Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • High max 7.4
    openSUSE-SU-2026:20604-1 1 CVE

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2026-35535: unhandled failure of `setuid`, `setgid` or `setgroups` calls during a mailer privilege drop allows for local privilege escalation (bsc#1261420).

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20612-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 22, 2026
  • High max 7.5
    openSUSE-SU-2026:20606-1 16 CVEs

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-32259: stack out-of-bounds write due to a memory allocation failure in the sixel encoder can lead to a crash (bsc#1259612). - CVE-2026-32636: out-of-bounds write of a single zero byte due to b…

    first Apr 22, 2026
  • Medium max 6.8
    openSUSE-SU-2026:20610-1 1 CVE

    Security update for librsvg

    This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922).

    first Apr 22, 2026
  • Medium max 4.2
    openSUSE-SU-2026:10606-1 1 CVE

    frr-10.5.1-3.1 on GA media

    These are all security issues fixed in the frr-10.5.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 7.5
    SUSE-SU-2026:1576-1 1 CVE

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

    first Apr 23, 2026
  • High max 8.4
    SUSE-SU-2026:1571-1 1 CVE

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issue: - CVE-2026-40706: heap buffer overflow in ntfs_build_permissions_posix() in acls.c (bsc#1262216).

    first Apr 23, 2026
  • High max 8.6
    openSUSE-SU-2026:20605-1 4 CVEs

    Security update for openexr

    This update for openexr fixes the following issues: - CVE-2026-34379: misaligned memory write during file decoding can cause a denial of service (bsc#1261621). - CVE-2026-34380: lack of proper check can lead to integer overflow in image decoding (bsc#1261622)…

    first Apr 22, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10608-1 1 CVE

    libXpm-devel-3.5.18-2.1 on GA media

    These are all security issues fixed in the libXpm-devel-3.5.18-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 7.5
    openSUSE-SU-2026:10605-1 1 CVE

    dnsmasq-2.92-3.1 on GA media

    These are all security issues fixed in the dnsmasq-2.92-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • High max 7.8
    SUSE-SU-2026:1575-1 7 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port …

    first Apr 23, 2026
  • Medium max 4.0
    SUSE-SU-2026:1568-1 1 CVE

    Security update for haproxy

    This update for haproxy fixes the following issue: - CVE-2026-33555: Request smuggling via HTTP/3 parser desynchronization (bsc#1262103).

    first Apr 23, 2026
  • High max 8.8
    SUSE-SU-2026:1574-1 7 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform loc…

    first Apr 23, 2026
  • Critical max 9.1
    SUSE-SU-2026:1572-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 23, 2026
  • High max 8.1
    SUSE-SU-2026:1577-1 5 CVEs

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…

    first Apr 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:1573-1 40 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-6879…

    first Apr 23, 2026
  • Medium max 6.5
    SUSE-SU-2026:1565-1 6 CVEs

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2026-0964: improper sanitation of paths received from SCP servers can cause path traversal (bsc#1258049). - CVE-2026-0965: possible denial of service when parsing unexpected configuration files (bsc#125…

    first Apr 23, 2026
  • Critical max 10.0
    SUSE-SU-2026:1567-1 1 CVE

    Security update for perl

    This update for perl fixes the following issue: - CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow (bsc#1262486).

    first Apr 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:1555-1 7 CVEs

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499). - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671). - CVE-2026-2…

    first Apr 22, 2026
  • Critical max 9.8
    SUSE-SU-2026:1556-1 6 CVEs

    Security update for libraw

    This update for libraw fixes the following issues: - CVE-2026-5342: out-of-bounds read via `LibRaw::nikon_load_padded_packed_raw` (bsc#1261499). - CVE-2026-20884: integer overflow and heap buffer overflow via `deflate_dng_load_raw` (bsc#1261671). - CVE-2026-2…

    first Apr 22, 2026
  • High max 8.8
    SUSE-SU-2026:1563-1 6 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#125…

    first Apr 23, 2026
  • High max 8.1
    openSUSE-SU-2026:10609-1 1 CVE

    libruby4_0-4_0-4.0.3-1.1 on GA media

    These are all security issues fixed in the libruby4_0-4_0-4.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 23, 2026
  • Critical max 9.1
    SUSE-SU-2026:1558-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 22, 2026
  • High max 8.8
    SUSE-SU-2026:1557-1 6 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform loc…

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20595-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 21, 2026
  • Medium max 4.5
    openSUSE-SU-2026:20592-1 6 CVEs

    Security update for ghostscript

    This update for ghostscript fixes the following issues: Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355). - CVE-2025-59799: a large size value can cause…

    first Apr 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:21237-1 49 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…

    first Apr 20, 2026
  • Medium max 5.9
    SUSE-FU-2026:21232-1 1 CVE

    Feature update for libgcrypt, libgpg-error

    This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 (jsc#PED-15059): * New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTL_FIPS_SERVICE_INDICATOR control code. - Make SHA-1 n…

    first Apr 17, 2026
  • Medium max 5.1
    SUSE-SU-2026:21239-1 1 CVE

    Security update for libpng16

    This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).

    first Apr 21, 2026
  • Medium max 4.0
    openSUSE-SU-2026:20591-1 1 CVE

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: out-of-bounds write of a zero byte in the X11 `display` interaction path can lead to a crash (bsc#1260874).

    first Apr 21, 2026
  • Medium max 5.1
    openSUSE-SU-2026:20593-1 1 CVE

    Security update for libpng16

    This update for libpng16 fixes the following issue: - CVE-2026-34757: libpng: Information disclosure and data corruption via use-after-free vulnerability (bsc#1261957).

    first Apr 21, 2026
  • High max 7.4
    openSUSE-SU-2026:20590-1 1 CVE

    Security update for gnome-remote-desktop

    This update for gnome-remote-desktop fixes the following issues: Update to version 48.3. Security issues fixed: - CVE-2025-5024: an unauthenticated attacker can exhaust system resources (bsc#1244053). Other updates and bugfixes: - Version update to 48.3: + Fi…

    first Apr 21, 2026
  • High max 7.4
    SUSE-SU-2026:21235-1 3 CVEs

    Security update for qemu

    This update for qemu fixes the following issues: Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCM_INFO requests sent from the guest (bsc#1259079). - CVE-2026-3195: heap out-of-bou…

    first Apr 20, 2026
  • High max 7.5
    SUSE-SU-2026:21231-1 1 CVE

    Security update for freeipmi

    This update for freeipmi fixes the following issue: - CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of malformed payloads/responses (bsc#1260414).

    first Apr 17, 2026
  • High max 7.5
    SUSE-SU-2026:1539-1 1 CVE

    Security update for gdk-pixbuf

    This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (bsc#1261210).

    first Apr 22, 2026
  • High max 7.7
    openSUSE-SU-2026:10602-1 3 CVEs

    glances-common-4.5.4-1.1 on GA media

    These are all security issues fixed in the glances-common-4.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2026
  • High max 7.5
    SUSE-SU-2026:1549-1 1 CVE

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

    first Apr 22, 2026
  • Critical max 9.3
    openSUSE-SU-2026:10604-1 1 CVE

    ruby4.0-rubygem-rack-session-2.1.2-1.1 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rack-session-2.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2026
  • Unscored
    SUSE-SU-2026:1540-1 0 CVEs

    Security update for podman

    This update for podman rebuilds it against the current go 1.25 security release.

    first Apr 22, 2026
  • Medium max 5.0
    openSUSE-SU-2026:10600-1 1 CVE

    csync2-2.0+git.1600444747.83b3644-3.1 on GA media

    These are all security issues fixed in the csync2-2.0+git.1600444747.83b3644-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 22, 2026