Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,602 results · Clear filters · Feed

  • High max 7.5
    SUSE-SU-2026:0911-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 17, 2026
  • High max 8.7
    openSUSE-SU-2026:10380-1 1 CVE

    python311-uv-0.10.11-1.1 on GA media

    These are all security issues fixed in the python311-uv-0.10.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 7.5
    SUSE-SU-2026:0903-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 17, 2026
  • High max 7.7
    SUSE-SU-2026:0902-1 1 CVE

    Security update for freerdp

    This update for freerdp fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).

    first Mar 17, 2026
  • High max 8.7
    openSUSE-SU-2026:10382-1 1 CVE

    cargo1.92-1.92.0-2.1 on GA media

    These are all security issues fixed in the cargo1.92-1.92.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 7.5
    openSUSE-SU-2026:10379-1 1 CVE

    python311-CairoSVG-2.9.0-1.1 on GA media

    These are all security issues fixed in the python311-CairoSVG-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 8.7
    openSUSE-SU-2026:10384-1 1 CVE

    cargo1.94-1.94.0-2.1 on GA media

    These are all security issues fixed in the cargo1.94-1.94.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 8.7
    openSUSE-SU-2026:10383-1 1 CVE

    cargo1.93-1.93.0-3.1 on GA media

    These are all security issues fixed in the cargo1.93-1.93.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 7.5
    openSUSE-SU-2026:10385-1 2 CVEs

    traefik-3.6.10-2.1 on GA media

    These are all security issues fixed in the traefik-3.6.10-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 17, 2026
  • High max 7.8
    SUSE-SU-2026:0908-1 2 CVEs

    Security update for xen

    This update for xen fixes the following issues: - CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480) - CVE-2026-23555: xen: Xenstored DoS by unprivileged domain (bsc#1259248, XSA-481)

    first Mar 17, 2026
  • High max 7.8
    SUSE-SU-2026:0907-1 3 CVEs

    Security update for kea

    This update for kea fixes the following issues: Update to release 2.6.3 (bsc#1243240): - CVE-2025-32801: Loading a malicious hook library can lead to local privilege escalation. - CVE-2025-32802: Insecure handling of file paths allows multiple local attacks. …

    first Mar 17, 2026
  • High max 7.7
    openSUSE-SU-2026:10375-1 2 CVEs

    coturn-4.9.0-1.1 on GA media

    These are all security issues fixed in the coturn-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 15, 2026
  • High max 8.7
    openSUSE-SU-2026:10374-1 1 CVE

    python311-tornado6-6.5.5-1.1 on GA media

    These are all security issues fixed in the python311-tornado6-6.5.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 14, 2026
  • High max 8.7
    openSUSE-SU-2026:10373-1 1 CVE

    python311-simpleeval-1.0.5-1.1 on GA media

    These are all security issues fixed in the python311-simpleeval-1.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 14, 2026
  • High max 8.7
    openSUSE-SU-2026:10372-1 2 CVEs

    python311-black-26.3.1-1.1 on GA media

    These are all security issues fixed in the python311-black-26.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 14, 2026
  • High max 7.5
    openSUSE-SU-2026:10371-1 4 CVEs

    curl-8.19.0-1.1 on GA media

    These are all security issues fixed in the curl-8.19.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 14, 2026
  • High max 8.0
    openSUSE-SU-2026:10357-1 4 CVEs

    ruby4.0-rubygem-puma-6.4.3-1.5 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-puma-6.4.3-1.5 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10354-1 1 CVE

    ruby4.0-rubygem-minitar-0.9-1.21 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-minitar-0.9-1.21 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10353-1 6 CVEs

    ruby4.0-rubygem-loofah-2.23.1-1.5 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-loofah-2.23.1-1.5 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10351-1 1 CVE

    ruby4.0-rubygem-json_pure-2.7.6-1.5 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-json_pure-2.7.6-1.5 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10349-1 1 CVE

    ruby4.0-rubygem-http-cookie-1.0.8-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-http-cookie-1.0.8-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.4
    openSUSE-SU-2026:10348-1 1 CVE

    ruby4.0-rubygem-grpc-1.70.1-1.7 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-grpc-1.70.1-1.7 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10361-1 9 CVEs

    ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10333-1 1 CVE

    python311-multipart-1.3.1-1.1 on GA media

    These are all security issues fixed in the python311-multipart-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 8.8
    openSUSE-SU-2026:10328-1 1 CVE

    himmelblau-2.3.8+git0.dec3693-1.1 on GA media

    These are all security issues fixed in the himmelblau-2.3.8+git0.dec3693-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.0
    openSUSE-SU-2026:10369-1 1 CVE

    skaffold-2.18.0-1.1 on GA media

    These are all security issues fixed in the skaffold-2.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 8.2
    openSUSE-SU-2026:10368-1 1 CVE

    ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-websocket-extensions-0.1.5-1.24 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10365-1 1 CVE

    ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-sprockets-3.7-3.7.5-1.5 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 7.5
    SUSE-SU-2026:0888-1 2 CVEs

    Security update for dnsdist

    This update for dnsdist fixes the following issues: Update to dnsdist 1.9.11: - CVE-2025-8671: Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852). - CVE-2025-30187: denial of service via crafted DoH exchange (bsc#1250054).

    first Mar 13, 2026
  • High max 7.5
    openSUSE-SU-2026:10364-1 1 CVE

    ruby4.0-rubygem-sprockets-4.2.1-1.9 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-sprockets-4.2.1-1.9 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 8.8
    openSUSE-SU-2026:10324-1 2 CVEs

    MozillaFirefox-148.0.2-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-148.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • High max 8.4
    SUSE-SU-2026:0896-1 4 CVEs

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-0861: memalign: reinstate alignment overflow check (bsc#1256766) - CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr (bsc#1256822) - CVE-2025-15281: posix: Reset wordexp_t fields with WRDE…

    first Mar 13, 2026
  • High max 7.2
    SUSE-SU-2026:0892-1 8 CVEs

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2023-42363: use-after-free vulnerability in xasprintf function in xfuncs_printf.c (bsc#1217580). - CVE-2023-42364: use-after-free in the awk.c evaluate function (bsc#1217584). - CVE-2023-42365: use-aft…

    first Mar 13, 2026
  • High max 7.6
    SUSE-SU-2026:0890-1 3 CVEs

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.52: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …

    first Mar 13, 2026
  • High max 7.5
    SUSE-SU-2026:0859-1 7 CVEs

    Security update for python-aiohttp

    This update for python-aiohttp fixes the following issues: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path components (bsc#1256020). - CVE-2025-69224: Fixed …

    first Mar 10, 2026
  • High max 7.5
    SUSE-SU-2026:0885-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 12, 2026
  • High max 8.8
    SUSE-SU-2026:0883-1 4 CVEs

    Security update for postgresql17

    This update for postgresql17 fixes the following issues: Update to version 17.9 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: inta…

    first Mar 12, 2026
  • High max 8.8
    SUSE-SU-2026:0882-1 4 CVEs

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: Update to version 16.13 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: int…

    first Mar 12, 2026
  • High max 8.8
    SUSE-SU-2026:0881-1 5 CVEs

    Security update for postgresql18

    This update for postgresql18 fixes the following issues: Update to version 18.3 (bsc#1258754). Security issues fixed: - CVE-2026-2003: improper validation of type 'oidvector' may allow disclose a few bytes of server memory (bsc#1258008). - CVE-2026-2004: inta…

    first Mar 12, 2026
  • High max 7.5
    SUSE-SU-2026:0879-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 12, 2026