Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2026-23074…

    first Apr 13, 2026
  • High max 8.1

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…

    first Apr 13, 2026
  • High max 7.0

    Security update for python312

    This update for python312 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-3479: improper resource argument val…

    first Apr 13, 2026
  • High max 8.1

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL deref…

    first Apr 13, 2026
  • High max 8.9

    oci-cli-3.76.2-1.1 on GA media

    These are all security issues fixed in the oci-cli-3.76.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 13, 2026
  • High max 8.4

    helm-4.1.4-2.1 on GA media

    These are all security issues fixed in the helm-4.1.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-71120…

    first Apr 13, 2026
  • Medium max 6.9

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read (bsc#1258765). - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow (bsc#1259456).

    first Apr 13, 2026
  • High max 7.5

    Security update for nodejs24

    This update for nodejs24 fixes the following issues: - Update to 24.14.1 - CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths and can cause a denial of service (bsc#1256576). - CVE-2026-21710: u…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255235). - CVE-2025-39973…

    first Apr 12, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). …

    first Apr 12, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.167 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…

    first Apr 12, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregiste…

    first Apr 12, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unr…

    first Apr 12, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780). …

    first Apr 12, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…

    first Apr 12, 2026
  • Medium max 4.9

    python311-biopython-1.87-1.1 on GA media

    These are all security issues fixed in the python311-biopython-1.87-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 12, 2026
  • Medium max 6.7

    libcap-devel-2.78-1.1 on GA media

    These are all security issues fixed in the libcap-devel-2.78-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 12, 2026
  • Medium max 5.9

    libopenvswitch-3_7-0-3.7.1-33.1 on GA media

    These are all security issues fixed in the libopenvswitch-3_7-0-3.7.1-33.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • High max 8.1

    libopenssl-3-devel-3.5.3-4.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.5.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Medium max 6.9

    python311-cryptography-46.0.7-1.1 on GA media

    These are all security issues fixed in the python311-cryptography-46.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Critical max 9.8

    cockpit-360-1.1 on GA media

    These are all security issues fixed in the cockpit-360-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Medium max 4.8

    helm3-3.20.2-1.1 on GA media

    These are all security issues fixed in the helm3-3.20.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Critical max 9.8

    chromedriver-147.0.7727.55-1.1 on GA media

    These are all security issues fixed in the chromedriver-147.0.7727.55-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 11, 2026
  • Critical max 9.8

    perl-XML-Parser-2.570.0-1.1 on GA media

    These are all security issues fixed in the perl-XML-Parser-2.570.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • High max 8.4

    helm-4.1.4-1.1 on GA media

    These are all security issues fixed in the helm-4.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • None max 0.0

    crun-1.27-1.1 on GA media

    These are all security issues fixed in the crun-1.27-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • Critical max 9.8

    go1.26-1.26.2-1.1 on GA media

    These are all security issues fixed in the go1.26-1.26.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • High max 8.1

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL deref…

    first Apr 10, 2026
  • Critical max 9.1

    clusterctl-1.12.5-1.1 on GA media

    These are all security issues fixed in the clusterctl-1.12.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026
  • High max 8.1

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…

    first Apr 10, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256780…

    first Apr 10, 2026
  • High max 8.1

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL derefer…

    first Apr 10, 2026
  • Critical max 9.2

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2026-25547: brace-expansion: unbounded brace range expansion can lead to excessive CPU and memory consumption and may crash a Node.js process (bsc#1257836). - CVE-2026-26996: minimatch: ReDoS wh…

    first Apr 10, 2026
  • High max 8.5

    Security update for tigervnc

    This update for tigervnc fixes the following issues: - CVE-2026-34352: Fixed permissions to prevent other users from observing the screen, or modifying what is sent to the client. (bsc#1260871)

    first Apr 10, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252036). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregi…

    first Apr 10, 2026
  • Critical max 9.0

    libradcli10-1.5.0-1.1 on GA media

    These are all security issues fixed in the libradcli10-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 10, 2026