Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Unscored

    Security update for container-suseconnect

    This update for container-suseconnect rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Unscored

    Security update for docker

    This update for docker rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Critical max 9.2

    rclone-1.73.5-1.1 on GA media

    These are all security issues fixed in the rclone-1.73.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 20, 2026
  • Unscored

    Security update for kubernetes

    This update for kubernetes rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Unscored

    Security update for buildah

    This update for buildah rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Unscored

    Security update for buildah

    This update for buildah rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Unscored

    Security update for kubernetes-old

    This update for kubernetes-old rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issue: - CVE-2026-2049: improper validation of the length of user-supplied data when parsing HDR files can lead to a heap buffer overflow (bsc#1259749).

    first Apr 20, 2026
  • Unscored

    Security update for rekor

    This update for rekor rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Unscored

    Security update for runc

    This update for runc rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • Medium max 6.5

    Security update for helm

    This update for helm fixes the following issues: - CVE-2025-55199: crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-35206: files written to unexpected directory via specially crafted Chart(bsc#1261938). Changes for hel…

    first Apr 20, 2026
  • Unscored

    Security update for cosign

    This update for cosign rebuilds it against the current go 1.25 security release.

    first Apr 20, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: - CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). - CVE-2026-23268: apparmor: fix unprivi…

    first Apr 19, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 20, 2026
  • Low max 3.7

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - CVE-2025-11143: Fixed different parsing of invalid URIs (bsc#1259242).

    first Apr 20, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged l…

    first Apr 19, 2026
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to version 22.22.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…

    first Apr 20, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged loc…

    first Apr 19, 2026
  • High max 8.0

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). - CVE-2026-23268: apparmor: fix unprivileged …

    first Apr 20, 2026
  • Low max 3.9

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2025-49010: specially crafted smart card or USB device can lead to a stack buffer overflow write in `GET RESPONSE` (bsc#1261214). - CVE-2025-66037: specially crafted input processed by the `fuzz_pkcs15_…

    first Apr 20, 2026
  • Medium max 6.9

    python311-pypdf-6.10.2-1.1 on GA media

    These are all security issues fixed in the python311-pypdf-6.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 20, 2026
  • Medium max 6.0

    python310-3.10.20-5.1 on GA media

    These are all security issues fixed in the python310-3.10.20-5.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 19, 2026
  • Medium max 6.0

    python315-3.15.0~a8-2.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 19, 2026
  • Medium max 5.3

    python311-jwcrypto-1.5.7-2.1 on GA media

    These are all security issues fixed in the python311-jwcrypto-1.5.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • High max 7.4

    cpp-httplib-devel-0.42.0-1.1 on GA media

    These are all security issues fixed in the cpp-httplib-devel-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • High max 7.4

    jetty-annotations-9.4.58-4.1 on GA media

    These are all security issues fixed in the jetty-annotations-9.4.58-4.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Critical max 9.6

    chromedriver-147.0.7727.101-1.1 on GA media

    These are all security issues fixed in the chromedriver-147.0.7727.101-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Critical max 9.3

    bouncycastle-1.84-1.1 on GA media

    These are all security issues fixed in the bouncycastle-1.84-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Medium max 6.2

    aardvark-dns-1.17.1-1.1 on GA media

    These are all security issues fixed in the aardvark-dns-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • High max 7.5

    skopeo-1.22.1-1.1 on GA media

    These are all security issues fixed in the skopeo-1.22.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • High max 8.7

    python311-Pillow-12.2.0-2.1 on GA media

    These are all security issues fixed in the python311-Pillow-12.2.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • High max 7.5

    tempo-cli-2.10.4-1.1 on GA media

    These are all security issues fixed in the tempo-cli-2.10.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 18, 2026
  • Unscored

    Security update for kernel-livepatch-MICRO-6-0_Update_18

    New livepatch SLE Micro 6.0/6.1 kernel update 18.

    first Apr 13, 2026
  • Critical max 9.2

    Security update for vim

    This update for vim fixes the following issues: - Update to 9.2.0280 - CVE-2026-33412: command injection via newline in glob() (bsc#1259985). - CVE-2026-34714: crafted file can allow code execution (bsc#1261191). - CVE-2026-34982: Vim modeline bypass via vari…

    first Apr 14, 2026
  • Low max 1.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876)

    first Apr 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarf…

    first Apr 13, 2026
  • Medium max 6.5

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2026-24401: Fix unsolicited mDNS response containing a recursive CNAME record. (bsc#1257235)

    first Apr 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591). - CVE-2025-39817: efivarf…

    first Apr 13, 2026
  • Critical max 9.1

    Security update for ignition

    This update for ignition fixes the following issue: - CVE-2026-33186: Fixed an authorization bypass due to improper validation of the HTTP/2: path pseudo-header (bsc#1260251).

    first Apr 14, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).

    first Apr 10, 2026