Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 8.8
    openSUSE-SU-2024:13265-1 1 CVE 1 exploited

    element-desktop-1.11.43-1.1 on GA media

    These are all security issues fixed in the element-desktop-1.11.43-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Medium max 5.3
    SUSE-SU-2015:2166-1 31 CVEs 1 exploited

    Security update for java-1_6_0-ibm

    This update for java-1_6_0-ibm fixes the following issues: - Version update to 6.0-16.15 bsc#955131: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-…

    first Nov 26, 2015
  • High max 8.8
    SUSE-SU-2023:0573-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 28, 2023
  • High max 8.8
    openSUSE-SU-2019:2591-1 42 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …

    first Nov 30, 2019
  • Critical max 9.8
    SUSE-SU-2025:0577-2 94 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736). - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sy…

    first Mar 11, 2025
  • Critical max 9.8
    SUSE-SU-2024:4388-1 18 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52524: Fixed possible corruption in nfc/llcp (bsc#1220927). - CVE-2024-49925: fbdev: efifb: Register sysfs groups thro…

    first Dec 19, 2024
  • Critical max 9.8
    SUSE-SU-2016:1378-1 10 CVEs 1 exploited

    Security update for java-1_7_0-ibm

    This IBM Java 1.7.0 SR9 FP40 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (…

    first May 20, 2016
  • Critical max 9.4
    openSUSE-SU-2024:13360-1 3 CVEs 1 exploited

    teleport-14.1.1-1.1 on GA media

    These are all security issues fixed in the teleport-14.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2024:1944-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071): - CVE-2024-23252: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010) - CVE-2024-23254: Fixed a vulnerability where …

    first Jun 7, 2024
  • Low max 3.7
    openSUSE-SU-2022:0036-1 3 CVEs 1 exploited

    Security update for zabbix

    This update for zabbix fixes the following issues: - Updated to latest realease 4.0.37. Security issues fixed: - CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists (boo#1194681). - CVE-2021-27927: Fix…

    first Feb 16, 2022
  • Critical max 9.8
    openSUSE-SU-2024:11303-1 8 CVEs 3 exploited

    roundcubemail-1.4.11-1.3 on GA media

    These are all security issues fixed in the roundcubemail-1.4.11-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2020:1868-1 3 CVEs 1 exploited

    Security update for salt

    This update for salt fixes the following issues: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string (bsc#1178485) - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#…

    first Nov 7, 2020
  • High max 8.8
    openSUSE-SU-2021:0276-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 88.0.4324.150 boo#1181827 - CVE-2021-21148: Heap buffer overflow in V8 This update was imported from the openSUSE:Leap:15.2:Update update project.

    first Feb 11, 2021
  • High max 7.8
    SUSE-SU-2018:2879-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a h…

    first Sep 26, 2018
  • High max 8.8
    SUSE-SU-2023:3946-1 1 CVE 1 exploited

    Security update for libvpx

    This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

    first Oct 3, 2023
  • High max 8.8
    openSUSE-SU-2024:13269-1 3 CVEs 1 exploited

    chromedriver-117.0.5938.132-1.1 on GA media

    These are all security issues fixed in the chromedriver-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2025:0577-1 94 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-36898: gpiolib: cdev: fix uninitialised kfifo (bsc#1225736). - CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sy…

    first Mar 11, 2025
  • Medium max 5.3
    SUSE-SU-2015:2216-1 29 CVEs 1 exploited

    Security update for java-1_7_0-ibm

    The java-1_7_0-ibm package was updated to version 7.0-9.20 to fix several security and non security issues: - bnc#955131: Version update to 7.0-9.20: CVE-2015-4734 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-48…

    first Dec 7, 2015
  • Critical max 9.6
    openSUSE-SU-2024:12875-1 5 CVEs 1 exploited

    chromedriver-112.0.5615.165-1.1 on GA media

    These are all security issues fixed in the chromedriver-112.0.5615.165-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Low max 3.9
    SUSE-SU-2023:2604-2 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695).

    first Sep 8, 2023
  • High max 8.8
    openSUSE-SU-2024:0020-1 17 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302, boo#1218533, boo#1218719) * CVE-2024-0333: Insufficient data validation in Extensions * CVE-2024-0222: Use after free in ANGLE * CVE-2024-02…

    first Jan 16, 2024
  • High max 8.0
    SUSE-SU-2019:3248-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent…

    first Dec 11, 2019
  • High max 7.8
    SUSE-SU-2024:0120-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…

    first Jan 16, 2024
  • High max 7.5
    openSUSE-SU-2024:11822-1 2 CVEs 1 exploited

    ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2022:4634-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).

    first Dec 29, 2022
  • High max 7.8
    SUSE-SU-2024:1554-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-1086: Fixed…

    first May 7, 2024
  • High max 7.8
    SUSE-SU-2022:14905-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.8
    SUSE-SU-2022:1012-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_150 fixes several issues. The following security issues were fixed: - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2…

    first Mar 29, 2022
  • High max 8.8
    openSUSE-SU-2017:0740-1 18 CVEs 1 exploited

    Security update for Chromium

    Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CV…

    first Mar 17, 2017
  • High max 8.3
    SUSE-SU-2021:2559-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_10 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555:…

    first Jul 29, 2021
  • Critical max 9.8
    SUSE-SU-2025:1183-1 530 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED w…

    first Apr 9, 2025
  • High max 7.8
    SUSE-SU-2025:0707-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_174 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 25, 2025
  • Critical max 10.0
    openSUSE-SU-2019:1606-1 6 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_c…

    first Jun 24, 2019
  • High max 8.8
    openSUSE-SU-2024:0275-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 113.0.5230.32 * DNA-118250 Backport fix for CVE-2024-7971 from Chrome to Opera 113 - Changes in 113.0.5230.31 * CHR-9819 Update Chromium on desktop-stable-127-5230 to 127.0.6533.120 * DNA-116113 Pr…

    first Sep 2, 2024
  • High max 8.4
    SUSE-SU-2022:0262-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_40 fixes one issue. The following security issue was fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).

    first Feb 1, 2022
  • High max 8.8
    SUSE-SU-2022:3137-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • High max 8.8
    openSUSE-SU-2024:11656-1 4 CVEs 1 exploited

    nodejs-electron-13.6.2-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-13.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2016:1299-1 10 CVEs 1 exploited

    Security update for java-1_7_1-ibm

    This IBM Java 1.7.1 SR3 FP40 release fixes the following issues: Security issues fixed: - CVE-2016-0264: buffer overflow vulnerability in the IBM JVM (bsc#977648) - CVE-2016-0363: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix (…

    first May 13, 2016
  • Medium max 6.4
    SUSE-SU-2022:0668-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_153 fixes several issues. The following security issues were fixed: - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc (bsc#1194463). - CVE-2021-28688: Fixed XSA-365 that inc…

    first Mar 2, 2022
  • Critical max 9.8
    SUSE-SU-2025:0254-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…

    first Jan 27, 2025