Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 7.8
    SUSE-SU-2025:0944-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 45 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_164 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the r…

    first Mar 19, 2025
  • High max 7.8
    SUSE-SU-2022:1035-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (…

    first Mar 30, 2022
  • High max 7.8
    SUSE-SU-2022:0759-1 14 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.8
    openSUSE-SU-2024:13274-1 1 CVE 1 exploited

    libvpx-devel-1.13.0-2.1 on GA media

    These are all security issues fixed in the libvpx-devel-1.13.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2016:1613-1 36 CVEs 1 exploited

    Security update for flash-player

    Adobe flash-player was updated to 11.2.202.626 to fix the following security issues: Security update to 11.2.202.626 (boo#984695): * APSB16-18, CVE-2016-4122, CVE-2016-4123, CVE-2016-4124, CVE-2016-4125, CVE-2016-4127, CVE-2016-4128, CVE-2016-4129, CVE-2016-4…

    first Jun 17, 2016
  • High max 8.8
    openSUSE-SU-2019:1593-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Mozilla Firefox 60.7.1esr was released to address MFSA 2019-18 (boo#1138614) * CVE-2019-11707: Fixed a type confusion in Array.pop

    first Jun 23, 2019
  • High max 7.8
    SUSE-SU-2024:1388-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…

    first Apr 22, 2024
  • High max 8.3
    SUSE-SU-2021:2421-1 24 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116 ). - CVE-2021-33909: Ex…

    first Jul 21, 2021
  • High max 8.3
    SUSE-SU-2021:2584-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-197_72 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…

    first Aug 2, 2021
  • High max 8.8
    openSUSE-SU-2021:0592-1 9 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Opera was updated to version 75.0.3969.171 (boo#1184256) CVE-2021-21194, CVE-2021-21195, CVE-2021-21196, CVE-2021-21197, CVE-2021-21198, CVE-2021-21199, CVE-2021-21191, CVE-2021-21192, CVE-2021-21193

    first Apr 22, 2021
  • High max 8.4
    SUSE-SU-2022:0254-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 1, 2022
  • High max 7.8
    SUSE-SU-2018:3088-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerabilit…

    first Oct 9, 2018
  • High max 8.8
    SUSE-SU-2022:4642-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). - CVE-2022-42852: Fixed disclosure of process memory …

    first Dec 30, 2022
  • High max 8.8
    SUSE-SU-2023:4828-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…

    first Dec 14, 2023
  • High max 7.8
    SUSE-SU-2017:1404-1 5 CVEs 1 exploited

    Security update for ghostscript

    This update for ghostscript fixes the following security vulnerabilities: - CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) - CVE-2016-9601: An integer overflow in the bundle…

    first May 24, 2017
  • High max 7.5
    SUSE-SU-2023:4210-1 5 CVEs 1 exploited

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - Updated to version 9.4.53.v20231009: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - CVE-2023-36478: Fixed an integer overflow in the HTTP/2 HPACK…

    first Oct 26, 2023
  • High max 7.8
    SUSE-SU-2021:0226-1 3 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …

    first Jan 26, 2021
  • High max 7.8
    SUSE-SU-2024:1558-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_127 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 8, 2024
  • High max 8.8
    SUSE-SU-2023:0490-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 23, 2023
  • High max 7.8
    SUSE-SU-2025:0250-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_103 fixes one issue. The following security issue was fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).

    first Jan 27, 2025
  • High max 7.8
    SUSE-SU-2023:2428-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_60 fixes several issues. The following security issues were fixed: - CVE-2023-0386: Fixed privileges escalation for low-privileged users in the OverlayFS subsystem (bsc#1210499). - CVE-2023-2162: Fixed an use…

    first Jun 6, 2023
  • High max 7.8
    SUSE-SU-2015:1255-1 2 CVEs 2 exploited

    Security update for flash-player

    flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute a…

    first Jul 16, 2015
  • High max 8.0
    SUSE-SU-2019:3261-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_117 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 11, 2019
  • High max 7.8
    SUSE-SU-2022:0363-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254…

    first Feb 10, 2022
  • High max 8.8
    SUSE-SU-2021:2598-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…

    first Aug 3, 2021
  • High max 7.8
    SUSE-SU-2024:0469-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429).…

    first Feb 14, 2024
  • High max 8.8
    openSUSE-SU-2024:0002-1 7 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 106.0.4998.19 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-113887 Translations for O106 - The update to chromium 120.0.6099.130 fixes following issues: CVE-2023-7024 - Update to …

    first Jan 1, 2024
  • High max 8.1
    openSUSE-SU-2020:0461-1 2 CVEs 2 exploited

    Security update for MozillaFirefox

    Mozilla Firefox was updated to 68.6.1esr to fix critical security issues: MFSA 2020-11 (boo#1168630) * CVE-2020-6819: Use-after-free while running the nsDocShell destructor * CVE-2020-6820: Use-after-free when handling a ReadableStream

    first Apr 6, 2020
  • High max 8.8
    openSUSE-SU-2021:1358-1 3 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: opera was updated to version 80.0.4170.16 Fixes: - CHR-8590 Update chromium on desktop-stable-94-4170 to 94.0.4606.61 - DNA-95347 Make InstallerStep::Run async - DNA-95420 First suggestion in address field is …

    first Oct 15, 2021
  • High max 8.7
    SUSE-SU-2019:2909-1 1 CVE 1 exploited

    Security update for php72

    This update for php72 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).

    first Nov 6, 2019
  • High max 7.5
    openSUSE-SU-2024:11832-1 2 CVEs 1 exploited

    ruby3.1-rubygem-railties-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-railties-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2019:2421-1 2 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio

    first Nov 2, 2019
  • High max 8.3
    SUSE-SU-2021:2407-1 5 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …

    first Jul 20, 2021
  • High max 7.8
    SUSE-SU-2025:0893-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 58 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_222 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 17, 2025
  • High max 8.1
    SUSE-SU-2020:0929-1 2 CVEs 2 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Mozilla Firefox 68.6.1esr MFSA 2020-11 (bsc#1168630) * CVE-2020-6819 (bmo#1620818) Use-after-free while running the nsDocShell destructor * CVE-2020-6820 (bmo#1626728) Use-after-free when handling a…

    first Apr 6, 2020
  • High max 8.8
    SUSE-SU-2022:4617-1 96 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207). - CVE-2022-42328: Guests could trigger denial o…

    first Dec 23, 2022
  • High max 8.8
    openSUSE-SU-2021:0401-1 42 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 89.0.4389.72 (boo#1182358, boo#1182960): - CVE-2021-21159: Heap buffer overflow in TabStrip. - CVE-2021-21160: Heap buffer overflow in WebAudio. - CVE-2021-21161: Heap buffer overflow in TabStrip.…

    first Mar 9, 2021
  • High max 8.8
    SUSE-SU-2023:2606-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web …

    first Jun 22, 2023
  • High max 7.8
    SUSE-SU-2022:0766-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mit…

    first Mar 9, 2022
  • High max 8.8
    SUSE-SU-2022:3775-1 17 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory. (bnc#1203514) - CVE-2022-316…

    first Oct 26, 2022