Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,602 results · Clear filters · Feed

  • High max 7.4
    openSUSE-SU-2025:15077-1 2 CVEs

    java-11-openj9-11.0.27.0-1.1 on GA media

    These are all security issues fixed in the java-11-openj9-11.0.27.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • High max 8.8
    openSUSE-SU-2025:15073-1 1 CVE

    chromedriver-136.0.7103.92-1.1 on GA media

    These are all security issues fixed in the chromedriver-136.0.7103.92-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 9, 2025
  • High max 7.4
    openSUSE-SU-2025:15080-1 2 CVEs

    java-21-openj9-21.0.7.0-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • High max 7.4
    openSUSE-SU-2025:15079-1 2 CVEs

    java-1_8_0-openj9-1.8.0.452-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.452-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • High max 7.4
    openSUSE-SU-2025:15078-1 2 CVEs

    java-17-openj9-17.0.15.0-1.1 on GA media

    These are all security issues fixed in the java-17-openj9-17.0.15.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • High max 7.5
    openSUSE-SU-2025:15075-1 1 CVE

    golang-github-prometheus-node_exporter-1.9.1-3.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-node_exporter-1.9.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • High max 8.6
    openSUSE-SU-2025:15059-1 12 CVEs

    govulncheck-vulndb-0.0.20250506T153719-1.1 on GA media

    These are all security issues fixed in the govulncheck-vulndb-0.0.20250506T153719-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 7, 2025
  • High max 8.6
    SUSE-SU-2026:20360-1 4 CVEs

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-14523: flaw in HTTP header handling can lead to host header parsing discrepancy between servers and proxies and allow for request smuggling, cache poisoning and bypass of access controls (bsc#1254…

    first Jan 19, 2026
  • High max 7.5
    SUSE-SU-2026:20357-1 6 CVEs

    Security update for elemental-toolkit, elemental-operator

    This update for elemental-toolkit, elemental-operator fixes the following issues: elemental-operator: - Update to v1.7.4: * Bump github.com/rancher-sandbox/go-tpm and its dependencies This bump includes few CVE fixes: * bsc#1241826 (CVE-2025-22872) * bsc#1241…

    first Jan 15, 2026
  • High max 7.8
    SUSE-SU-2026:20356-1 1 CVE

    Security update for gpg2

    This update for gpg2 fixes the following issues: - CVE-2025-68973: out-of-bounds write when processing specially crafted input in the armor parser can lead to memory corruption (bsc#1255715). Other security fixes: - gpg: Avoid potential downgrade to SHA1 in 3…

    first Jan 14, 2026
  • High max 7.5
    SUSE-SU-2026:20355-1 1 CVE

    Security update for libtasn1

    This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341).

    first Jan 13, 2026
  • High max 8.2
    SUSE-SU-2026:20352-1 1 CVE

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

    first Feb 13, 2026
  • High max 8.8
    SUSE-SU-2026:20349-1 8 CVEs

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unaut…

    first Feb 12, 2026
  • High max 8.6
    SUSE-SU-2026:20339-1 2 CVEs

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP r…

    first Feb 6, 2026
  • High max 8.9
    SUSE-SU-2026:20270-1 1 CVE

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2026-21441: Fixed excessive resource consumption during decompression of data in HTTP redirect responses (bsc#1256331).

    first Jan 21, 2026
  • High max 8.8
    SUSE-SU-2026:20263-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-40204: sctp…

    first Jan 19, 2026
  • High max 8.8
    SUSE-SU-2026:20262-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-40204: sctp…

    first Jan 19, 2026
  • High max 7.4
    openSUSE-SU-2025:15044-1 4 CVEs

    libsoup-2_4-1-2.74.3-9.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-9.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2025
  • High max 8.8
    openSUSE-SU-2025:0148-1 1 CVE

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 136.0.7103.92 (boo#1242717) * CVE-2025-4372: Use after free in WebAudio

    first May 9, 2025
  • High max 7.8
    openSUSE-RU-2026:20168-1 5 CVEs

    Recommended update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - Update to 3.0.8 - Font Loading Performance - Improvements in start-up time for users with a large number of fonts was backported from our 3.2 RC2 release. As a result, we now wait to load ima…

    first Feb 3, 2026
  • High max 8.8
    openSUSE-RU-2026:20129-1 2 CVEs

    Recommended update for cloud-init

    This update for cloud-init fixes the following issues: Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed long ago * https://github.com/canonical/cloud-init/pull/1720 - Update to version …

    first Jan 29, 2026
  • High max 7.5
    SUSE-SU-2026:20722-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 12, 2026
  • High max 8.8
    SUSE-SU-2026:20709-1 2 CVEs

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…

    first Mar 9, 2026
  • High max 7.8
    SUSE-SU-2026:20705-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20703-1 1 CVE

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 8.2
    SUSE-SU-2026:20706-1 1 CVE

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-26007: missing validation can lead to security issues for signature verification (ECDSA) and shared key negotiation (ECDH) (bsc#1258074).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20704-1 1 CVE

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20702-1 1 CVE

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20701-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20700-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20699-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.2
    SUSE-SU-2026:20682-1 2 CVEs

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …

    first Mar 6, 2026
  • High max 7.8
    SUSE-SU-2026:20681-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20680-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20679-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20678-1 1 CVE

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20674-1 1 CVE

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20673-1 1 CVE

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8
    SUSE-SU-2026:20672-1 1 CVE

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.5
    SUSE-SU-2026:20668-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 12, 2026