Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 8.8

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wi…

    first Jun 21, 2019
  • High max 7.8

    Security update for sysstat

    This update for sysstat fixes the following issues: - CVE-2023-33204: Fixed a multiplication integer overflow in check_overflow in common.c (bsc#1211507) - CVE-2022-39377: Fixed arithmetic overflow in allocate_structures() (bsc#1205224)

    first Jan 6, 2025
  • High max 7.5

    Security update for rubygem-actionpack-5_1

    This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack. There is a strong parameters bypass vector in ActionPack. (bsc#1172177) This update was imported from the SUSE:SLE-15:Update u…

    first Sep 25, 2020
  • High max 8.1

    Security update for python-Twisted

    This update for python-Twisted fixes the following issues: - CVE-2022-24801: Fixed to not be as lenient as earlier HTTP/1.1 RFCs to prevent HTTP request smuggling. (bsc#1198086)

    first May 5, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid use-af…

    first Jan 14, 2025
  • High max 7.5

    Security update for unbound

    This update for unbound fixes the following issues: unbound was updated to 1.20.0: * A lot of bugfixes and added features. For a complete list take a look at the changelog located at: /usr/share/doc/packages/unbound/Changelog or https://www.nlnetlabs.nl/proje…

    first Jun 11, 2024
  • High max 8.8

    nodejs-electron-30.4.0-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-30.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 20, 2024
  • High max 7.1

    krb5-1.21.3-2.1 on GA media

    These are all security issues fixed in the krb5-1.21.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 6, 2025
  • High max 7.5

    Security update for postgresql10

    This update for postgresql10 to version 10.9 fixes the following issue: Security issue fixed: - CVE-2019-10164: Fixed buffer-overflow vulnerabilities in SCRAM verifier parsing (bsc#1138034). More information at https://www.postgresql.org/docs/10/release-10-9.…

    first Jul 9, 2019
  • High max 7.5

    bind-9.20.0-1.1 on GA media

    These are all security issues fixed in the bind-9.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 26, 2024
  • High max 8.8

    Security update for python-setuptools

    This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the package_index module (bsc#1228105)

    first Aug 28, 2024
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2021-22947: Fixed STARTTLS protocol injection via MITM (bsc#1190374). - CVE-2021-22946: Fixed protocol downgrade required TLS bypassed (bsc#1190373).

    first Oct 6, 2021
  • High max 7.5

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header (bsc#1206673).

    first Jan 12, 2023
  • High max 8.8

    Security update for libvirt

    This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-10161: Fixed virDomainSaveImageGetXMLDesc API which could accept a path parameter pointing anywhere on the system and potentially leading to execution of a malicious file wi…

    first Jun 24, 2019
  • High max 8.8
    openSUSE-SU-2024:0025-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 120.0.6099.224 (boo#1218892): - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audi…

    first Jan 18, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prl…

    first Jul 6, 2023
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2024-27398: Fixed use-after-free bug caused by sco_sock_timeout() (bsc#1225013). - CVE-2024-35950: drm/client: Fully protect modes with…

    first Aug 2, 2024
  • High max 7.5

    Security update for libgcrypt

    This update for libgcrypt fixes the following issues: - CVE-2021-33560: Fixed a side-channel against ElGamal encryption, caused by missing exponent blinding (bsc#1187212).

    first Jun 24, 2021
  • High max 7.3

    Security update for ghostscript

    This update for ghostscript fixes the following issues: Security issue fixed: - CVE-2019-10216: Fix privilege escalation via specially crafted PostScript file (bsc#1144621).

    first Sep 10, 2019
  • High max 7.8

    Security update for php8

    This update for php8 fixes the following issues: - php8 was updated to version 8.0.24 - php8 was updated to version 8.0.23 (jsc#SLE-23639). - CVE-2021-21703: Fixed a local privilege escalation via PHP-FPM. (bsc#1192050) - CVE-2022-31628: Fixed an uncontrolled…

    first Oct 19, 2022
  • High max 7.3

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2025-48797: Fixed two buffer over-reads and one heap-based buffer overflow in its TGA parser (bsc#1243711). - CVE-2025-48798: Fixed two use-after-free bugs and one double free bug in its XCF parser (bsc#1…

    first Jun 30, 2025
  • High max 8.1

    perl-HTTP-Tiny-0.086-1.1 on GA media

    These are all security issues fixed in the perl-HTTP-Tiny-0.086-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3347: A use-after-free was discovered in the PI futexes during fault handling, allowing local users to execute cod…

    first Feb 16, 2021
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. This update adds support for the Hygon Dhyana CPU (fate#327735). The following security bugs were fixed: - CVE-2019-12614: An issue was discovered in dlpar_parse_cc_…

    first Jul 4, 2019
  • High max 7.5

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue in virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc …

    first May 17, 2021
  • High max 7.3

    Security update for rust

    This update for rust fixes the following issues: - CVE-2022-21658: Fixed race condition in std::fs::remove_dir_all (bsc#1194767).

    first Feb 18, 2022
  • High max 7.5

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2021-32839: Fixed ReDoS via regular expression in StripComments filter (bsc#1190741).

    first Dec 1, 2021
  • High max 7.8

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2024-56171: use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c (bsc#1237363). - CVE-2025-24928: stack-based buffer overflow in xmlSnprintfElements in valid.c …

    first Feb 28, 2025
  • High max 8.8
    SUSE-SU-2025:02264-1 258 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/sch…

    first Jul 10, 2025
  • High max 7.5

    python310-waitress-3.0.1-1.1 on GA media

    These are all security issues fixed in the python310-waitress-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 31, 2024
  • High max 8.8

    Security update for postgresql12

    This update for postgresql12 fixes the following issues: Security issues fixed: * CVE-2023-5868: Fix handling of unknown-type arguments in DISTINCT 'any' aggregate functions. This error led to a text-type value being interpreted as an unknown-type value (that…

    first Nov 16, 2023
  • High max 8.2

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_138 fixes several issues. The following security issues were fixed: - CVE-2021-46955: Fixed an out-of-bounds read with openvswitch, when fragmenting IPv4 packets (bsc#1220537). - CVE-2024-26852: Fixed use-afte…

    first Jun 21, 2024
  • High max 7.8

    Security update for radare2

    This update for radare2 fixes the following issues: Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parse_die function (boo#1234065). - For more details, check full release notes: h…

    first Dec 9, 2024
  • High max 8.8

    Security update for gstreamer-plugins-base

    This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128). - CVE-2023-37328: Fixed Heap-based Buffer Overflow in GStreamer PGS (bsc#1213131).

    first Aug 10, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_73 fixes several issues. The following security issues were fixed: - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233712). - CVE-2022-48956: ipv6: avoid u…

    first Jan 17, 2025
  • High max 7.5

    Security update for libssh2_org

    This update for libssh2_org fixes the following issues: - Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes: * adds ECDSA keys and host key support when using OpenSSL * adds ED25519 key and host key support when using OpenSSL 1.1…

    first Nov 30, 2020
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denia…

    first Dec 16, 2022
  • High max 7.5

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates (bsc#1196877).

    first Mar 15, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_144 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235231). - CVE-2024-56605: Bluetooth: L2CAP: do not l…

    first Jun 25, 2025
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2019-15961: Fixed a denial of service which might occur when scanning a specially crafted email file as (bsc#1157763).

    first Dec 5, 2019