Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_17 fixes several issues. The following security issues were fixed: - CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236701). - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-f…

    first Jun 9, 2025
  • High max 7.8

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240813 release (bsc#1229129) - CVE-2024-24853: Security updates for [INTEL-SA-01083](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-0…

    first Aug 16, 2024
  • High max 8.8

    nodejs-electron-22.3.21-1.2 on GA media

    These are all security issues fixed in the nodejs-electron-22.3.21-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_23 fixes one issue. The following security issue was fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231).

    first Jun 23, 2025
  • High max 8.4

    Security update for pcp

    This update for pcp fixes the following issues: Security issue fixed: - CVE-2019-3695: Fixed a local privilege escalation of the pcp user during package update (bsc#1152763). Non-security issue fixed: - Fixed an dependency issue with pcp2csv (bsc#1129991). Th…

    first Feb 12, 2020
  • High max 7.5

    Security update for expat

    This update for expat fixes the following issues: - CVE-2024-8176: Fixed denial of service from chaining a large number of entities caused by stack overflow by resolving use of recursion (bsc#1239618) Other fixes: - version update to 2.7.1 (jsc#PED-12500) Bug…

    first Apr 9, 2025
  • High max 7.5

    rustup-1.25.2~0-2.1 on GA media

    These are all security issues fixed in the rustup-1.25.2~0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2021-32839: Fixed ReDoS via regular expression in StripComments filter (bsc#1190741).

    first Dec 1, 2021
  • High max 7.7

    libtiff-devel-32bit-4.3.0-1.6 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.3.0-1.6 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for ffmpeg

    This update for ffmpeg fixes the following issues: - CVE-2023-50010: Fixed an arbitrary code execution via the set_encoder_id() (bsc#1223256).

    first May 10, 2024
  • High max 7.4

    libnbd-1.20.2-1.1 on GA media

    These are all security issues fixed in the libnbd-1.20.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 6, 2024
  • High max 8.8

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issues: - CVE-2017-2862: JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability (bsc#1048289) - CVE-2017-2870: tiff_image_parse Code Execution Vulnerability (bsc#1048544) - CVE-2017-6313: A dange…

    first Sep 6, 2017
  • High max 7.5

    Security update for coredns

    This update for coredns fixes the following issues: Update to version 1.11.3: * optimize the performance for high qps (#6767) * bump deps * Fix zone parser error handling (#6680) * Add alternate option to forward plugin (#6681) * fix: plugin/file: return erro…

    first Sep 27, 2024
  • High max 7.5

    Security update for hdf5

    This update for hdf5 fixes the following issues: - CVE-2021-37501: Fixed overflow in calculation of data buffer due to bogus input file (bsc#1207973).

    first Mar 16, 2023
  • High max 7.4

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2021-3712: This is an update for the incomplete fix for CVE-2021-3712. Read buffer overruns processing ASN.1 strings (bsc#1189521).

    first Sep 7, 2021
  • High max 7.2

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Updated to version 13.11: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). …

    first May 16, 2023
  • High max 8.1

    Security update for libzypp, zypper

    The Software Update Stack was updated to receive fixes and enhancements. libzypp: - Adapt to work with GnuPG 2.1.23. (bsc#1054088) - Support signing with subkeys. (bsc#1008325) - Enhance sort order for media.1/products. (bsc#1054671) zypper: - Also show a gpg…

    first Sep 4, 2017
  • High max 8.1

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature (bsc#961642) - CVE-2016-0778: A malicious or co…

    first Jan 14, 2016
  • High max 8.8

    MozillaFirefox-100.0.2-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-100.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2022:4634-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).

    first Dec 29, 2022
  • High max 7.5

    Security update for python-rsa

    This update for python-rsa fixes the following issues: - CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389)

    first Jul 2, 2021
  • High max 7.5

    Security update for python

    This update for python fixes the following issues: - CVE-2021-3737: Fixed http client infinite line reading (DoS) after a http 100. (bsc#1189241) - CVE-2021-3733: Fixed ReDoS in urllib.request. (bsc#1189287) This update was imported from the SUSE:SLE-15:Updat…

    first Oct 31, 2021
  • High max 8.0

    Security update for xstream

    This update for xstream fixes the following issues: xstream was updated to version 1.4.15. - CVE-2020-26217: Fixed a remote code execution due to insecure XML deserialization when relying on blocklists (bsc#1180994). - CVE-2020-26258: Fixed a server-side requ…

    first Jan 22, 2021
  • High max 7.8

    ffmpeg-7-7.1.1-1.1 on GA media

    These are all security issues fixed in the ffmpeg-7-7.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2025
  • High max 7.5

    libxml2-2-2.9.13-1.1 on GA media

    These are all security issues fixed in the libxml2-2-2.9.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities (bsc#1172021).

    first Jun 4, 2020
  • High max 7.3

    flatpak-1.11.3-1.2 on GA media

    These are all security issues fixed in the flatpak-1.11.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2024-34459: Fixed buffer over-read in xmlHTMLPrintFileContext in xmllint.c (bsc#1224282).

    first Jul 2, 2024
  • High max 8.1

    rustscan-2.0.1+0-1.1 on GA media

    These are all security issues fixed in the rustscan-2.0.1+0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1554-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-1086: Fixed…

    first May 7, 2024
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.74-92_29 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. (bsc#1085447). - CVE-2018-8897: A statement in t…

    first Jun 5, 2018
  • High max 7.5

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2025-22868: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239197)

    first Mar 25, 2025
  • High max 7.8
    SUSE-SU-2022:14905-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.8
    SUSE-SU-2022:1012-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_150 fixes several issues. The following security issues were fixed: - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2…

    first Mar 29, 2022
  • High max 7.8

    xwayland-24.1.4-1.1 on GA media

    These are all security issues fixed in the xwayland-24.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2024
  • High max 8.8
    openSUSE-SU-2017:0740-1 18 CVEs 1 exploited

    Security update for Chromium

    Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CV…

    first Mar 17, 2017
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_23 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vuln…

    first Sep 26, 2023
  • High max 7.5

    kafka-kit-2.1.0-2.1 on GA media

    These are all security issues fixed in the kafka-kit-2.1.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for tomcat

    This update for tomcat to version 9.0.20 fixes the following issues: Security issues fixed: - CVE-2019-0199: Fixed a denial of service in the HTTP/2 implementation related to streams with excessive numbers of SETTINGS frames (bsc#1131055). - CVE-2019-0221: Fi…

    first Jun 25, 2019
  • High max 8.3
    SUSE-SU-2021:2559-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_10 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555:…

    first Jul 29, 2021