Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 8.8
    SUSE-SU-2020:0078-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 13, 2020
  • High max 8.8
    SUSE-SU-2019:1137-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8…

    first May 3, 2019
  • High max 8.4
    openSUSE-SU-2024:11775-1 1 CVE 1 exploited

    kernel-devel-5.16.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-5.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2020:14334-1 1 CVE 1 exploited

    Security update for tomcat6

    This update for tomcat6 fixes the following issues: - CVE-2020-1938: Fixed a file contents disclosure vulnerability (bsc#1164692).

    first Mar 27, 2020
  • Medium max 6.5
    SUSE-SU-2022:0080-1 18 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2021-4083: Fixed a race condition with Unix domain socket garbage collection that can lead to read memory after free. (bsc#1193727) - CVE-2021-4149: Fixed an im…

    first Jan 14, 2022
  • Critical max 9.6
    openSUSE-SU-2024:11550-1 8 CVEs 2 exploited

    nodejs-electron-13.5.0-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-13.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0
    SUSE-SU-2021:4097-1 2 CVEs 1 exploited

    Security update for storm-kit

    This update for storm-kit fixes the following issues: - Remove JndiLookup from log4j 2.x jars during build to prevent 'log4shell' code injection. (bsc#1193641, bsc#1193611, CVE-2021-44228) - Remove JMSAppender from log4j 1.2.x jars during build to prevent att…

    first Dec 15, 2021
  • High max 7.5
    SUSE-SU-2016:3080-1 9 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026 bsc#1012964): - CVE-2016-9079: Use-after-free in SVG Animation (MFSA 2016-92 bsc#1012964) - CVE-2016-5297: …

    first Dec 10, 2016
  • High max 8.0
    SUSE-SU-2019:3224-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_13 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privile…

    first Dec 10, 2019
  • Critical max 10.0
    SUSE-SU-2025:0557-1 256 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (bsc#1235705). - CVE-2024-46858: mptcp: pm:…

    first Feb 14, 2025
  • High max 8.3
    openSUSE-SU-2021:2415-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Security issues fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq b…

    first Jul 20, 2021
  • High max 8.8
    openSUSE-SU-2022:10108-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 90.0.4480.54 - CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102 - DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac - DNA-101309 Use base fil…

    first Aug 29, 2022
  • Critical max 9.8
    openSUSE-SU-2022:10148-1 4 CVEs 2 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: roundcubemail was updated to 1.5.3 * Enigma: Fix initial synchronization of private keys * Enigma: Fix double quoted-printable encoding of pgp-signed messages with no attachments (#8413) * Fix various …

    first Oct 16, 2022
  • High max 8.8
    openSUSE-SU-2024:13284-1 1 CVE 1 exploited

    libopencv408-4.8.1-1.1 on GA media

    These are all security issues fixed in the libopencv408-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2017:1632-1 10 CVEs 1 exploited

    Security update for tomcat6

    This update for tomcat6 fixes the following issues: Tomcat was updated to version 6.0.53: The full changelog is: http://tomcat.apache.org/tomcat-6.0-doc/changelog.html Security issues fixed: - CVE-2017-5647: A bug in the handling of pipelined requests could l…

    first Jun 21, 2017
  • High max 7.5
    openSUSE-SU-2024:11823-1 5 CVEs 1 exploited

    ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2015:2402-1 19 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-20…

    first Dec 30, 2015
  • High max 7.9
    SUSE-SU-2023:1591-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_106 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 27, 2023
  • High max 8.0
    SUSE-SU-2019:3247-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_14 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privil…

    first Dec 11, 2019
  • High max 8.8
    SUSE-SU-2015:1476-1 16 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities. - Firefox was updated to 38.2.1 ESR (bsc#943608) * MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during …

    first Sep 1, 2015
  • Critical max 9.8
    SUSE-SU-2015:1319-1 24 CVEs 1 exploited

    Security update for java-1_7_0-openjdk

    OpenJDK was updated to 2.6.1 - OpenJDK 7u85 to fix security issues and bugs. The following vulnerabilities were fixed: * CVE-2015-2590: Easily exploitable vulnerability in the Libraries component allowed successful unauthenticated network attacks via multiple…

    first Jul 23, 2015
  • High max 7.8
    SUSE-SU-2022:1038-1 24 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in n…

    first Mar 30, 2022
  • Critical max 9.8
    SUSE-SU-2022:0183-1 52 CVEs 6 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…

    first Jan 25, 2022
  • High max 8.8
    SUSE-SU-2023:4211-1 8 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to exec…

    first Oct 26, 2023
  • High max 7.8
    SUSE-SU-2025:0903-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_vali…

    first Mar 18, 2025
  • Critical max 9.8
    SUSE-SU-2025:0556-1 94 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-57897: drm/amdkfd: Correct the migration DMA map direction (bsc#1235969). - CVE-2024-57893: ALSA: seq: oss: Fix rac…

    first Feb 14, 2025
  • Critical max 9.0
    openSUSE-SU-2024:11681-1 2 CVEs 1 exploited

    log4j-2.16.0-2.1 on GA media

    These are all security issues fixed in the log4j-2.16.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2016:1248-1 6 CVEs 1 exploited

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following security issues - April 2016 Oracle CPU (bsc#976340): - CVE-2016-0686: Unspecified vulnerability allowed remote attackers to affect confidentiality, integrity, and availability via vectors related to Seri…

    first May 6, 2016
  • Medium max 6.4
    SUSE-SU-2022:0996-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_107 fixes one issue. The following security issue was fixed: - CVE-2021-0920: Fixed a local privilege escalation due to a use-after-free vulnerability in unix_scm_to_skb of af_unix (bsc#1193731).

    first Mar 29, 2022
  • High max 7.5
    SUSE-SU-2023:4163-1 1 CVE 1 exploited

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: - Updated netty to version 4.1.100: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - Updated netty-tcnative to version 2.0.62 Final.

    first Oct 24, 2023
  • Critical max 9.8
    SUSE-SU-2026:0202-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.11 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-386…

    first Jan 21, 2026
  • High max 7.5
    SUSE-SU-2016:1146-1 10 CVEs 1 exploited

    Security update for portus

    Portus was updated to version 2.0.3, which brings several fixes and enhancements: - Fixed crono job when a repository could not be found. - Fixed compatibility issues with Docker 1.10 and Distribution 2.3. - Handle multiple scopes in token requests. - Add opt…

    first Apr 25, 2016
  • Critical max 9.8
    SUSE-SU-2026:0209-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-396…

    first Jan 21, 2026
  • High max 7.8
    SUSE-SU-2024:1545-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_148 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • High max 7.8
    SUSE-SU-2025:0924-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 8.1
    SUSE-SU-2017:3059-1 5 CVEs 2 exploited

    Security update for tomcat

    Apache Tomcat was updated to 7.0.82 adding features, fixing bugs and security issues. This is another bugfix release, for full details see: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Fixed security issues: - CVE-2017-5664: A problem in handling e…

    first Nov 23, 2017
  • High max 8.4
    SUSE-SU-2016:1275-1 5 CVEs 3 exploited

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable MAGIC…

    first May 11, 2016
  • Critical max 9.8
    openSUSE-SU-2023:0366-1 3 CVEs 1 exploited

    Security update for vlc

    This update for vlc fixes the following issues: Update to version 3.0.20: + Video Output: - Fix green line in fullscreen in D3D11 video output - Fix crash with some AMD drivers old versions - Fix events propagation issue when double-clicking with mouse wheel …

    first Nov 12, 2023
  • High max 7.8
    openSUSE-SU-2022:0760-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • Critical max 9.0
    openSUSE-SU-2025:14708-1 1 CVE 1 exploited

    owasp-modsecurity-crs-4.9.0-1.1 on GA media

    These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 28, 2025