Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.3

    Security update for hplip

    This update for hplip fixes the following issues Update to HPLIP 3.26.4: Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031). - CVE-2026-86…

    first Jun 11, 2026
  • Critical max 9.6

    golang-github-prometheus-prometheus-3.12.0-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-3.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Critical max 9.9

    cpp-httplib-devel-0.46.1-1.1 on GA media

    These are all security issues fixed in the cpp-httplib-devel-0.46.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Critical max 9.8

    Security update for tomcat10

    This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…

    first Jun 11, 2026
  • Critical max 9.8

    Security update for tomcat11

    This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…

    first Jun 11, 2026
  • Critical max 9.1

    Security update for unbound

    This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: 'Ghost domain name' variant (bsc#12655…

    first Jun 11, 2026
  • Critical max 9.2

    Security update for cockpit

    This update for cockpit fixes the following issues - CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (bsc#1265040). - CVE-2026-25547: brace-expansion: unbounded brace range expansion ca…

    first Jun 11, 2026
  • Critical max 9.1

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260264).

    first Jun 10, 2026
  • Critical max 9.8

    Security update for glibc

    This update for glibc fixes the following issues - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261206). - CVE-2026-5450: stdio-common: scanf %mc pattern will cause heap overflow when width > 1024 …

    first Jun 10, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263790). - CVE-2026-43037: ip6_tunnel: clear skb2->c…

    first Jun 10, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31629: nfc: llcp: add mis…

    first Jun 10, 2026
  • Critical max 9.1

    Security update for elemental-toolkit

    This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/n…

    first Jun 8, 2026
  • Critical max 9.8

    Security update for syft

    This update for syft fixes the following issues: Changes in syft: - Update to version 1.45.0: * Added Features - Add support for ZapAddOns as jar files [#4654 #4932 @douglasclarke] - MySQL binary classifier should distinguish between MySQL Cluster (ndb) and M…

    first Jun 8, 2026
  • Critical max 9.1

    Security update for elemental-system-agent

    This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to version 0.3.16: * setup for immut…

    first Jun 8, 2026
  • Critical max 9.1

    Security update for elemental-register

    This update for elemental-register fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v1.9.2: * 71d1fb9c Local node labels …

    first Jun 8, 2026
  • Critical max 9.8

    perl-DBI-1.648.0-1.1 on GA media

    These are all security issues fixed in the perl-DBI-1.648.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 9, 2026
  • Critical max 9.6

    grafana-11.6.14+security04-2.1 on GA media

    These are all security issues fixed in the grafana-11.6.14+security04-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 9, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23271: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race (bsc#1260018). - CVE-2026-31402: nfsd: fix heap…

    first Jun 9, 2026
  • Critical max 9.1

    Security update for elemental-system-agent

    This update for elemental-system-agent fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to version 0.3.16: * setup for immut…

    first Jun 8, 2026
  • Critical max 9.1

    Security update for elemental-toolkit

    This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v2.3.4: * 974af043 Bump golang.org/x/n…

    first Jun 8, 2026
  • Critical max 9.1

    Security update for elemental-register

    This update for elemental-register fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260277). Changes: - Update to v1.9.2: * 71d1fb9c Local node labels …

    first Jun 8, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). - CVE-2026-3150: bcache…

    first Jun 5, 2026
  • Critical max 9.0

    Security update for samba

    This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…

    first Jun 5, 2026
  • Critical max 10.0

    Security update for mariadb

    This update for mariadb fixes the following issues: - CVE-2026-3494: audit plugin comment handling bypass (bsc#1259176). - CVE-2026-34303: mysql: optimizer unspecified vulnerability (bsc#1266435). - CVE-2026-35549: SHA2 auth plugin crash on large packets (bsc…

  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31473: media: mc, v4l2: seri…

    first Jun 9, 2026
  • Critical max 9.0

    Security update for samba

    This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188). - CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158). - CVE-2026-3012: group policy cer…

    first Jun 5, 2026
  • Critical max 9.8

    rclone-1.74.3-1.1 on GA media

    These are all security issues fixed in the rclone-1.74.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Critical max 9.1

    amazon-ssm-agent-3.3.4624.0-2.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.4624.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Critical max 9.6

    prometheus-blackbox_exporter-0.26.0-6.1 on GA media

    These are all security issues fixed in the prometheus-blackbox_exporter-0.26.0-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Critical max 9.1

    cheat-5.1.0-2.1 on GA media

    These are all security issues fixed in the cheat-5.1.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Critical max 9.6

    chromedriver-149.0.7827.53-2.1 on GA media

    These are all security issues fixed in the chromedriver-149.0.7827.53-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 5, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10954-1 274 CVEs 1 exploited

    kernel-devel-7.0.11-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 4, 2026
  • Critical max 9.3

    sshfs-3.7.6-1.1 on GA media

    These are all security issues fixed in the sshfs-3.7.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 3, 2026
  • Critical max 10.0

    git-bug-0.10.1-5.1 on GA media

    These are all security issues fixed in the git-bug-0.10.1-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 3, 2026
  • Critical max 9.8

    ansible-13-13.7.0-1.1 on GA media

    These are all security issues fixed in the ansible-13-13.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 3, 2026
  • Critical max 9.1

    perl-HTTP-Daemon-6.170.0-1.1 on GA media

    These are all security issues fixed in the perl-HTTP-Daemon-6.170.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 2, 2026
  • Critical max 9.8

    libopenbabel8-3.2.0-1.1 on GA media

    These are all security issues fixed in the libopenbabel8-3.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 2, 2026
  • Critical max 10.0

    libmariadbd-devel-11.8.8-1.1 on GA media

    These are all security issues fixed in the libmariadbd-devel-11.8.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 2, 2026
  • Critical max 9.6

    yq-4.53.2-2.1 on GA media

    These are all security issues fixed in the yq-4.53.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 1, 2026
  • Critical max 9.8

    tomcat11-11.0.22-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 1, 2026