Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings uyuni-tools: - Version 5.1.26-0 * Fixed applying P…

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings uyuni-tools: - Version 5.1.26-0 * Fixed applying P…

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security issues fixed: * CVE-2026-31958: Security patch for Salt vendored tornado: Added limits on multipart form data parsing (bsc#1259554) - Added x86_64_v2 as a possible rpm package architecture -…

    first Apr 21, 2026
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to version 22.22.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…

    first Apr 21, 2026
  • Unscored

    Security update for podman

    This update for podman rebuilds it against the current go 1.25 security release.

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 20, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Backport security patch for Salt vendored tornado (bsc#1259554): * CVE-2026-31958: Add limits on multipart form data parsing - Add x86_64_v2 as a possible rpm package architecture - Make users with b…

    first Apr 21, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 21, 2026
  • High max 7.1

    flatpak-builder-1.4.8-1.1 on GA media

    These are all security issues fixed in the flatpak-builder-1.4.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 21, 2026
  • Medium max 6.5

    cups-2.4.17-1.1 on GA media

    These are all security issues fixed in the cups-2.4.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • Critical max 9.3

    Security update for flatpak

    This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options (bsc#1261769). - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation (bsc#1261770…

    first Apr 21, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-39998: scsi: target: target_core_configfs: Add length check to avoid buffer overflow (bsc#1252073). - CVE-2025-40253: s390/ct…

    first Apr 20, 2026
  • High max 7.3

    Security update for ncurses

    This update for ncurses fixes the following issue: - CVE-2025-69720: buffer overflow in function `analyze_string()`of `progs/infocmp.c` (bsc#1259924).

    first Apr 20, 2026
  • High max 8.8

    kissfft-131.2.0-2.1 on GA media

    These are all security issues fixed in the kissfft-131.2.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 7.5

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261209).

    first Apr 20, 2026
  • High max 7.5

    Security update for libpng15

    This update for libpng15 fixes the following issues: - CVE-2026-34757: use-after-free in `png_set_PLTE`, `png_set_tRNS` and `png_set_hIST` can lead to information disclosure and data corruption (bsc#1261957). - CVE-2026-33416: use-after-free via pointer alias…

    first Apr 20, 2026
  • High max 7.5

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issue: - CVE-2026-4046: assertion failure when converting inputs may be used to remotely crash an application (bsc#1261209).

    first Apr 20, 2026
  • Critical max 9.8

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers golang-github-prometheus-prometheus: - Security issues fixed: * CVE-2026-27606: Fixed arbitrary file write vi…

    first Apr 21, 2026
  • High max 8.7

    Security update 5.1.3 for Multi-Linux Manager Client Tools

    This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Internal changes to fix build issues with no impact for customers spacecmd: - Version 5.1.13-0 * Updated translation strings venv-salt-minion: - Security issues fixed: * CVE-2…

    first Apr 21, 2026
  • Low max 2.3

    libtree-sitter0_26-0.26.8-1.1 on GA media

    These are all security issues fixed in the libtree-sitter0_26-0.26.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion (bsc#1258790). - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446). - CVE-2…

    first Apr 20, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 21, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issues: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • Medium max 4.0

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue: - CVE-2026-33535: Out-of-Bounds write of a zero byte in X11 display interaction (bsc#1260874).

    first Apr 20, 2026
  • Unscored

    Security update for containerd

    This update for containerd rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Medium max 6.0

    Security update for python

    This update for python fixes the following issue: - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970).

    first Apr 20, 2026
  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • High max 8.8

    libcoap-devel-4.3.5b-1.1 on GA media

    These are all security issues fixed in the libcoap-devel-4.3.5b-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Critical max 9.2

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via various options (bsc#1261…

    first Apr 15, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 18, 2026
  • High max 8.0

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 18, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 17, 2026
  • Medium max 5.9

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2026-34956: invalid memory access via crafted FTP payloads in userspace conntrack flows specifying the FTP alg handler (bsc#1261273).

    first Apr 20, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • Medium max 6.9

    python311-PyPDF2-2.11.1-9.1 on GA media

    These are all security issues fixed in the python311-PyPDF2-2.11.1-9.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 20, 2026
  • Medium max 4.0

    haproxy-3.3.6+git91.af5637e93-1.1 on GA media

    These are all security issues fixed in the haproxy-3.3.6+git91.af5637e93-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 20, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes one security issue The following security issue was fixed: - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859).

    first Apr 20, 2026