Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 7.5
    openSUSE-SU-2024:13350-1 4 CVEs 1 exploited

    apache2-2.4.58-1.1 on GA media

    These are all security issues fixed in the apache2-2.4.58-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1418-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_92 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 24, 2024
  • High max 7.0
    SUSE-SU-2016:2635-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 5 for SLE 12 SP1

    This update for the Linux Kernel 3.12.59-60_41 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • Critical max 9.8
    SUSE-SU-2025:0555-1 28 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112). - CVE-2024-53104: media: uvcvideo: Skip parsing…

    first Feb 14, 2025
  • High max 8.8
    openSUSE-SU-2024:13229-1 1 CVE 1 exploited

    chromedriver-116.0.5845.187-1.1 on GA media

    These are all security issues fixed in the chromedriver-116.0.5845.187-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2021:1095-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.277 - DNA-94291 Video conference popout doesnt remember its size after resizing - DNA-94399 Incorrect icon for wp.pl in address bar dropdown - DNA-94462 Low quality of default wallp…

    first Aug 5, 2021
  • Critical max 10.0
    SUSE-SU-2024:2973-1 783 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-0160: Fixed deadlock flaw in BPF that could allow a local user to potentially crash the system (bsc#1209657). - CVE…

    first Aug 20, 2024
  • High max 7.8
    SUSE-SU-2015:1770-1 1 CVE 1 exploited

    Security update for flash-player

    flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).

    first Oct 16, 2015
  • Critical max 9.8
    SUSE-SU-2022:4067-1 52 CVEs 1 exploited

    Security update for php7

    This update for php7 fixes the following issues: - Version update to 7.2.34 [jsc#SLE-23639] - CVE-2022-37454: Fixed SHA-3 buffer overflow (bsc#1204577). - Fix integer overflow in PHP_SHA3##bits (bsc#1204577#c26).

    first Nov 18, 2022
  • High max 7.5
    openSUSE-SU-2024:11821-1 12 CVEs 1 exploited

    ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2017:1501-1 16 CVEs 1 exploited

    Security update for chromium

    This update to Chromium 59.0.3071.86 fixes the following security issues: - CVE-2017-5070: Type confusion in V8 - CVE-2017-5071: Out of bounds read in V8 - CVE-2017-5072: Address spoofing in Omnibox - CVE-2017-5073: Use after free in print preview - CVE-2017-…

    first Jun 7, 2017
  • Critical max 9.6
    openSUSE-SU-2024:12334-1 1 CVE 1 exploited

    nodejs-electron-19.0.17-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-19.0.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.1
    openSUSE-SU-2024:13365-1 1 CVE 1 exploited

    roundcubemail-1.6.4-1.1 on GA media

    These are all security issues fixed in the roundcubemail-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3
    SUSE-SU-2021:2409-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables…

    first Jul 20, 2021
  • High max 7.9
    SUSE-SU-2023:1647-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_28 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 28, 2023
  • Critical max 9.0
    openSUSE-SU-2019:1524-1 1 CVE 1 exploited

    Security update exim

    exim was updated to fix a security issue. - CVE-2019-10149: Fixed a Remote Command Execution in exim (bsc#1136587)

    first Jun 7, 2019
  • Medium max 6.1
    openSUSE-SU-2021:0942-1 3 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Upgrade to version 1.3.16 This is a security update to the LTS version 1.3. It fixes a recently reported stored cross-site scripting (XSS) vulnerability via HTML or plain text messages with malicious c…

    first Jun 29, 2021
  • High max 7.8
    SUSE-SU-2021:1275-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • High max 8.0
    SUSE-SU-2019:3230-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…

    first Dec 10, 2019
  • High max 8.2
    SUSE-SU-2023:2141-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local priv…

    first May 9, 2023
  • High max 8.8
    openSUSE-SU-2016:2733-1 1 CVE 1 exploited

    Security update for chromium

    This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)

    first Nov 4, 2016
  • High max 7.8
    SUSE-SU-2024:1380-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UAF…

    first Apr 22, 2024
  • High max 7.8
    SUSE-SU-2024:1537-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • Critical max 9.8
    openSUSE-SU-2024:13827-1 18 CVEs 1 exploited

    python310-Pillow-10.3.0-1.1 on GA media

    These are all security issues fixed in the python310-Pillow-10.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    SUSE-SU-2025:0929-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_141 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initia…

    first Mar 19, 2025
  • Critical max 9.8
    SUSE-SU-2022:4439-1 12 CVEs 1 exploited

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-boynux-squid_exporter: - Exclude s390 architecture - Enhanced to build on Enterprise Linux 8 grafana: - Version update from 8.3.10 to 8.5.13 (jsc#PED-2145) - Security fixes: * CVE-2022-36062: (bsc#1203596)…

    first Dec 13, 2022
  • High max 8.8
    openSUSE-SU-2024:13231-1 1 CVE 1 exploited

    libsharpyuv0-1.3.1-2.1 on GA media

    These are all security issues fixed in the libsharpyuv0-1.3.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:0156-1 16 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 110.0.5130.64 * CHR-9748 Update Chromium on desktop-stable-124-5130 to 124.0.6367.243 * DNA-116317 Create outline or shadow around emojis on tab strip * DNA-116320 Create animation for emoji disappea…

    first Jun 10, 2024
  • Critical max 9.8
    SUSE-SU-2016:1458-1 10 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Update to sr16 fp26 to fix a regression in TLS connections. (bsc#981087) - IBM Java 1.6.0 SR16 FP25 released (bsc#977646 bsc#977648 bsc#977650 bsc#979252) CVE-2016-0376 CVE-2016-0264 CVE-2016-0363 C…

    first May 31, 2016
  • High max 8.8
    SUSE-SU-2024:1976-1 10 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071) - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)

    first Jun 11, 2024
  • Medium max 6.5
    SUSE-SU-2022:0090-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (b…

    first Jan 17, 2022
  • High max 8.0
    SUSE-SU-2019:3232-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • High max 8.8
    openSUSE-SU-2019:2587-1 42 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …

    first Nov 30, 2019
  • Critical max 9.8
    openSUSE-SU-2024:14394-1 12 CVEs 1 exploited

    MozillaThunderbird-128.3.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-128.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 11, 2024
  • High max 8.8
    openSUSE-SU-2024:14285-1 20 CVEs 2 exploited

    chromedriver-128.0.6613.84-1.1 on GA media

    These are all security issues fixed in the chromedriver-128.0.6613.84-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 23, 2024
  • High max 8.8
    SUSE-SU-2024:4117-1 5 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747), including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path (bsc#1233631). - CVE-2024-44309: Fixed a dat…

    first Dec 4, 2024
  • High max 8.5
    openSUSE-SU-2021:1401-1 14 CVEs 1 exploited

    Security update for xstream

    This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…

    first Oct 31, 2021
  • Critical max 9.8
    SUSE-SU-2026:0171-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476…

    first Jan 19, 2026
  • High max 8.8
    openSUSE-SU-2024:11687-1 41 CVEs 1 exploited

    chromedriver-96.0.4664.110-1.1 on GA media

    These are all security issues fixed in the chromedriver-96.0.4664.110-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    SUSE-SU-2022:0783-1 2 CVEs 2 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework

    first Mar 9, 2022