Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 7.8
    SUSE-SU-2023:2368-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 6 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_23 fixes several issues. The following security issues were fixed: - CVE-2023-0386: Fixed privileges escalation for low-privileged users in the OverlayFS subsystem (bsc#1210499). - CVE-2023-2162: Fixed an use…

    first Jun 5, 2023
  • Critical max 10.0
    SUSE-SU-2024:2939-1 531 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952). - CVE-2021-47089: kfence: fix memory leak when cat …

    first Aug 16, 2024
  • Critical max 9.8
    SUSE-SU-2025:3725-1 94 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prevent resc…

    first Oct 22, 2025
  • Critical max 9.6
    SUSE-SU-2022:0777-1 2 CVEs 2 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.6.1 ESR (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework

    first Mar 9, 2022
  • High max 8.8
    openSUSE-SU-2021:0296-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 74.0.3911.107 - CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150 - DNA-90329 Implement client_capabilities negotiation for Flow / Sync - DNA-90560 [Search Tabs] Open Tabs…

    first Feb 15, 2021
  • High max 8.0
    SUSE-SU-2019:2984-1 49 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of th…

    first Nov 20, 2019
  • Critical max 9.8
    SUSE-SU-2020:3155-1 3 CVEs 1 exploited

    Security update for salt

    This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keywor…

    first Nov 4, 2020
  • High max 8.8
    openSUSE-SU-2024:13277-1 1 CVE 1 exploited

    MozillaThunderbird-115.3.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-115.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3
    SUSE-SU-2015:2192-1 31 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Dec 3, 2015
  • Critical max 9.8
    SUSE-SU-2016:1300-1 10 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    This IBM Java 1.7.1 SR3 FP40 relese fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (b…

    first May 13, 2016
  • High max 7.8
    SUSE-SU-2023:2371-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). -…

    first Jun 5, 2023
  • High max 7.8
    SUSE-SU-2025:0944-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 19, 2025
  • High max 7.8
    SUSE-SU-2022:1035-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (…

    first Mar 30, 2022
  • High max 7.8
    SUSE-SU-2022:0759-1 14 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.8
    openSUSE-SU-2024:13274-1 1 CVE 1 exploited

    libvpx-devel-1.13.0-2.1 on GA media

    These are all security issues fixed in the libvpx-devel-1.13.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2022:0804-1 2 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 91.6.2 (bsc#1196809): - CVE-2022-26485: Use-after-free in XSLT parameter processing - CVE-2022-26486: Use-after-free in WebGPU IPC Framework

    first Mar 10, 2022
  • High max 7.8
    SUSE-SU-2016:1613-1 36 CVEs 1 exploited

    Security update for flash-player

    Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 (boo#984695): * APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4…

    first Jun 17, 2016
  • High max 8.8
    openSUSE-SU-2019:1593-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Mozilla Firefox 60.7.1esr was released to address MFSA 2019-18 (boo#1138614) * CVE-2019-11707: Fixed a type confusion in Array.pop

    first Jun 23, 2019
  • High max 7.8
    SUSE-SU-2024:1388-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…

    first Apr 22, 2024
  • Critical max 9.8
    SUSE-SU-2020:1392-1 2 CVEs 2 exploited

    Security update for salt

    This update for salt fixes the following issues: Security issues fixed: - CVE-2020-11651: Fixed the improper validation of method calls in salt-master, that could have allowed unauthenticated remote users to run arbitrary commands on salt minions (bsc#1170595…

    first May 22, 2020
  • High max 8.3
    SUSE-SU-2021:2421-1 24 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116 ). - CVE-2021-33909: Ex…

    first Jul 21, 2021
  • Critical max 9.6
    openSUSE-SU-2020:1943-1 3 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…

    first Nov 16, 2020
  • High max 8.3
    SUSE-SU-2021:2584-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_72 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…

    first Aug 2, 2021
  • High max 8.8
    openSUSE-SU-2021:0592-1 9 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Opera was updated to version 75.0.3969.171 (boo#1184256) CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199, CVE-2021-21191, CVE-2021-21192, CVE-2021-21193

    first Apr 22, 2021
  • Critical max 9.8
    openSUSE-SU-2024:14397-1 12 CVEs 1 exploited

    libmozjs-128-0-128.3.1-1.1 on GA media

    These are all security issues fixed in the libmozjs-128-0-128.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 12, 2024
  • High max 8.4
    SUSE-SU-2022:0254-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 1, 2022
  • High max 7.8
    SUSE-SU-2018:3088-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerabilit…

    first Oct 9, 2018
  • Critical max 10.0
    SUSE-SU-2019:1684-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…

    first Jun 22, 2019
  • High max 8.8
    SUSE-SU-2022:4642-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). - CVE-2022-42852: Fixed disclosure of process memory …

    first Dec 30, 2022
  • Critical max 9.8
    openSUSE-SU-2024:10106-1 8 CVEs 3 exploited

    bash-4.4-92.1 on GA media

    These are all security issues fixed in the bash-4.4-92.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 6.8
    openSUSE-SU-2021:0707-1 1 CVE 1 exploited

    Security update for perl-Image-ExifTool

    This update for perl-Image-ExifTool fixes the following issues: Update to version 12.25 fixes (boo#1185547 CVE-2021-22204) * JPEG XL support is now official * Added read support for Medical Research Council (MRC) image files * Added ability to write a number …

    first May 10, 2021
  • Medium max 6.5
    openSUSE-SU-2022:0366-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254)…

    first Feb 10, 2022
  • Low max 3.9
    openSUSE-SU-2024:13022-1 1 CVE 1 exploited

    libvmtools-devel-12.2.0-4.1 on GA media

    These are all security issues fixed in the libvmtools-devel-12.2.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:4828-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…

    first Dec 14, 2023
  • High max 7.8
    SUSE-SU-2017:1404-1 5 CVEs 1 exploited

    Security update for ghostscript

    This update for ghostscript fixes the following security vulnerabilities: - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) - CVE-2016-9601: An integer overflow in the bundle…

    first May 24, 2017
  • High max 7.5
    SUSE-SU-2023:4210-1 5 CVEs 1 exploited

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - Updated to version 9.4.53.v20231009: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - CVE-2023-36478: Fixed an integer overflow in the HTTP/2 HPACK…

    first Oct 26, 2023
  • High max 7.8
    SUSE-SU-2021:0226-1 3 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …

    first Jan 26, 2021
  • Critical max 9.8
    SUSE-SU-2024:0548-1 6 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.5 (bsc#1219604): - CVE-2024-23222: Fixed processing maliciously crafted web content that may have led to arbitrary code execution (bsc#1219113). - CVE-2024-23206: Fixed fingerprint…

    first Feb 20, 2024
  • High max 7.8
    SUSE-SU-2024:1558-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_127 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 8, 2024
  • Critical max 9.8
    SUSE-SU-2025:0201-2 77 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-48742: rtnetli…

    first Mar 11, 2025