Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 7.5

    java-11-openjdk-11.0.31.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.31.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    java-25-openjdk-25.0.3.0-1.1 on GA media

    These are all security issues fixed in the java-25-openjdk-25.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    java-21-openjdk-21.0.11.0-1.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    java-17-openjdk-17.0.19.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.19.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    golang-github-QubitProducts-exporter_exporter-0.4.0-16.1 on GA media

    These are all security issues fixed in the golang-github-QubitProducts-exporter_exporter-0.4.0-16.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    azure-storage-azcopy-10.32.2-2.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 8.8

    PackageKit-1.3.5-1.1 on GA media

    These are all security issues fixed in the PackageKit-1.3.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    freerdp-3.24.2-1.1 on GA media

    These are all security issues fixed in the freerdp-3.24.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    dnsdist-2.0.5-1.1 on GA media

    These are all security issues fixed in the dnsdist-2.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • High max 7.5

    libngtcp2-16-1.22.1-1.1 on GA media

    These are all security issues fixed in the libngtcp2-16-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 26, 2026
  • High max 7.5

    ovmf-202602-9.1 on GA media

    These are all security issues fixed in the ovmf-202602-9.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • High max 8.4

    libntfs-3g-devel-2022.10.3-6.1 on GA media

    These are all security issues fixed in the libntfs-3g-devel-2022.10.3-6.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • High max 7.7

    python311-Mako-1.3.11-1.1 on GA media

    These are all security issues fixed in the python311-Mako-1.3.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • High max 8.7

    Security update for python-Pillow

    This update for python-Pillow fixes the following issue: - CVE-2026-40192: Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks (bsc#1262184).

    first Apr 22, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 23, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 23, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 22, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 22, 2026
  • High max 7.4

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).

    first Apr 22, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 22, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 23, 2026
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 24, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 24, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#125…

    first Apr 24, 2026
  • High max 7.5

    Security update for openssl-3

    This update for openssl-3 fixes the following issue: Security issues fixed: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). Other updates and bugfixes: - Enable …

    first Apr 24, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 24, 2026
  • High max 7.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33901: Denia…

    first Apr 24, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 24, 2026
  • High max 7.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33901: Denia…

    first Apr 24, 2026
  • High max 7.5

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33905: Denia…

    first Apr 24, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.78 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 23, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.158 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 23, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026
  • High max 7.0

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3479: improper resource argument val…

    first Apr 16, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026