Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2020:3160-1 16 CVEs 1 exploited

    Security update for rmt-server

    This update for rmt-server fixes the following issues: - Version 2.6.5 - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Version 2.6.4 - Add web ser…

    first Nov 5, 2020
  • High max 7.8
    SUSE-SU-2015:0722-1 22 CVEs 1 exploited

    Security update for Adobe Flash Player

    Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabiliti…

    first Apr 15, 2015
  • High max 7.8
    SUSE-SU-2015:1258-1 2 CVEs 2 exploited

    Security update for flash-player

    flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute a…

    first Jul 16, 2015
  • Medium max 6.4
    openSUSE-SU-2022:1037-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • High max 7.0
    openSUSE-SU-2024:10128-1 82 CVEs 2 exploited

    kernel-debug-4.8.13-1.1 on GA media

    These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.9
    openSUSE-SU-2020:1888-1 2 CVEs 1 exploited

    Security update for otrs

    This update for otrs fixes the following issues: - otrs was updated to 6.0.30 (OSA-2020-14 boo#1178434) - CVE-2020-11022, CVE-2020-11023: Vulnerability in third-party library - jquery OTRS uses jquery version 3.4.1, which is vulnerable to cross-site scripting…

    first Nov 9, 2020
  • High max 7.8
    SUSE-SU-2024:0514-1 21 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#121942…

    first Feb 15, 2024
  • High max 7.8
    SUSE-SU-2022:0190-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

    first Jan 25, 2022
  • Medium max 5.3
    SUSE-SU-2015:2268-1 20 CVEs 1 exploited

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - Version update to 8.0-2.0 (bsc#955131): CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 14, 2015
  • High max 7.5
    openSUSE-SU-2024:13390-1 1 CVE 1 exploited

    lighttpd-1.4.73-1.1 on GA media

    These are all security issues fixed in the lighttpd-1.4.73-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2021:1074-1 7 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …

    first Jul 21, 2021
  • High max 8.8
    SUSE-SU-2023:3609-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…

    first Sep 15, 2023
  • High max 8.8
    openSUSE-SU-2024:12180-1 3 CVEs 1 exploited

    chromedriver-103.0.5060.114-1.1 on GA media

    These are all security issues fixed in the chromedriver-103.0.5060.114-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2025:0096-1 10 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…

    first Jan 14, 2025
  • Critical max 9.8
    SUSE-SU-2024:3731-1 1 CVE 1 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.3.1 (MFSA 2024-52, bsc#1231413): - CVE-2024-9680: Fixed use-after-free in Animation timeline (bmo#1923344)

    first Oct 18, 2024
  • Critical max 9.8
    openSUSE-SU-2024:11651-1 1 CVE 1 exploited

    grafana-7.5.11-3.1 on GA media

    These are all security issues fixed in the grafana-7.5.11-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2020:2013-1 3 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…

    first Nov 25, 2020
  • High max 7.8
    SUSE-SU-2025:0927-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 7.8
    SUSE-SU-2015:0236-1 18 CVEs 1 exploited

    Security update for flash-player

    flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322). - Memory corruption …

    first Feb 6, 2015
  • High max 7.1
    SUSE-SU-2023:3504-1 2 CVEs 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

    first Aug 31, 2023
  • High max 8.8
    openSUSE-SU-2024:13532-1 2 CVEs 1 exploited

    nodejs-electron-27.2.0-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-27.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:13704-1 194 CVEs 2 exploited

    kernel-devel-longterm-6.6.17-1.1 on GA media

    These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:2078-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…

    first Apr 29, 2023
  • High max 7.8
    openSUSE-SU-2022:0755-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' a…

    first Mar 8, 2022
  • High max 7.8
    SUSE-SU-2024:0474-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achie…

    first Feb 14, 2024
  • High max 7.5
    SUSE-SU-2023:4068-1 2 CVEs 1 exploited

    Security update for go1.20

    This update for go1.20 fixes the following issues: - Update to go1.20.10 (bsc#1206346) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109)

    first Oct 13, 2023
  • High max 8.8
    openSUSE-SU-2022:0123-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 86.0.4363.23: - CHR-8843 Update chromium on desktop-stable-100-4363 to 100.0.4896.127 - DNA-98236 Turn on #snap-text-selection on all streams - DNA-98507 DCHECK at address_bar_controller.cc(547) - DN…

    first May 1, 2022
  • Critical max 9.6
    openSUSE-SU-2020:2178-1 2 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 72.0.3815.400 - DNA-88996 [Mac] Vertical spacing of sidebar items incorrect - DNA-89698 [Mac] text on bookmark bar not visible when application is not focused - DNA-89746 Add product-name s…

    first Dec 6, 2020
  • High max 7.8
    SUSE-SU-2024:1386-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside …

    first Apr 22, 2024
  • High max 8.8
    openSUSE-SU-2021:0712-1 7 CVEs 3 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 76.0.4017.94 - released on the stable branch Update to version 76.0.4017.88 - CHR-8404 Update chromium on desktop-stable-90-4017 to 90.0.4430.85 - DNA-92219 Add bookmark API supports to the f…

    first May 11, 2021
  • Medium max 5.5
    SUSE-FU-2022:4496-1 7 CVEs 1 exploited

    Feature update for SCA patterns

    This update for SCA patterns fixes the following issues: sca-patterns-base: - Version update from 1.3.1 to 1.5.0 to implement the conversion of SCA Tool to Python3 (jsc#SLE-25064, jsc#SLE-24335): * Convert SCA Tool from Python2 to Python3 (bsc#1191005, SLE-21…

    first Dec 15, 2022
  • High max 7.8
    SUSE-SU-2022:0365-1 7 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). -…

    first Feb 10, 2022
  • High max 7.9
    SUSE-SU-2023:1639-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 28, 2023
  • Medium max 5.5
    SUSE-SU-2025:0962-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_25 fixes several issues. The following security issues were fixed: - CVE-2024-56648: net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452). - CVE-2024-50302: HID: core: zero-initializ…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2021:0948-1 14 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.146 - CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114 - DNA-92171 Create active linkdiscovery service - DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiA…

    first Jul 1, 2021
  • High max 7.5
    SUSE-SU-2016:0858-1 4 CVEs 1 exploited

    Security update for rubygem-actionpack-4_1

    This update for rubygem-actionpack-4_1 fixes the following issues: - CVE-2016-0751: Object Leak DoS (bsc#963331) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) - CVE-2016-0752: directory traversal and information leak…

    first Mar 22, 2016
  • Critical max 9.8
    openSUSE-SU-2020:1993-1 16 CVEs 1 exploited

    Security update for rmt-server

    This update for rmt-server fixes the following issues: Update to version 2.6.5: - Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. - Add web server set…

    first Nov 21, 2020
  • Critical max 9.8
    SUSE-SU-2016:3079-1 7 CVEs 1 exploited

    Security update for tomcat

    This update for Tomcat provides the following fixes: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. (bsc#1010893 fate#321029) Security fixes: - CVE-2016-0762: Realm Timing Attack (bsc#1007854) - CVE-2016-5018: Security…

    first Dec 10, 2016
  • High max 8.8
    SUSE-SU-2023:3753-1 10 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_ap…

    first Sep 25, 2023
  • Critical max 9.6
    openSUSE-SU-2024:13481-1 6 CVEs 1 exploited

    ungoogled-chromium-119.0.6045.199-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024