Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • High max 8.4
    openSUSE-SU-2026:10555-1 1 CVE

    libsdb2_4_2-6.1.4-1.1 on GA media

    These are all security issues fixed in the libsdb2_4_2-6.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • None max 0.0
    openSUSE-SU-2026:10552-1 1 CVE

    python311-3.11.15-5.1 on GA media

    These are all security issues fixed in the python311-3.11.15-5.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10551-1 1 CVE

    perl-YAML-Syck-1.440.0-1.1 on GA media

    These are all security issues fixed in the perl-YAML-Syck-1.440.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • Low max 3.7
    SUSE-SU-2026:1370-1 1 CVE

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Apr 15, 2026
  • High max 7.8
    openSUSE-SU-2026:10557-1 5 CVEs

    xwayland-24.1.9-2.1 on GA media

    These are all security issues fixed in the xwayland-24.1.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • High max 8.6
    SUSE-SU-2026:1367-1 1 CVE

    Security update for mariadb

    This update for mariadb fixes the following issues: Update to version 11.8.6. - https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6 - https://mariadb.com/docs/release-notes/community-server/changelogs/11.8/11.8.6 Security issues fixed: - CVE-2…

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1366-1 1 CVE

    Security update for bind

    This update for bind fixes the following issues: - CVE-2026-1519: high CPU load during insecure delegation validation due to excessive NSEC3 iterations (bsc#1260805).

    first Apr 15, 2026
  • Medium max 4.3
    openSUSE-SU-2026:10550-1 2 CVEs

    apache-pdfbox-2.0.36-1.1 on GA media

    These are all security issues fixed in the apache-pdfbox-2.0.36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 15, 2026
  • High max 8.8
    SUSE-SU-2026:1364-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0. Security issues fixed: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted…

    first Apr 15, 2026
  • High max 7.6
    SUSE-SU-2026:1368-1 2 CVEs

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expan…

    first Apr 15, 2026
  • High max 7.0
    SUSE-SU-2026:1354-1 7 CVEs

    Security update for python313

    This update for python313 fixes the following issues: - Update to v3.13.13 - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-2297: cpython: incorrectly handled hook in FileLoader …

    first Apr 15, 2026
  • High max 8.7
    SUSE-SU-2026:1353-1 2 CVEs

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: Upidate to 4.1.132: - CVE-2026-33870: incorrectly parses quoted strings in HTTP/1.1 can lead to request smuggling (bsc#1261031). - CVE-2026-33871: sending a flood of CONTINUATION frames can lea…

    first Apr 15, 2026
  • Critical max 9.2
    SUSE-SU-2026:1347-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow fo…

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1351-1 4 CVEs

    Security update for bind

    This update for bind fixes the following issues: Security issues: - CVE-2026-1519: maliciously crafted DNSSEC-validated zone can lead to denial of service (bsc#1260805). - CVE-2026-3104: memory leak in code preparing DNSSEC proofs of non-existence allows for …

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1369-1 2 CVEs

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-4437: incorrect DNS response parsing via crafted DNS server response (bsc#1260078). - CVE-2026-4438: invalid DNS hostname returned via gethostbyaddr functions (bsc#1260082).

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1350-1 1 CVE

    Security update for nghttp2

    This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).

    first Apr 15, 2026
  • High max 8.5
    SUSE-SU-2026:1360-1 1 CVE

    Security update for tigervnc

    This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)

    first Apr 15, 2026
  • Medium max 6.5
    SUSE-SU-2026:1344-1 6 CVEs

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2026-3731: denial of service via out-of-bounds read in SFTP extension name handler (bsc#1259377). - CVE-2026-0964: SCP protocol path traversal in `ssh_scp_pull_request()` (bsc#1258049). - CVE-2026-0965:…

    first Apr 15, 2026
  • High max 7.4
    SUSE-SU-2026:1359-1 1 CVE

    Security update for sudo

    This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).

    first Apr 15, 2026
  • High max 7.0
    SUSE-SU-2026:1345-1 5 CVEs

    Security update for python36

    This update for python36 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-3479: python: improper resource argument validation can allow path traversal…

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1363-1 7 CVEs

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: Update to version 20.20.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…

    first Apr 15, 2026
  • High max 8.7
    SUSE-SU-2026:1337-1 1 CVE

    Security update for rust1.92

    This update for rust1.92 fixes the following issues: - CVE-2026-31812: Denial of service via crafted QUIC initial packet (bsc#1259623).

    first Apr 15, 2026
  • High max 8.8
    SUSE-SU-2026:1355-1 2 CVEs

    Security update for rubygem-bundler

    This update for rubygem-bundler fixes the following issues: Updated to version 2.2.34. - CVE-2020-36327: Bundler chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen (bsc#1185…

    first Apr 15, 2026
  • High max 7.8
    SUSE-SU-2026:1342-1 7 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057). - CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#12…

    first Apr 15, 2026
  • Medium max 5.1
    SUSE-SU-2026:1338-1 1 CVE

    Security update for giflib

    This update for giflib fixes the following issue: - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).

    first Apr 15, 2026
  • High max 7.8
    SUSE-SU-2026:1332-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…

    first Apr 14, 2026
  • High max 7.8
    SUSE-SU-2026:1333-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…

    first Apr 14, 2026
  • High max 7.8
    SUSE-SU-2026:1330-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…

    first Apr 14, 2026
  • High max 8.8
    SUSE-SU-2026:1361-1 7 CVEs

    Security update for himmelblau

    This update for himmelblau fixes the following issues: Update to version 2.3.9+git0.a9fd29b; (jsc#PED-14511): - CVE-2026-34397: Fix LPE due to name collision during NSS fake-primary group lookup (bsc#1261324). - CVE-2026-31979: Fix race condition when accessi…

    first Apr 15, 2026
  • High max 7.8
    SUSE-SU-2026:1329-1 5 CVEs

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerF…

    first Apr 14, 2026
  • None max 0.0
    SUSE-SU-2026:1365-1 1 CVE

    Security update for python

    This update for python fixes the following issues: - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data` can allow path traversal (bsc#1259989).

    first Apr 15, 2026
  • High max 7.0
    SUSE-SU-2026:1349-1 15 CVEs

    Security update for python311

    This update for python311 fixes the following issues: - Updated to Python 3.11.15 - CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables (bsc#1252974). - CVE-2…

    first Apr 15, 2026
  • High max 8.1
    SUSE-SU-2026:1343-1 1 CVE

    Security update for Mesa

    This update for Mesa fixes the following issue: - CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).

    first Apr 15, 2026
  • High max 7.5
    SUSE-SU-2026:1371-1 7 CVEs

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: Update to version 20.20.2. - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request (bsc#1260494). - CVE-…

    first Apr 15, 2026
  • Medium max 6.5
    SUSE-SU-2026:1356-1 1 CVE

    Security update for nfs-utils

    This update for nfs-utils fixes the following issue: Security fixes: - CVE-2025-12801: rpc.mountd allows a NFSv3 client to escalate their privileges and access subdirectories and subtrees of an exported directory (bsc#1259204). Other fixes: - Split from nfs-u…

    first Apr 15, 2026
  • High max 7.8
    SUSE-SU-2026:1331-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncT…

    first Apr 14, 2026
  • Medium max 4.0
    SUSE-SU-2026:1352-1 3 CVEs

    Security update for expat

    This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…

    first Apr 15, 2026
  • High max 7.8
    SUSE-SU-2026:1328-1 5 CVEs

    Security update for xwayland

    This update for xwayland fixes the following issues: - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerF…

    first Apr 14, 2026
  • High max 7.8
    SUSE-SU-2026:1335-1 5 CVEs

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues: - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922). - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923). - CVE-2026-34001: XSYNC Use-after-free in miSyncT…

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10549-1 10 CVEs 1 exploited

    tomcat11-11.0.21-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026