Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) -…

    first Oct 24, 2025
  • Critical max 10.0
    SUSE-SU-2025:02973-1 14 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - Update to version 2.48.5: + CVE-2025-31273: Fixed processing maliciously crafted web content leading to memory corruption (bsc#1247564) + CVE-2025-43265: Fixed processing maliciously crafted web conten…

    first Aug 25, 2025
  • Critical max 9.8
    SUSE-SU-2026:0284-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3847…

    first Jan 23, 2026
  • Critical max 9.1

    openbao-2.5.1-1.1 on GA media

    These are all security issues fixed in the openbao-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 20, 2026
  • Critical max 9.1

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to go 1.25.8 (bsc#1244485, jsc#SLE-18320): - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: C…

    first Mar 20, 2026
  • Critical max 9.8

    Security update for krb5-appl

    This update for krb5-appl fixes the following issue: - CVE-2026-32746: Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd LINEMODE (bsc#1259691).

    first Mar 18, 2026
  • Critical max 9.8

    kernel-devel-6.19.8-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.19.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 18, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163). - CVE-2023-53827: Bluetooth:…

    first Mar 18, 2026
  • Critical max 9.6
    openSUSE-SU-2026:10376-1 31 CVEs 2 exploited

    chromedriver-146.0.7680.80-1.1 on GA media

    These are all security issues fixed in the chromedriver-146.0.7680.80-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 16, 2026
  • Critical max 9.8

    ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 9.8

    ruby4.0-rubygem-kramdown-2.4.0-1.17 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-kramdown-2.4.0-1.17 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 9.8

    ruby4.0-rubygem-rubyzip-2.3.2-1.19 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rubyzip-2.3.2-1.19 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 10.0

    ruby4.0-rubygem-rack-3.1.18-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rack-3.1.18-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 9.1

    kubelogin-0.2.16-1.1 on GA media

    These are all security issues fixed in the kubelogin-0.2.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 9.8

    heroic-games-launcher-2.20.1-3.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.20.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Critical max 10.0

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 140.8 MFSA 2026-17 (bsc#1258568): - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free in the JavaScript: GC comp…

    first Mar 12, 2026
  • Critical max 10.0

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.8.0 ESR (MFSA 2026-15) (bsc#1258568): - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free…

    first Mar 11, 2026
  • Critical max 9.8

    kernel-devel-longterm-6.18.16-1.1 on GA media

    These are all security issues fixed in the kernel-devel-longterm-6.18.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 7, 2026
  • Critical max 9.6

    chromedriver-145.0.7632.159-1.1 on GA media

    These are all security issues fixed in the chromedriver-145.0.7632.159-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 7, 2026
  • Critical max 10.0

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.8.0 ESR (MFSA 2026-15) (bsc#1258568): - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free…

  • Critical max 9.1

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Con…

    first Mar 3, 2026
  • Critical max 9.1

    Security update for go1.24-openssl

    This update for go1.24-openssl fixes the following issues: Update to version 1.24.13 (jsc#SLE-18320, bsc#1236217). Security issues fixed: - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - …

    first Mar 3, 2026
  • Critical max 9.1

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.7. Security issues fixed: - CVE-2025-61732: cmd/go: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68121: crypto/tls: Con…

    first Mar 3, 2026
  • Critical max 10.0

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260226T182644 2026-02-26T18:26:44Z (jsc#PED-11136) Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4259 CVE-2025-13767 GHSA-fmqf-pmcm-8cx9 * GO-2025…

    first Mar 3, 2026
  • Critical max 9.1

    regclient-0.11.2-1.1 on GA media

    These are all security issues fixed in the regclient-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.2

    cockpit-tukit-0.1.7~git0.61e54f1-3.1 on GA media

    These are all security issues fixed in the cockpit-tukit-0.1.7~git0.61e54f1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.2

    cockpit-subscriptions-14.4-4.1 on GA media

    These are all security issues fixed in the cockpit-subscriptions-14.4-4.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.2

    cockpit-repos-4.7-4.1 on GA media

    These are all security issues fixed in the cockpit-repos-4.7-4.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.2

    cockpit-packages-4.1-4.1 on GA media

    These are all security issues fixed in the cockpit-packages-4.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.2

    cockpit-machines-348-1.1 on GA media

    These are all security issues fixed in the cockpit-machines-348-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.1

    cmctl-2.4.1-1.1 on GA media

    These are all security issues fixed in the cmctl-2.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 10.0

    MozillaThunderbird-140.8.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785). - CVE-2022-50697: mrp: introduce active flags to pre…

    first Feb 24, 2026
  • Critical max 9.1

    Security update for vexctl

    This update for vexctl fixes the following issues: - Update to version 0.4.1+git78.f951e3a: - CVE-2025-22868: Unexpected memory consumption during token parsing in golang.org/x/oauth2. (bsc#1239186) - CVE-2024-45337: Misuse of ServerConfig.PublicKeyCallback m…

    first Feb 20, 2026
  • Critical max 9.8

    Security update for libsodium

    This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_vali…

    first Feb 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlb_handle_userfault (bsc#1254785). - CVE-2022-50697: mrp: introduce active flags to …

    first Feb 9, 2026
  • Critical max 9.8

    libsnmp45-32bit-5.9.5.2-1.1 on GA media

    These are all security issues fixed in the libsnmp45-32bit-5.9.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 6, 2026
  • Critical max 9.1

    dante-1.4.4-1.1 on GA media

    These are all security issues fixed in the dante-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 20, 2025
  • Critical max 9.8
    SUSE-SU-2025:02537-1 221 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468). - CVE-2021-47595: net/sch…

    first Jul 28, 2025
  • Critical max 9.0

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20241104T154416 2024-11-04T15:44:16Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2024-3233 CVE-2024-46872 GHSA-762g-9p7f-mrww * G…

    first Nov 8, 2024