 fixes the following issues: Update python311 to version 3.11.10. - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) - CVE-2024-7592: quadratic algorithm used when parsing cookies leads …

    first Sep 24, 2024
  • High max 7.8
    SUSE-SU-2024:0120-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…

    first Jan 16, 2024
  • High max 7.5
    openSUSE-SU-2024:11822-1 2 CVEs 1 exploited

    ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2020-1967: Fixed a denial of service via NULL pointer dereference in SSL_check_chain (bsc#1169407).

    first Apr 29, 2020
  • High max 8.2

    Security update for virtualbox

    This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 (released October 17 2023 by Oracle) Fixes the following: - CVE-2023-22098 (boo#1216363) - CVE-2023-22099 (boo#1216364) - CVE-2023-22100 (boo#1216365) This is a mainten…

    first Nov 4, 2023
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: - Upgrade to 12.20 (bsc#1229013) - CVE-2024-7348: PostgreSQL relation replacement during pg_dump executes arbitrary SQL. (bsc#1229013)

    first Sep 10, 2024
  • High max 8.1

    gdk-pixbuf-loader-libheif-1.19.5-2.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.19.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 13, 2024
  • High max 7.3

    Security update for zvbi

    This update for zvbi fixes the following issues: - CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222). - CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239…

    first Mar 21, 2025
  • High max 7.3

    glibc-2.39-5.1 on GA media

    These are all security issues fixed in the glibc-2.39-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.100 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched…

    first Nov 11, 2025