Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,564 results · Clear filters · Feed

  • Critical max 9.2
    SUSE-SU-2026:4843-1 2 CVEs 2 exploited

    Security update for php8

    This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).

    first Oct 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:24225-1 243 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…

    first Oct 9, 2026
  • Critical max 9.8
    openSUSE-SU-2026:22076-1 243 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…

    first Oct 9, 2026
  • High max 8.8
    openSUSE-SU-2026:12177-1 1 CVE 1 exploited

    dssim-3.5.1-1.1 on GA media

    These are all security issues fixed in the dssim-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 18, 2026
  • Critical max 9.8
    SUSE-SU-2026:4667-1 110 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: kernel: crypto: af_alg - Di…

    first Oct 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:4666-1 86 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2024-56644: net/ipv6: release expire…

    first Oct 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:4676-1 233 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via…

    first Oct 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:4668-1 86 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2024-56644: net/ipv6: release expired e…

    first Oct 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:4665-1 110 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: crypto: af_alg - Disallo…

    first Oct 14, 2026
  • Critical max 10.0
    SUSE-SU-2026:4660-1 124 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2026-43502: net/rds: handle zero…

  • High max 8.8
    openSUSE-SU-2026:12010-1 1 CVE 1 exploited

    python313-imagecodecs-2026.3.6-2.10 on GA media

    These are all security issues fixed in the python313-imagecodecs-2026.3.6-2.10 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.8
    openSUSE-SU-2026:12022-1 2 CVEs 1 exploited

    python313-oletools-0.60.2-2.4 on GA media

    These are all security issues fixed in the python313-oletools-0.60.2-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8
    SUSE-SU-2026:22711-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

  • Critical max 9.8
    SUSE-SU-2026:22689-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

  • High max 8.4
    SUSE-SU-2026:23706-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • High max 8.4
    SUSE-SU-2026:23727-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • Critical max 10.0
    SUSE-SU-2026:23863-1 91 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…

    first Sep 21, 2026
  • Critical max 10.0
    SUSE-SU-2026:23855-1 91 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…

    first Sep 21, 2026
  • Critical max 10.0
    openSUSE-SU-2026:21897-1 91 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…

    first Sep 21, 2026
  • Critical max 10.0
    SUSE-SU-2026:4282-1 234 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-68214: timers: Fix NULL function pointer…

    first Sep 22, 2026
  • High max 8.4
    SUSE-SU-2026:4208-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

  • Critical max 9.8
    SUSE-SU-2026:23529-1 588 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731). - CVE-2025-68214: timers: Fix NULL funct…

    first Sep 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:23528-1 588 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…

    first Sep 8, 2026
  • High max 8.4
    SUSE-SU-2026:4180-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 14, 2026
  • High max 8.4
    SUSE-SU-2026:4179-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:23477-1 588 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944) - CVE-2025-68214: timers: Fix NULL fun…

    first Sep 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:4120-1 662 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1235944). - CVE-2025-68214: timers: Fix NULL function pointer ra…

    first Sep 10, 2026
  • Critical max 9.8
    SUSE-SU-2026:23481-1 588 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcp_conn_request() (bsc#1269731). - CVE-2025-68214: timers: Fix NULL funct…

    first Sep 8, 2026
  • High max 8.4
    openSUSE-SU-2026:21831-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • High max 7.8
    openSUSE-SU-2026:11765-1 1 CVE 1 exploited

    docker-29.7.2_ce-41.1 on GA media

    These are all security issues fixed in the docker-29.7.2_ce-41.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 12, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11750-1 230 CVEs 1 exploited

    chromedriver-153.0.8010.36-1.1 on GA media

    These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 11, 2026
  • Medium max 6.9
    openSUSE-SU-2026:11737-1 1 CVE 1 exploited

    sshamble-0.3.12-1.1 on GA media

    These are all security issues fixed in the sshamble-0.3.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 9, 2026
  • Critical max 9.8
    SUSE-SU-2026:3595-1 74 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet_de…

  • Critical max 9.8
    openSUSE-SU-2026:11714-1 38 CVEs 1 exploited

    chromedriver-152.0.7977.82-1.1 on GA media

    These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 8.8
    openSUSE-SU-2025:20076-1 28 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: Chromium 142.0.7444.175 (boo#1253698): * CVE-2025-13223: Type Confusion in V8 * CVE-2025-13224: Type Confusion in V8 Chromium 142.0.7444.162 (boo#1253267): * CVE-2025-13042: Inappropria…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21135-1 562 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 149.0.7827.155 (boo#1268373): * CVE-2026-12437: Use after free in WebShare * CVE-2026-12438: Inappropriate implementation in WebView * CVE-2026-12439: Use after free in Digit…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:20460-1 86 CVEs 3 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 (boo#1261249) * CVE-2026-5273: Use after free in CSS * CVE-2026-5272: Heap buffer overflow in GPU * CVE-2026-5274: Integer overflow in Codecs * CVE-2026-5275: …

    first Aug 31, 2026
  • High max 8.8
    openSUSE-SU-2026:20020-1 19 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 (boo#1256067): * CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 (stable released 2025-12-18) * no cve listed yet Chrom…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:20332-1 28 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 145.0.7632.159 (boo#1259213) * CVE-2026-3536: Integer overflow in ANGLE * CVE-2026-3537: Object lifecycle issue in PowerVR * CVE-2026-3538: Integer overflow in Skia * CVE-202…

    first Aug 31, 2026
  • Critical max 10.0
    SUSE-SU-2026:3810-1 267 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: …

    first Aug 26, 2026