Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,638 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3444: Fixed an issue with the bpf verifier which did not properly handle mod32 destination register truncati…

    first Apr 13, 2021
  • High max 7.5

    Security update for xen

    This update for xen fixes the following issues: Update to Xen 4.20.2 (jsc#PED-8907). Security issues fixed: - CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476,…

    first Dec 16, 2025
  • High max 7.8

    Security update for xen

    This update for xen fixes the following issues: - CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - …

    first Nov 17, 2023
  • High max 7.5

    Security update for python-Flask

    This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching (bsc#1211246).

    first May 22, 2023
  • High max 8.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-12819: The function __mdiobus_register() called put_device(), which triggered a fixed_mdio_bus_init use-after-free…

    first Jun 18, 2019
  • High max 7.5

    libcrypto47-3.4.3-1.1 on GA media

    These are all security issues fixed in the libcrypto47-3.4.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for ruby2.5

    This update for ruby2.5 fixes the following issues: - CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804) - CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806) Other fixes: - Improved fix for CVE-2024-47220 (bsc#1230930…

    first Apr 24, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_45 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a …

    first Mar 17, 2021
  • High max 7.5

    libwireshark17-4.2.6-3.1 on GA media

    These are all security issues fixed in the libwireshark17-4.2.6-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 29, 2024
  • High max 7.8
    openSUSE-SU-2022:0190-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

    first Jan 25, 2022
  • High max 8.8
    openSUSE-SU-2024:11604-1 7 CVEs 2 exploited

    chromedriver-95.0.4638.69-1.1 on GA media

    These are all security issues fixed in the chromedriver-95.0.4638.69-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for editorconfig-core-c

    This update for editorconfig-core-c fixes the following issues: Update to version 0.12.6: - CVE-2023-0341: Fixed a buffer overflow in ec_blob (boo#1211032) - Update property key, value length limits per spec change

    first May 4, 2023
  • High max 8.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to version 102.9.0 ESR (bsc#1209173): - CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android - CVE-2023-25748: Fullscreen Notification could have been hi…

    first Mar 14, 2023
  • High max 8.8

    Security update for systemd

    This update for systemd fixes the following issues: Security issues fixed: - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. (bsc#1113632) - CVE-2018…

    first Dec 10, 2018
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_112 fixes several issues. The following security issues were fixed: - CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a priv…

    first Jul 1, 2022
  • High max 8.8

    hiredis-1.0.2-1.1 on GA media

    These are all security issues fixed in the hiredis-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bs…

    first Mar 15, 2023
  • High max 7.5

    Security update for nodejs10

    This update for nodejs10 to version 10.16.3 fixes the following issues: Security issues fixed: - CVE-2019-9511: Fixed HTTP/2 implementations that are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denia…

    first Sep 10, 2019
  • High max 7.7

    Security update for mailman

    This update for mailman fixes the following issues: - CVE-2019-3693: Fixed a privilege escalation during package install. Could be exploited by a local users who is members of the the mailman group. (boo#1154328) This update was imported from the openSUSE:Lea…

    first Feb 3, 2020
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742).

    first Feb 12, 2021
  • High max 7.8
    openSUSE-SU-2024:11180-1 4 CVEs 1 exploited

    libpolkit0-0.118-7.2 on GA media

    These are all security issues fixed in the libpolkit0-0.118-7.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8

    python39-3.9.18-5.1 on GA media

    These are all security issues fixed in the python39-3.9.18-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5

    Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_135 fixes several issues. The following security issues were fixed: - CVE-2020-25645: Fixed an issue which traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the …

    first Dec 7, 2020
  • High max 7.5

    helm-3.6.3-1.1 on GA media

    These are all security issues fixed in the helm-3.6.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8

    Security update for opera

    This update for opera fixes the following issues: Update to 96.0.4693.20 * CHR-9191 Update Chromium on desktop-stable-110-4693 to 110.0.5481.78 * CHR-9197 Update Chromium on desktop-stable-110-4693 to 110.0.5481.100 * DNA-105308 Translations for O96 * DNA-105…

    first Mar 2, 2023
  • High max 8.1

    Security update for java-1_7_1-ibm

    IBM Java was updated to 7.1.4.25 [bsc#1093311, bsc#1085449] Security fixes: - CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417

    first May 28, 2018
  • High max 7.5

    Security update for golang-github-prometheus-prometheus

    This update for golang-github-prometheus-prometheus fixes the following issues: - Security issues fixed: * CVE-2023-45288: Require Go >= 1.23 for building (bsc#1236516) * CVE-2025-22870: Bump golang.org/x/net to version 0.39.0 (bsc#1238686) - Version was upda…

    first Jun 18, 2025
  • High max 7.7
    SUSE-SU-2024:3343-1 9 CVEs 1 exploited

    Security update for kubernetes1.24

    This update for kubernetes1.24 fixes the following issues: - CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400) - CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugi…

    first Sep 19, 2024
  • High max 7.5

    Security update for openssl

    This update for openssl fixes the following issues: - CVE-2021-23840: Fixed an Integer overflow in CipherUpdate (bsc#1182333) - CVE-2021-23841: Fixed a Null pointer dereference in X509_issuer_and_serial_hash() (bsc#1182331)

    first Mar 24, 2021
  • High max 7.2

    coturn-4.5.2-2.2 on GA media

    These are all security issues fixed in the coturn-4.5.2-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.7

    python310-starlette-0.41.0-1.1 on GA media

    These are all security issues fixed in the python310-starlette-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 20, 2024
  • High max 7.5

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: Upgrade to upstream tag jdk-11.0.29+7 (October 2025 CPU): - CVE-2025-53057: Fixed unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#125…

    first Oct 28, 2025
  • High max 7.7

    Security update for kubernetes1.23

    This update for kubernetes1.23 fixes the following issues: - Upgrade from v1.26.9 to v1.26.14 - CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)

    first Aug 13, 2024
  • High max 8.0

    Security update for postgresql13

    This update for postgresql13 fixes the following issues: Upgrade to 13.14: - CVE-2024-0985: Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (bsc#1219679).

    first Feb 20, 2024
  • High max 7.5

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed packet parsing vulnerability (bsc#1181742).

    first Sep 26, 2022
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2023-6931: Fixed an out of bounds write in the Performance Events subsystem when adding a new event (bsc#1218259). - CVE-2024-26852: Fi…

    first Jun 25, 2024
  • High max 7.5
    SUSE-SU-2023:4155-1 4 CVEs 1 exploited

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…

    first Oct 23, 2023
  • High max 7.5

    Security update for grub2

    This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to l…

    first Oct 20, 2023
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_100 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure t…

    first Oct 22, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-150100_197_123 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds m…

    first Sep 10, 2023