Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.6
    SUSE-SU-2025:03012-1 5 CVEs 1 exploited

    security update for git, git-lfs, obs-scm-bridge, python-PyYAML

    This update for git, git-lfs, obs-scm-bridge, python-PyYAML fixes the following issues: git was updated from version 2.43.0 to 2.51.0 (bsc#1243197): - Security issues fixed: * CVE-2025-27613 Fixed arbitrary writable file creation and truncation in Gitk(bsc#12…

    first Aug 29, 2025
  • High max 7.1

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 GA LTS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system cal…

    first Nov 2, 2017
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 62 for SUSE Linux Enterprise 15 SP3)

    This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.221 fixes various security issues The following security issues were fixed: - CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250295). - CVE-202…

    first Nov 27, 2025
  • High max 7.8

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2020-14363: Fix an integer overflow in init_om() (bsc#1175239).

    first Sep 3, 2020
  • High max 7.5

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2024-24549: Fixed denial of service during header validation for HTTP/2 stream (bsc#1221386) - CVE-2024-23672: Fixed denial of service due to malicious WebSocket client keeping connection open (bsc#1221…

    first Apr 11, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to p…

    first Jun 8, 2021
  • High max 7.5

    libpoppler-cpp1-24.07.0-1.1 on GA media

    These are all security issues fixed in the libpoppler-cpp1-24.07.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 3, 2024
  • High max 8.3

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)', introduced in October 2020 CPU. - Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU, bsc#1174157, and October 2020 C…

    first Nov 26, 2020
  • High max 7.5

    Security update for krb5

    This update for krb5 fixes the following issues: - CVE-2024-26458: Fixed memory leak at /krb5/src/lib/rpc/pmap_rmt.c (bsc#1220770). - CVE-2024-26461: Fixed memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c (bsc#1220771).

    first Mar 27, 2024
  • High max 8.8

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: Updated to NSS 3.79.4 (bsc#1208138): - CVE-2023-0767: Fixed handling of unknown PKCS#12 safe bag types.

    first Feb 17, 2023
  • High max 8.1

    exim-4.98.2-1.1 on GA media

    These are all security issues fixed in the exim-4.98.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2025
  • High max 7.5

    Security update for nodejs8

    This update for nodejs8 fixes the following issues: - update to npm 6.14.13 - CVE-2021-27290: Fixed ssri Regular Expression Denial of Service. (bsc#1187976) - CVE-2021-23362: Fixed hosted-git-info Regular Expression Denial of Service (bsc#1187977) - CVE-2021-…

    first Aug 5, 2021
  • High max 7.5

    Security update for rubygem-rack

    This update for rubygem-rack fixes the following issues: - Update to version 2.2.20 (bsc#1251936) - CVE-2025-61919: Fixed application/x-www-form-urlencoded`, calling `rack.input.read(nil)` without enforcing a length or cap (bsc#1251936) - CVE-2025-61780: Fixe…

    first Nov 27, 2025
  • High max 8.5

    cmctl-2.3.0-1.1 on GA media

    These are all security issues fixed in the cmctl-2.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 11, 2025
  • High max 7.5

    libcoap-devel-4.3.5a-1.1 on GA media

    These are all security issues fixed in the libcoap-devel-4.3.5a-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 28, 2025
  • High max 7.4

    python3-Django-1.10.4-1.1 on GA media

    These are all security issues fixed in the python3-Django-1.10.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for dbus-1

    This update for dbus-1 fixes the following issue: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).

    first Jun 21, 2019
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local us…

    first Aug 3, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-202…

    first Nov 26, 2025
  • High max 7.1

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).

    first Nov 15, 2022
  • High max 8.1

    Security update for samba

    This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1…

    first Dec 27, 2016
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: Update to 93.0.4585.37 - DNA-102885 Turn on #sidebar-autohide on all streams - DNA-103020 Turn on #start-page-redesign on developer - DNA-103042 Fix import from Firefox - DNA-103222 [Speed Dial Suggestions] Al…

    first Dec 9, 2022
  • High max 7.5

    Security update for rmt-server

    This update for rmt-server to version 1.1.1 fixes the following issues: The following issues have been fixed: - Fixed migration problems which caused some extensions / modules to be dropped (bsc#1118584, bsc#1118579) - Fixed listing of mirrored products (bsc#…

    first Feb 6, 2019
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596)

    first Feb 10, 2025
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614). - CVE-2022-38177: Fixed a memory leak that could be externally tri…

    first Oct 25, 2022
  • High max 7.5

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2024-38477: Fixed null pointer dereference in mod_proxy (bsc#1227270). - CVE-2024-39573: Fixed source code disclosure with handlers configured via AddType (bsc#1227271). - CVE-2024-39884: Fixed source …

    first Jul 7, 2025
  • High max 7.5

    distribution-registry-2.8.1-1.1 on GA media

    These are all security issues fixed in the distribution-registry-2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for chromium

    Chromium was updated to 134.0.6998.35 (stable release 2025-03-04) (boo#1238575): * CVE-2025-1914: Out of bounds read in V8 * CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools * CVE-2025-1916: Use after free in Profiles * C…

    first Mar 7, 2025
  • High max 8.1
    SUSE-SU-2020:1027-1 5 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…

    first Apr 17, 2020
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Upgraded to 16.10: * CVE-2025-8713: Fixed optimizer statistics exposing sampled data within a view, partition, or child table (bsc#1248120) * CVE-2025-8714: Fixed untrusted data inclusion in pg_dump all…

    first Sep 11, 2025
  • High max 7.5

    libwireshark15-3.6.1-1.1 on GA media

    These are all security issues fixed in the libwireshark15-3.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    topgrade-14.0.1-2.1 on GA media

    These are all security issues fixed in the topgrade-14.0.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.1

    Security update for unrar

    This update for unrar fixes the following issues: - CVE-2024-33899: Fixed a denial of service via ANSI escape squences. (bsc#1225661)

    first Jun 11, 2024
  • High max 7.1

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2023-5366: Fixed missing masks on a final stage with ports trie (bsc#1216002).

    first Nov 21, 2023
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2016-8858: prevent resource depletion during key exchange (bsc#1005480) - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation (bsc#1016366) - CVE-2016-10011: Prev…

    first Mar 6, 2017
  • High max 8.1

    Security update for strongswan

    This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)

    first Oct 28, 2025
  • High max 7.5

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL…

    first Jan 30, 2026
  • High max 8.8

    Security update for snakeyaml

    This update for snakeyaml fixes the following issues: snakeyaml was upgraded to version 1.31: - CVE-2022-25857: Fixed DoS due missing to nested depth limitation for collections (bsc#1202932). - CVE-2022-38749: Fixed DoS due to stack overflow in parser (bsc#12…

    first Oct 11, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_75 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a …

    first Mar 17, 2021
  • High max 7.0

    Security update for python-dnspython

    This update for python-dnspython fixes the following issues: - CVE-2023-29483: Fixed an issue that allowed remote attackers to interfere with DNS name resolution (bsc#1222693).

    first Jul 30, 2024