Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,597 results · Clear filters · Feed

  • High max 7.8
    openSUSE-SU-2026:20029-1 1 CVE

    Security update for gpg2

    This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…

    first Jan 14, 2026
  • High max 8.1
    openSUSE-SU-2026:20026-1 2 CVEs

    Security update for python-uv

    This update for python-uv fixes the following issues: - CVE-2025-62518: astral-tokio-tar: Fixed boundary parsing issue allowing attackers to smuggle additional archive entries (bsc#1252399) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#124901…

    first Jan 13, 2026
  • High max 7.5
    openSUSE-SU-2026:20025-1 2 CVEs

    Security update for hawk2

    This update for hawk2 fixes the following issues: - Bump ruby gem rack to 3.1.18 (bsc#1251939). - Bump ruby gem uri to 1.0.4. - Fix the mtime in manifest.json (bsc#1230275). - Make builds determinitstic (bsc#1230275). - Bump rails version from 8.0.2 to 8.0.2.…

    first Jan 13, 2026
  • High max 7.7
    openSUSE-SU-2026:20018-1 4 CVEs

    Security update for glib2

    This update for glib2 fixes the following issues: Update to version 2.84.4. Security issues fixed: - CVE-2025-14512: integer overflow in the GIO `escape_byte_string()` function when processing malicious files or remote filesystem attribute values can lead to …

    first Jan 12, 2026
  • High max 7.1
    openSUSE-SU-2026:20017-1 5 CVEs

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when process…

    first Jan 12, 2026
  • High max 7.5
    openSUSE-SU-2026:20015-1 3 CVEs

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issues: - CVE-2025-67724: unescaped `reason` argument used in HTTP headers and in HTML default error pages can be used by attackers to launch header injection or XSS attacks (bsc#1254903). - CVE-2025-67725: …

    first Jan 12, 2026
  • High max 7.5
    openSUSE-SU-2026:20016-1 2 CVEs

    Security update for libmicrohttpd

    This update for libmicrohttpd fixes the following issues: - CVE-2025-62689: Fixed heap-based buffer overflow through a specially crafted packet (bsc#1253178) - CVE-2025-59777: Fixed NULL pointer dereference through a specially crafted packet (bsc#1253177)

    first Jan 12, 2026
  • High max 8.8
    openSUSE-SU-2026:20002-1 9 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.5.0 ESR MFSA 2025-91 (bsc#1253188): * CVE-2025-13012 Race condition in the Graphics component * CVE-2025-13016 Incorrect boundary conditions …

    first Jan 2, 2026
  • High max 8.8
    openSUSE-SU-2026:20001-1 1 CVE

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2025-11561: Fixed default Kerberos configuration allowing privilege escalation on AD-joined Linux systems (bsc#1244325)

    first Jan 2, 2026
  • High max 7.8
    openSUSE-SU-2026:20000-1 2 CVEs

    Security update for salt

    This update for salt fixes the following issues: Changes in salt: - Add minimum_auth_version to enforce security (CVE-2025-62349) - Backport security fixes for vendored tornado * BDSA-2024-3438 * BDSA-2024-3439 * BDSA-2024-9026 - Junos module yaml loader fix …

    first Dec 23, 2025
  • High max 7.5
    openSUSE-SU-2026:10323-1 3 CVEs

    traefik-3.6.10-1.1 on GA media

    These are all security issues fixed in the traefik-3.6.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • High max 8.8
    openSUSE-SU-2026:10317-1 1 CVE

    grype-0.109.1-1.1 on GA media

    These are all security issues fixed in the grype-0.109.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • High max 7.5
    openSUSE-SU-2026:10294-1 1 CVE

    telemetrygen-0.147.0-1.1 on GA media

    These are all security issues fixed in the telemetrygen-0.147.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 5, 2026
  • High max 7.5
    openSUSE-SU-2026:10293-1 1 CVE

    python311-joserfc-1.6.3-1.1 on GA media

    These are all security issues fixed in the python311-joserfc-1.6.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 5, 2026
  • High max 7.0
    openSUSE-SU-2026:10287-1 1 CVE

    sdbootutil-1+git20260303.90d816d-1.1 on GA media

    These are all security issues fixed in the sdbootutil-1+git20260303.90d816d-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • High max 8.9
    openSUSE-SU-2026:10281-1 1 CVE

    mchange-commons-0.4.0-1.1 on GA media

    These are all security issues fixed in the mchange-commons-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • High max 8.7
    openSUSE-SU-2026:10280-1 2 CVEs

    incus-6.22-1.1 on GA media

    These are all security issues fixed in the incus-6.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • High max 8.9
    openSUSE-SU-2026:10279-1 1 CVE

    c3p0-0.12.0-1.1 on GA media

    These are all security issues fixed in the c3p0-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • High max 7.1
    openSUSE-SU-2026:10273-1 2 CVEs

    libudisks2-0-2.11.0-2.1 on GA media

    These are all security issues fixed in the libudisks2-0-2.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • High max 8.7
    openSUSE-SU-2026:10271-1 1 CVE

    libjxl-devel-0.11.2-1.1 on GA media

    These are all security issues fixed in the libjxl-devel-0.11.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • High max 7.5
    openSUSE-SU-2026:10270-1 1 CVE

    gosec-2.24.0-1.1 on GA media

    These are all security issues fixed in the gosec-2.24.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • High max 8.6
    openSUSE-SU-2026:10267-1 31 CVEs

    ImageMagick-7.1.2.15-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • High max 8.5
    openSUSE-SU-2026:10266-1 3 CVEs

    valkey-9.0.3-1.1 on GA media

    These are all security issues fixed in the valkey-9.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • High max 8.8
    openSUSE-SU-2026:10263-1 1 CVE

    heroic-games-launcher-2.20.0-2.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • High max 7.5
    openSUSE-SU-2026:10260-1 1 CVE

    digger-cli-0.6.143-1.1 on GA media

    These are all security issues fixed in the digger-cli-0.6.143-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • High max 8.8
    openSUSE-SU-2026:10259-1 3 CVEs

    chromedriver-145.0.7632.116-1.1 on GA media

    These are all security issues fixed in the chromedriver-145.0.7632.116-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • High max 7.0
    openSUSE-SU-2026:10258-1 1 CVE

    busybox-1.37.0-10.1 on GA media

    These are all security issues fixed in the busybox-1.37.0-10.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • High max 7.5
    openSUSE-SU-2026:10247-1 6 CVEs

    python311-Django4-4.2.28-1.1 on GA media

    These are all security issues fixed in the python311-Django4-4.2.28-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • High max 8.7
    openSUSE-SU-2026:10243-1 8 CVEs

    freerdp2-2.11.7-5.1 on GA media

    These are all security issues fixed in the freerdp2-2.11.7-5.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • High max 9.8
    openSUSE-SU-2026:10237-1 14 CVEs

    libopenssl-3-devel-3.5.3-2.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • High max 8.8
    openSUSE-SU-2026:10234-1 3 CVEs

    chromedriver-145.0.7632.109-1.1 on GA media

    These are all security issues fixed in the chromedriver-145.0.7632.109-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 21, 2026
  • High max 7.0
    openSUSE-SU-2026:10231-1 1 CVE

    busybox-1.37.0-9.1 on GA media

    These are all security issues fixed in the busybox-1.37.0-9.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 20, 2026
  • High max 7.5
    openSUSE-SU-2026:10227-1 1 CVE

    python311-py7zr-1.1.0-1.1 on GA media

    These are all security issues fixed in the python311-py7zr-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • High max 8.8
    openSUSE-SU-2026:10225-1 1 CVE

    MozillaFirefox-147.0.4-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-147.0.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • High max 7.5
    openSUSE-SU-2026:10219-1 1 CVE

    dnsdist-2.0.2-1.1 on GA media

    These are all security issues fixed in the dnsdist-2.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026
  • High max 8.8
    openSUSE-SU-2026:10218-1 1 CVE

    MozillaThunderbird-140.7.2-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.7.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026
  • High max 7.5
    openSUSE-SU-2026:10217-1 1 CVE

    traefik-3.6.8-1.1 on GA media

    These are all security issues fixed in the traefik-3.6.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 17, 2026
  • High max 7.5
    openSUSE-SU-2026:10216-1 1 CVE

    python311-asgiref-3.11.1-1.1 on GA media

    These are all security issues fixed in the python311-asgiref-3.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 17, 2026
  • High max 7.5
    openSUSE-SU-2026:10215-1 1 CVE

    owntone-29.0-2.1 on GA media

    These are all security issues fixed in the owntone-29.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 17, 2026
  • High max 7.5
    openSUSE-SU-2026:10214-1 2 CVEs

    mupdf-1.27.1-1.1 on GA media

    These are all security issues fixed in the mupdf-1.27.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 17, 2026