Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 7.5
    SUSE-SU-2023:4259-1 2 CVEs 1 exploited

    Security update for nodejs12

    This update for nodejs12 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272)

    first Oct 30, 2023
  • High max 7.5
    SUSE-SU-2024:3342-1 4 CVEs 1 exploited

    Security update for kubernetes1.24

    This update for kubernetes1.24 fixes the following issues: - CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869) - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability…

    first Sep 19, 2024
  • High max 8.0
    SUSE-SU-2019:3223-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_6 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • Critical max 9.6
    openSUSE-SU-2024:13473-1 6 CVEs 1 exploited

    chromedriver-119.0.6045.199-1.1 on GA media

    These are all security issues fixed in the chromedriver-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.4
    SUSE-SU-2022:0239-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_96 fixes one issue. The following security issue was fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).

    first Jan 31, 2022
  • High max 8.8
    openSUSE-SU-2022:10087-1 9 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out”…

    first Aug 15, 2022
  • Critical max 9.6
    openSUSE-SU-2022:0070-1 18 CVEs 3 exploited

    Security update for nodejs-electron

    This update for nodejs-electron fixes the following issues: - Fix webpack-4 with OpenSSL 3.0 Update to version 16.0.9 * https://github.com/electron/electron/releases/tag/v16.0.9 Update to version 16.0.8 * https://github.com/electron/electron/releases/tag/v16.…

    first Mar 3, 2022
  • High max 7.8
    SUSE-SU-2025:0255-1 13 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix sus…

    first Jan 27, 2025
  • High max 8.0
    SUSE-SU-2025:0698-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix p…

    first Feb 24, 2025
  • Critical max 9.8
    SUSE-SU-2025:0565-1 54 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47222: net: bridge: fix vlan tunnel dst refcnt when egressing (bsc#1224857). - CVE-2021-47223: net: bridge: fix vlan t…

    first Feb 17, 2025
  • Critical max 9.8
    SUSE-SU-2022:2134-1 13 CVEs 2 exploited

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-QubitProducts-exporter_exporter: - Adapted to build on Enterprise Linux. - Fix build for RedHat 7 - Require Go >= 1.14 also for CentOS - Add support for CentOS - Replace %{?systemd_requires} with %{?system…

    first Jun 20, 2022
  • Critical max 9.6
    openSUSE-SU-2023:0396-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 105.0.4970.34 * DNA-112796 [Import] Import bookmarks and history don't work * DNA-113147 Add strength setting for Lucid Mode * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable sp…

    first Dec 11, 2023
  • Critical max 9.8
    SUSE-SU-2024:3585-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826)…

    first Oct 10, 2024
  • High max 8.0
    SUSE-SU-2025:0681-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix possibl…

    first Feb 24, 2025
  • High max 7.8
    openSUSE-SU-2019:1209-1 5 CVEs 1 exploited

    Security update for apache2

    This update for apache2 fixes the following issues: * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scrip…

    first Apr 16, 2019
  • High max 7.8
    SUSE-SU-2022:0978-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_16 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, related to …

    first Mar 29, 2022
  • High max 8.8
    SUSE-SU-2016:0715-1 23 CVEs 1 exploited

    Security update for flash-player

    Adobe flash-player was updated to 11.2.202.577 to fix the following list of security issues (bsc#970547): These updates resolve integer overflow vulnerabilities that could lead to code execution (CVE-2016-0963, CVE-2016-0993, CVE-2016-1010). These updates res…

    first Mar 11, 2016
  • High max 7.8
    SUSE-SU-2021:1273-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • Critical max 9.8
    SUSE-SU-2020:1150-1 2 CVEs 2 exploited

    Security update for salt

    This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)

    first Apr 29, 2020
  • High max 7.5
    SUSE-SU-2024:3094-1 3 CVEs 1 exploited

    Security update for kubernetes1.26

    This update for kubernetes1.26 fixes the following issues: Update kubernetes to version 1.26.15: - CVE-2024-24786: Fixed infinite loop in protojson.Unmarshal in golang-protobuf (bsc#1229867) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid…

    first Sep 3, 2024
  • High max 8.8
    openSUSE-SU-2021:0267-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 88.0.4324.150 boo#1181827 - CVE-2021-21148: Heap buffer overflow in V8

    first Feb 9, 2021
  • High max 8.8
    SUSE-SU-2023:3634-1 1 CVE 1 exploited

    Security update for libwebp

    This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231).

    first Sep 18, 2023
  • Critical max 9.6
    openSUSE-SU-2024:10770-1 4 CVEs 1 exploited

    freetype2-devel-2.11.0-1.2 on GA media

    These are all security issues fixed in the freetype2-devel-2.11.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.9
    SUSE-SU-2023:1576-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_5 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-bound…

    first Mar 26, 2023
  • Critical max 9.8
    SUSE-SU-2025:0261-1 34 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer o…

    first Jan 27, 2025
  • Critical max 9.8
    SUSE-SU-2022:0142-1 71 CVEs 6 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: F…

    first Jan 20, 2022
  • High max 8.8
    openSUSE-SU-2024:13204-1 4 CVEs 1 exploited

    chromedriver-116.0.5845.179-1.1 on GA media

    These are all security issues fixed in the chromedriver-116.0.5845.179-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2021:0753-1 30 CVEs 3 exploited

    Security update for exim

    This update for exim fixes the following issues: exim was updated to 4.94.2: security update (boo#1185631) * CVE-2020-28007: Link attack in Exim's log directory * CVE-2020-28008: Assorted attacks in Exim's spool directory * CVE-2020-28014: Arbitrary PID file …

    first May 20, 2021
  • High max 7.0
    SUSE-SU-2016:2634-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 3 for SLE 12 SP1

    This update for the Linux Kernel 3.12.53-60_30 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • High max 7.9
    SUSE-SU-2023:0433-1 9 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negat…

    first Feb 16, 2023
  • High max 8.8
    openSUSE-SU-2024:11957-1 1 CVE 1 exploited

    chromedriver-99.0.4844.84-1.1 on GA media

    These are all security issues fixed in the chromedriver-99.0.4844.84-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0
    SUSE-SU-2016:2655-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 12 for SLE 12

    This update for the Linux Kernel 3.12.55-52_42 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 26, 2016
  • Critical max 9.8
    SUSE-SU-2020:3250-1 3 CVEs 1 exploited

    Security update for SUSE Manager 4.0

    This security update for SUSE Manager 4.0 provides the following fixes: py26-compat-salt: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) sp…

    first Nov 6, 2020
  • Critical max 9.8
    SUSE-SU-2025:0253-1 29 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…

    first Jan 27, 2025
  • High max 8.8
    openSUSE-SU-2022:10109-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 90.0.4480.54 - CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102 - DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac - DNA-101309 Use base fil…

    first Aug 29, 2022
  • High max 7.0
    SUSE-SU-2016:2629-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 2 for SLE 12 SP1

    This update for the Linux Kernel 3.12.51-60_25 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • High max 7.8
    SUSE-SU-2024:0113-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6610: Fixed an out of bounds read in the SMB client when printing debug information (bsc#1217946). - CVE-202…

    first Jan 16, 2024
  • Critical max 9.8
    SUSE-SU-2020:1151-1 2 CVEs 2 exploited

    Security update for salt

    This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 (bsc#1170595)

    first Apr 29, 2020
  • Critical max 9.8
    SUSE-SU-2024:0486-1 9 CVEs 1 exploited

    Security update for SUSE Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Do not strip if SUSE Linux Enterprise 15 SP3 - Exclude debug for Red Hat Enterprise Linux >= 8 - Build with Go >= 1.20 when the OS is not Red Hat Enterprise Linux golang-githu…

    first Feb 15, 2024
  • Critical max 9.8
    SUSE-SU-2021:1430-1 10 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…

    first Apr 29, 2021