Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 6.5

    ucode-intel-20250512-1.1 on GA media

    These are all security issues fixed in the ucode-intel-20250512-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 15, 2025
  • Medium max 5.3

    pnpm-10.11.0-1.1 on GA media

    These are all security issues fixed in the pnpm-10.11.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 15, 2025
  • Medium max 4.3

    openssh-10.0p2-2.1 on GA media

    These are all security issues fixed in the openssh-10.0p2-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 15, 2025
  • Medium max 6.1

    libvmtools-devel-12.5.2-1.1 on GA media

    These are all security issues fixed in the libvmtools-devel-12.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 15, 2025
  • Medium max 6.5

    nbdkit-1.42.3-1.1 on GA media

    These are all security issues fixed in the nbdkit-1.42.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 14, 2025
  • Medium max 5.3

    python311-Django-5.2.1-1.1 on GA media

    These are all security issues fixed in the python311-Django-5.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 13, 2025
  • Medium max 6.5

    iputils-20240905-3.1 on GA media

    These are all security issues fixed in the iputils-20240905-3.1 package on the GA media of openSUSE Tumbleweed.

    first May 15, 2025
  • Medium max 5.6

    kernel-devel-6.14.6-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.14.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 13, 2025
  • Medium max 5.9

    grub2-2.12-50.1 on GA media

    These are all security issues fixed in the grub2-2.12-50.1 package on the GA media of openSUSE Tumbleweed.

    first May 13, 2025
  • Medium max 5.3

    python311-Django4-4.2.21-1.1 on GA media

    These are all security issues fixed in the python311-Django4-4.2.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • Medium max 5.6

    libxmp-devel-4.6.3-1.1 on GA media

    These are all security issues fixed in the libxmp-devel-4.6.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 12, 2025
  • Medium max 6.0

    libmosquitto1-2.0.21-2.1 on GA media

    These are all security issues fixed in the libmosquitto1-2.0.21-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 9, 2025
  • Medium max 6.6

    transfig-3.2.9a-2.1 on GA media

    These are all security issues fixed in the transfig-3.2.9a-2.1 package on the GA media of openSUSE Tumbleweed.

    first May 7, 2025
  • Medium max 5.9

    Security update for abseil-cpp

    This update for abseil-cpp fixes the following issues: Update to version 20230802.3: - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (#1813) (bsc#1237543).

    first Jan 20, 2026
  • Medium max 6.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).

    first Jan 15, 2026
  • Medium max 6.9

    Security update for expat

    This update for expat fixes the following issues: - CVE-2026-24515: failure to copy the encoding handler data passed to XML_SetUnknownEncodingHandler may cause a NULL dereference (bsc#1257144). - CVE-2026-25210: lack of buffer size check can lead to an intege…

    first Feb 13, 2026
  • Medium max 6.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105).

    first Feb 12, 2026
  • Medium max 6.1

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

    first Feb 12, 2026
  • Medium max 6.8

    Security update for openCryptoki

    This update for openCryptoki fixes the following issues: Upgrade openCryptoki to 3.26 (jsc#PED-14609) Security fixes: - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-service (bsc#1256673). - CVE-2026-238…

    first Feb 13, 2026
  • Medium max 6.9

    Security update for cockpit

    This update for cockpit fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).

    first Feb 6, 2026
  • Medium max 6.9

    Security update for cockpit-subscriptions

    This update for cockpit-subscriptions fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).

    first Feb 6, 2026
  • Medium max 5.9

    Security update for abseil-cpp

    This update for abseil-cpp fixes the following issues: Update to version 20230802.3: - CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (#1813) (bsc#1237543).

    first Jan 20, 2026
  • Medium max 6.5

    hauler-1.2.4-1.1 on GA media

    These are all security issues fixed in the hauler-1.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Medium max 6.5

    docker-28.1.1_ce-16.1 on GA media

    These are all security issues fixed in the docker-28.1.1_ce-16.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Medium max 5.3

    libsoup-3_0-0-3.6.5-3.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2025
  • Medium max 6.7

    Recommended update for shim

    This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults c…

    first Mar 5, 2026
  • Medium max 5.8

    Recommended update for hauler

    This update for hauler fixes the following issues: Changes in hauler: - Update to version 1.4.1 (bsc#1256546, CVE-2026-22772): * fixed typos for containerd imports (#493) * fix and support containerd imports of `hauls` (#492) * bump github.com/sigstore/fulcio…

    first Jan 27, 2026
  • Medium max 6.8

    Security update for virtiofsd

    This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).

    first Mar 12, 2026
  • Medium max 5.4

    Security update for vim

    This update for vim fixes the following issues: Update Vim to version 9.2.0045: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).

    first Mar 11, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)

    first Mar 10, 2026
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control chara…

    first Mar 9, 2026
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. * (bsc#1258083, jsc#PED-15752, jsc#P…

    first Mar 6, 2026
  • Medium max 6.2

    Security update for libxslt, libxml2

    This update for libxslt, libxml2 fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…

    first Mar 6, 2026
  • Medium max 6.9

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257325).

    first Mar 4, 2026
  • Medium max 5.3

    Security update for docker

    This update for docker fixes the following issues: - CVE-2025-58181: an invalid number of mechanisms may cause unbounded memory consumption (bcs#1253904).

    first Mar 4, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - Update to version 10.0.8 - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)

    first Mar 13, 2026
  • Medium max 6.9

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).

    first Mar 9, 2026
  • Medium max 5.1

    Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer

    This update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer fixes the following issues: Chan…

    first Mar 5, 2026
  • Medium max 5.3

    Security update for helm

    This update for helm fixes the following issues: - Update to version 3.19.1: * CVE-2025-47911: golang.org/x/net/html: Fixed various algorithms with quadratic complexity when parsing HTML documents (bsc#1251442) * CVE-2025-58190: golang.org/x/net/html: Fixed x…

    first Mar 5, 2026
  • Medium max 6.8

    Security update for virtiofsd

    This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).

    first Mar 5, 2026