Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 8.8
    SUSE-SU-2025:02308-1 123 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50085: dm raid: fix address sanitizer warning in raid_resume (bsc#1245147). - CVE-2022-50087: firmware: arm_scpi: Ensu…

    first Jul 14, 2025
  • High max 8.8
    openSUSE-SU-2024:0258-1 20 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 128.0.6613.84 (boo#1229591) * CVE-2024-7964: Use after free in Passwords * CVE-2024-7965: Inappropriate implementation in V8 * CVE-2024-7966: Out of bounds memory access in Skia * CVE-2024-7967: …

    first Aug 23, 2024
  • Critical max 9.0
    openSUSE-SU-2024:14548-1 25 CVEs 3 exploited

    libQt5Pdf5-5.15.18-1.1 on GA media

    These are all security issues fixed in the libQt5Pdf5-5.15.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 5, 2024
  • High max 8.8
    openSUSE-SU-2024:13603-1 3 CVEs 1 exploited

    ungoogled-chromium-120.0.6099.224-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-120.0.6099.224-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:13585-1 17 CVEs 1 exploited

    ungoogled-chromium-120.0.6099.216-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-120.0.6099.216-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.6
    openSUSE-SU-2023:0397-1 6 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 105.0.4970.34 * DNA-112796 [Import] Import bookmarks and history don't work * DNA-113147 Add strength setting for Lucid Mode * DNA-113148 Update 'Lucid Mode' button on videos to enable / disable sp…

    first Dec 11, 2023
  • High max 8.8
    openSUSE-SU-2023:0298-1 3 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 103.0.4928.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89 * CHR-9449 Update Chromium on desktop-stable-117-4928 …

    first Oct 11, 2023
  • High max 8.8
    openSUSE-SU-2024:13484-1 2 CVEs 2 exploited

    shotcut-23.11.29-1.1 on GA media

    These are all security issues fixed in the shotcut-23.11.29-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    openSUSE-SU-2024:13443-1 1 CVE 1 exploited

    kubevirt-container-disk-1.1.0-1.1 on GA media

    These are all security issues fixed in the kubevirt-container-disk-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:13009-1 3 CVEs 1 exploited

    nodejs-electron-22.3.13-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-22.3.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:12867-1 1 CVE 1 exploited

    chromedriver-112.0.5615.121-1.1 on GA media

    These are all security issues fixed in the chromedriver-112.0.5615.121-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2023:0114-1 43 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 99.0.4788.13 * CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 * DNA-107317 __delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following i…

    first May 27, 2023
  • Critical max 9.6
    openSUSE-SU-2022:10221-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 107.0.5304.121 (boo#1205736) * CVE-2022-4135: Heap buffer overflow in GPU

    first Nov 28, 2022
  • High max 8.8
    openSUSE-SU-2022:10180-1 11 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 107.0.5304.87 (boo#1204819) * CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 (boo#1204732) * CVE-2022-3652: Type Confusion in V8 * CVE-2022-3653: Heap buffer overflow in Vulkan * CVE-20…

    first Oct 31, 2022
  • Critical max 9.8
    openSUSE-SU-2023:0115-1 89 CVEs 4 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 99.0.4788.13 * CHR-9290 Update Chromium on desktop-stable-113-4788 to 113.0.5672.127 * DNA-107317 __delayLoadHelper2 crash in crashreporter - The update to chromium 113.0.5672.127 fixes following i…

    first May 27, 2023
  • Critical max 9.6
    openSUSE-SU-2024:11909-1 7 CVEs 2 exploited

    MozillaThunderbird-91.7.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-91.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2022:0114-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Updated Chromium to 100.0.4896.127 (boo#1198509) - CVE-2022-1364: Type Confusion in V8 - Various fixes from internal audits, fuzzing and other initiatives

    first Apr 19, 2022
  • Critical max 10.0
    openSUSE-SU-2024:11666-1 1 CVE 1 exploited

    log4j-2.13.2-2.1 on GA media

    These are all security issues fixed in the log4j-2.13.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0
    openSUSE-SU-2021:4094-1 2 CVEs 2 exploited

    Security update for log4j

    This update for log4j fixes the following issue: CVE-2021-44228: The previously published fix by upstream turned out to be incomplete. Therefore, upstream has recommended disabling JNDI support in log4j by default to be completely sure that this vulnerability…

    first Dec 15, 2021
  • High max 8.8
    openSUSE-SU-2021:2598-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…

    first Aug 3, 2021
  • High max 7.5
    openSUSE-SU-2024:14442-1 9 CVEs 1 exploited

    netty-4.1.114-1.1 on GA media

    These are all security issues fixed in the netty-4.1.114-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2024
  • Medium max 6.5
    openSUSE-SU-2021:0825-1 21 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.77 (boo#1186458): * Support Managed configuration API for Web Applications * WebOTP API: cross-origin iframe support * CSS custom counter styles * Support JSON Modules * Clipboard: read-o…

    first Jun 2, 2021
  • High max 8.8
    openSUSE-SU-2021:0446-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium was updated to 89.0.4389.90 (boo#1183515) - CVE-2021-21191: Use after free in WebRTC. - CVE-2021-21192: Heap buffer overflow in tab groups. - CVE-2021-21193: Use after free in Blink. This update …

    first Mar 19, 2021
  • Critical max 9.8
    openSUSE-SU-2021:0637-1 10 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdu…

    first Apr 30, 2021
  • Critical max 9.8
    openSUSE-SU-2020:0597-1 3 CVEs 1 exploited

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2020-1934: mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server (bsc#1168404). - CVE-2020-1927: mod_rewrite configurations vulnerable to open redirect (bsc#1168407). - CVE…

    first May 1, 2020
  • Critical max 9.8
    openSUSE-SU-2020:1833-1 3 CVEs 1 exploited

    Security update for salt

    This update for salt fixes the following issues: - Properly validate eauth credentials and tokens on SSH calls made by Salt API (bsc#1178319, bsc#1178362, bsc#1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846) - Fix disk.blkid to avoid unexpected keywor…

    first Nov 5, 2020
  • Critical max 9.6
    openSUSE-SU-2020:1744-1 1 CVE 1 exploited

    Security update for freetype2

    This update for freetype2 fixes the following issues: - CVE-2020-15999: fixed a heap buffer overflow found in the handling of embedded PNG bitmaps (bsc#1177914). This update was imported from the SUSE:SLE-15:Update update project.

    first Oct 26, 2020
  • Critical max 9.8
    openSUSE-SU-2024:10017-1 11 CVEs 2 exploited

    exim-4.86.2-2.2 on GA media

    These are all security issues fixed in the exim-4.86.2-2.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:10071-1 898 CVEs 5 exploited

    MozillaFirefox-50.1.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-50.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0
    openSUSE-SU-2024:10601-1 394 CVEs 6 exploited

    MozillaThunderbird-91.1.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 9.8
    openSUSE-SU-2024:11127-1 136 CVEs 1 exploited

    libopenssl-1_1-devel-1.1.1l-1.2 on GA media

    These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • Critical max 10.0
    SUSE-SU-2025:1024-1 2 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: - CVE-2025-24813: Fixed potential RCE and/or information disclosure/corruption with partial PUT (bsc#1239302) Other fixes: - Update to Tomcat 10.1.39 * Fixes: + launch with java 17 (bsc#1239676) * Catalina …

    first Mar 26, 2025
  • High max 8.8
    SUSE-SU-2024:4293-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution (bsc#1233631) - CVE-2024-44309: Fixed data isolation bypass vulnerability (bsc#1233632)

    first Dec 11, 2024
  • High max 8.0
    SUSE-SU-2025:0709-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix p…

    first Feb 25, 2025
  • High max 8.0
    SUSE-SU-2025:0643-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix possible…

    first Feb 21, 2025
  • High max 7.8
    SUSE-SU-2024:1373-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_186 fixes one issue. The following security issue was fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation…

    first Apr 22, 2024
  • High max 7.8
    SUSE-SU-2024:1582-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed a …

    first May 10, 2024
  • High max 7.8
    SUSE-SU-2024:1581-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_160 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 9, 2024
  • High max 7.8
    SUSE-SU-2024:1405-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 23, 2024
  • High max 7.8
    SUSE-SU-2024:1400-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 47 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_173 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-1086: Fixed a use-af…

    first Apr 23, 2024