Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 7.0
    SUSE-SU-2016:2659-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 13 for SLE 12

    This update for the Linux Kernel 3.12.55-52_45 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 26, 2016
  • High max 8.8
    SUSE-SU-2022:0705-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.34.6 (bsc#1196133): - CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution. Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A…

    first Mar 4, 2022
  • High max 8.8
    openSUSE-SU-2021:0898-1 4 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 91.0.4472.114 (boo#1187481) * CVE-2021-30554: Use after free in WebGL * CVE-2021-30555: Use after free in Sharing * CVE-2021-30556: Use after free in WebAudio * CVE-2021-30557: Use after free in Ta…

    first Jun 21, 2021
  • High max 7.8
    SUSE-SU-2022:0760-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.0
    SUSE-SU-2025:0652-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_59 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix po…

    first Feb 22, 2025
  • High max 8.8
    SUSE-SU-2016:0400-1 22 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - Security update to 11.2.202.569 (bsc#965901): * APSB16-04, CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0971, CVE-2016-0972, CVE-20…

    first Feb 10, 2016
  • High max 8.8
    openSUSE-SU-2020:0094-1 7 CVEs 1 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.4.1 fixes the following issues: Security issues fixed: - CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement - CVE-2019-17016: Bypass of @namespace CSS sanitization during pa…

    first Jan 22, 2020
  • High max 8.8
    openSUSE-SU-2021:0575-1 2 CVEs 2 exploited

    Security update for chromium

    This update for chromium fixes the following issues: - Chromium 89.0.4389.128 (boo#1184700): * CVE-2021-21206: Use after free in blink * CVE-2021-21220: Insufficient validation of untrusted input in v8 for x86_64 This update was imported from the openSUSE:Lea…

    first Apr 19, 2021
  • High max 8.0
    SUSE-SU-2025:0708-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_161 fixes several issues. The following security issues were fixed: - CVE-2024-35789: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (bsc#1227320). - CVE-2024-40956: dmaengine: idxd: Fix po…

    first Feb 25, 2025
  • High max 7.5
    openSUSE-SU-2024:11824-1 2 CVEs 1 exploited

    ruby3.1-rubygem-activejob-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-activejob-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2023:2077-1 12 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderL…

    first Apr 29, 2023
  • High max 8.0
    SUSE-SU-2019:3252-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_3 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2018-20856: Fixed a use-afte…

    first Dec 11, 2019
  • High max 8.8
    openSUSE-SU-2019:2664-1 2 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: Opera was updated to version 65.0.3467.62 - CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108 - DNA-81387 Remove support for old bundle structure in signing scripts - DNA-81675 Update widevin…

    first Dec 10, 2019
  • High max 8.8
    openSUSE-SU-2024:11849-1 8 CVEs 1 exploited

    chromedriver-98.0.4758.102-1.1 on GA media

    These are all security issues fixed in the chromedriver-98.0.4758.102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.4
    SUSE-SU-2022:0295-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-59_13 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 2, 2022
  • High max 8.0
    SUSE-SU-2019:3260-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_109 fixes several issues. The following security issues were fixed: - CVE-2018-20856: Fixed a use-after-free in __blk_drain_queue() due to an improper error handling (bsc#1156331). - CVE-2019-13272: Fixed a privileg…

    first Dec 11, 2019
  • High max 8.8
    SUSE-SU-2024:2065-1 2 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.44.2 - CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)

    first Jun 18, 2024
  • High max 7.5
    SUSE-SU-2025:0283-1 2 CVEs 1 exploited

    Security update for nginx

    This update for nginx fixes the following issues: - CVE-2023-44487: Mitigate HTTP/2 Rapid Reset Attack (bsc#1216171) - CVE-2024-7347: Fixed worker crashes on special crafted mp4 files containing invalid chunk information (bsc#1229155)

    first Jan 29, 2025
  • High max 7.9
    SUSE-SU-2023:1649-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_18 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 28, 2023
  • High max 8.1
    openSUSE-SU-2020:0520-1 5 CVEs 2 exploited

    Security update for MozillaThunderbird

    This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor (boo#1168630) - CVE-2020-6820: Use-after-free when handling a ReadableStream (boo#1168630) - CVE-2020-6821…

    first Apr 15, 2020
  • High max 8.8
    openSUSE-SU-2022:10177-1 11 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 107.0.5304.87 (boo#1204819) * CVE-2022-3723: Type Confusion in V8 Chromium 107.0.5304.68 (boo#1204732) * CVE-2022-3652: Type Confusion in V8 * CVE-2022-3653: Heap buffer overflow in Vulkan * CVE-20…

    first Oct 31, 2022
  • High max 7.8
    SUSE-SU-2018:3083-1 20 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-14634: Prevent integer overflow in create_elf_tables that allowed a local attacker to exploit this vulnerability via a…

    first Oct 9, 2018
  • High max 7.8
    SUSE-SU-2025:0922-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_17 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_valid_s…

    first Mar 19, 2025
  • High max 8.8
    openSUSE-SU-2021:0629-1 25 CVEs 1 exploited

    Security update for Chromium

    This update for chromium fixes the following issues: - Chromium was updated to 90.0.4430.93 (boo#1184764,boo#1185047,boo#1185398) * CVE-2021-21227: Insufficient data validation in V8. * CVE-2021-21232: Use after free in Dev Tools. * CVE-2021-21233: Heap buffe…

    first Apr 30, 2021
  • High max 8.8
    openSUSE-SU-2023:0123-1 1 CVE 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Update to version 114.0.5735.106: - CVE-2023-3079: Type Confusion in V8 (boo#1212044)

    first Jun 9, 2023
  • High max 7.9
    SUSE-SU-2023:0779-1 21 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-3606: Fixed a null pointer dereference inside the function find_prog_by_sec_insn of the file tools/lib/bpf/libb…

    first Mar 16, 2023
  • High max 8.8
    openSUSE-SU-2024:12985-1 1 CVE 1 exploited

    chromedriver-114.0.5735.106-1.1 on GA media

    These are all security issues fixed in the chromedriver-114.0.5735.106-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2025:0662-1 1 CVE 1 exploited

    Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_11 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 24, 2025
  • High max 7.5
    SUSE-SU-2023:4207-1 4 CVEs 1 exploited

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity ch…

    first Oct 26, 2023
  • High max 7.5
    SUSE-SU-2023:4295-1 1 CVE 1 exploited

    Security update for nodejs10

    This update for nodejs10 fixes the following issues: - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190)

    first Oct 31, 2023
  • High max 8.8
    SUSE-SU-2023:3237-1 12 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-385…

    first Aug 8, 2023
  • High max 8.4
    SUSE-SU-2022:0292-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_64 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 2, 2022
  • High max 7.8
    SUSE-SU-2025:0650-1 1 CVE 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_10_5 fixes one issue. The following security issue was fixed: - CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1236783).

    first Feb 21, 2025
  • High max 8.0
    SUSE-SU-2019:2949-1 49 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12-SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of th…

    first Nov 15, 2019
  • High max 7.8
    SUSE-SU-2025:0241-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_44 fixes several issues. The following security issues were fixed: - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1229275). - CVE-2024-36971: Fixed __dst_negative_a…

    first Jan 26, 2025
  • High max 8.8
    SUSE-SU-2023:4829-1 2 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 (bsc#1217844): - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' fo…

    first Dec 14, 2023
  • High max 7.8
    SUSE-SU-2024:1551-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_154 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • High max 7.0
    SUSE-SU-2016:2636-1 2 CVEs 1 exploited

    Security update for Linux Kernel Live Patch 9 for SLE 12

    This update for the Linux Kernel 3.12.51-52_31 fixes several issues. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using MAP_PRIVATE was fixed, which is reportedly exploited in the wild (bsc#1004419). - CVE-2016-4997: T…

    first Oct 25, 2016
  • High max 8.5
    openSUSE-SU-2021:3476-1 14 CVEs 1 exploited

    Security update for xstream

    This update for xstream fixes the following issues: - Upgrade to 1.4.18 - CVE-2021-39139: Fixed an issue that allowed an attacker to execute arbitrary code execution by manipulating the processed input stream with type information. (bsc#1189798) - CVE-2021-39…

    first Oct 20, 2021
  • High max 7.8
    SUSE-SU-2024:1506-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_175 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2024-1086: Fixed…

    first May 6, 2024