Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 8.4
    SUSE-SU-2022:0291-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-24_52 fixes several issues. The following security issues were fixed: - CVE-2022-0185: Incorrect param length parsing in legacy_parse_param which could have led to a local privilege escalation (bsc#1194517). - CVE-2021-…

    first Feb 2, 2022
  • High max 8.8
    openSUSE-SU-2024:13583-1 17 CVEs 1 exploited

    chromedriver-120.0.6099.216-1.1 on GA media

    These are all security issues fixed in the chromedriver-120.0.6099.216-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2024:1382-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 48 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_176 fixes several issues. The following security issues were fixed: - CVE-2023-5717: Fixed a heap out-of-bounds write vulnerability in the Performance Events component (bsc#1216644). - CVE-2024-1086: Fixed a use-af…

    first Apr 22, 2024
  • High max 8.0
    SUSE-SU-2019:3225-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_16 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a pare…

    first Dec 10, 2019
  • High max 7.8
    openSUSE-SU-2021:0602-1 1 CVE 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936) This update was imported from the SUSE:SLE-15:Update update project.

    first Apr 23, 2021
  • High max 7.8
    SUSE-SU-2024:1410-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_39 fixes several issues. The following security issues were fixed: - CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220828). - CVE-2024-1086: Fixed a use-after-free vulnerability inside t…

    first Apr 23, 2024
  • High max 8.8
    SUSE-SU-2020:0078-1 7 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.4.1 ESR * Fixed: Security fix MFSA 2020-03 (bsc#1160498) * CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement - …

    first Jan 13, 2020
  • High max 8.8
    SUSE-SU-2019:1137-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 to version 2.24.1 fixes the following issues: Security issues fixed: - CVE-2019-6201, CVE-2019-6251, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8506, CVE-2019-8515, CVE-2019-8518, CVE-2019-8523, CVE-2019-8524, CVE-2019-8…

    first May 3, 2019
  • High max 8.4
    openSUSE-SU-2024:11775-1 1 CVE 1 exploited

    kernel-devel-5.16.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-5.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    SUSE-SU-2016:3080-1 9 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    This update for MozillaFirefox, mozilla-nss fixes security issues and bugs. The following vulnerabilities were fixed in Firefox ESR 45.5.1 (bsc#1009026 bsc#1012964): - CVE-2016-9079: Use-after-free in SVG Animation (MFSA 2016-92 bsc#1012964) - CVE-2016-5297: …

    first Dec 10, 2016
  • High max 8.0
    SUSE-SU-2019:3224-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SLE 12 SP4)

    This update for the Linux Kernel 4.12.14-95_13 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privile…

    first Dec 10, 2019
  • High max 8.3
    openSUSE-SU-2021:2415-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Security issues fixed: - CVE-2021-22555: A heap out-of-bounds write was discovered in net/netfilter/x_tables.c (bnc#1188116). - CVE-2021-33909: Extremely large seq b…

    first Jul 20, 2021
  • High max 8.8
    openSUSE-SU-2022:10108-1 10 CVEs 1 exploited

    Security update for opera

    This update for opera fixes the following issues: - Update to 90.0.4480.54 - CHR-8981 Update chromium on desktop-stable-104-4480 to 104.0.5112.102 - DNA-98165 [buildsign] Whitelist Silent.nib when creating universal NI package on Mac - DNA-101309 Use base fil…

    first Aug 29, 2022
  • High max 8.8
    openSUSE-SU-2024:13284-1 1 CVE 1 exploited

    libopencv408-4.8.1-1.1 on GA media

    These are all security issues fixed in the libopencv408-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.5
    openSUSE-SU-2024:11823-1 5 CVEs 1 exploited

    ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 on GA media

    These are all security issues fixed in the ruby3.1-rubygem-actionview-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 8.8
    SUSE-SU-2015:2402-1 19 CVEs 1 exploited

    Security update for flash-player

    This update for flash-player fixes the following issues: - CVE-2015-8644: Type confusion vulnerability that could lead to code execution. - CVE-2015-8651: Integer overflow vulnerability that could lead to code execution. - CVE-2015-8634, CVE-2015-8635, CVE-20…

    first Dec 30, 2015
  • High max 7.9
    SUSE-SU-2023:1591-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_106 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-1078: Fixed a heap out-of-boun…

    first Mar 27, 2023
  • High max 8.0
    SUSE-SU-2019:3247-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SLE 15)

    This update for the Linux Kernel 4.12.14-150_14 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privil…

    first Dec 11, 2019
  • High max 8.8
    SUSE-SU-2015:1476-1 16 CVEs 1 exploited

    Security update for MozillaFirefox, mozilla-nss

    Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities. - Firefox was updated to 38.2.1 ESR (bsc#943608) * MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during …

    first Sep 1, 2015
  • High max 7.8
    SUSE-SU-2022:1038-1 24 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-25636: Fixed an issue which allowed a local users to gain privileges because of a heap out-of-bounds write in n…

    first Mar 30, 2022
  • High max 8.8
    SUSE-SU-2023:4211-1 8 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to exec…

    first Oct 26, 2023
  • High max 7.8
    SUSE-SU-2025:0903-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

    This update for the Linux Kernel 5.14.21-150400_24_116 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-46815: drm/amd/display: Check num_vali…

    first Mar 18, 2025
  • High max 7.5
    SUSE-SU-2023:4163-1 1 CVE 1 exploited

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: - Updated netty to version 4.1.100: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - Updated netty-tcnative to version 2.0.62 Final.

    first Oct 24, 2023
  • High max 7.5
    SUSE-SU-2016:1146-1 10 CVEs 1 exploited

    Security update for portus

    Portus was updated to version 2.0.3, which brings several fixes and enhancements: - Fixed crono job when a repository could not be found. - Fixed compatibility issues with Docker 1.10 and Distribution 2.3. - Handle multiple scopes in token requests. - Add opt…

    first Apr 25, 2016
  • High max 7.8
    SUSE-SU-2024:1545-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP2)

    This update for the Linux Kernel 5.3.18-150200_24_148 fixes several issues. The following security issues were fixed: - CVE-2024-0775: Fixed a use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 (bsc#1219079). - CVE-2023-5717: Fixed…

    first May 7, 2024
  • High max 7.8
    SUSE-SU-2025:0924-1 2 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 61 for SLE 12 SP5)

    This update for the Linux Kernel 4.12.14-122_231 fixes several issues. The following security issues were fixed: - CVE-2024-46818: drm/amd/display: Check gpio_id before used as array index (bsc#1231204). - CVE-2024-50302: HID: core: zero-initialize the report…

    first Mar 19, 2025
  • High max 8.1
    SUSE-SU-2017:3059-1 5 CVEs 2 exploited

    Security update for tomcat

    Apache Tomcat was updated to 7.0.82 adding features, fixing bugs and security issues. This is another bugfix release, for full details see: https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Fixed security issues: - CVE-2017-5664: A problem in handling e…

    first Nov 23, 2017
  • High max 8.4
    SUSE-SU-2016:1275-1 5 CVEs 3 exploited

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: Security issues fixed: - Several coders were vulnerable to remote code execution attacks, these coders have now been disabled. They can be re-enabled by exporting the following environment variable MAGIC…

    first May 11, 2016
  • High max 7.8
    openSUSE-SU-2022:0760-1 6 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now…

    first Mar 8, 2022
  • High max 8.1
    SUSE-SU-2025:0960-1 1 CVE 1 exploited

    Security update for freetype2

    This update for freetype2 fixes the following issues: - CVE-2025-27363: Fixed out-of-bounds write when attempting to parse font subglyph structures related to TrueType GX and variable font files (bsc#1239465).

    first Mar 19, 2025
  • High max 8.1
    SUSE-SU-2023:4469-1 10 CVEs 1 exploited

    Security update for go1.21-openssl

    This update for go1.21-openssl fixes the following issues: Update to version 1.21.4.1 cut from the go1.21-openssl-fips branch at the revision tagged go1.21.4-1-openssl-fips. * Update to go1.21.4 go1.21.4 (released 2023-11-07) includes security fixes to the pa…

    first Nov 16, 2023
  • High max 7.8
    openSUSE-SU-2024:13558-1 1 CVE 1 exploited

    perl-Spreadsheet-ParseExcel-0.660.0-1.1 on GA media

    These are all security issues fixed in the perl-Spreadsheet-ParseExcel-0.660.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    SUSE-SU-2015:1771-1 1 CVE 1 exploited

    Security update for flash-player

    flash-player was updated to fix one security issue. This security issue was fixed: - CVE-2015-7645: Critical vulnerability affecting 11.2.202.535 used in Pawn Storm (APSA15-05) (bsc#950474).

    first Oct 16, 2015
  • High max 7.0
    SUSE-SU-2016:3069-1 10 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 RT kernel was updated to receive various security and bugfixes. This feature was added: - Support for the 2017 Intel Purley platform. The following security bugs were fixed: - CVE-2016-5195: A local privilege escalation using …

    first Dec 9, 2016
  • High max 8.8
    openSUSE-SU-2024:12609-1 3 CVEs 1 exploited

    nodejs-electron-21.3.4-1.1 on GA media

    These are all security issues fixed in the nodejs-electron-21.3.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.8
    openSUSE-SU-2021:1843-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-3560: Fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync() (bsc#1186497).

    first Jul 11, 2021
  • High max 8.8
    openSUSE-SU-2021:0973-1 29 CVEs 1 exploited

    Security update for libqt5-qtwebengine

    This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Me…

    first Jul 5, 2021
  • High max 7.8
    SUSE-SU-2022:0191-1 1 CVE 1 exploited

    Security update for polkit

    This update for polkit fixes the following issues: - CVE-2021-4034: Fixed a local privilege escalation in pkexec (bsc#1194568).

    first Jan 25, 2022
  • High max 8.8
    openSUSE-SU-2024:13227-1 1 CVE 1 exploited

    MozillaFirefox-117.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-117.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2024
  • High max 7.0
    SUSE-SU-2022:3609-1 26 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-39190: Fixed an issue that was discovered in net/netfilter/nf_tables_api.c and could cause a denial of servi…

    first Oct 18, 2022