Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 7.5

    tinyproxy-1.11.3-2.1 on GA media

    These are all security issues fixed in the tinyproxy-1.11.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 8.5

    libXvnc-devel-1.16.1-2.1 on GA media

    These are all security issues fixed in the libXvnc-devel-1.16.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 7.0

    python315-3.15.0~a7-3.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a7-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 8.4

    ovmf-202602-6.1 on GA media

    These are all security issues fixed in the ovmf-202602-6.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 8.8
    SUSE-SU-2026:1150-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…

    first Mar 30, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 31, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 25, 2026
  • High max 7.5

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues: Update to PyJWT 2.12.1: - CVE-2024-53861: prevent partial matching of the Issuer field (bsc#1234038). - CVE-2026-32597: validate the crit Header Parameter defined in RFC 7515 (bsc#1259616). Changelog: U…

    first Mar 26, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084). - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write …

    first Mar 27, 2026
  • High max 8.7

    netty-4.1.132-1.1 on GA media

    These are all security issues fixed in the netty-4.1.132-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 30, 2026
  • High max 7.8

    Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: mgr-push: - Version 5.2.3-0 * Disable build for SLES 16 rhnlib: - Version 5.2.4-0 * Disable build for SLES 16 spacecmd: - Version 5.2.6-0 * Update translation strings spacewalk-client-tools: - Version 5.2.4-0 * Disable …

    first Mar 30, 2026
  • High max 7.5

    heroic-games-launcher-2.20.1-4.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.20.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 30, 2026
  • High max 7.8

    Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings uyuni-tools: - Version 5.2.5-0 * Remove migrate command * Remove template script from mgradm: use the one in the image * Split the TFTP server into a separate con…

    first Mar 30, 2026
  • High max 7.8

    Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: mgr-push: - Version 5.2.3-0 * Disable build for SLES 16 rhnlib: - Version 5.2.4-0 * Disable build for SLES 16 spacecmd: - Version 5.2.6-0 * Update translation strings spacewalk-client-tools: - Version 5.2.4-0 * Disable …

    first Mar 30, 2026
  • High max 7.8

    Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings venv-salt-minion: - Fix the typo causing buiding EL9 bundle without binary dependencies - Backport security patches for Salt vendored tornado: * CVE-2025-67724: m…

    first Mar 30, 2026
  • High max 7.8

    Security Beta update 5.2.0 Beta1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: spacecmd: - Version 5.2.6-0 * Update translation strings uyuni-tools: - Version 5.2.5-0 * Remove migrate command * Remove template script from mgradm: use the one in the image * Split the TFTP server into a separate con…

    first Mar 30, 2026
  • High max 8.8
    SUSE-SU-2026:1139-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…

    first Mar 30, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 25, 2026
  • High max 8.7

    Security update for python-black

    This update for python-black fixes the following issues: - CVE-2026-31900: a malicious pyproject.toml edit can lead to arbitrary code execution (bsc#1259546). - CVE-2026-32274: arbitrary file writes from unsanitized user input in cache file name (bsc#1259608).

    first Mar 24, 2026
  • High max 7.2

    Security update for 389-ds

    This update for 389-ds fixes the following issue: Update to 389-ds 3.0.6~git249.6688af9b2: - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE (bsc#1258727). Changelog: * Issue 7277 - …

    first Mar 24, 2026
  • High max 7.5

    Security update for nghttp2

    This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).

    first Mar 24, 2026
  • High max 7.5

    Security update for python-dynaconf

    This update for python-dynaconf fixes the following issues: Changes in python-dynaconf: - CVE-2026-33154: Server-Side Template Injection in the @Jinja resolver (bsc#1260063)

    first Mar 25, 2026
  • High max 7.6

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Update to Tomcat 11.0.18: - CVE-2025-66614: client certificate verification bypass due to virtual host mapping (bsc#1258371). - CVE-2026-24733: improper input validation on HTTP/0.9 requests (bsc#1258385). …

    first Mar 24, 2026
  • High max 7.5

    Security update for freeciv

    This update for freeciv fixes the following issues: Changes in freeciv: - freeciv 3.2.4: * CVE-2026-33250: Fix a vulnerability allowing remote crashing of the server (boo#1260036) * SDL2 client: Fix crash on selecting nation style or nation - includes changes…

    first Mar 23, 2026
  • High max 7.2

    Security update for python-pyOpenSSL

    This update for python-pyOpenSSL fixes the following issues: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804). - CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1259808).

    first Mar 25, 2026
  • High max 7.5

    Security update for python-orjson

    This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump (bsc#1257121).

    first Mar 20, 2026
  • High max 8.7

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issues: - CVE-2026-31958: parsing large multipart bodies with many parts can cause a denial of service (bsc#1259553). - incomplete validation of cookie attributes allows for injection of user-controlled valu…

    first Mar 20, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#125…

    first Mar 20, 2026
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 20, 2026
  • High max 7.8

    Security update for gstreamer-plugins-ugly

    This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…

    first Mar 19, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-4150: Fixed PSD file parsing integer overflow vulnerability (bsc#1259979) = CVE-2026-4151: Fixed ANI file parsing integer overflow vulnerability (bsc#1259983) - CVE-2026-4153: Fixed …

    first Mar 25, 2026
  • High max 7.5

    Security update for salt

    This update for salt fixes the following issues: Changes in salt: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726…

    first Mar 24, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …

    first Mar 19, 2026
  • High max 8.8

    Security update for postgresql18

    This update for postgresql18 fixes the following issues: - Update to version 18.3. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…

    first Mar 20, 2026
  • High max 7.8

    xen-4.21.1_02-1.1 on GA media

    These are all security issues fixed in the xen-4.21.1_02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.5

    bind-9.20.21-1.1 on GA media

    These are all security issues fixed in the bind-9.20.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 8.4

    tailscale-1.96.4-1.1 on GA media

    These are all security issues fixed in the tailscale-1.96.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532). - CVE-2025-21738: at…

    first Mar 27, 2026
  • High max 7.6

    libpng16-16-1.6.56-1.1 on GA media

    These are all security issues fixed in the libpng16-16-1.6.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.5

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issue: - CVE-2026-32597: validate the `crit` Header Parameter defined in RFC 7515 (bsc#1259616).

    first Mar 25, 2026