Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 8.8
    SUSE-SU-2023:3829-1 1 CVE 1 exploited

    Security update for libwebp

    This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231).

    first Sep 27, 2023
  • Critical max 9.6
    openSUSE-SU-2024:13982-1 4 CVEs 1 exploited

    chromedriver-125.0.6422.60-1.1 on GA media

    These are all security issues fixed in the chromedriver-125.0.6422.60-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    SUSE-SU-2024:4314-1 241 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill/fill to…

    first Dec 13, 2024
  • High max 7.8
    SUSE-SU-2023:2468-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_22 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). - C…

    first Jun 8, 2023
  • Critical max 9.6
    openSUSE-SU-2021:1339-1 21 CVEs 3 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 94.0.4606.54 (boo#1190765): * CVE-2021-37956: Use after free in Offline use * CVE-2021-37957: Use after free in WebGPU * CVE-2021-37958: Inappropriate implementation in Navigation * CVE-2021-37959:…

    first Oct 11, 2021
  • High max 8.8
    openSUSE-SU-2023:0246-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to version 116.0.5845.187 (boo#1215231): * CVE-2023-4863: Heap buffer overflow in WebP

    first Sep 13, 2023
  • High max 8.3
    openSUSE-SU-2021:1076-1 5 CVEs 1 exploited

    Security update for the Linux Kernel

    The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909…

    first Jul 22, 2021
  • High max 7.8
    SUSE-SU-2021:1843-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).

    first Jun 3, 2021
  • Critical max 9.6
    SUSE-SU-2020:3458-1 12 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 78.5.0 ESR (bsc#1178824) * CVE-2020-26951: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code * CVE-2020-16012: Variable time …

    first Nov 20, 2020
  • High max 7.8
    SUSE-SU-2024:0468-1 9 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve…

    first Feb 14, 2024
  • High max 8.8
    openSUSE-SU-2020:0245-1 2 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to version 80.0.3987.122 (bsc#1164828). Security issues fixed: - CVE-2020-6418: Fixed a type confusion in V8 (bsc#1164828). - CVE-2020-6407: Fixed an OOB memory access in streams (bsc#1…

    first Feb 26, 2020
  • High max 8.8
    SUSE-SU-2023:3300-1 14 CVEs 5 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…

    first Aug 14, 2023
  • Critical max 9.8
    SUSE-SU-2025:0943-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_153 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2021-47261: Fix initializing CQ fragments bu…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2021:0881-1 10 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.101 (boo#1187141) * CVE-2021-30544: Use after free in BFCache * CVE-2021-30545: Use after free in Extensions * CVE-2021-30546: Use after free in Autofill * CVE-2021-30547: Out of bounds w…

    first Jun 16, 2021
  • High max 7.8
    SUSE-SU-2022:0765-1 11 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' a…

    first Apr 7, 2022
  • High max 8.8
    openSUSE-SU-2021:1462-1 7 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 95.0.4638.69 (boo#1192184): * CVE-2021-37997: Use after free in Sign-In * CVE-2021-37998: Use after free in Garbage Collection * CVE-2021-37999: Insufficient data validation in New Tab Page * CVE-2…

    first Nov 8, 2021
  • High max 8.8
    SUSE-SU-2016:0398-1 22 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - Security update to 11.2.202.569 (bsc#965901): * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-20…

    first Feb 10, 2016
  • Critical max 9.8
    SUSE-SU-2025:0239-1 15 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…

    first Jan 25, 2025
  • High max 7.8
    SUSE-SU-2022:3585-1 9 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated. The following security bugs were fixed: - CVE-2022-3303: Fixed a race condition in the sound subsystem due to improper locking (bnc#1203769). - CVE-2022-41218: Fixed an use-after-free caused by refcount rac…

    first Oct 14, 2022
  • High max 8.1
    SUSE-SU-2023:4472-1 5 CVEs 1 exploited

    Security update for go1.20-openssl

    This update for go1.20-openssl fixes the following issues: Update to version 1.20.11.1 cut from the go1.20-openssl-fips branch at the revision tagged go1.20.11-1-openssl-fips. * Update to go1.20.11 go1.20.11 (released 2023-11-07) includes security fixes to th…

    first Nov 16, 2023
  • High max 8.1
    SUSE-SU-2021:14705-1 3 CVEs 1 exploited

    Security update for tomcat6

    This update for tomcat6 fixes the following issues: - CVE-2021-25329: Fixed completely CVE-2020-9484 (bsc#1182909). - CVE-2021-24122: Fixed an information disclosure (bsc#1180947). - CVE-2017-12617: Fixed a file inclusion vulnerability through a crafted reque…

    first Apr 21, 2021
  • High max 7.8
    SUSE-SU-2025:0950-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_49 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…

    first Mar 19, 2025
  • High max 8.4
    openSUSE-SU-2024:10860-1 14 CVEs 1 exploited

    ikiwiki-3.20200202.3-2.7 on GA media

    These are all security issues fixed in the ikiwiki-3.20200202.3-2.7 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.7
    openSUSE-SU-2024:13337-1 6 CVEs 1 exploited

    corepack20-20.8.1-1.1 on GA media

    These are all security issues fixed in the corepack20-20.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    openSUSE-SU-2022:0370-1 11 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). - C…

    first Feb 11, 2022
  • High max 8.8
    openSUSE-SU-2022:0047-1 93 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 83.0.4254.27 - CHR-8737 Update chromium on desktop-stable-97-4254 to 97.0.4692.99 - DNA-96336 [Mac] Translate new network installer slogan - DNA-96678 Add battery level monitoring capability to power…

    first Feb 20, 2022
  • High max 7.5
    SUSE-SU-2015:1305-1 1 CVE 1 exploited

    Security update for bind

    bind was updated to fix one security issue. This security issue was fixed: - CVE-2015-5477: Remote DoS via TKEY queries (bsc#939567) Exposure to this issue can not be prevented by either ACLs or configuration options limiting or denying service because the ex…

    first Jul 28, 2015
  • Critical max 9.6
    openSUSE-SU-2021:1303-1 28 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 93.0.4577.63 (boo#1190096): * CVE-2021-30606: Use after free in Blink * CVE-2021-30607: Use after free in Permissions * CVE-2021-30608: Use after free in Web Share * CVE-2021-30609: Use after free …

    first Sep 22, 2021
  • High max 8.8
    SUSE-SU-2025:4315-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50116: Update config files. Disable N_GSM (bsc#1244824 jsc#PED-8240). - CVE-2022-50252: igb: Do not free q_vector unless ne…

    first Dec 1, 2025
  • Critical max 10.0
    openSUSE-SU-2019:1595-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19 (bsc#1138872) - CVE-2019-11708: Fix sandbox escape using Prompt:Open. * Insufficient vetting of parameters passed with the Prompt:Open IPC message between…

    first Jun 24, 2019
  • Critical max 9.8
    openSUSE-SU-2024:13272-1 10 CVEs 1 exploited

    MozillaFirefox-118.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-118.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3
    SUSE-SU-2021:2408-1 5 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Fixe…

    first Jul 20, 2021
  • High max 8.8
    openSUSE-SU-2022:0156-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 87.0.4390.25: - CHR-8870 Update chromium on desktop-stable-101-4390 to 101.0.4951.64 - DNA-99209 Enable #easy-files-multiupload on all streams - DNA-99325 Use a preference to set number of recent sea…

    first May 28, 2022
  • High max 8.8
    openSUSE-SU-2019:2427-1 2 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.1:Update update proj…

    first Nov 4, 2019
  • Critical max 9.6
    openSUSE-SU-2020:1829-1 39 CVEs 2 exploited

    Security update for chromium, gn

    This update for chromium, gn fixes the following issues: chromium was updated to 86.0.4240.183 boo#1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implemen…

    first Nov 5, 2020
  • Medium max 6.6
    SUSE-SU-2022:0619-1 3 CVEs 2 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2022-0516: Fixed KVM s390 return error on SIDA memop on normal guest (bsc#1195947). - CVE-2021-0920: Fixed a local privilege escalation due to an …

    first Mar 1, 2022
  • Critical max 9.6
    openSUSE-SU-2020:2187-1 12 CVEs 1 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: TODO - Mozilla Thunderbird 78.5.0 * new: OpenPGP: Added option to disable attaching the public key to a signed message (bmo#1654950) * new: MailExtensions: 'compose_attachments' context added to M…

    first Dec 7, 2020
  • High max 8.8
    openSUSE-SU-2024:12000-1 1 CVE 1 exploited

    chromedriver-100.0.4896.127-1.1 on GA media

    These are all security issues fixed in the chromedriver-100.0.4896.127-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1390-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_28 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 22, 2024
  • High max 8.8
    openSUSE-SU-2024:13395-1 1 CVE 1 exploited

    element-desktop-1.11.47-1.1 on GA media

    These are all security issues fixed in the element-desktop-1.11.47-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024