Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 7.8
    SUSE-SU-2021:1275-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • High max 8.0
    SUSE-SU-2019:3230-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_103 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a par…

    first Dec 10, 2019
  • High max 8.2
    SUSE-SU-2023:2141-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local priv…

    first May 9, 2023
  • High max 8.8
    openSUSE-SU-2016:2733-1 1 CVE 1 exploited

    Security update for chromium

    This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 (boo#1008274)

    first Nov 4, 2016
  • High max 7.8
    SUSE-SU-2024:1380-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-26622: Fixed UAF…

    first Apr 22, 2024
  • High max 7.8
    SUSE-SU-2024:1537-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_166 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • High max 8.8
    openSUSE-SU-2024:13231-1 1 CVE 1 exploited

    libsharpyuv0-1.3.1-2.1 on GA media

    These are all security issues fixed in the libsharpyuv0-1.3.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2024:1976-1 10 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 (bsc#1225071) - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)

    first Jun 11, 2024
  • High max 8.0
    SUSE-SU-2019:3232-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 10, 2019
  • High max 8.8
    openSUSE-SU-2019:2587-1 42 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.26.2 fixes the following issues: Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318) Security issues addressed: - CVE-2019-8625: Fixed a logic issue where by processing …

    first Nov 30, 2019
  • High max 8.8
    openSUSE-SU-2024:14285-1 20 CVEs 2 exploited

    chromedriver-128.0.6613.84-1.1 on GA media

    These are all security issues fixed in the chromedriver-128.0.6613.84-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 23, 2024
  • High max 8.8
    SUSE-SU-2024:4117-1 5 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.3 (bsc#1232747), including fixes for: - CVE-2024-44308: Fixed arbitrary code execution by not allocating DFG register after a slow path (bsc#1233631). - CVE-2024-44309: Fixed a dat…

    first Dec 4, 2024
  • High max 8.5
    openSUSE-SU-2021:1401-1 14 CVEs 1 exploited

    Security update for xstream

    This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…

    first Oct 31, 2021
  • High max 8.8
    openSUSE-SU-2024:11687-1 41 CVEs 1 exploited

    chromedriver-96.0.4664.110-1.1 on GA media

    These are all security issues fixed in the chromedriver-96.0.4664.110-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:12277-1 10 CVEs 1 exploited

    chromedriver-104.0.5112.101-1.1 on GA media

    These are all security issues fixed in the chromedriver-104.0.5112.101-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2025:0242-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_150 fixes one issue. The following security issue was fixed: - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226324).

    first Jan 27, 2025
  • High max 7.0
    SUSE-SU-2016:2596-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP2 LTSS kernel was updated to fix one security issue. This security bug was fixed: - CVE-2016-5195: Local privilege escalation using MAP_PRIVATE. It is reportedly exploited in the wild (bsc#1004418).

    first Oct 21, 2016
  • High max 7.8
    SUSE-SU-2023:2443-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_33 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 7, 2023
  • High max 8.8
    openSUSE-SU-2023:0277-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 117.0.5938.132 (boo#1215776): * CVE-2023-5217: Heap buffer overflow in vp8 encoding in libvpx (boo#1215778) * CVE-2023-5186: Use after free in Passwords * CVE-2023-5187: Use after free in Extensi…

    first Sep 29, 2023
  • High max 7.8
    SUSE-SU-2023:2455-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_21 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 7, 2023
  • High max 8.8
    openSUSE-SU-2018:1175-1 64 CVEs 1 exploited

    Security update for Chromium

    This update for Chromium to version 66.0.3359.181 fixes the following issues: - CVE-2018-6118: Use after free in Media Cache (bsc#1091288) - CVE-2018-6085: Use after free in Disk Cache - CVE-2018-6086: Use after free in Disk Cache - CVE-2018-6087: Use after f…

    first May 27, 2018
  • High max 7.5
    openSUSE-SU-2021:1267-1 1 CVE 1 exploited

    Security update for php7-pear

    This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591). This update was imported from the SUSE:SLE-15-SP2:Update update project.

    first Sep 15, 2021
  • High max 7.8
    SUSE-SU-2025:0904-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 57 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_219 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 18, 2025
  • High max 7.8
    SUSE-SU-2025:03535-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: fixed a local privilege escalation vulnerability (bnc#1250373).

    first Oct 10, 2025
  • High max 7.8
    SUSE-SU-2022:1036-1 1 CVE 1 exploited

    Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_153 fixes one issue. The following security issue was fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1…

    first Mar 30, 2022
  • High max 8.8
    SUSE-SU-2022:0811-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

    first Mar 11, 2022
  • High max 7.8
    SUSE-SU-2025:0919-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_s…

    first Mar 19, 2025
  • High max 7.9
    SUSE-SU-2023:0488-1 11 CVEs 1 exploited

    Security update for the Linux-RT Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed an out-of-bounds memory access vulnerability that was found in vmwgfx driver in drivers/gpu/vmxgfx…

    first Feb 23, 2023
  • High max 8.1
    SUSE-SU-2025:0998-1 1 CVE 1 exploited

    Security update for freetype2

    This update for freetype2 fixes the following issues: - CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465).

    first Mar 25, 2025
  • High max 7.5
    SUSE-SU-2024:3344-1 4 CVEs 1 exploited

    Security update for kubernetes1.25

    This update for kubernetes1.25 fixes the following issues: - CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869) - CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vuln…

    first Sep 19, 2024
  • High max 7.8
    SUSE-SU-2019:0878-1 5 CVEs 1 exploited

    Security update for apache2

    This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could…

    first Apr 4, 2019
  • High max 8.8
    openSUSE-SU-2021:0567-1 2 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 89.0.4389.128 (boo#1184700): * CVE-2021-21206: Use after free in blink * CVE-2021-21220: Insufficient validation of untrusted input in v8 for x86_64

    first Apr 17, 2021
  • High max 7.9
    SUSE-SU-2023:0485-1 6 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed an out-of-bounds memory access in vmwgfx driver causing denial of service (bsc#1203332). - CVE-202…

    first Feb 23, 2023
  • High max 7.5
    openSUSE-SU-2020:1060-1 4 CVEs 1 exploited

    Security update for cacti, cacti-spine

    This update for cacti, cacti-spine fixes the following issues: - cacti 1.2.13: * Query XSS vulnerabilities require vendor package update (CVE-2020-11022 / CVE-2020-11023) * Lack of escaping on some pages can lead to XSS exposure * Update PHPMailer to 6.1.6 (C…

    first Jul 25, 2020
  • High max 8.4
    SUSE-SU-2022:0289-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4083: Fixed race condition in Unix domain socket garbage collection that could lead to read memory after free (…

    first Feb 2, 2022
  • High max 7.8
    SUSE-SU-2025:03585-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: fixed a local privilege escalation vulnerability (bnc#1250373).

    first Oct 13, 2025
  • High max 8.1
    openSUSE-SU-2020:0544-1 5 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…

    first Apr 23, 2020
  • High max 7.5
    SUSE-SU-2024:0573-1 5 CVEs 1 exploited

    Security update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2

    This update for abseil-cpp, grpc, opencensus-proto, protobuf, python-abseil, python-grpcio, re2 fixes the following issues: abseil-cpp was updated to: Update to 20230802.1: * Add StdcppWaiter to the end of the list of waiter implementations Update to 20230802…

    first Feb 21, 2024
  • High max 7.0
    SUSE-SU-2016:2633-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 11 for SLE 12

    This update for the Linux Kernel 3.12.51-52_39 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 25, 2016
  • High max 8.3
    SUSE-SU-2021:2538-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3)

    This update for the Linux Kernel 4.4.180-94_127 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-2255…

    first Jul 27, 2021