Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.8
    SUSE-SU-2022:3136-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • High max 7.8
    openSUSE-SU-2022:0768-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 9, 2022
  • High max 8.5
    SUSE-SU-2025:03022-1 3 CVEs 1 exploited

    Security update for git

    This update for git fixes the following issues: - CVE-2025-27613: Fixed arbitrary writable file creation and truncation in Gitk (bsc#1245938) - CVE-2025-46835: Fixed arbitrary writable file creation when cloning untrusted repository in Git GUI (bsc#1245942) -…

    first Aug 29, 2025
  • High max 8.1
    openSUSE-SU-2023:0360-1 8 CVEs 1 exploited

    Security update for go1.21

    This update introduces go1.21, including fixes for the following issues: - go1.21.3 (released 2023-10-10) includes a security fix to the net/http package. Refs boo#1212475 go1.21 release tracking CVE-2023-39325 CVE-2023-44487 * go#63427 go#63417 boo#1216109 s…

    first Nov 9, 2023
  • High max 8.2
    SUSE-SU-2023:2231-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privile…

    first May 17, 2023
  • High max 8.8
    openSUSE-SU-2024:13265-1 1 CVE 1 exploited

    element-desktop-1.11.43-1.1 on GA media

    These are all security issues fixed in the element-desktop-1.11.43-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:0573-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 28, 2023
  • High max 8.8
    openSUSE-SU-2019:2591-1 42 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …

    first Nov 30, 2019
  • High max 8.8
    SUSE-SU-2024:1944-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071): - CVE-2024-23252: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010) - CVE-2024-23254: Fixed a vulnerability where …

    first Jun 7, 2024
  • High max 8.8
    openSUSE-SU-2021:0276-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 88.0.4324.150 boo#1181827 - CVE-2021-21148: Heap buffer overflow in V8 This update was imported from the openSUSE:Leap:15.2:Update update project.

    first Feb 11, 2021
  • High max 7.8
    SUSE-SU-2018:2879-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14617: Prevent NULL pointer dereference and panic in hfsplus_lookup() when opening a file (that is purportedly a h…

    first Sep 26, 2018
  • High max 8.8
    SUSE-SU-2023:3946-1 1 CVE 1 exploited

    Security update for libvpx

    This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

    first Oct 3, 2023
  • High max 8.8
    openSUSE-SU-2024:13269-1 3 CVEs 1 exploited

    chromedriver-117.0.5938.132-1.1 on GA media

    These are all security issues fixed in the chromedriver-117.0.5938.132-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:0020-1 17 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 120.0.6099.216 (boo#1217839, boo#1218048, boo#1218302, boo#1218533, boo#1218719) * CVE-2024-0333: Insufficient data validation in Extensions * CVE-2024-0222: Use after free in ANGLE * CVE-2024-02…

    first Jan 16, 2024
  • High max 8.0
    SUSE-SU-2019:3248-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)

    This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent…

    first Dec 11, 2019
  • High max 7.8
    SUSE-SU-2024:0120-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26555: Fixed Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B that may permit an unau…

    first Jan 16, 2024
  • High max 7.5
    openSUSE-SU-2024:11822-1 2 CVEs 1 exploited

    ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actiontext-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2022:4634-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).

    first Dec 29, 2022
  • High max 7.8
    SUSE-SU-2024:1554-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 43 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_172 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-1086: Fixed…

    first May 7, 2024
  • High max 7.8
    SUSE-SU-2022:14905-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.8
    SUSE-SU-2022:1012-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_150 fixes several issues. The following security issues were fixed: - CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516). - CVE-2…

    first Mar 29, 2022
  • High max 8.8
    openSUSE-SU-2017:0740-1 18 CVEs 1 exploited

    Security update for Chromium

    Chromium was updated to 57.0.2987.98 to fix security issues and bugs. The following vulnerabilities were fixed (bsc#1028848): - CVE-2017-5030: Memory corruption in V8 - CVE-2017-5031: Use after free in ANGLE - CVE-2017-5032: Out of bounds write in PDFium - CV…

    first Mar 17, 2017
  • High max 8.3
    SUSE-SU-2021:2559-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_10 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555:…

    first Jul 29, 2021
  • High max 7.8
    SUSE-SU-2025:0707-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_174 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 25, 2025
  • High max 8.8
    openSUSE-SU-2024:0275-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 113.0.5230.32 * DNA-118250 Backport fix for CVE-2024-7971 from Chrome to Opera 113 - Changes in 113.0.5230.31 * CHR-9819 Update Chromium on desktop-stable-127-5230 to 127.0.6533.120 * DNA-116113 Pr…

    first Sep 2, 2024
  • High max 8.4
    SUSE-SU-2022:0262-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_40 fixes one issue. The following security issue was fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517).

    first Feb 1, 2022
  • High max 8.8
    SUSE-SU-2022:3137-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several …

    first Sep 7, 2022
  • High max 8.8
    openSUSE-SU-2024:11656-1 4 CVEs 1 exploited

    nodejs-electron-13.6.2-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-13.6.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.5
    SUSE-SU-2021:3476-1 14 CVEs 1 exploited

    Security update for xstream

    This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…

    first Oct 20, 2021
  • High max 8.4
    openSUSE-SU-2024:10505-1 9 CVEs 3 exploited

    GraphicsMagick-1.3.25-1.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.25-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.9
    SUSE-SU-2023:1595-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_60 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-bound…

    first Mar 28, 2023
  • High max 8.8
    SUSE-SU-2021:3296-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.4 - CVE-2021-30858: Fixed a security bug that could allow maliciously crafted web content to achieve arbitrary code execution. (bsc#1190701) - CVE-2021-21806: Fixed an exploitabl…

    first Oct 6, 2021
  • High max 8.6
    SUSE-SU-2025:03012-1 5 CVEs 1 exploited

    security update for git, git-lfs, obs-scm-bridge, python-PyYAML

    This update for git, git-lfs, obs-scm-bridge, python-PyYAML fixes the following issues: git was updated from version 2.43.0 to 2.51.0 (bsc#1243197): - Security issues fixed: * CVE-2025-27613 Fixed arbitrary writable file creation and truncation in Gitk(bsc#12…

    first Aug 29, 2025
  • High max 8.1
    SUSE-SU-2020:1027-1 5 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…

    first Apr 17, 2020
  • High max 8.8
    openSUSE-SU-2024:0025-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to 120.0.6099.224 (boo#1218892): - CVE-2024-0517: Out of bounds write in V8 - CVE-2024-0518: Type Confusion in V8 - CVE-2024-0519: Out of bounds memory access in V8 - Various fixes from internal audi…

    first Jan 18, 2024
  • High max 8.8
    SUSE-SU-2025:02264-1 258 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/sch…

    first Jul 10, 2025
  • High max 7.8
    SUSE-SU-2024:1505-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_156 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed a he…

    first May 6, 2024
  • High max 8.3
    openSUSE-SU-2024:13976-1 1 CVE 1 exploited

    chromedriver-124.0.6367.207-1.1 on GA media

    These are all security issues fixed in the chromedriver-124.0.6367.207-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    SUSE-SU-2024:3098-1 4 CVEs 1 exploited

    Security update for kubernetes1.27

    This update for kubernetes1.27 fixes the following issues: Update kubernetes to version 1.27.16 - CVE-2024-24786: Fixed infinite loop in protojson.Unmarshal in golang-protobuf (bsc#1229867) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid …

    first Sep 3, 2024
  • High max 7.5
    SUSE-SU-2023:4200-1 1 CVE 1 exploited

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)

    first Oct 25, 2023