Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.8
    openSUSE-SU-2019:1374-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8…

    first May 10, 2019
  • High max 8.8
    openSUSE-SU-2021:1016-1 29 CVEs 1 exploited

    Security update for libqt5-qtwebengine

    This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Me…

    first Jul 9, 2021
  • High max 8.2
    SUSE-SU-2023:2140-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege …

    first May 9, 2023
  • High max 8.8
    SUSE-SU-2023:3940-1 1 CVE 1 exploited

    Security update for libvpx

    This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

    first Oct 3, 2023
  • High max 7.8
    SUSE-SU-2016:1305-1 49 CVEs 2 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - Security update to 11.2.202.621 (bsc#979422): * APSA16-02, APSB16-15, CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1…

    first May 16, 2016
  • High max 8.3
    openSUSE-SU-2021:2427-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …

    first Jul 21, 2021
  • High max 7.8
    SUSE-SU-2022:0763-1 4 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are …

    first Mar 9, 2022
  • High max 7.8
    SUSE-SU-2017:1138-1 5 CVEs 1 exploited

    Security update for ghostscript

    This update for ghostscript fixes the following security vulnerabilities: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) CVE-2016-9601: An integer overflow in the bundled jb…

    first Apr 28, 2017
  • High max 7.8
    SUSE-SU-2025:0656-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_65 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: a…

    first Feb 22, 2025
  • High max 8.8
    openSUSE-SU-2024:13591-1 3 CVEs 1 exploited

    chromedriver-120.0.6099.224-1.1 on GA media

    These are all security issues fixed in the chromedriver-120.0.6099.224-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:0483-1 11 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achi…

    first Feb 15, 2024
  • High max 8.8
    SUSE-SU-2023:3556-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093) - Have the lang package provide libwebkit2gtk3-lang (bsc#1214093) - Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581):…

    first Sep 8, 2023
  • High max 7.8
    SUSE-SU-2021:0227-1 3 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …

    first Jan 26, 2021
  • High max 8.8
    openSUSE-SU-2024:0033-1 3 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 106.0.4998.52 * CHR-9580 Update Chromium on desktop-stable-120-4998 to 120.0.6099.234 * DNA-113175 Can not merge folders on start page * DNA-113341 Implement 'special' menus * DNA-113811 Removing ico…

    first Jan 24, 2024
  • High max 7.0
    SUSE-SU-2016:2631-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 0 for SLE 12 SP1

    This update for the Linux Kernel 3.12.49-11 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: The …

    first Oct 25, 2016
  • High max 8.3
    SUSE-SU-2021:2406-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. …

    first Jul 20, 2021
  • High max 8.4
    SUSE-SU-2022:0238-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_83 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Jan 31, 2022
  • High max 8.8
    openSUSE-SU-2019:2447-1 86 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87: (boo#1155643,boo#1154806,boo#1153660, boo#1151229,boo#1149143,boo#1145242,boo#1143492) Security issues fixed with this version update: * CVE-2019-13721: Use-after-free …

    first Nov 6, 2019
  • High max 8.8
    openSUSE-SU-2021:0949-1 14 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.146 - CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114 - DNA-92171 Create active linkdiscovery service - DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiA…

    first Jul 1, 2021
  • High max 7.8
    SUSE-SU-2024:1562-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_147 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-26622: Fixe…

    first May 8, 2024
  • High max 8.8
    openSUSE-SU-2022:10055-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 103.0.5060.114 (boo#1201216) * CVE-2022-2294: Heap buffer overflow in WebRTC * CVE-2022-2295: Type Confusion in V8 * CVE-2022-2296: Use after free in Chrome OS Shell

    first Jul 12, 2022
  • High max 8.8
    openSUSE-SU-2024:0258-2 20 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 128.0.6613.84 (boo#1229591) * CVE-2024-7964: Use after free in Passwords * CVE-2024-7965: Inappropriate implementation in V8 * CVE-2024-7966: Out of bounds memory access in Skia * CVE-2024-7967: …

    first Aug 23, 2024
  • High max 7.8
    SUSE-SU-2018:3171-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_99 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free…

    first Oct 16, 2018
  • High max 7.8
    SUSE-SU-2018:2908-1 19 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via …

    first Sep 27, 2018
  • High max 8.8
    openSUSE-SU-2024:13270-1 3 CVEs 1 exploited

    matrix-synapse-1.93.0-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.93.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2022:0705-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A…

    first Mar 4, 2022
  • High max 8.8
    SUSE-SU-2025:0043-1 10 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…

    first Jan 9, 2025
  • High max 8.8
    openSUSE-SU-2021:1632-1 41 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 96.0.4664.110 (boo#1193713): * CVE-2021-4098: Insufficient data validation in Mojo * CVE-2021-4099: Use after free in Swiftshader * CVE-2021-4100: Object lifecycle issue in ANGLE * CVE-2021-4101: H…

    first Dec 28, 2021
  • High max 8.4
    SUSE-SU-2022:0197-1 22 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalati…

    first Jan 26, 2022
  • High max 7.8
    SUSE-SU-2024:0484-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve lo…

    first Feb 15, 2024
  • High max 7.0
    SUSE-SU-2016:2614-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).

    first Oct 24, 2016
  • High max 8.4
    SUSE-SU-2022:0288-1 9 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (…

    first Feb 2, 2022
  • High max 7.5
    openSUSE-SU-2024:11818-1 2 CVEs 1 exploited

    ruby3.1-rubygem-actioncable-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actioncable-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.7
    SUSE-SU-2019:2819-1 1 CVE 1 exploited

    Security update for php7

    This update for php7 fixes the following issues: Security issue fixed: - CVE-2019-11043: Fixed possible remote code execution via env_path_info underflow in fpm_main.c (bsc#1154999).

    first Oct 30, 2019
  • High max 7.8
    SUSE-SU-2024:1493-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_169 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 5, 2024
  • High max 8.8
    SUSE-SU-2023:3948-1 1 CVE 1 exploited

    Security update for libvpx

    This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778).

    first Oct 3, 2023
  • High max 7.9
    SUSE-SU-2023:1640-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_147 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-0266: Fixed a use-after-free vulner…

    first Mar 28, 2023
  • High max 7.8
    SUSE-SU-2022:0757-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.8
    SUSE-SU-2020:0142-1 7 CVEs 1 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.4.1 fixes the following issues: Security issues fixed: - CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement - CVE-2019-17016: Bypass of @namespace CSS sanitization during pa…

    first Jan 20, 2020
  • High max 8.8
    openSUSE-SU-2024:0001-1 7 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 106.0.4998.19 * CHR-9416 Updating Chromium on desktop-stable-* branches * DNA-113887 Translations for O106 - The update to chromium 120.0.6099.130 fixes following issues: CVE-2023-7024 - Update to …

    first Jan 1, 2024