Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

5,613 results · Clear filters · Feed

  • Critical max 9.1
    openSUSE-SU-2026:20220-1 3 CVEs

    Security update for go1.24

    This update for go1.24 fixes the following issues: Update to version 1.24.13. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clo…

    first Feb 13, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20219-1 2 CVEs

    Security update for htmldoc

    This update for htmldoc fixes the following issues: Changes in htmldoc: - CVE-2024-46478: Fixed buffer overflow when handling tabs through the parse_pre function (bsc#1232380). - version update to 1.9.23: * Fixed a regression in list handling that caused a cr…

    first Feb 13, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20214-1 2 CVEs

    Security update for go1.25

    This update for go1.25 fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Config.Clon…

    first Feb 13, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20167-1 1 CVE

    Security update for xrdp

    This update for xrdp fixes the following issues: Changes in xrdp: - CVE-2025-68670: Fixed a potential overflow (bsc#1257362).

    first Feb 3, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20145-1 215 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…

    first Feb 2, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20085-1 6 CVEs

    Security update for go1.25

    This update for go1.25 fixes the following issues: Update to go1.25.6 (released 2026-01-15) (bsc#1244485) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd/…

    first Jan 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20077-1 6 CVEs

    Security update for go1.24

    This update for go1.24 fixes the following issues: Update to go1.24.12 (released 2026-01-15) (bsc#1236217) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd…

    first Jan 22, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20065-1 30 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Jan 20, 2026
  • Critical max 10.0
    openSUSE-SU-2026:20056-1 2 CVEs

    Security update for cpp-httplib

    This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests (bsc#1254734). - …

    first Jan 15, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20046-1 10 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.6.0 ESR MFSA 2025-96 (bsc#1254551) * CVE-2025-14321 (bmo#1992760) Use-after-free in the WebRTC: Signaling component * CVE-2025-14322 (bmo#1…

    first Jan 16, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20041-1 13 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 (bsc#1256340) * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due…

    first Jan 15, 2026
  • Critical max 9.6
    openSUSE-SU-2026:20034-1 3 CVEs

    Security update for tomcat

    This update for tomcat fixes the following issues: - Update to Tomcat 9.0.111 - Security fixes: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: improper neutralization of Escape, Meta, or …

    first Jan 14, 2026
  • Critical max 10.0
    openSUSE-SU-2026:20027-1 2 CVEs

    Security update for squid

    This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2025-59362: SNMP message …

    first Jan 14, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20014-1 10 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.6.0 ESR was released: * Fixed: Various security fixes. MFSA 2025-94 (bsc#1254551): * CVE-2025-14321: Use-after-free in the WebRTC: Signa…

    first Jan 12, 2026
  • Critical max 10.0
    openSUSE-SU-2026:20003-1 4 CVEs

    Security update of valkey

    This update for valkey fixes the following issues: Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution (bsc#1250995) - CVE-2025-46817: Fixed that a Lua script may lead to integer overflow and potentia…

    first Jan 7, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10320-1 1 CVE

    perl-Compress-Raw-Zlib-2.222-1.1 on GA media

    These are all security issues fixed in the perl-Compress-Raw-Zlib-2.222-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10286-1 27 CVEs

    ruby4.0-rubygem-rack-2.2-2.2.22-1.1 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rack-2.2-2.2.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10269-1 1 CVE

    cockpit-podman-120-2.1 on GA media

    These are all security issues fixed in the cockpit-podman-120-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10268-1 1 CVE

    cockpit-356-2.1 on GA media

    These are all security issues fixed in the cockpit-356-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10257-1 51 CVEs

    MozillaFirefox-148.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-148.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10242-1 37 CVEs

    firefox-esr-140.8.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10236-1 2 CVEs

    heroic-games-launcher-2.20.0-1.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10233-1 1 CVE

    kyverno-1.17.1-1.1 on GA media

    These are all security issues fixed in the kyverno-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 20, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10230-1 9 CVEs

    vexctl-0.4.1+git78.f951e3a-1.1 on GA media

    These are all security issues fixed in the vexctl-0.4.1+git78.f951e3a-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10228-1 1 CVE

    syft-1.42.1-1.1 on GA media

    These are all security issues fixed in the syft-1.42.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10226-1 1 CVE

    python311-nltk-3.9.1-3.1 on GA media

    These are all security issues fixed in the python311-nltk-3.9.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10224-1 1 CVE

    rclone-1.73.1-1.1 on GA media

    These are all security issues fixed in the rclone-1.73.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10220-1 2 CVEs

    istioctl-1.28.4-1.1 on GA media

    These are all security issues fixed in the istioctl-1.28.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10196-1 1 CVE

    matrix-synapse-1.147.1-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.147.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 13, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10168-1 1 CVE

    openQA-5.1770718745.ce2072d3-1.1 on GA media

    These are all security issues fixed in the openQA-5.1770718745.ce2072d3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 10, 2026
  • Critical max 9.4
    openSUSE-SU-2026:10165-1 1 CVE

    keylime-config-7.14.0+0-1.1 on GA media

    These are all security issues fixed in the keylime-config-7.14.0+0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 10, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10146-1 1 CVE

    libpainter0-0.9.27-1.1 on GA media

    These are all security issues fixed in the libpainter0-0.9.27-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 4, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10129-1 1 CVE

    libmlt++-7-7-7.36.1-1.1 on GA media

    These are all security issues fixed in the libmlt++-7-7-7.36.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 2, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10123-1 6 CVEs

    freerdp-3.21.0-2.1 on GA media

    These are all security issues fixed in the freerdp-3.21.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 30, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10094-1 1 CVE

    libmatio-devel-1.5.30-1.1 on GA media

    These are all security issues fixed in the libmatio-devel-1.5.30-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 26, 2026
  • Critical max 9.9
    openSUSE-SU-2026:10070-1 1 CVE

    python-keystonemiddleware-doc-10.12.0-2.1 on GA media

    These are all security issues fixed in the python-keystonemiddleware-doc-10.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 19, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10064-1 6 CVEs

    go1.25-1.25.6-1.1 on GA media

    These are all security issues fixed in the go1.25-1.25.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 18, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10063-1 6 CVEs

    go1.24-1.24.12-1.1 on GA media

    These are all security issues fixed in the go1.24-1.24.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 18, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10058-1 13 CVEs

    MozillaThunderbird-140.7.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 17, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10057-1 10 CVEs

    chromedriver-144.0.7559.59-1.1 on GA media

    These are all security issues fixed in the chromedriver-144.0.7559.59-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 16, 2026