Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,597 results · Clear filters · Feed

  • High max 7.5
    SUSE-SU-2026:21244-1 1 CVE

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 20, 2026
  • High max 7.4
    SUSE-SU-2026:21252-1 1 CVE

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).

    first Apr 16, 2026
  • High max 7.5
    SUSE-SU-2026:1562-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 23, 2026
  • High max 7.8
    SUSE-SU-2026:1560-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 23, 2026
  • High max 8.8
    openSUSE-SU-2026:20608-1 1 CVE

    Security update for fontforge

    This update for fontforge fixes the following issues: - CVE-2025-15270: lack of proper validation of user-supplied data when parsing SFD files can lead to OOB writes and arbitrary code execution (bsc#1256031).

    first Apr 22, 2026
  • High max 8.3
    openSUSE-SU-2026:20607-1 7 CVEs

    Security update for erlang

    This update for erlang fixes the following issues: Security issues fixed: - CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote arbitrary reads/writes (bsc#1258663). - CVE-2026-23941: improper handli…

    first Apr 22, 2026
  • High max 7.4
    openSUSE-SU-2026:20604-1 1 CVE

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).

    first Apr 22, 2026
  • High max 7.5
    openSUSE-SU-2026:20606-1 16 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-32259: stack out-of-bounds write due to a memory allocation failure in the sixel encoder can lead to a crash (bsc#1259612). - CVE-2026-32636: out-of-bounds write of a single zero byte due to b…

    first Apr 22, 2026
  • High max 7.5
    SUSE-SU-2026:1576-1 1 CVE

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

    first Apr 23, 2026
  • High max 8.4
    SUSE-SU-2026:1571-1 1 CVE

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issue: - CVE-2026-40706: heap buffer overflow in ntfs_build_permissions_posix() in acls.c (bsc#1262216).

    first Apr 23, 2026
  • High max 8.6
    openSUSE-SU-2026:20605-1 4 CVEs

    Security update for openexr

    This update for openexr fixes the following issues: - CVE-2026-34379: misaligned memory write during file decoding can cause a denial of service (bsc#1261621). - CVE-2026-34380: lack of proper check can lead to integer overflow in image decoding (bsc#1261622)…

    first Apr 22, 2026
  • High max 7.5
    openSUSE-SU-2026:10605-1 1 CVE

    dnsmasq-2.92-3.1 on GA media

    These are all security issues fixed in the dnsmasq-2.92-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 7.8
    SUSE-SU-2026:1575-1 7 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port …

    first Apr 23, 2026
  • High max 8.8
    SUSE-SU-2026:1574-1 7 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform loc…

    first Apr 23, 2026
  • High max 8.1
    SUSE-SU-2026:1577-1 5 CVEs

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…

    first Apr 23, 2026
  • High max 8.8
    SUSE-SU-2026:1563-1 6 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#125…

    first Apr 23, 2026
  • High max 8.1
    openSUSE-SU-2026:10609-1 1 CVE

    libruby4_0-4_0-4.0.3-1.1 on GA media

    These are all security issues fixed in the libruby4_0-4_0-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 8.8
    SUSE-SU-2026:1557-1 6 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform loc…

    first Apr 22, 2026
  • High max 7.4
    openSUSE-SU-2026:20590-1 1 CVE

    Security update for gnome-remote-desktop

    This update for gnome-remote-desktop fixes the following issues: Update to version 48.3. Security issues fixed: - CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053). Other updates and bugfixes: - Version update to 48.3: + Fi…

    first Apr 21, 2026
  • High max 7.4
    SUSE-SU-2026:21235-1 3 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCM_INFO requests sent from the guest (bsc#1259079). - CVE-2026-3195: heap out-of-bou…

    first Apr 20, 2026
  • High max 7.5
    SUSE-SU-2026:21231-1 1 CVE

    Security update for freeipmi

    This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).

    first Apr 17, 2026
  • High max 7.5
    SUSE-SU-2026:1539-1 1 CVE

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

    first Apr 22, 2026
  • High max 7.7
    openSUSE-SU-2026:10602-1 3 CVEs

    glances-common-4.5.4-1.1 on GA media

    These are all security issues fixed in the glances-common-4.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2026
  • High max 7.5
    SUSE-SU-2026:1549-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 22, 2026
  • High max 7.5
    SUSE-SU-2026:1550-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 22, 2026
  • High max 7.5
    SUSE-SU-2026:1548-1 1 CVE

    Security update for kea

    This update for kea fixes the following issues: Update to release 2.6.5. Security issues fixed: - CVE-2026-3608: stack overflow error via specially crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons(bsc#1260380). Other updat…

    first Apr 22, 2026
  • High max 8.5
    openSUSE-SU-2026:10603-1 3 CVEs

    jupyter-nbconvert-7.17.1-1.1 on GA media

    These are all security issues fixed in the jupyter-nbconvert-7.17.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2026
  • High max 7.8
    SUSE-SU-2026:1537-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 21, 2026
  • High max 7.4
    openSUSE-SU-2026:20567-1 3 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCM_INFO requests sent from the guest (bsc#1259079). - CVE-2026-3195: heap out-of-bou…

    first Apr 20, 2026
  • High max 7.7
    openSUSE-SU-2026:20554-1 10 CVEs

    Security update for dovecot24

    This update for dovecot24 fixes the following issues: - Update to v2.4.3 - CVE-2025-59028: Invalid base64 authentication can cause DoS for other logins (bsc#1260894). - CVE-2025-59031: decode2text.sh OOXML extraction may follow symlinks and read unintended fi…

    first Apr 16, 2026
  • High max 8.7
    openSUSE-SU-2026:20569-1 1 CVE

    Security update for rust1.94

    This update for rust1.94 fixes the following issues: Changes in rust1.94: - Don't force gcc-15 on SLE-16 and higher (bsc#1261876) Update to rust1.94.1: - Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.1 - Avoid unwr…

    first Apr 20, 2026
  • High max 7.5
    openSUSE-SU-2026:20558-1 1 CVE

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

    first Apr 17, 2026
  • High max 7.8
    openSUSE-SU-2026:20560-1 5 CVEs

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerF…

    first Apr 17, 2026
  • High max 8.8
    openSUSE-SU-2026:20535-1 1 CVE

    Security update for plexus-utils

    This update for plexus-utils fixes the following issue: - CVE-2025-67030: directory traversal via the `extractFile` method of `org.codehaus.plexus.util.Expand` (bsc#1260588).

    first Apr 14, 2026
  • High max 7.5
    openSUSE-SU-2026:20519-1 9 CVEs

    Security update for nodejs24

    This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted reques…

    first Apr 13, 2026
  • High max 7.5
    openSUSE-SU-2026:20556-1 1 CVE

    Security update for freeipmi

    This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).

    first Apr 17, 2026
  • High max 8.2
    openSUSE-SU-2026:20505-1 2 CVEs

    Security update for corosync

    This update for corosync fixes the following issues: - CVE-2026-35091: Denial of Service and information disclosure via crafted UDP packet (bsc#1261299). - CVE-2026-35092: Denial of Service via integer overflow in join message validation (bsc#1261300).

    first Apr 10, 2026
  • High max 7.5
    openSUSE-SU-2026:20501-1 2 CVEs

    Security update for glibc

    This update for glibc fixes the following issues: Security fixes: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082). Other fi…

    first Apr 10, 2026
  • High max 7.8
    openSUSE-SU-2026:20544-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…

    first Apr 15, 2026
  • High max 8.8
    openSUSE-SU-2026:20518-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.1. Security issues fixed: - CVE-2025-43213: processing maliciously crafted web content may lead to an unexpected crash due to improper memory handling (bsc#1259947). - CVE-2025-432…

    first Apr 13, 2026