Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • Critical max 9.8
    SUSE-SU-2026:22710-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22709-1 10 CVEs

    Security update for curl

    This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…

    first Jul 14, 2026
  • Unscored
    SUSE-SU-2026:22708-1 0 CVEs

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issue - GHSA-pw6j-qg29-8w7f: `CurlAsyncHTTPClient` leaks per-request credentials on handle reuse (bsc#1269012).

    first Jul 14, 2026
  • Medium max 5.4
    SUSE-SU-2026:22707-1 1 CVE

    Security update for nghttp2

    This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).

    first Jul 10, 2026
  • Medium max 5.9
    SUSE-SU-2026:22706-1 2 CVEs

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…

    first Jul 10, 2026
  • High max 8.2
    SUSE-SU-2026:22705-1 7 CVEs

    Security update for jq

    This update for jq fixes the following issues Security issues fixed: - CVE-2025-9403: reacheable assertion in `run_jq_tests` can lead to program termination when processing malformed JSON input containing invalid Unicode escape sequences (bsc#1248600). - CVE-…

    first Jul 8, 2026
  • High max 7.5
    SUSE-SU-2026:22704-1 1 CVE

    Security update for python-msgpack

    This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).

    first Jul 8, 2026
  • Critical max 9.6
    SUSE-SU-2026:22703-1 4 CVEs

    Security update for docker-compose

    This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…

    first Jul 7, 2026
  • Medium max 5.0
    SUSE-SU-2026:22702-1 1 CVE

    Security update for krb5

    This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).

    first Jul 7, 2026
  • High max 7.8
    openSUSE-SU-2026:11342-1 6 CVEs

    python313-3.13.14-1.1 on GA media

    These are all security issues fixed in the python313-3.13.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11341-1 1 CVE

    python313-pandas-3.0.3-1.2 on GA media

    These are all security issues fixed in the python313-pandas-3.0.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11338-1 2 CVEs

    jline3-3.30.15-3.1 on GA media

    These are all security issues fixed in the jline3-3.30.15-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11333-1 1 CVE

    helm-4.2.3-3.1 on GA media

    These are all security issues fixed in the helm-4.2.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6
    openSUSE-SU-2026:11330-1 1 CVE

    gh-2.96.0-2.1 on GA media

    These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6
    openSUSE-SU-2026:11340-1 1 CVE

    prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

    These are all security issues fixed in the prometheus-ha_cluster_exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 10.0
    openSUSE-SU-2026:11339-1 68 CVEs

    kernel-devel-7.1.4-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11337-1 8 CVEs

    java-26-openjdk-26.0.2.0-1.1 on GA media

    These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11336-1 9 CVEs

    java-17-openjdk-17.0.20.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11335-1 11 CVEs

    java-11-openjdk-11.0.32.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11329-1 32 CVEs

    firefox-esr-140.13.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11334-1 1 CVE

    helm3-3.21.3-3.1 on GA media

    These are all security issues fixed in the helm3-3.21.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11332-1 2 CVEs

    grafana-12.4.5-3.1 on GA media

    These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Medium max 5.4
    openSUSE-SU-2026:11326-1 1 CVE

    apache-ivy-2.6.0-1.1 on GA media

    These are all security issues fixed in the apache-ivy-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Unscored
    SUSE-SU-2026:3196-1 0 CVEs

    Security update for joe

    This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file (bsc#1269379).

    first Jul 22, 2026
  • High max 8.8
    SUSE-SU-2026:3195-1 2 CVEs

    Security update for sssd

    This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…

    first Jul 22, 2026
  • Critical max 9.6
    openSUSE-SU-2026:11331-1 1 CVE

    google-osconfig-agent-20260708.00-2.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260708.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11328-1 1 CVE

    distribution-registry-3.1.1-4.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5
    openSUSE-SU-2026:11327-1 4 CVEs

    apache-sshd-2.19.0-2.1 on GA media

    These are all security issues fixed in the apache-sshd-2.19.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Low max 3.1
    openSUSE-SU-2026:11325-1 1 CVE

    agama-web-ui-23+0.f26ed5eab-49.1 on GA media

    These are all security issues fixed in the agama-web-ui-23+0.f26ed5eab-49.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Medium max 5.1
    openSUSE-SU-2026:11324-1 1 CVE

    afterburn-5.10.0.git73.b97f772-2.1 on GA media

    These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8
    SUSE-SU-2026:3200-1 32 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649): - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the D…

    first Jul 22, 2026
  • Unscored
    SUSE-SU-2026:3199-1 0 CVEs

    Security update for multipath-tools

    This update for multipath-tools fixes the following issues - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk image(bsc#1268145). - kpartx: missing bounds check can lead to a DASD VO…

    first Jul 22, 2026
  • Medium max 5.5
    SUSE-SU-2026:3194-1 25 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues - CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495). - CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496). - CVE-2026-61859: pol…

    first Jul 22, 2026
  • Medium max 5.5
    SUSE-SU-2026:3192-1 13 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `Ope…

    first Jul 22, 2026
  • High max 7.8
    openSUSE-SU-2026:11343-1 1 CVE

    python314-3.14.6-2.1 on GA media

    These are all security issues fixed in the python314-3.14.6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Low max 2.9
    SUSE-SU-2026:3201-1 1 CVE

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).

    first Jul 22, 2026
  • Critical max 9.6
    SUSE-SU-2026:3198-1 1 CVE

    Security update for terraform-provider-susepubliccloud

    This update for terraform-provider-susepubliccloud fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266477).

    first Jul 22, 2026
  • Critical max 9.6
    SUSE-SU-2026:3197-1 1 CVE

    Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

    This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…

    first Jul 22, 2026
  • Medium max 5.5
    SUSE-SU-2026:3193-1 23 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues - CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081). - CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in `Ope…

    first Jul 22, 2026
  • Medium max 6.7
    SUSE-SU-2026:3182-1 1 CVE

    Security update for libgcrypt

    This update for libgcrypt fixes the following issue - CVE-2026-41989: heap-based buffer overflow when processing crafted ECDH ciphertext can lead to a denial of service (bsc#1262684).

    first Jul 22, 2026