Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 7.8
    SUSE-SU-2024:1359-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 20, 2024
  • High max 8.8
    openSUSE-SU-2021:0413-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 74.0.3911.203 - CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358) - DNA-90762 Replace “Don’t show again” with “Discard” - DNA-90974 Crash at opera::Persistent…

    first Mar 15, 2021
  • High max 8.0
    SUSE-SU-2019:3228-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • High max 7.8
    SUSE-SU-2025:0961-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2020:0060-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 15, 2020
  • High max 8.8
    openSUSE-SU-2021:1073-1 7 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …

    first Jul 21, 2021
  • High max 7.8
    SUSE-SU-2023:2459-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 7, 2023
  • High max 7.8
    openSUSE-SU-2021:0838-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Jun 4, 2021
  • High max 8.3
    SUSE-SU-2021:2487-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fi…

    first Jul 27, 2021
  • High max 7.5
    openSUSE-SU-2024:11825-1 2 CVEs 1 exploited

    ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.5
    openSUSE-SU-2021:0840-1 21 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.77 (boo#1186458): * Support Managed configuration API for Web Applications * WebOTP API: cross-origin iframe support * CSS custom counter styles * Support JSON Modules * Clipboard: read-o…

    first Jun 4, 2021
  • High max 8.5
    openSUSE-SU-2024:10592-1 22 CVEs 1 exploited

    xstream-1.4.18-1.1 on GA media

    These are all security issues fixed in the xstream-1.4.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2022:10121-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to …

    first Sep 15, 2022
  • Critical max 10.0
    openSUSE-SU-2021:4107-1 2 CVEs 2 exploited

    Security update for log4j

    This update for log4j fixes the following issue: - Previously published fixes for log4jshell turned out to be incomplete. Upstream has followed up on the original patch for CVE-2021-44228 with several additional changes (LOG4J2-3198, LOG4J2-3201, LOG4J2-3208,…

    first Dec 16, 2021
  • High max 7.8
    SUSE-SU-2024:0118-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bs…

    first Jan 16, 2024
  • High max 7.8
    SUSE-SU-2025:0952-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2024:11167-1 44 CVEs 1 exploited

    php7-7.4.24-1.1 on GA media

    These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2021:3282-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…

    first Oct 4, 2021
  • High max 7.8
    SUSE-SU-2025:0920-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…

    first Mar 19, 2025
  • High max 7.0
    SUSE-SU-2016:2585-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).

    first Oct 21, 2016
  • High max 7.5
    openSUSE-SU-2024:13331-1 1 CVE 1 exploited

    tomcat-9.0.82-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.82-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2016:1250-1 5 CVEs 1 exploited

    Security update for java-1_7_0-openjdk

    This update for java-1_7_0-openjdk to version 2.6.6 fixes five security issues. These security issues were fixed: - CVE-2016-0686: Ensure thread consistency (bsc#976340). - CVE-2016-0687: Better byte behavior (bsc#976340). - CVE-2016-0695: Make DSA more fair …

    first May 6, 2016
  • Critical max 9.8
    SUSE-SU-2022:0182-2 43 CVEs 6 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…

    first Feb 17, 2022
  • High max 8.3
    SUSE-SU-2021:2599-1 4 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalatio…

    first Aug 3, 2021
  • High max 7.5
    SUSE-SU-2023:4199-1 1 CVE 1 exploited

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)

    first Oct 25, 2023
  • High max 7.9
    SUSE-SU-2023:0152-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0266: Fixed a use-after-free bug led by a missing lock in ALSA. (bsc#1207134) - CVE-2022-47929: Fixed a NULL point…

    first Jan 26, 2023
  • High max 7.8
    SUSE-SU-2024:0476-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2024-24860: Fixed a denial…

    first Feb 14, 2024
  • Critical max 9.6
    openSUSE-SU-2023:0093-1 5 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 112.0.5615.165 (boo#1210618): * CVE-2023-2133: Out of bounds memory access in Service Worker API * CVE-2023-2134: Out of bounds memory access in Service Worker API * CVE-2023-2135: Use after free i…

    first Apr 24, 2023
  • High max 7.8
    SUSE-SU-2015:1136-1 1 CVE 1 exploited

    Security update for flash-player

    Adobe Flash Player was updated to 11.2.202.468, fixing a security issue, where attackers could trigger a heap overflow and could execute code. https://helpx.adobe.com/security/products/flash-player/apsb15-14.html

    first Jun 24, 2015
  • High max 7.5
    SUSE-SU-2016:3105-1 9 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026): - CVE-2016-9079: Use-after-free in SVG Animation (bsc#1012964 MFSA 2016-92) - CVE-2016-5297: Incorrect ar…

    first Dec 13, 2016
  • Medium max 5.3
    SUSE-SU-2015:2182-1 29 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    The java-1_7_1-ibm package was updated to version 7.1-3.20 to fix several security and non security issues: - bnc#955131: Version update to 7.1-3.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…

    first Dec 3, 2015
  • High max 7.8
    SUSE-SU-2025:0713-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_144 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 25, 2025
  • High max 8.8
    openSUSE-SU-2022:0103-1 22 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to 85.0.4341.28 - CHR-8816 Update chromium on desktop-stable-99-4341 to 99.0.4844.84 - DNA-98092 Crash at views::MenuItemView::GetMenuController() - DNA-98278 Translations for O85 - DNA-98320…

    first Apr 4, 2022
  • High max 7.8
    SUSE-SU-2022:0984-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_37 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to …

    first Mar 29, 2022
  • High max 7.5
    SUSE-SU-2019:0915-1 2 CVEs 1 exploited

    Security update for rubygem-actionpack-4_2

    This update for rubygem-actionpack-4_2 fixes the following issues: Security issues fixed: - CVE-2019-5418: Fixed a file content disclosure vulnerability in Action View which could be exploited via specially crafted accept headers in combination with calls to …

    first Apr 9, 2019
  • High max 8.8
    SUSE-SU-2023:3419-1 12 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…

    first Aug 24, 2023
  • High max 7.1
    SUSE-SU-2023:3505-1 2 CVEs 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

    first Aug 31, 2023
  • High max 7.8
    SUSE-SU-2025:0906-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_80 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…

    first Mar 18, 2025
  • High max 8.8
    openSUSE-SU-2024:12460-1 11 CVEs 1 exploited

    chromedriver-107.0.5304.87-1.1 on GA media

    These are all security issues fixed in the chromedriver-107.0.5304.87-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2022:3339-1 6 CVEs 1 exploited

    Security update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma

    This update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma fixes the following issues: Security fixes…

    first Sep 22, 2022