Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.6

    chromedriver-148.0.7778.167-2.1 on GA media

    These are all security issues fixed in the chromedriver-148.0.7778.167-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 16, 2026
  • Critical max 9.6

    chromedriver-148.0.7778.167-1.1 on GA media

    These are all security issues fixed in the chromedriver-148.0.7778.167-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 14, 2026
  • Critical max 9.1

    google-osconfig-agent-20260511.00-1.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260511.00-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 13, 2026
  • Critical max 9.8

    glibc-2.43-3.1 on GA media

    These are all security issues fixed in the glibc-2.43-3.1 package on the GA media of openSUSE Tumbleweed.

    first May 13, 2026
  • Critical max 9.8

    kubectl-cnpg-1.29.1-1.1 on GA media

    These are all security issues fixed in the kubectl-cnpg-1.29.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2026
  • Critical max 9.5

    php8-8.5.6-1.1 on GA media

    These are all security issues fixed in the php8-8.5.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 11, 2026
  • Critical max 9.8

    assimp-devel-6.0.5-2.1 on GA media

    These are all security issues fixed in the assimp-devel-6.0.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 10, 2026
  • Critical max 9.8

    MozillaThunderbird-140.10.2-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 10, 2026
  • Critical max 9.1

    mcphost-0.34.0-1.1 on GA media

    These are all security issues fixed in the mcphost-0.34.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 8, 2026
  • Critical max 9.8

    firefox-esr-140.10.2-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 8, 2026
  • Critical max 9.8

    kernel-devel-7.0.3-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 6, 2026
  • Critical max 9.1

    apptainer-1.4.5-4.1 on GA media

    These are all security issues fixed in the apptainer-1.4.5-4.1 package on the GA media of openSUSE Tumbleweed.

    first May 6, 2026
  • Critical max 9.1

    cri-tools-1.36.0-1.1 on GA media

    These are all security issues fixed in the cri-tools-1.36.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 5, 2026
  • Critical max 9.6

    chromedriver-148.0.7778.96-1.1 on GA media

    These are all security issues fixed in the chromedriver-148.0.7778.96-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 5, 2026
  • Critical max 9.6

    MozillaThunderbird-140.10.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 5, 2026
  • Critical max 9.1

    python313-3.13.13-2.1 on GA media

    These are all security issues fixed in the python313-3.13.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2026
  • Critical max 9.6

    firefox-esr-140.10.1-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 30, 2026
  • Critical max 9.8

    krb5-appl-clients-1.0.3-6.1 on GA media

    These are all security issues fixed in the krb5-appl-clients-1.0.3-6.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 29, 2026
  • Critical max 9.2

    gvim-9.2.0398-1.1 on GA media

    These are all security issues fixed in the gvim-9.2.0398-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Critical max 9.1

    trivy-0.70.0-1.1 on GA media

    These are all security issues fixed in the trivy-0.70.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Critical max 9.1

    python315-3.15.0~a8-3.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a8-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Critical max 9.1

    python310-3.10.20-6.1 on GA media

    These are all security issues fixed in the python310-3.10.20-6.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Critical max 9.1

    distribution-registry-3.1.0-1.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Critical max 9.6

    chromedriver-148.0.7778.56-1.1 on GA media

    These are all security issues fixed in the chromedriver-148.0.7778.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 27, 2026
  • Critical max 9.8

    MozillaFirefox-150.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-150.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 27, 2026
  • Critical max 9.1

    alloy-1.15.1-1.1 on GA media

    These are all security issues fixed in the alloy-1.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 26, 2026
  • Critical max 9.8

    kyverno-1.17.2-1.1 on GA media

    These are all security issues fixed in the kyverno-1.17.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • Critical max 9.1

    golang-github-prometheus-alertmanager-0.31.1-3.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.31.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).

    first Apr 22, 2026
  • Critical max 9.8

    MozillaThunderbird-140.9.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 24, 2026
  • Critical max 9.2

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…

    first Apr 24, 2026
  • Critical max 9.1

    Security update for coredns

    This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.2: * plugin/reload: Allow disabling jitter with 0s * bump deps * plugin/forward: fix parsing error when handling TLS+IPv6 address * plugin/loop: use crypto/rand f…

    first Apr 23, 2026
  • Critical max 9.1
    SUSE-SU-2026:1604-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 24, 2026
  • Critical max 9.1
    SUSE-SU-2026:1603-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 24, 2026
  • Critical max 9.3

    Security update for flatpak

    This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769). - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770…

    first Apr 24, 2026
  • Critical max 9.8

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: - Update to go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…

    first Apr 23, 2026
  • Critical max 9.8

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: - Update to go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…

    first Apr 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Micro (RT) 6.0 and 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarfs: Fix slab…

    first Apr 17, 2026
  • Critical max 9.2

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…

    first Apr 20, 2026
  • Critical max 9.2

    Security update for cockpit-tukit

    This update for cockpit-tukit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob …

    first Apr 20, 2026