Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-71120…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2026-23074…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-71120…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 12, 2026
  • Critical max 9.8

    cockpit-360-1.1 on GA media

    These are all security issues fixed in the cockpit-360-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Critical max 9.8

    chromedriver-147.0.7727.55-1.1 on GA media

    These are all security issues fixed in the chromedriver-147.0.7727.55-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Critical max 9.8

    perl-XML-Parser-2.570.0-1.1 on GA media

    These are all security issues fixed in the perl-XML-Parser-2.570.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.8

    go1.26-1.26.2-1.1 on GA media

    These are all security issues fixed in the go1.26-1.26.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.1

    clusterctl-1.12.5-1.1 on GA media

    These are all security issues fixed in the clusterctl-1.12.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.2

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…

    first Apr 10, 2026
  • Critical max 9.0

    libradcli10-1.5.0-1.1 on GA media

    These are all security issues fixed in the libradcli10-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.2

    Security update for cockpit-tukit

    This update for cockpit-tukit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS whe…

    first Apr 10, 2026
  • Critical max 9.6

    tekton-cli-0.44.1-1.1 on GA media

    These are all security issues fixed in the tekton-cli-0.44.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.2

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS …

    first Apr 10, 2026
  • Critical max 9.6

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.52: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Improper Neutralization of Escape, Meta, or Control Sequences…

    first Mar 30, 2026
  • Critical max 10.0

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083): - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Gr…

    first Mar 27, 2026
  • Critical max 9.8

    Security update for perl-XML-Parser

    This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in `parse_stream` when processing UTF-8 input streams (bsc#1259901). - CVE-2006-10003: off-by-one heap buffer overflow in `st_serial_stack` (bsc#1259902).

    first Apr 1, 2026
  • Critical max 9.8

    Security update for osslsigncode

    This update for osslsigncode fixes the following issues: Changes in osslsigncode: - Update to 2.13 (bsc#1260680, CVE-2025-70888): * fixed integer overflows when processing APPX compressed data streams * fixed double-free vulnerabilities in APPX file processin…

    first Apr 7, 2026
  • Critical max 9.8

    python313-Django6-6.0.4-1.1 on GA media

    These are all security issues fixed in the python313-Django6-6.0.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 9, 2026
  • Critical max 9.8

    go1.25-1.25.9-1.1 on GA media

    These are all security issues fixed in the go1.25-1.25.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 9, 2026
  • Critical max 9.8

    MozillaFirefox-149.0.2-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-149.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 9, 2026
  • Critical max 9.2

    Security update for cockpit

    This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS when glob…

    first Apr 9, 2026
  • Critical max 9.8

    python311-Django4-4.2.30-1.1 on GA media

    These are all security issues fixed in the python311-Django4-4.2.30-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 9, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 8, 2026
  • Critical max 9.8

    firefox-esr-140.9.1-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)

    first Apr 8, 2026
  • Critical max 9.8

    MozillaThunderbird-140.9.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:1205-1 34 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23 * GO-202…

    first Apr 7, 2026
  • Critical max 9.8

    libeverest-3.6.6-1.1 on GA media

    These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 7, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)

    first Apr 7, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)

    first Apr 7, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260251)

    first Apr 7, 2026
  • Critical max 9.1

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …

    first Apr 7, 2026
  • Critical max 9.1

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issue: Update to google-cloud-sap-agent 3.12 (bsc#1259816): - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260265). …

    first Apr 7, 2026
  • Critical max 9.8

    Security update for perl-XML-Parser

    This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in `parse_stream` when processing UTF-8 input streams (bsc#1259901). - CVE-2006-10003: off-by-one heap buffer overflow in `st_serial_stack` (bsc#1259902).

    first Apr 1, 2026
  • Critical max 9.8

    python311-scitokens-1.8.1-2.1 on GA media

    These are all security issues fixed in the python311-scitokens-1.8.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026
  • Critical max 9.6
    openSUSE-SU-2026:10487-1 21 CVEs 1 exploited

    chromedriver-146.0.7680.177-1.1 on GA media

    These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026