Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 8.4

    Security update for glibc

    This update for glibc fixes the following issues: Security fixes: - CVE-2025-0395: Fixed buffer overflow in the assert() function (bsc#1236282). - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766)…

    first Jan 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …

    first Dec 19, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to ch…

    first Nov 26, 2025
  • Critical max 10.0
    SUSE-SU-2026:20560-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • High max 7.1

    Recommended update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix one issue The following non security issue was fixed: - CVE-2026-46333: Fixed logic bug in the Linux kernel's __ptrace_may_access() function (bsc#1265308).

    first May 18, 2026
  • High max 7.5

    python313-sqlparse-0.5.5-2.1 on GA media

    These are all security issues fixed in the python313-sqlparse-0.5.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.1

    python313-pytest-html-4.2.0-4.1 on GA media

    These are all security issues fixed in the python313-pytest-html-4.2.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.1

    perl-HTTP-Tiny-0.096-2.1 on GA media

    These are all security issues fixed in the perl-HTTP-Tiny-0.096-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.1

    libIex-3_4-33-3.4.13-1.1 on GA media

    These are all security issues fixed in the libIex-3_4-33-3.4.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.5

    nasm-3.02-1.1 on GA media

    These are all security issues fixed in the nasm-3.02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Medium max 5.3

    mihomo-1.19.28-1.1 on GA media

    These are all security issues fixed in the mihomo-1.19.28-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 8.7

    Security update for openQA, os-autoinst

    This update for openQA, os-autoinst fixes the following issues: Changes in openQA: - Update to version 5.1783076943.6691832d: * test: Stabilize `t/05-scheduler-full.t` - Clarify resolution of three CVEs * The following CVEs have been fixed (see previous chang…

    first Jul 6, 2026
  • Critical max 9.6

    Security update for cadvisor

    This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.3: * Move OOM watching out of the lib module into the binary * lib/model: make ContainerStats sub-stats pointers to convey collection presence - update to 0.60.1: * cpu…

    first Jul 6, 2026
  • High max 7.5

    Security update for ffmpeg-7

    This update for ffmpeg-7 fixes the following issue: - CVE-2026-30997: out-of-bounds read in the `read_global_param()` function allows for a DoS via crafted input (bsc#1262047).

    first Jul 7, 2026
  • Medium max 6.7

    Security update for qemu

    This update for qemu fixes the following issues: Update to version 10.0.11. Security issues fixed: - CVE-2026-3886: integer overflow leading to privilege escalation due to lack of proper validation of user-supplied data in the virtio-gpu driver (bsc#1268061).…

    first Jul 7, 2026
  • Critical max 10.0

    Security update for alloy

    This update for alloy fixes the following issues: Update to version 1.17.0. Security issues fixed: - CVE-2026-25680: golang.org/x/net/html: parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service (bsc#1267185). - CVE-2026-…

    first Jul 7, 2026
  • High max 7.0

    Security update for trivy

    This update for trivy fixes the following issues Update to version 0.72.0. - CVE-2026-54448: tar unpacker reads scanned Helm chart archives (.tgz) with `io.ReadAll(tr)` and defines no size limit, which can lead to a DoS (bsc#1269271). - CVE-2026-55092: `org.o…

    first Jul 7, 2026
  • High max 8.2

    Security update for jq

    This update for jq fixes the following issues: - CVE-2025-48060: improper handling of string data in `jv_string_empty` can lead to heap buffer overflow and a crash when processing crafted input (bsc#1244116). - CVE-2026-32316: integer overflow within the `jvp…

    first Jul 7, 2026
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues: Update to version 1.5.3. Security issues fixed: - CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning (bsc#1270107). - CVE-2026-20214: out-of-bounds wri…

    first Jul 7, 2026
  • Critical max 9.6

    Security update for docker-compose

    This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…

    first Jul 7, 2026
  • High max 7.5

    Security update for haproxy

    This update for haproxy fixes the following issues - Update to version 3.2.21+git0.dbe43be37 - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-20…

    first Jul 7, 2026
  • Critical max 10.0

    Security update for podman

    This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39827: Invoking memory le…

    first Jul 6, 2026
  • Medium max 5.3

    Security update for assimp

    This update for assimp fixes the following issues - CVE-2025-11277: large mWidth and mHeight dimensions can lead to integer overflow and a heap-based buffer overflow (bsc#1251019). - CVE-2026-10197: NULL pointer dereference in ImportEmbeddedTextures when mime…

    first Jul 6, 2026
  • High max 7.7

    Security update for nodejs24

    This update for nodejs24 fixes the following issues Update to version 24.18.0 (bsc#1269825). Security issues fixed: - CVE-2026-2581: undici: denial of service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: response queue pois…

    first Jul 6, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …

    first Jul 6, 2026
  • Low max 3.7

    libmbedtls23-4.2.0-1.1 on GA media

    These are all security issues fixed in the libmbedtls23-4.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 10.0

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…

    first Jul 6, 2026
  • High max 8.8
    openSUSE-SU-2026:11214-1 2 CVEs 1 exploited

    kernel-devel-7.1.3-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Low max 2.9

    dirmngr-2.5.21-1.1 on GA media

    These are all security issues fixed in the dirmngr-2.5.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.8

    go1.25-1.25.12-1.1 on GA media

    These are all security issues fixed in the go1.25-1.25.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.8

    fluidsynth-2.5.6-1.1 on GA media

    These are all security issues fixed in the fluidsynth-2.5.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 8.7

    cargo-c-0.10.23-1.1 on GA media

    These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.1

    tomcat10-10.1.56-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 7, 2026
  • Unscored

    Security update for jline3

    This update for jline3 fixes the following issues: Changes in jline3: * unauthenticated remote memory exhaustion via unbounded Telnet 'NEW-ENVIRON variables (bsc#1269021)

    first Jul 6, 2026
  • Medium max 6.3

    Security update for dhcpcd

    This update for dhcpcd fixes the following issue Update to 10.3.2: - CVE-2025-70102: NULL pointer dereference in `parse_option()` when processing a specially crafted configuration input (bsc#1268761). Changes for dhcpcd: * options: Ensure ldop is not NULL der…

    first Jul 6, 2026
  • Critical max 9.0

    xwayland-24.1.12-1.1 on GA media

    These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Medium max 6.5

    woodstox-core-7.2.1-1.1 on GA media

    These are all security issues fixed in the woodstox-core-7.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.3

    libtiff-devel-32bit-4.7.2-1.1 on GA media

    These are all security issues fixed in the libtiff-devel-32bit-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 8.7

    sccache-0.16.0~0-3.1 on GA media

    These are all security issues fixed in the sccache-0.16.0~0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 8.7

    rustup-1.28.2~0-5.1 on GA media

    These are all security issues fixed in the rustup-1.28.2~0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026