Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.8
    openSUSE-SU-2022:10057-1 5 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: opera was updated to 88.0.4412.74: - DNA-100645 Cherry-pick CVE-2022-2294 onto stabilization branches Update to 88.0.4412.53 - DNA-99108 [Lin] Options on video pop out not possible to change - DNA-99832 On aut…

    first Jul 13, 2022
  • High max 8.7
    openSUSE-SU-2019:2441-1 1 CVE 1 exploited

    Security update for php7

    This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999). This update was imported from the SUSE:SLE-15:Update update project.

    first Nov 5, 2019
  • High max 7.8
    SUSE-SU-2025:0703-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_62 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: a…

    first Feb 24, 2025
  • High max 7.5
    SUSE-SU-2023:4624-1 1 CVE 1 exploited

    Security update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container

    This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-contain…

    first Dec 1, 2023
  • High max 7.5
    SUSE-SU-2025:0282-1 2 CVEs 1 exploited

    Security update for nginx

    This update for nginx fixes the following issues: - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171) - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)

    first Jan 29, 2025
  • High max 7.8
    SUSE-SU-2022:0764-1 3 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are …

    first Mar 9, 2022
  • High max 7.8
    SUSE-SU-2022:0756-1 7 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.8
    SUSE-SU-2023:0061-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3 (bnc#1206750): - CVE-2022-42852: Fixed disclosure of process memory by improved memory handling. - CVE-2022-42856: Fixed a potential arbitrary code execution when processing mali…

    first Jan 10, 2023
  • High max 8.8
    openSUSE-SU-2021:1433-1 7 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to version 80.0.4170.63 - CHR-8612 Update chromium on desktop-stable-94-4170 to 94.0.4606.81 - DNA-95434 Crash at opera::ThemesService::UpdateCurrentTheme() - The update to chromium 94.0.4606…

    first Nov 1, 2021
  • High max 8.8
    SUSE-SU-2022:3352-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2022-32893: Fixed processing maliciously crafted web content may lead to arbitrary code execution (bsc#1202807). Bugfixes: - Fixed WebKitGTK not allowing to be used from non-main threads (bsc#12021…

    first Sep 23, 2022
  • High max 8.8
    openSUSE-SU-2016:2732-1 1 CVE 1 exploited

    Security update for chromium

    This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)

    first Nov 4, 2016
  • High max 8.0
    SUSE-SU-2019:3263-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_120 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…

    first Dec 11, 2019
  • High max 8.3
    openSUSE-SU-2025:0111-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 117.0.5408.163 * DNA-120683 [Issue back] Sometimes onboarding is blank and useless * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133, GX132 and Air132 - Changes in 117.0.5408.154 * DNA-1212…

    first Mar 31, 2025
  • High max 7.8
    SUSE-SU-2024:0478-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achie…

    first Feb 15, 2024
  • High max 8.8
    SUSE-SU-2024:3869-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27…

    first Nov 1, 2024
  • High max 8.8
    SUSE-SU-2015:1380-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This security update (bsc#940918) fixes the following issues: * MFSA 2015-78 (CVE-2015-4495, bmo#1178058): Same origin violation * Remove PlayPreview registration from PDF Viewer (bmo#1179262)

    first Aug 12, 2015
  • High max 8.8
    SUSE-SU-2021:3353-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…

    first Oct 12, 2021
  • High max 8.8
    openSUSE-SU-2018:4143-1 27 CVEs 1 exploited

    Security update for Chromium

    This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed (boo#1118529): - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use …

    first Dec 15, 2018
  • High max 7.8
    SUSE-SU-2024:1359-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_13_24 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 20, 2024
  • High max 8.8
    openSUSE-SU-2021:0413-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to version 74.0.3911.203 - CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358) - DNA-90762 Replace “Don’t show again” with “Discard” - DNA-90974 Crash at opera::Persistent…

    first Mar 15, 2021
  • High max 8.0
    SUSE-SU-2019:3228-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_100 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • High max 7.8
    SUSE-SU-2025:0961-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2020:0060-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 15, 2020
  • High max 8.8
    openSUSE-SU-2021:1073-1 7 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …

    first Jul 21, 2021
  • High max 7.8
    SUSE-SU-2023:2459-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_55 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 7, 2023
  • High max 7.8
    openSUSE-SU-2021:0838-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Jun 4, 2021
  • High max 8.3
    SUSE-SU-2021:2487-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fi…

    first Jul 27, 2021
  • High max 7.5
    openSUSE-SU-2024:11825-1 2 CVEs 1 exploited

    ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-activemodel-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.5
    openSUSE-SU-2024:10592-1 22 CVEs 1 exploited

    xstream-1.4.18-1.1 on GA media

    These are all security issues fixed in the xstream-1.4.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:0118-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed an issue during BR/EDR PIN code pairing in the Bluetooth subsystem that would allow replay attacks (bs…

    first Jan 16, 2024
  • High max 7.8
    SUSE-SU-2025:0952-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_sets…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2024:11167-1 44 CVEs 1 exploited

    php7-7.4.24-1.1 on GA media

    These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2021:3282-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…

    first Oct 4, 2021
  • High max 7.8
    SUSE-SU-2025:0920-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid…

    first Mar 19, 2025
  • High max 7.0
    SUSE-SU-2016:2585-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).

    first Oct 21, 2016
  • High max 7.5
    openSUSE-SU-2024:13331-1 1 CVE 1 exploited

    tomcat-9.0.82-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.82-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.3
    SUSE-SU-2021:2599-1 4 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalatio…

    first Aug 3, 2021
  • High max 7.5
    SUSE-SU-2023:4199-1 1 CVE 1 exploited

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)

    first Oct 25, 2023
  • High max 7.9
    SUSE-SU-2023:0152-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-0266: Fixed a use-after-free bug led by a missing lock in ALSA. (bsc#1207134) - CVE-2022-47929: Fixed a NULL point…

    first Jan 26, 2023
  • High max 7.8
    SUSE-SU-2024:0476-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-0340: Fixed information disclosure in vhost/vhost.c:vhost_new_msg() (bsc#1218689). - CVE-2024-24860: Fixed a denial…

    first Feb 14, 2024