Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.8

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-40474: Fixed a remote code execution issue due to improper parsing of H265 encoded video files (bsc#1215793).

    first Nov 2, 2023
  • High max 7.5

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: Security issue fixed: - CVE-2019-13173: Fixed a potential file overwrite via hardlink in fstream.DirWriter() (bsc#1140290). Non-security issue fixed: - Backported fixes for OpenSSL 1.1.1 from nodejs8 (bsc#11…

    first Aug 6, 2019
  • High max 7.5

    Security update for rubygem-actionpack-5_1

    This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. (bsc#1172177)

    first Sep 22, 2020
  • High max 8.4

    Security update for xdg-desktop-portal

    This update for xdg-desktop-portal fixes the following issues: - CVE-2024-32462: Fixed sandbox escape via RequestBackground portal (bsc#1223110).

    first May 29, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140). - CVE-2023-53117: fs: prevent out-of-bounds array speculation when …

    first Sep 18, 2025
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2023-39198: Fixed a race condition leading to a use-after-free in qxl_mode_dumb_create() (bsc#1217116). - CVE-2023-51780: Fixed a use-a…

    first Feb 28, 2024
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: BIND was upgraded to version 9.16.6: Note: - bind is now more strict in regards to DNSSEC. If queries are not working, check for DNSSEC issues. For instance, if bind is used in a namserver forwarder chain, the …

    first Oct 19, 2020
  • High max 8.8

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2022-4254: Fixed a bug in libsss_certmap which could allow an attacker to gain control of the admin account and perform a full domain takeover. (bsc#1207474)

    first Jan 27, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes one security issue The following security issue was fixed: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

    first Nov 27, 2025
  • High max 7.5

    Security update for go1.23-openssl

    This update for go1.23-openssl fixes the following issues: This update ships go1.23-openssl version 1.23.2.2. (jsc#SLE-18320) - go1.23.2 (released 2024-10-01) includes fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packag…

    first Oct 29, 2024
  • High max 8.8
    openSUSE-SU-2024:0275-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 113.0.5230.32 * DNA-118250 Backport fix for CVE-2024-7971 from Chrome to Opera 113 - Changes in 113.0.5230.31 * CHR-9819 Update Chromium on desktop-stable-127-5230 to 127.0.6533.120 * DNA-116113 Pr…

    first Sep 2, 2024
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2022-3094: Fixed memory exhaustion due to UPDATE message flooding (bsc#1207471).

    first Feb 15, 2023
  • High max 8.4
    SUSE-SU-2022:0262-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_40 fixes one issue. The following security issue was fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).

    first Feb 1, 2022
  • High max 8.8

    chromedriver-130.0.6723.58-1.1 on GA media

    These are all security issues fixed in the chromedriver-130.0.6723.58-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 19, 2024
  • High max 8.4

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (bsc#1233678). - CVE-2024-53156: wifi: ath9k: add …

    first May 20, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_197 fixes several issues. The following security issues were fixed: - CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1227472). - CVE-2021-47598: sch_cake: do not call cake_des…

    first Oct 29, 2024
  • High max 7.0

    Security update for the Linux Kernel (Live Patch 28 for SLE 12)

    This update for the Linux Kernel 3.12.61-52_101 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present …

    first Aug 16, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.143-94_47 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to …

    first Oct 1, 2018
  • High max 7.5

    distrobuilder-3.1-2.1 on GA media

    These are all security issues fixed in the distrobuilder-3.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 12, 2025
  • High max 7.5

    bind-9.18.19-1.1 on GA media

    These are all security issues fixed in the bind-9.18.19-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2022:3137-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • High max 8.1

    Security update for bind

    This update for bind fixes the following issues: - CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack [bsc#1182246]

    first Feb 18, 2021
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: CVE-2020-9484 (bsc#1171928) Apache Tomcat Remote Code Execution via session persistence If an attacker was able to control the contents and name of a file on a server configured to use the PersistenceManager,…

    first May 28, 2020
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_83 fixes several issues. The following security issues were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device th…

    first Feb 1, 2022
  • High max 8.4

    Security update for djvulibre

    This update for djvulibre fixes the following issues: - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. (bsc#1245773)

    first Aug 5, 2025
  • High max 7.1

    Security update for nvidia-open-driver-G06-signed

    This update for nvidia-open-driver-G06-signed fixes the following issues: - Update to 550.144.03 (bsc#1235461, bsc#1235871) * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149, CVE-2024-0150, CVE-2024-53869

    first Jan 21, 2025
  • High max 7.3

    Security update for obs-scm-bridge

    This update for obs-scm-bridge fixes the following issues: Updated to version 0.5.4: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories (bnc#1230469)

    first Dec 5, 2024
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute cod…

    first Feb 11, 2021
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_47 fixes several issues. The following security issues were fixed: - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793). - CVE-2025-37752: net_sched: sch_sfq: move the limi…

    first Aug 5, 2025
  • High max 8.8

    Recommended update for salt

    This update for salt fixes the following issues: - Fix regression preventing bootstrapping new clients caused by redundant dependency on psutil (bsc#1197533) - Prevent data pollution between actions processed at the same time (bsc#1197637) - Fix salt-ssh opts…

    first Apr 25, 2022
  • High max 8.8
    openSUSE-SU-2024:11656-1 4 CVEs 1 exploited

    nodejs-electron-13.6.2-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-13.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for emacs

    This update for emacs fixes the following issues: - CVE-2025-1244: improper handling of custom 'man' URI schemes allow for shell command injections. (bsc#1237091)

    first Feb 19, 2025
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 125.0.6422.76 (boo#1224818) * CVE-2024-5157: Use after free in Scheduling * CVE-2024-5158: Type Confusion in V8 * CVE-2024-5159: Heap buffer overflow in ANGLE * CVE-2024-5160: Heap buffer overflo…

    first May 23, 2024
  • High max 8.1

    Security update for python-Pillow

    This update for python-Pillow fixes the following issues: - CVE-2023-50447: Fixed arbitrary code execution via the environment parameter (boo#1219048)

    first May 13, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncati…

    first Apr 13, 2021
  • High max 7.7

    perl-Data-Entropy-0.8.0-1.1 on GA media

    These are all security issues fixed in the perl-Data-Entropy-0.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 2, 2025
  • High max 7.5

    Security update for docker

    This update for docker fixes the following issues: - Update to v20.10.25-ce - CVE-2023-28840: Fixed a bug where an attacker could inject arbitrary Ethernet frames to execute a Denial of Service attack. (bsc#1214107) - CVE-2023-28841: Fixed a bug which allows …

    first Aug 14, 2023
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). - CVE-2024-27398: Fixed use-after-free bugs cau…

    first Aug 12, 2024
  • High max 8.1

    Security update for samba

    This update for samba fixes the following issues: Update to 4.15.13 - CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers (bsc#1205385). - CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC (bsc#12053…

    first Jan 2, 2023
  • High max 8.8

    chromedriver-109.0.5414.119-1.1 on GA media

    These are all security issues fixed in the chromedriver-109.0.5414.119-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024