Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.8
    openSUSE-SU-2023:0298-1 3 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 103.0.4928.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89 * CHR-9449 Update Chromium on desktop-stable-117-4928 …

    first Oct 11, 2023
  • High max 8.8
    openSUSE-SU-2024:13484-1 2 CVEs 2 exploited

    shotcut-23.11.29-1.1 on GA media

    These are all security issues fixed in the shotcut-23.11.29-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    openSUSE-SU-2024:13443-1 1 CVE 1 exploited

    kubevirt-container-disk-1.1.0-1.1 on GA media

    These are all security issues fixed in the kubevirt-container-disk-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:13009-1 3 CVEs 1 exploited

    nodejs-electron-22.3.13-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-22.3.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:12867-1 1 CVE 1 exploited

    chromedriver-112.0.5615.121-1.1 on GA media

    These are all security issues fixed in the chromedriver-112.0.5615.121-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2022:10180-1 11 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 107.0.5304.87 (boo#1204819) * CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 (boo#1204732) * CVE-2022-3652: Type Confusion in V8 * CVE-2022-3653: Heap buffer overflow in Vulkan * CVE-20…

    first Oct 31, 2022
  • High max 8.8
    openSUSE-SU-2022:0114-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Updated Chromium to 100.0.4896.127 (boo#1198509) - CVE-2022-1364: Type Confusion in V8 - Various fixes from internal audits, fuzzing and other initiatives

    first Apr 19, 2022
  • High max 8.8
    openSUSE-SU-2021:2598-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential in…

    first Aug 3, 2021
  • High max 7.5
    openSUSE-SU-2024:14442-1 9 CVEs 1 exploited

    netty-4.1.114-1.1 on GA media

    These are all security issues fixed in the netty-4.1.114-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2024
  • High max 8.8
    openSUSE-SU-2021:0446-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium was updated to 89.0.4389.90 (boo#1183515) - CVE-2021-21191: Use after free in WebRTC. - CVE-2021-21192: Heap buffer overflow in tab groups. - CVE-2021-21193: Use after free in Blink. This update …

    first Mar 19, 2021
  • High max 8.8
    SUSE-SU-2024:4293-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution (bsc#1233631) - CVE-2024-44309: Fixed data isolation bypass vulnerability (bsc#1233632)

    first Dec 11, 2024
  • High max 8.0
    SUSE-SU-2025:0709-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_108 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix p…

    first Feb 25, 2025
  • High max 8.0
    SUSE-SU-2025:0643-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_8 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix possible…

    first Feb 21, 2025
  • High max 7.8
    SUSE-SU-2024:1373-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 51 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_186 fixes one issue. The following security issue was fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve local privilege escalation…

    first Apr 22, 2024
  • High max 7.8
    SUSE-SU-2024:1582-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed a …

    first May 10, 2024
  • High max 7.8
    SUSE-SU-2024:1581-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_160 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 9, 2024
  • High max 7.8
    SUSE-SU-2024:1405-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_19 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UA…

    first Apr 23, 2024
  • High max 7.8
    SUSE-SU-2024:1400-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 47 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_173 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-1086: Fixed a use-af…

    first Apr 23, 2024
  • High max 7.5
    SUSE-SU-2023:4492-1 1 CVE 1 exploited

    Security update for nghttp2

    This update for nghttp2 fixes the following issues: - CVE-2023-44487: Fixed HTTP/2 Rapid Reset attack. (bsc#1216174)

    first Nov 20, 2023
  • High max 8.8
    SUSE-SU-2023:4824-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…

    first Dec 14, 2023
  • High max 8.8
    SUSE-SU-2023:4294-1 6 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 ships missing Lang packages to SUSE Linux Enterprise 15 SP4 and SP5. Security fixes: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-3992…

    first Oct 31, 2023
  • High max 7.8
    SUSE-SU-2023:2384-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_11 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 6, 2023
  • High max 7.8
    SUSE-SU-2025:0245-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 47 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_170 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324). - CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer oc…

    first Jan 27, 2025
  • High max 8.8
    SUSE-SU-2023:1681-1 3 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. - CVE-2023-23518: Processing maliciously crafted web content may lea…

    first Mar 29, 2023
  • High max 8.8
    SUSE-SU-2022:4641-1 9 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.3: - CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474). - CVE-2022-42852: Fixed disclosure of process memory …

    first Dec 30, 2022
  • High max 7.8
    SUSE-SU-2022:0998-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_49 fixes several issues. The following security issues were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in nf_dup_netdev.c, rela…

    first Mar 29, 2022
  • High max 8.0
    SUSE-SU-2025:0645-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 54 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_201 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2021-47511: ALSA: pcm: oss: fix negative…

    first Feb 21, 2025
  • High max 7.8
    SUSE-SU-2024:0463-1 14 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achieve…

    first Feb 14, 2024
  • High max 7.8
    SUSE-SU-2024:4389-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2021-3156: Fixed regression in CVE (bsc#1234371)

    first Dec 20, 2024
  • High max 8.3
    SUSE-SU-2021:2599-2 4 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalatio…

    first Aug 5, 2021
  • High max 8.3
    SUSE-SU-2021:2415-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Security issues fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq b…

    first Jul 20, 2021
  • High max 8.3
    SUSE-SU-2021:2577-1 14 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_53_4 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…

    first Jul 30, 2021
  • High max 7.5
    SUSE-SU-2021:2926-1 1 CVE 1 exploited

    Security update for php72

    This update for php72 fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

    first Sep 2, 2021
  • High max 8.4
    SUSE-SU-2022:0293-1 10 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-415…

    first Feb 2, 2022
  • High max 8.8
    SUSE-SU-2022:3809-1 32 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-3695: Fixed an issue inside the einj_error_inject function in drivers/acpi/apei/einj.c that allowed users to si…

    first Oct 31, 2022
  • High max 7.8
    SUSE-SU-2021:1842-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).

    first Jun 3, 2021
  • High max 7.8
    SUSE-SU-2021:0232-1 2 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race …

    first Jan 27, 2021
  • High max 8.8
    SUSE-SU-2019:3044-1 42 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …

    first Nov 25, 2019
  • High max 7.8
    SUSE-SU-2017:1322-1 1 CVE 1 exploited

    Security update for ghostscript-library

    This update for ghostscript fixes the following security vulnerability: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453) This update is a reissue including the SUSE Linux Ente…

    first May 17, 2017
  • High max 8.8
    SUSE-SU-2015:2401-1 19 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution . - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-2…

    first Dec 30, 2015