Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.8
    SUSE-SU-2024:0301-1 1 CVE 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-23222: Fixed type confusion that may lead to arbitrary code execution. (bsc#1219113)

    first Feb 1, 2024
  • High max 8.3
    openSUSE-SU-2024:14004-1 1 CVE 1 exploited

    chromedriver-125.0.6422.112-1.1 on GA media

    These are all security issues fixed in the chromedriver-125.0.6422.112-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2024:3752-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27834 - CVE-2024-2…

    first Oct 24, 2024
  • High max 7.8
    SUSE-SU-2025:0263-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_21 fixes several issues. The following security issues were fixed: - CVE-2024-40921: net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (bsc#1227784). - CVE-2024-40920: net: bridge: mst: fix suspi…

    first Jan 27, 2025
  • High max 7.8
    SUSE-SU-2017:1153-1 1 CVE 1 exploited

    Security update for ghostscript-library

    This update for ghostscript fixes the following security vulnerability: CVE-2017-8291: A remote command execution and a -dSAFER bypass via a crafted .eps document were exploited in the wild. (bsc#1036453)

    first May 3, 2017
  • High max 7.8
    SUSE-SU-2016:0990-1 1 CVE 1 exploited

    Security update for flash-player

    flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2016-1019: Adobe Flash Player allowed remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, as exp…

    first Apr 8, 2016
  • High max 8.3
    openSUSE-SU-2021:2409-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables…

    first Jul 20, 2021
  • High max 7.5
    openSUSE-SU-2024:10423-1 22 CVEs 1 exploited

    tor-0.2.8.11-1.1 on GA media

    These are all security issues fixed in the tor-0.2.8.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2022:0768-1 10 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 9, 2022
  • High max 7.8
    SUSE-SU-2024:0117-1 8 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-2586: Fixed a use-after-free which can be triggered when a nft table is deleted (bsc#1202095). - CVE-2023-6121: Fixed …

    first Jan 16, 2024
  • High max 8.8
    SUSE-SU-2025:0260-1 16 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_68 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…

    first Jan 27, 2025
  • High max 7.8
    openSUSE-SU-2024:13294-1 1 CVE 1 exploited

    glibc-2.38-4.1 on GA media

    These are all security issues fixed in the glibc-2.38-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2021:0436-1 3 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium was updated to 89.0.4389.90 (boo#1183515) - CVE-2021-21191: Use after free in WebRTC. - CVE-2021-21192: Heap buffer overflow in tab groups. - CVE-2021-21193: Use after free in Blink.

    first Mar 17, 2021
  • High max 8.8
    openSUSE-SU-2024:13283-1 1 CVE 1 exploited

    nodejs-electron-25.8.4-2.1 on GA media

    These are all security issues fixed in the nodejs-electron-25.8.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2021:2600-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.32.3: - CVE-2021-21775: Fixed a use-after-free vulnerability in the way certain events are processed for ImageLoader objects. A specially crafted web page can lead to a potential info…

    first Aug 3, 2021
  • High max 8.1
    SUSE-SU-2017:3039-1 3 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security issues fixed: - CVE-2017-5664: A problem in handling error pages was fixed, to avoid potential file overwrites during error page handling. (bsc#1042910). - CVE-2017-7674: A CORS Filter issue could le…

    first Nov 22, 2017
  • High max 8.8
    openSUSE-SU-2023:0297-1 3 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 103.0.4928.16 * CHR-9416 Updating Chromium on desktop-stable-* branches * CHR-9433 Update Chromium on desktop-stable-117-4928 to 117.0.5938.89 * CHR-9449 Update Chromium on desktop-stable-117-4928 …

    first Oct 11, 2023
  • High max 8.8
    SUSE-SU-2023:0489-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.5 (boo#1208328): - CVE-2023-23529: Fixed possible arbitrary code execution via maliciously crafted web content. Update to version 2.38.4 (boo#1207997): - CVE-2023-23517: Fixed web …

    first Feb 23, 2023
  • High max 7.8
    SUSE-SU-2025:0946-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_136 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_vali…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2024:13353-1 1 CVE 1 exploited

    qutebrowser-3.0.2-1.1 on GA media

    These are all security issues fixed in the qutebrowser-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2022:0543-1 9 CVEs 1 exploited

    Security update for the Linux RT Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). …

    first Feb 21, 2022
  • High max 7.8
    SUSE-SU-2023:2369-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_15_18 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 5, 2023
  • High max 7.8
    openSUSE-SU-2022:0363-1 12 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254…

    first Feb 10, 2022
  • High max 8.8
    openSUSE-SU-2022:10219-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 93.0.4585.11 - CHR-9051 Update chromium on desktop-stable-107-4585 to 107.0.5304.88 - DNA-95965 Add support for more UD TLDs - DNA-102960 Replace messengers icons - DNA-102964 Crash at -[FramedBrowse…

    first Nov 26, 2022
  • High max 7.9
    SUSE-SU-2023:1708-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_41 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 31, 2023
  • High max 8.8
    SUSE-SU-2023:4209-1 8 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to exec…

    first Oct 26, 2023
  • High max 7.8
    SUSE-SU-2025:0942-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_150 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2021-47261: Fix initializing CQ fragments bu…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2021:1600-1 5 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 96.0.4664.110 (boo#1193713): * CVE-2021-4098: Insufficient data validation in Mojo * CVE-2021-4099: Use after free in Swiftshader * CVE-2021-4100: Object lifecycle issue in ANGLE * CVE-2021-4101: H…

    first Dec 20, 2021
  • High max 8.8
    SUSE-SU-2019:1629-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox to version 60.7.1 fixes the following issues: Security issue fixed: - CVE-2019-11707: Fixed a type confusion vulnerability in Arrary.pop (bsc#1138614) Other issues addressed: - Added the new Mozilla's GPG key expiring on 2021-05…

    first Jun 21, 2019
  • High max 7.8
    SUSE-SU-2023:2431-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_38 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 6, 2023
  • High max 8.8
    openSUSE-SU-2024:13232-1 11 CVEs 2 exploited

    ungoogled-chromium-116.0.5845.179-1.1 on GA media

    These are all security issues fixed in the ungoogled-chromium-116.0.5845.179-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2025:0885-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_8 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_se…

    first Mar 17, 2025
  • High max 7.8
    SUSE-SU-2022:0762-1 7 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 7.5
    openSUSE-SU-2021:3018-1 1 CVE 1 exploited

    Security update for php7-pear

    This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591).

    first Sep 13, 2021
  • High max 7.8
    SUSE-SU-2017:3165-1 5 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed reinstallation of the Group Temporal Key (GTK) durin…

    first Nov 30, 2017
  • High max 7.8
    SUSE-SU-2025:0687-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_7 fixes several issues. The following security issues were fixed: - CVE-2024-40956: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (bsc#1228585). - CVE-2024-36974: net/sched: taprio: alwa…

    first Feb 24, 2025
  • High max 7.9
    SUSE-SU-2023:1619-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_144 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208909). - CVE-2023-0266: Fixed a use-after-free vulner…

    first Mar 28, 2023
  • High max 8.8
    openSUSE-SU-2023:0247-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - CVE-2023-4863: temporary build with the bundled library on Leap (boo#1215231)

    first Sep 15, 2023
  • High max 8.8
    openSUSE-SU-2022:0077-1 8 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to 84.0.4316.21: - CHR-8762 Update chromium on desktop-stable-98-4316 to 98.0.4758.102 - DNA-97333 ‘Add a site’ label on start page tile barely visible - DNA-97691 Opera 84 translations - DNA…

    first Mar 7, 2022
  • High max 8.8
    SUSE-SU-2024:4292-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-44308: Fixed processing maliciously crafted web content that may lead to arbitrary code execution (bsc#1233631) - CVE-2024-44309: Fixed data isolation bypass vulnerability (bsc#1233632)

    first Dec 11, 2024