Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

5,613 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2026:1524-1 17 CVEs

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fixed: * CVE-2026-27606: Fixed arbitrary file write vi…

    first Apr 21, 2026
  • Critical max 9.2
    SUSE-SU-2026:21134-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…

    first Apr 15, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10584-1 2 CVEs

    rclone-1.73.5-1.1 on GA media

    These are all security issues fixed in the rclone-1.73.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 20, 2026
  • Critical max 9.6
    openSUSE-SU-2026:10572-1 31 CVEs

    chromedriver-147.0.7727.101-1.1 on GA media

    These are all security issues fixed in the chromedriver-147.0.7727.101-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Critical max 9.3
    openSUSE-SU-2026:10571-1 5 CVEs

    bouncycastle-1.84-1.1 on GA media

    These are all security issues fixed in the bouncycastle-1.84-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Critical max 9.2
    SUSE-SU-2026:21118-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: - Update to 9.2.0280 - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via vari…

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:21123-1 61 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarf…

    first Apr 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:21114-1 61 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarf…

    first Apr 13, 2026
  • Critical max 9.1
    SUSE-SU-2026:21128-1 1 CVE

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).

    first Apr 14, 2026
  • Critical max 9.1
    SUSE-SU-2026:21115-1 1 CVE

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).

    first Apr 14, 2026
  • Critical max 9.2
    SUSE-SU-2026:21124-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: - Update to 9.2.0280 - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via vari…

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1438-1 3 CVEs

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2026-20911: heap-based buffer overflow in `HuffTable::initval`(bsc#1261673). - CVE-2026-21413: heap-based buffer overflow in `lossless_jpeg_load_raw` (bsc#1261674). - CVE-2026-24660: heap-based buffer o…

    first Apr 17, 2026
  • Critical max 9.8
    SUSE-SU-2026:21106-1 1 CVE

    Security update for cockpit

    This update for cockpit fixes the following issues: Changes in cockpit: - CVE-2026-4631: Avoid ssh command injection that could be used to cause remote code execution (bsc#1261829)

    first Apr 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:1408-1 2 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798). - CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).

    first Apr 16, 2026
  • Critical max 9.3
    SUSE-SU-2026:1398-1 7 CVEs

    Security update for freerdp

    This update for freerdp fixes the following issues: Security fixes: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (b…

    first Apr 16, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10567-1 5 CVEs

    python311-Django-5.2.13-1.1 on GA media

    These are all security issues fixed in the python311-Django-5.2.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 16, 2026
  • Critical max 9.1
    SUSE-SU-2026:1395-1 1 CVE

    Security update for azure-storage-azcopy

    This update for azure-storage-azcopy fixes the following issues: - CVE-2026-33186: Authorization bypass in grpc-go due to improper validation of the HTTP/2 :path pseudo-header (bsc#1260307).

    first Apr 16, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10565-1 7 CVEs

    libraw-devel-0.22.1-1.1 on GA media

    These are all security issues fixed in the libraw-devel-0.22.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 16, 2026
  • Critical max 9.2
    SUSE-SU-2026:1387-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…

    first Apr 16, 2026
  • Critical max 9.1
    SUSE-SU-2026:1411-1 2 CVEs

    Security update for terraform-provider-local, terraform-provider-random, terraform-provider-tls

    This update for terraform-provider-local, terraform-provider-random, terraform-provider-tls fixes the following issue: - CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files that can lead to the …

    first Apr 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:1407-1 2 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798). - CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).

    first Apr 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:1379-1 3 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 1…

    first Apr 16, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10551-1 1 CVE

    perl-YAML-Syck-1.440.0-1.1 on GA media

    These are all security issues fixed in the perl-YAML-Syck-1.440.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • Critical max 9.2
    SUSE-SU-2026:1347-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…

    first Apr 15, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10549-1 10 CVEs 1 exploited

    tomcat11-11.0.21-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10548-1 10 CVEs 1 exploited

    tomcat10-10.1.54-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.54-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10547-1 10 CVEs 1 exploited

    tomcat-9.0.117-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.117-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10542-1 5 CVEs

    goshs-2.0.0-1.1 on GA media

    These are all security issues fixed in the goshs-2.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.3
    openSUSE-SU-2026:10541-1 2 CVEs

    flatpak-1.16.6-1.1 on GA media

    These are all security issues fixed in the flatpak-1.16.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10540-1 2 CVEs

    Botan-3.11.1-1.1 on GA media

    These are all security issues fixed in the Botan-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1322-1 3 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0…

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1321-1 9 CVEs

    Security update for go1.25

    This update for go1.25 fixes the following issues: - Update to go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination …

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1320-1 10 CVEs

    Security update for go1.26

    This update for go1.26 fixes the following issues: - Update to go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination …

    first Apr 14, 2026
  • Critical max 9.1
    SUSE-SU-2026:1314-1 1 CVE

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 `:path` pseudo-header (bsc#1260251).

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1305-1 5 CVEs

    Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-71120…

    first Apr 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:1304-1 7 CVEs

    Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 13, 2026
  • Critical max 9.2
    SUSE-SU-2026:21022-1 2 CVEs

    Security update for cockpit

    This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…

    first Apr 10, 2026
  • Critical max 9.2
    SUSE-SU-2026:21023-1 2 CVEs

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…

    first Apr 10, 2026
  • Critical max 9.2
    SUSE-SU-2026:21024-1 2 CVEs

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…

    first Apr 10, 2026
  • Critical max 9.8
    SUSE-SU-2026:1273-1 3 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Update to 149.0.2 and 140.9.1esr (bsc#1261663). - CVE-2026-5731: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0…

    first Apr 11, 2026