Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2015:1375-1 21 CVEs 1 exploited

    Security update for java-1_7_0-ibm

    java-1_7_0-ibm was updated to fix 21 security issues. These security issues were fixed: - CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to …

    first Jul 31, 2015
  • High max 8.8
    SUSE-SU-2020:1135-1 30 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potenti…

    first Apr 29, 2020
  • Critical max 9.8
    SUSE-SU-2022:0182-1 43 CVEs 6 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…

    first Jan 25, 2022
  • High max 8.8
    openSUSE-SU-2021:1096-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.277: - DNA-94291 Video conference popout doesnt remember its size after resizing - DNA-94399 Incorrect icon for wp.pl in address bar dropdown - DNA-94462 Low quality of default wall…

    first Aug 5, 2021
  • High max 8.0
    SUSE-SU-2019:3246-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SLE 15)

    This update for the Linux Kernel 4.12.14-25_28 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privile…

    first Dec 11, 2019
  • High max 8.8
    SUSE-SU-2023:3626-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…

    first Sep 15, 2023
  • High max 8.8
    openSUSE-SU-2024:12547-1 1 CVE 1 exploited

    chromedriver-108.0.5359.94-1.1 on GA media

    These are all security issues fixed in the chromedriver-108.0.5359.94-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:11209-1 17 CVEs 1 exploited

    python36-Pillow-8.3.2-1.2 on GA media

    These are all security issues fixed in the python36-Pillow-8.3.2-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:11169-1 97 CVEs 2 exploited

    php8-8.0.11-1.1 on GA media

    These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:10746-1 31 CVEs 3 exploited

    exim-4.94.2-4.2 on GA media

    These are all security issues fixed in the exim-4.94.2-4.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.0
    SUSE-SU-2025:0667-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 53 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_194 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2021-47511: ALSA: pcm: oss: fix negative…

    first Feb 24, 2025
  • High max 7.5
    openSUSE-SU-2021:2872-1 1 CVE 1 exploited

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

    first Aug 30, 2021
  • High max 8.8
    SUSE-SU-2022:3351-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2022-32893: Fixed several crashes and rendering issues (bsc#1202807). - Fixed WebKitGTK not allow to be used from non-main threads (bsc#1202169).

    first Sep 23, 2022
  • High max 8.8
    SUSE-SU-2016:2872-1 4 CVEs 1 exploited

    Security update for bash

    This update for bash fixes the following issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables (bsc#1001299) - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command exec…

    first Nov 22, 2016
  • High max 8.8
    openSUSE-SU-2024:13100-1 32 CVEs 1 exploited

    ungoogled-chromium-115.0.5790.102-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-115.0.5790.102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.5
    openSUSE-SU-2024:11370-1 5 CVEs 1 exploited

    sca-patterns-sle12-1.0.8-2.2 on GA media

    These are all security issues fixed in the sca-patterns-sle12-1.0.8-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    SUSE-SU-2023:4133-1 4 CVEs 1 exploited

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…

    first Oct 19, 2023
  • High max 7.8
    SUSE-SU-2017:2723-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix the following issues: - Stack corruption could have lead to local privilege escalation (bsc#1059525, CVE-2017-1000253).

    first Oct 13, 2017
  • High max 8.8
    SUSE-SU-2015:1449-1 31 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    Mozilla Firefox is being updated to the current Firefox 38ESR branch (specifically the 38.2.0ESR release). Security issues fixed: - MFSA 2015-78 / CVE-2015-4495: Same origin violation and local file stealing via PDF reader - MFSA 2015-79 / CVE-2015-4473/CVE-2…

    first Aug 25, 2015
  • Critical max 9.8
    SUSE-SU-2025:1241-1 605 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when…

    first Apr 14, 2025
  • High max 7.5
    SUSE-SU-2023:4373-1 2 CVEs 1 exploited

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272)

    first Nov 6, 2023
  • High max 7.0
    SUSE-SU-2016:2673-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 7 for SLE 12 SP1

    This update for the Linux Kernel 3.12.62-60_62 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 31, 2016
  • High max 7.9
    SUSE-SU-2023:0634-1 9 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and…

    first Mar 7, 2023
  • Critical max 9.6
    openSUSE-SU-2020:2016-1 3 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inapprop…

    first Nov 25, 2020
  • Medium max 6.5
    SUSE-SU-2022:0367-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - CVE-2…

    first Feb 10, 2022
  • Critical max 9.6
    openSUSE-SU-2022:10117-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 90.0.4480.84 - DNA-101690 Cherry-pick fix for CVE-2022-3075 from chromium Update to 90.0.4480.80 - DNA-99188 Tab Tooltip doesn't disappear - DNA-100664 Shopping corner widget - DNA-100843 Options to …

    first Sep 12, 2022
  • Critical max 9.8
    SUSE-SU-2025:1027-1 468 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339). - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of f…

    first Mar 26, 2025
  • High max 7.5
    openSUSE-SU-2024:13376-1 2 CVEs 1 exploited

    cmctl-1.13.2-1.1 on GA media

    These are all security issues fixed in the cmctl-1.13.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2020:0554-1 7 CVEs 1 exploited

    Security update for kubernetes

    This update introduces kubernetes version 1.14.1 and cri-o 1.17.1 to Leap 15.1.

    first Apr 26, 2020
  • Critical max 9.8
    SUSE-SU-2024:2624-1 4 CVEs 1 exploited

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal red…

    first Jul 30, 2024
  • High max 8.8
    SUSE-SU-2022:3136-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • Critical max 10.0
    SUSE-SU-2025:02923-1 447 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073). - CVE-2023-52888: media: mediatek: vcode…

    first Aug 20, 2025
  • Medium max 6.4
    SUSE-SU-2022:1037-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_d…

    first Mar 30, 2022
  • High max 7.8
    openSUSE-SU-2022:0768-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 9, 2022
  • Critical max 9.8
    SUSE-SU-2025:0867-1 29 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768). - CVE-2022-49080: mm/mempolicy: fix mpol_n…

    first Mar 14, 2025
  • Critical max 9.6
    openSUSE-SU-2024:11555-1 21 CVEs 3 exploited

    chromedriver-94.0.4606.71-1.1 on GA media

    These are all security issues fixed in the chromedriver-94.0.4606.71-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.5
    SUSE-SU-2025:03022-1 3 CVEs 1 exploited

    Security update for git

    This update for git fixes the following issues: - CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk (bsc#1245938) - CVE-2025-46835: Fixed arbitrary writable file creation when cloning untrusted repository in Git GUI (bsc#1245942) -…

    first Aug 29, 2025
  • Critical max 9.8
    SUSE-SU-2022:1760-1 1 CVE 1 exploited

    Security update for unrar

    This update for unrar fixes the following issues: - CVE-2022-30333: Fixed directory traversal issue that allowed writing to non-designated paths (bsc#1199349).

    first May 19, 2022
  • High max 8.1
    openSUSE-SU-2023:0360-1 8 CVEs 1 exploited

    Security update for go1.21

    This update introduces go1.21, including fixes for the following issues: - go1.21.3 (released 2023-10-10) includes a security fix to the net/http package. Refs boo#1212475 go1.21 release tracking CVE-2023-39325 CVE-2023-44487 * go#63427 go#63417 boo#1216109 s…

    first Nov 9, 2023
  • High max 8.2
    SUSE-SU-2023:2231-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privile…

    first May 17, 2023