Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 7.0

    python310-3.10.20-3.1 on GA media

    These are all security issues fixed in the python310-3.10.20-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • Medium max 5.7

    opensc-0.27.1-1.1 on GA media

    These are all security issues fixed in the opensc-0.27.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • Critical max 9.1

    ignition-2.26.0-3.1 on GA media

    These are all security issues fixed in the ignition-2.26.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • High max 8.4

    conftest-0.67.1-2.1 on GA media

    These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • High max 7.0

    python312-3.12.13-4.1 on GA media

    These are all security issues fixed in the python312-3.12.13-4.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • Low max 3.3

    python311-Pygments-2.20.0-2.1 on GA media

    These are all security issues fixed in the python311-Pygments-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • Medium max 5.3

    dnsdist-2.0.3-1.1 on GA media

    These are all security issues fixed in the dnsdist-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026
  • Critical max 10.0

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.9 (MFSA 2026-24, bsc#1260083): - CVE-2026-3889: Spoofing issue in Thunderbird - CVE-2026-4371: Out of bounds read in IMAP parsing - CVE-2026-4684: Race condition,…

    first Apr 1, 2026
  • High max 7.5

    tinyproxy-1.11.3-2.1 on GA media

    These are all security issues fixed in the tinyproxy-1.11.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 8.5

    libXvnc-devel-1.16.1-2.1 on GA media

    These are all security issues fixed in the libXvnc-devel-1.16.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 7.0

    python315-3.15.0~a7-3.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a7-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • Medium max 5.3

    python311-ecdsa-0.19.2-1.1 on GA media

    These are all security issues fixed in the python311-ecdsa-0.19.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • High max 8.4

    ovmf-202602-6.1 on GA media

    These are all security issues fixed in the ovmf-202602-6.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • Medium max 4.0

    expat-2.7.5-1.1 on GA media

    These are all security issues fixed in the expat-2.7.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • Medium max 5.1

    ImageMagick-7.1.2.18-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.18-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 31, 2026
  • Critical max 9.8

    Security update for perl-XML-Parser

    This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in `parse_stream` when processing UTF-8 input streams (bsc#1259901). - CVE-2006-10003: off-by-one heap buffer overflow in `st_serial_stack` (bsc#1259902).

    first Mar 31, 2026
  • High max 8.8
    SUSE-SU-2026:1150-1 25 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.52.0: - CVE-2023-43010: processing maliciously crafted web content may lead to memory corruption (bsc#1259950). - CVE-2025-31223: processing maliciously crafted web content may lead t…

    first Mar 30, 2026
  • Critical max 9.3

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (bsc#1258985). - C…

    first Mar 31, 2026
  • Medium max 4.0

    Security update for expat

    This update for expat fixes the following issues: - CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). - CVE-2026-32777: denial of service due to infinite loop in DTD co…

    first Mar 31, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 31, 2026
  • Medium max 6.9

    Security update for libjxl

    This update for libjxl fixes the following issue: - CVE-2024-11498: Resource exhaustion via Stack overflow in libjxl (bsc#1233785).

    first Mar 31, 2026
  • Critical max 9.8

    Security update for perl-XML-Parser

    This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in `parse_stream` when processing UTF-8 input streams (bsc#1259901). - CVE-2006-10003: off-by-one heap buffer overflow in `st_serial_stack` (bsc#1259902).

    first Mar 31, 2026
  • Critical max 9.8

    Security update for net-snmp

    This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491)

    first Mar 31, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-38159: wi…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-38159: wi…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 25, 2026
  • High max 7.5

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues: Update to PyJWT 2.12.1: - CVE-2024-53861: prevent partial matching of the Issuer field (bsc#1234038). - CVE-2026-32597: validate the crit Header Parameter defined in RFC 7515 (bsc#1259616). Changelog: U…

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084). - CVE-2025-21738: ata: libata-sff: Ensure that we cannot write …

    first Mar 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026