Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 7.0
    SUSE-SU-2016:2637-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 6 for SLE 12 SP1

    This update for the Linux Kernel 3.12.59-60_45 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-8666: T…

    first Oct 25, 2016
  • High max 8.4
    SUSE-SU-2022:0169-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalat…

    first Jan 25, 2022
  • High max 7.0
    SUSE-SU-2016:2658-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 14 for SLE 12

    This update for the Linux Kernel 3.12.60-52_49 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 26, 2016
  • High max 7.8
    SUSE-SU-2021:1274-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

    first Apr 20, 2021
  • High max 8.3
    SUSE-SU-2021:2422-1 13 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909:…

    first Jul 21, 2021
  • High max 7.5
    openSUSE-SU-2024:10580-1 4 CVEs 1 exploited

    httrack-3.48.22-1.3 on GA media

    These are all security issues fixed in the httrack-3.48.22-1.3 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1580-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_144 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-26622: Fixe…

    first May 9, 2024
  • High max 7.8
    SUSE-SU-2024:0515-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#1219429). - …

    first Feb 15, 2024
  • High max 8.8
    SUSE-SU-2024:3870-1 13 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27…

    first Nov 1, 2024
  • High max 8.6
    SUSE-SU-2022:1257-1 33 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-0854: Fixed a memory leak flaw was found in the Linux kernels DMA subsystem. This flaw allowed a local user to read…

    first Apr 19, 2022
  • High max 7.8
    SUSE-SU-2023:2425-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1211111). …

    first Jun 6, 2023
  • High max 7.8
    SUSE-SU-2015:0722-1 22 CVEs 1 exploited

    Security update for Adobe Flash Player

    Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: * Memory corruption vulnerabiliti…

    first Apr 15, 2015
  • High max 7.8
    SUSE-SU-2015:1258-1 2 CVEs 2 exploited

    Security update for flash-player

    flash-player was updated to fix two security issues. These security issues were fixed: - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allowed remote attackers to execute a…

    first Jul 16, 2015
  • High max 7.0
    openSUSE-SU-2024:10128-1 82 CVEs 2 exploited

    kernel-debug-4.8.13-1.1 on GA media

    These are all security issues fixed in the kernel-debug-4.8.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:0514-1 21 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1085: Fixed nf_tables use-after-free vulnerability in the nft_setelem_catchall_deactivate() function (bsc#121942…

    first Feb 15, 2024
  • High max 7.8
    SUSE-SU-2022:0190-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

    first Jan 25, 2022
  • High max 7.5
    openSUSE-SU-2024:13390-1 1 CVE 1 exploited

    lighttpd-1.4.73-1.1 on GA media

    These are all security issues fixed in the lighttpd-1.4.73-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2021:1074-1 7 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.164 (boo#1188373) * CVE-2021-30559: Out of bounds write in ANGLE * CVE-2021-30541: Use after free in V8 * CVE-2021-30560: Use after free in Blink XSLT * CVE-2021-30561: Type Confusion in …

    first Jul 21, 2021
  • High max 8.8
    SUSE-SU-2023:3609-1 1 CVE 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 bu…

    first Sep 15, 2023
  • High max 8.8
    openSUSE-SU-2024:12180-1 3 CVEs 1 exploited

    chromedriver-103.0.5060.114-1.1 on GA media

    These are all security issues fixed in the chromedriver-103.0.5060.114-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2025:0096-1 10 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.46.5 (bsc#1234851): Security fixes: - CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash - CVE-2024-54502: Processing maliciously craft…

    first Jan 14, 2025
  • High max 7.8
    SUSE-SU-2025:0927-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_225 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 7.8
    SUSE-SU-2015:0236-1 18 CVEs 1 exploited

    Security update for flash-player

    flash-player was updated to version 11.2.202.442 to fix 18 security issues. These security issues were fixed: - Use-after-free vulnerabilities that could lead to code execution (CVE-2015-0313, CVE-2015-0315, CVE-2015-0320, CVE-2015-0322). - Memory corruption …

    first Feb 6, 2015
  • High max 7.1
    SUSE-SU-2023:3504-1 2 CVEs 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566).

    first Aug 31, 2023
  • High max 8.8
    openSUSE-SU-2024:13532-1 2 CVEs 1 exploited

    nodejs-electron-27.2.0-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-27.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    openSUSE-SU-2024:13704-1 194 CVEs 2 exploited

    kernel-devel-longterm-6.6.17-1.1 on GA media

    These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:2078-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…

    first Apr 29, 2023
  • High max 7.8
    openSUSE-SU-2022:0755-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' a…

    first Mar 8, 2022
  • High max 7.8
    SUSE-SU-2024:0474-1 15 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 LTSS kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-1086: Fixed a use-after-free vulnerability inside the nf_tables component that could have been exploited to achie…

    first Feb 14, 2024
  • High max 7.5
    SUSE-SU-2023:4068-1 2 CVEs 1 exploited

    Security update for go1.20

    This update for go1.20 fixes the following issues: - Update to go1.20.10 (bsc#1206346) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109)

    first Oct 13, 2023
  • High max 8.8
    openSUSE-SU-2022:0123-1 1 CVE 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to 86.0.4363.23: - CHR-8843 Update chromium on desktop-stable-100-4363 to 100.0.4896.127 - DNA-98236 Turn on #snap-text-selection on all streams - DNA-98507 DCHECK at address_bar_controller.cc(547) - DN…

    first May 1, 2022
  • High max 7.8
    SUSE-SU-2024:1386-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_100 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside …

    first Apr 22, 2024
  • High max 8.8
    openSUSE-SU-2021:0712-1 7 CVEs 3 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 76.0.4017.94 - released on the stable branch Update to version 76.0.4017.88 - CHR-8404 Update chromium on desktop-stable-90-4017 to 90.0.4430.85 - DNA-92219 Add bookmark API supports to the f…

    first May 11, 2021
  • High max 7.8
    SUSE-SU-2022:0365-1 7 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP2 LTSS kernel was updated receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0435: Fixed remote stack overflow in net/tipc module that validate domain record count on input (bsc#1195254). -…

    first Feb 10, 2022
  • High max 7.9
    SUSE-SU-2023:1639-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_11 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 28, 2023
  • High max 8.8
    openSUSE-SU-2021:0948-1 14 CVEs 2 exploited

    Security update for opera

    This update for opera fixes the following issues: Update to version 77.0.4054.146 - CHR-8458 Update chromium on desktop-stable-91-4054 to 91.0.4472.114 - DNA-92171 Create active linkdiscovery service - DNA-92388 Fix and unskip WorkspacesEmoji.testChooseEmojiA…

    first Jul 1, 2021
  • High max 7.5
    SUSE-SU-2016:0858-1 4 CVEs 1 exploited

    Security update for rubygem-actionpack-4_1

    This update for rubygem-actionpack-4_1 fixes the following issues: - CVE-2016-0751: Object Leak DoS (bsc#963331) - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes (bsc#963335) - CVE-2016-0752: directory traversal and information leak…

    first Mar 22, 2016
  • High max 8.8
    SUSE-SU-2023:3753-1 10 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_ap…

    first Sep 25, 2023
  • High max 8.4
    openSUSE-SU-2022:0169-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalat…

    first Jan 25, 2022
  • High max 8.8
    openSUSE-SU-2019:2426-1 2 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium was updated to 78.0.3904.87 boo#1155643: * CVE-2019-13721: Use-after-free in PDFium * CVE-2019-13720: Use-after-free in audio This update was imported from the openSUSE:Leap:15.0:Update update proj…

    first Nov 3, 2019