Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 8.5

    Security update for tigervnc

    This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)

    first Apr 7, 2026
  • High max 8.7

    Security update for cockpit-subscriptions

    This update for cockpit-subscriptions fixes the following issue: - CVE-2026-26996: minimatch: ReDoS when glob pattern contains many consecutive wildcards followed by a literal character that doesn't appear in the test string (bsc#1258637).

    first Apr 14, 2026
  • High max 7.6

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…

    first Apr 7, 2026
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - Update to release 9.20.21 - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence …

    first Apr 16, 2026
  • High max 7.5

    Security update for python-cbor2

    This update for python-cbor2 fixes the following issues: - CVE-2025-68131: CBORDecoder reuse across trust boundaries can lead to leak of shareable values from previous decode calls via attacker-controlled messages (bsc#1255783). - CVE-2026-26209: uncontrolled…

    first Apr 7, 2026
  • High max 8.1

    openbao-2.5.3-1.1 on GA media

    These are all security issues fixed in the openbao-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.5

    python-lxml-doc-6.1.0-1.1 on GA media

    These are all security issues fixed in the python-lxml-doc-6.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.5

    ImageMagick-7.1.2.19-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.19-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 21, 2026
  • High max 7.0

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: python: improper resource argument validation can allow path traversa…

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings uyuni-tools: - Version 5.1.26-0 * Fixed applying P…

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings uyuni-tools: - Version 5.1.26-0 * Fixed applying P…

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2026-31958: Security patch for Salt vendored tornado: Added limits on multipart form data parsing (bsc#1259554) - Added x86_64_v2 as a possible rpm package architecture -…

    first Apr 21, 2026
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to version 22.22.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 20, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Backport security patch for Salt vendored tornado (bsc#1259554): * CVE-2026-31958: Add limits on multipart form data parsing - Add x86_64_v2 as a possible rpm package architecture - Make users with b…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 21, 2026
  • High max 7.1

    flatpak-builder-1.4.8-1.1 on GA media

    These are all security issues fixed in the flatpak-builder-1.4.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 20, 2026
  • High max 8.8

    kissfft-131.2.0-2.1 on GA media

    These are all security issues fixed in the kissfft-131.2.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.5

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261209).

    first Apr 20, 2026
  • High max 7.5

    Security update for libpng15

    This update for libpng15 fixes the following issues: - CVE-2026-34757: use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST` can lead to information disclosure and data corruption (bsc#1261957). - CVE-2026-33416: use-after-free via pointer alias…

    first Apr 20, 2026
  • High max 7.5

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261209).

    first Apr 20, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings venv-salt-minion: - Security issues fixed: * CVE-2…

    first Apr 21, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446). - CVE-2…

    first Apr 20, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 21, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issues: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • High max 8.8

    libcoap-devel-4.3.5b-1.1 on GA media

    These are all security issues fixed in the libcoap-devel-4.3.5b-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 18, 2026
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 18, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 17, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 20, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 19, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 20, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 19, 2026