Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • Critical max 9.8
    openSUSE-SU-2026:10954-1 274 CVEs 1 exploited

    kernel-devel-7.0.11-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 4, 2026
  • High max 8.8
    openSUSE-SU-2026:10837-1 1 CVE 1 exploited

    python311-impacket-0.13.1-1.1 on GA media

    These are all security issues fixed in the python311-impacket-0.13.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 21, 2026
  • High max 7.5
    openSUSE-SU-2026:10751-1 8 CVEs 1 exploited

    libvinylapi3-9.0.0-1.1 on GA media

    These are all security issues fixed in the libvinylapi3-9.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 11, 2026
  • High max 7.8
    openSUSE-SU-2026:10734-1 1 CVE 1 exploited

    systemtap-5.5-1.1 on GA media

    These are all security issues fixed in the systemtap-5.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 8, 2026
  • Critical max 9.1
    SUSE-SU-2026:1604-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 24, 2026
  • Critical max 9.1
    SUSE-SU-2026:1603-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 24, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20611-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (bsc#1261852). - …

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20612-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 22, 2026
  • Critical max 9.1
    SUSE-SU-2026:1572-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 23, 2026
  • Critical max 9.1
    SUSE-SU-2026:1558-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20595-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 21, 2026
  • High max 8.8
    openSUSE-SU-2026:20518-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…

    first Apr 13, 2026
  • High max 8.8
    SUSE-SU-2026:21180-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…

    first Apr 13, 2026
  • High max 8.8
    SUSE-SU-2026:1364-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0. Security issues fixed: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted…

    first Apr 15, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10549-1 10 CVEs 1 exploited

    tomcat11-11.0.21-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10548-1 10 CVEs 1 exploited

    tomcat10-10.1.54-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.54-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10547-1 10 CVEs 1 exploited

    tomcat-9.0.117-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.117-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:1205-1 34 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20260402T184258 2026-04-02T18:42:58Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4518 CVE-2026-32286 GHSA-jqcq-xjh3-6g23 * GO-202…

    first Apr 7, 2026
  • Critical max 9.6
    openSUSE-SU-2026:10487-1 21 CVEs 1 exploited

    chromedriver-146.0.7680.177-1.1 on GA media

    These are all security issues fixed in the chromedriver-146.0.7680.177-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026
  • Critical max 9.8
    SUSE-SU-2026:20931-1 176 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…

    first Mar 25, 2026
  • High max 8.8
    SUSE-SU-2026:1150-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…

    first Mar 30, 2026
  • Critical max 9.8
    SUSE-SU-2026:20876-1 655 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi:…

    first Mar 24, 2026
  • High max 8.8
    SUSE-SU-2026:1139-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…

    first Mar 30, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20416-1 176 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…

    first Mar 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:20845-1 655 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi:…

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20838-1 176 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…

    first Mar 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:1081-1 155 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi: mpi3mr: Synchronou…

    first Mar 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:1078-1 68 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences (bsc#1250887). - CVE-2023-53794: cifs: fix session state check in …

    first Mar 26, 2026
  • Critical max 10.0
    SUSE-SU-2026:1058-1 43 CVEs 2 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-48989: HTTP/2 protocol (including DNS over HTTPS) is vulnerable to 'MadeYouReset' DoS attack (bsc#1243895). - CVE-2025-52434: race condition on connection close when using…

    first Mar 26, 2026
  • Critical max 9.4
    SUSE-SU-2026:1041-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2024-38542: RDMA/mana_ib: bound…

    first Mar 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:0962-1 153 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-39748: bpf: Forget rang…

    first Mar 23, 2026
  • High max 7.2
    openSUSE-SU-2026:20323-1 4 CVEs 1 exploited

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Changes to roundcubemail: Update to 1.6.13: This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: + Fix CSS injectio…

    first Mar 5, 2026
  • High max 7.8
    openSUSE-SU-2026:20067-1 1 CVE 1 exploited

    Security update of open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…

    first Jan 20, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20065-1 30 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Jan 20, 2026
  • High max 8.8
    openSUSE-SU-2026:10201-1 12 CVEs 1 exploited

    chromedriver-145.0.7632.45-1.1 on GA media

    These are all security issues fixed in the chromedriver-145.0.7632.45-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 14, 2026
  • Critical max 10.0
    openSUSE-SU-2025:20081-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • High max 8.8
    openSUSE-SU-2025:15831-1 3 CVEs 1 exploited

    chromedriver-143.0.7499.146-1.1 on GA media

    These are all security issues fixed in the chromedriver-143.0.7499.146-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2025
  • High max 8.8
    openSUSE-SU-2025:15745-1 2 CVEs 1 exploited

    chromedriver-142.0.7444.175-1.1 on GA media

    These are all security issues fixed in the chromedriver-142.0.7444.175-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 19, 2025
  • High max 7.8
    openSUSE-SU-2025:15595-1 1 CVE 1 exploited

    libvmtools-devel-13.0.5-1.1 on GA media

    These are all security issues fixed in the libvmtools-devel-13.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2025
  • Critical max 9.1
    openSUSE-SU-2025:15578-1 7 CVEs 1 exploited

    chromedriver-140.0.7339.207-1.1 on GA media

    These are all security issues fixed in the chromedriver-140.0.7339.207-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 26, 2025