Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Unscored

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue - CVE-2026-13606: crafted Photo CD (PCD) file can cause memory corruption (bsc#1269891).

    first Jul 10, 2026
  • Critical max 10.0

    Security update for cosign

    This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…

    first Jul 10, 2026
  • High max 7.8
    SUSE-SU-2026:2863-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent pr…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2862-1 9 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bondi…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2857-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2855-1 22 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of…

    first Jul 11, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file download with pySSL (bsc#1270365).

    first Jul 10, 2026
  • High max 7.8

    Security update for tiff

    This update for tiff fixes the following issues: Update to version 4.7.2. Security issues fixed: - CVE-2026-12912: heap-based buffer overflow when processing crafted PixarLog-compressed TIFF image (bsc#1269779). - CVE-2026-36849: denial of service when proces…

    first Jul 10, 2026
  • Critical max 9.6

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140…

    first Jul 10, 2026
  • Medium max 5.6

    Security update for php8

    This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw (bsc#1270351).

    first Jul 12, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11261-1 24 CVEs 1 exploited

    python313-Pillow-12.3.0-1.1 on GA media

    These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Low max 1.8

    libxml2-16-2.15.3-2.1 on GA media

    These are all security issues fixed in the libxml2-16-2.15.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Unscored

    busybox-1.38.0-1.1 on GA media

    These are all security issues fixed in the busybox-1.38.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Medium max 4.6

    patch-2.8-3.1 on GA media

    These are all security issues fixed in the patch-2.8-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Medium max 5.3

    libopenbabel8-3.2.1-1.1 on GA media

    These are all security issues fixed in the libopenbabel8-3.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Medium max 6.5

    freetype2-devel-2.14.3-1.1 on GA media

    These are all security issues fixed in the freetype2-devel-2.14.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • High max 8.7

    afterburn-5.10.0.git73.b97f772-1.1 on GA media

    These are all security issues fixed in the afterburn-5.10.0.git73.b97f772-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Critical max 9.6

    chromedriver-150.0.7871.114-1.1 on GA media

    These are all security issues fixed in the chromedriver-150.0.7871.114-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 11, 2026
  • Critical max 9.8

    Security update for curl

    This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…

    first Jul 8, 2026
  • Medium max 6.5

    Security update for apptainer

    This update for apptainer fixes the following issues: Changes in apptainer: - Enable building of SUID starter for SLES 15 (jsc#PED-16347). * Security fix for CVE-2026-2303 (bsc#1270529): Heap Out-of-Bounds Read in GSSAPI Error Handling in go.mongodb.org/mongo…

    first Jul 8, 2026
  • Critical max 9.6

    Security update for go-sendxmpp

    This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.16.0: Added: * Add Ox support to http-upload. * Add Ox support for private group chats. * Show error cause if joining MUCs failedi (requires go-xmpp >= v0.3.5). Chan…

    first Jul 8, 2026
  • High max 8.7

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: openss…

    first Jul 9, 2026
  • Critical max 9.0

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…

    first Jul 8, 2026
  • High max 7.5

    wget-1.25.0-3.1 on GA media

    These are all security issues fixed in the wget-1.25.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • High max 7.8

    traefik-3.7.7-1.1 on GA media

    These are all security issues fixed in the traefik-3.7.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Medium max 6.7

    qemu-11.0.2-1.1 on GA media

    These are all security issues fixed in the qemu-11.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Medium max 6.5

    python313-weasyprint-69.0-1.1 on GA media

    These are all security issues fixed in the python313-weasyprint-69.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Critical max 9.8

    python313-Django-5.2.16-1.1 on GA media

    These are all security issues fixed in the python313-Django-5.2.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Low max 3.3

    libredwg-devel-0.14.8413-1.1 on GA media

    These are all security issues fixed in the libredwg-devel-0.14.8413-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • High max 7.1

    libnfs-devel-6.0.2-1.1 on GA media

    These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Unscored

    GraphicsMagick-1.3.47-4.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.47-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • High max 7.5

    Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provider-tls

    This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-random, terraform-provider-susepubliccloud, terraform-provid…

    first Jul 10, 2026
  • Medium max 6.5

    wpa_supplicant-2.11-7.1 on GA media

    These are all security issues fixed in the wpa_supplicant-2.11-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 10, 2026
  • Medium max 5.0

    Security update for krb5

    This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).

    first Jul 10, 2026
  • Medium max 5.9

    Security update for krb5, krb5-mini

    This update for krb5, krb5-mini fixes the following issues - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131). - CVE-2026-40355: Denial of Service via NULL pointer dereference in NegoEx mechanism (bsc#126336…

    first Jul 10, 2026
  • Medium max 5.0

    Security update for krb5

    This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).

    first Jul 10, 2026
  • High max 7.4

    Security update for libexif

    This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000) - CVE-2026-40386: Fixed denial of service and information disclosure via integer under…

    first Jul 10, 2026
  • High max 7.4

    Security update for libexif

    This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling (bsc#1262000) - CVE-2026-40386: Fixed denial of service and information disclosure via integer under…

    first Jul 10, 2026
  • High max 7.5

    Security update for perl-List-SomeUtils-XS

    This update for perl-List-SomeUtils-XS fixes the following issue - CVE-2026-12844: heap buffer overflow in the `pairwise` function (bsc#1269210).

    first Jul 10, 2026
  • High max 7.6

    Security update for gstreamer-plugins-good

    This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).

    first Jul 10, 2026