Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • Medium max 6.8
    SUSE-SU-2026:1599-1 1 CVE

    Security update for librsvg

    This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922).

    first Apr 24, 2026
  • High max 7.5
    SUSE-SU-2026:1598-1 12 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33901: Denia…

    first Apr 24, 2026
  • High max 7.8
    SUSE-SU-2026:1584-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:1580-1 10 CVEs

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: - Update to go1.26.2 (bsc#1255111). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…

    first Apr 23, 2026
  • High max 7.5
    SUSE-SU-2026:1597-1 11 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33901: Denia…

    first Apr 24, 2026
  • Low max 1.7
    SUSE-SU-2026:1582-1 1 CVE

    Security update for python-pyOpenSSL

    This update for python-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).

    first Apr 23, 2026
  • High max 7.5
    SUSE-SU-2026:1596-1 6 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154). - CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156). - CVE-2026-33905: Denia…

    first Apr 24, 2026
  • High max 8.0
    SUSE-SU-2026:1583-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.78 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:1581-1 9 CVEs

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: - Update to go1.25.9 (bsc#1244485). - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption after bound check elim…

    first Apr 23, 2026
  • High max 7.8
    SUSE-SU-2026:1578-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.158 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 23, 2026
  • High max 7.3
    SUSE-SU-2026:21261-1 1 CVE

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026
  • Medium max 6.7
    SUSE-SU-2026:21257-1 1 CVE

    Security update for libcap

    This update for libcap fixes the following issue: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in `cap_set_file()` (bsc#1261809).

    first Apr 20, 2026
  • Medium max 5.1
    SUSE-SU-2026:21262-1 1 CVE

    Security update for libpng16

    This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).

    first Apr 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:21255-1 59 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Micro (RT) 6.0 and 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarfs: Fix slab…

    first Apr 17, 2026
  • High max 7.0
    SUSE-SU-2026:21254-1 5 CVEs

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3479: improper resource argument val…

    first Apr 16, 2026
  • Medium max 5.9
    SUSE-SU-2026:21250-1 1 CVE

    Security update for openvswitch

    This update for openvswitch fixes the following issue: - CVE-2026-34956: Invalid memory access in conntrack FTP alg (bsc#1261273).

    first Apr 21, 2026
  • Medium max 5.1
    openSUSE-SU-2026:20601-1 1 CVE

    Security update for giflib

    This update for giflib fixes the following issue: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).

    first Apr 22, 2026
  • High max 7.3
    SUSE-SU-2026:21247-1 1 CVE

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026
  • Critical max 9.2
    SUSE-SU-2026:21246-1 2 CVEs

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…

    first Apr 20, 2026
  • Critical max 9.2
    SUSE-SU-2026:21245-1 2 CVEs

    Security update for cockpit-tukit

    This update for cockpit-tukit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob …

    first Apr 20, 2026
  • High max 7.5
    SUSE-SU-2026:21244-1 1 CVE

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 20, 2026
  • Medium max 6.7
    SUSE-SU-2026:21243-1 1 CVE

    Security update for libcap

    This update for libcap fixes the following issues: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in `cap_set_file()` (bsc#1261809).

    first Apr 20, 2026
  • Unscored
    SUSE-SU-2026:21242-1 0 CVEs

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_19

    This update for kernel-livepatch-MICRO-6-0-RT_Update_19 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 19

    first Apr 17, 2026
  • Critical max 9.2
    SUSE-SU-2026:21253-1 2 CVEs

    Security update for cockpit-machines

    This update for cockpit-machines fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of gl…

    first Apr 16, 2026
  • Critical max 9.2
    SUSE-SU-2026:21241-1 2 CVEs

    Security update for cockpit

    This update for cockpit fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob patter…

    first Apr 16, 2026
  • Medium max 5.5
    SUSE-SU-2026:21263-1 2 CVEs

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2025-12748: Denial of service in XML parsing (bsc#1253278). - CVE-2025-13193: Information disclosure via world-readable VM snapshots (bsc#1253703).

    first Apr 21, 2026
  • Unscored
    SUSE-SU-2026:21265-1 0 CVEs

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_19

    This update for kernel-livepatch-MICRO-6-0-RT_Update_19 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 19

    first Apr 17, 2026
  • Critical max 9.2
    SUSE-SU-2026:21256-1 2 CVEs

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive resource consumption and crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: processing of glob…

    first Apr 17, 2026
  • High max 7.4
    SUSE-SU-2026:21252-1 1 CVE

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).

    first Apr 16, 2026
  • Medium max 5.1
    SUSE-SU-2026:21251-1 1 CVE

    Security update for libpng16

    This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).

    first Apr 21, 2026
  • High max 7.5
    SUSE-SU-2026:1562-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 23, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20611-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (bsc#1261852). - …

    first Apr 22, 2026
  • Unscored
    openSUSE-SU-2026:20615-1 0 CVEs

    Security update for qt6-translations

    This update for qt6-translations fixes the following issues: Added qt6-translations.

    first Apr 23, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20603-1 1 CVE

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).

    first Apr 22, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10607-1 1 CVE

    golang-github-prometheus-prometheus-3.11.2-1.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-3.11.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 7.8
    SUSE-SU-2026:1560-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 23, 2026
  • High max 8.8
    openSUSE-SU-2026:20608-1 1 CVE

    Security update for fontforge

    This update for fontforge fixes the following issues: - CVE-2025-15270: lack of proper validation of user-supplied data when parsing SFD files can lead to OOB writes and arbitrary code execution (bsc#1256031).

    first Apr 22, 2026
  • High max 8.3
    openSUSE-SU-2026:20607-1 7 CVEs

    Security update for erlang

    This update for erlang fixes the following issues: Security issues fixed: - CVE-2026-21620: improper isolation and compartmentalization can lead to TFTP relative path traversal and remote arbitrary reads/writes (bsc#1258663). - CVE-2026-23941: improper handli…

    first Apr 22, 2026
  • Medium max 6.7
    openSUSE-SU-2026:20613-1 1 CVE

    Security update for libcap

    This update for libcap fixes the following issues: - CVE-2026-4878: local privilege escalation through file capability injection due to TOCTOU race condition in `cap_set_file()` (bsc#1261809).

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20609-1 2 CVEs

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: Update to version 20250506.01 (bsc#1243254, bsc#1243505). Security issues fixed: - CVE-2024-45337: golang.org/x/crypto/ssh: misuse of the ServerConfig.PublicKeyCallback callback can lead to author…

    first Apr 22, 2026