Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    rke2-1.34-1.34.3+rke2r1-1.1 on GA media

    These are all security issues fixed in the rke2-1.34-1.34.3+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 14, 2026
  • Critical max 10.0

    MozillaFirefox-147.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-147.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 14, 2026
  • Critical max 9.8

    kernel-devel-6.18.5-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.18.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 13, 2026
  • Critical max 9.8

    firefox-esr-140.7.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 13, 2026
  • Critical max 9.8

    libsodium-devel-1.0.21-1.1 on GA media

    These are all security issues fixed in the libsodium-devel-1.0.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 9, 2026
  • Critical max 9.8

    gpsd-3.27.3-1.1 on GA media

    These are all security issues fixed in the gpsd-3.27.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 6, 2026
  • Critical max 9.8

    python312-Django6-6.0-1.1 on GA media

    These are all security issues fixed in the python312-Django6-6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 3, 2026
  • Critical max 9.2

    Security update for cheat

    This update for cheat fixes the following issues: - Security: * CVE-2025-47913: Fix client process termination (bsc#1253593) * CVE-2025-58181: Fix potential unbounded memory consumption (bsc#1253922) * CVE-2025-47914: Fix panic due to an out of bounds read (b…

    first Dec 18, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …

    first Dec 19, 2025
  • Critical max 9.1

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-64459: Fixed a potential SQL injection via `_connector` keyword argument in `QuerySet` and `Q` objects (bsc#1252926) - CVE-2025-13372,CVE-2025-64460: Fixed Denial of Service in 'django.core.…

    first Dec 9, 2025
  • Critical max 9.1

    Security update for git-bug

    This update for git-bug fixes the following issues: Changes in git-bug: - Revendor to include fixed version of depending libraries: - GO-2025-4116 (CVE-2025-47913, bsc#1253506) upgrade golang.org/x/crypto to v0.43.0 - GO-2025-3900 (GHSA-2464-8j7c-4cjm) upgrad…

    first Dec 4, 2025
  • Critical max 9.8

    Security update for mozjs128

    This update for mozjs128 fixes the following issues: - Update to version 128.14.0 (bsc#1248162): + CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP component + CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D comp…

    first Dec 3, 2025
  • Critical max 10.0

    Security update for redis

    This update for redis fixes the following issues: - Updated to 8.2.3 (boo#1252996 CVE-2025-62507) * https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - (CVE-2025-62507) Bug in `XACKDEL` may lead to stack overflow and potential RCE - Bug fixes…

    first Dec 30, 2025
  • Critical max 9.6

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.13: - CVE-2025-55752: Fixed directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: Fixed Improper Neutralization of Escape, Meta, or Contr…

    first Nov 27, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…

    first Nov 26, 2025
  • Critical max 10.0
    openSUSE-SU-2025:20081-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • Critical max 9.8

    Security update for lasso

    This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092). - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093). - CVE…

    first Nov 25, 2025
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.5.0 ESR: * Fixed: Various security fixes (MFSA 2025-88 bsc#1253188): * CVE-2025-13012 Race condition in the Graphics component * CVE-202…

    first Nov 19, 2025
  • Critical max 10.0

    Security update for samba

    This update for samba fixes the following issues: Update to 4.22.5: * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280). * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - Relax samba-gpupdate req…

    first Nov 18, 2025
  • Critical max 9.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 140.4: * changed: Account Hub is now disabled by default for second email account * changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 * fixed: Users could not …

    first Nov 7, 2025
  • Critical max 9.1

    weblate-5.14.3-2.1 on GA media

    These are all security issues fixed in the weblate-5.14.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 30, 2025
  • Critical max 10.0

    cpp-httplib-devel-0.28.0-1.1 on GA media

    These are all security issues fixed in the cpp-httplib-devel-0.28.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 24, 2025
  • Critical max 9.8

    kernel-devel-6.18.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • Critical max 9.8

    MozillaFirefox-146.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-146.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • Critical max 9.8

    MozillaThunderbird-140.6.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 11, 2025
  • Critical max 9.8

    MozillaFirefox-146.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-146.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 11, 2025
  • Critical max 9.8

    firefox-esr-140.6.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 10, 2025
  • Critical max 9.8

    erlang27-27.1.3-1.1 on GA media

    These are all security issues fixed in the erlang27-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 18, 2025
  • Critical max 9.8

    MozillaFirefox-145.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-145.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 14, 2025
  • Critical max 9.6

    tomcat11-11.0.13-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.6

    tomcat10-10.1.48-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.48-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.6

    tomcat-9.0.111-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.111-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 10.0

    squid-7.3-1.1 on GA media

    These are all security issues fixed in the squid-7.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.1

    libshibsp-lite12-3.5.1-1.1 on GA media

    These are all security issues fixed in the libshibsp-lite12-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.8

    python315-3.15.0~a1-1.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.1

    python311-Django-5.2.8-1.1 on GA media

    These are all security issues fixed in the python311-Django-5.2.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.9

    govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20251105T184115-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 7, 2025
  • Critical max 9.1

    python311-Django4-4.2.26-1.1 on GA media

    These are all security issues fixed in the python311-Django4-4.2.26-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2025
  • Critical max 9.8

    kernel-devel-6.17.7-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.17.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2025
  • Critical max 9.8

    MozillaFirefox-144.0.2-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-144.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2025