Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • High max 7.5
    openSUSE-SU-2026:20404-1 4 CVEs

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 20, 2026
  • High max 7.8
    openSUSE-SU-2026:20402-1 2 CVEs

    Security update for gstreamer-plugins-ugly

    This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2026-2920: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259367). - CVE-2026-2922: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Cod…

    first Mar 19, 2026
  • High max 7.8
    openSUSE-SU-2026:20428-1 4 CVEs

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-4150: Fixed PSD file parsing integer overflow vulnerability (bsc#1259979) = CVE-2026-4151: Fixed ANI file parsing integer overflow vulnerability (bsc#1259983) - CVE-2026-4153: Fixed …

    first Mar 25, 2026
  • Critical max 9.4
    openSUSE-SU-2026:20398-1 1 CVE

    Security update for keylime

    This update for keylime fixes the following issues: - Update to version 7.14.0+0 (CVE-2026-1709, bsc#1257895): - CVE-2026-1709: Fixed an authentication bypass which may allow unauthorized administrative operations due to missing client-side TLS authentication…

    first Mar 19, 2026
  • Medium max 5.4
    openSUSE-SU-2026:20403-1 3 CVEs

    Security update for vim

    This update for vim fixes the following issues: - Update Vim to version 9.2.0110 that includes security fixes for: * CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). * CVE-2026-26269: stack buffer …

    first Mar 20, 2026
  • Low max 2.1
    openSUSE-SU-2026:20397-1 1 CVE

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).

    first Mar 19, 2026
  • High max 7.5
    openSUSE-SU-2026:20412-1 4 CVEs

    Security update for salt

    This update for salt fixes the following issues: Changes in salt: - Security issues fixed: * CVE-2025-67724: fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726…

    first Mar 24, 2026
  • Medium max 5.5
    openSUSE-SU-2026:20410-1 9 CVEs

    Security update for exiv2

    This update for exiv2 fixes the following issues: Update to exiv2 0.28.8: - CVE-2024-24826: out-of-bounds read in QuickTimeVideo: NikonTagsDecoder (bsc#1219870). - CVE-2024-25112: denial of service due to unbounded recursion in QuickTimeVideo: multipleEntries…

    first Mar 23, 2026
  • High max 7.2
    openSUSE-SU-2026:20401-1 2 CVEs

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …

    first Mar 19, 2026
  • High max 8.8
    openSUSE-SU-2026:20408-1 5 CVEs

    Security update for postgresql18

    This update for postgresql18 fixes the following issues: - Update to version 18.3. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…

    first Mar 20, 2026
  • Medium max 6.5
    openSUSE-SU-2026:20396-1 2 CVEs

    Security update for librsvg

    This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).

    first Mar 19, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20399-1 1 CVE

    Security update for libsodium

    This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070).

    first Mar 19, 2026
  • Low max 1.7
    openSUSE-SU-2026:10454-1 1 CVE

    python311-cryptography-46.0.6-1.1 on GA media

    These are all security issues fixed in the python311-cryptography-46.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.8
    openSUSE-SU-2026:10457-1 2 CVEs

    xen-4.21.1_02-1.1 on GA media

    These are all security issues fixed in the xen-4.21.1_02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.5
    openSUSE-SU-2026:10448-1 4 CVEs

    bind-9.20.21-1.1 on GA media

    These are all security issues fixed in the bind-9.20.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Critical max 10.0
    SUSE-SU-2026:1126-1 38 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083): - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Gr…

    first Mar 27, 2026
  • Critical max 9.8
    SUSE-SU-2026:1125-1 9 CVEs

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: …

    first Mar 27, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10452-1 1 CVE

    libjavamapscript-8.6.1-1.1 on GA media

    These are all security issues fixed in the libjavamapscript-8.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Low max 3.6
    openSUSE-SU-2026:10449-1 1 CVE

    gsl-2.8-5.1 on GA media

    These are all security issues fixed in the gsl-2.8-5.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 8.4
    openSUSE-SU-2026:10456-1 1 CVE

    tailscale-1.96.4-1.1 on GA media

    These are all security issues fixed in the tailscale-1.96.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Medium max 6.9
    SUSE-SU-2026:1124-1 2 CVEs

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issues: - CVE-2026-32853: crafted FramebufferUpdate message can lead to information disclosure or denial of service (bsc#1260431). - CVE-2026-32854: crafted HTTP requests can cause a denial of service (bsc#1260…

    first Mar 27, 2026
  • High max 7.8
    SUSE-SU-2026:1130-1 5 CVEs

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47110: Fixed possible memory corruption when restoring from hibernation in x86/kvm (bsc#1221532). - CVE-2025-21738: at…

    first Mar 27, 2026
  • Medium max 4.4
    openSUSE-SU-2026:10455-1 1 CVE

    python311-requests-2.33.0-1.1 on GA media

    These are all security issues fixed in the python311-requests-2.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • High max 7.6
    openSUSE-SU-2026:10451-1 2 CVEs

    libpng16-16-1.6.56-1.1 on GA media

    These are all security issues fixed in the libpng16-16-1.6.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Medium max 6.7
    openSUSE-SU-2026:10453-1 2 CVEs

    libpolkit-agent-1-0-127-3.1 on GA media

    These are all security issues fixed in the libpolkit-agent-1-0-127-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Critical max 10.0
    SUSE-SU-2026:1118-1 7 CVEs

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).

    first Mar 27, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10447-1 40 CVEs

    MozillaThunderbird-140.9.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10446-1 1 CVE

    ImageMagick-7.1.2.18-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Critical max 10.0
    openSUSE-SU-2026:10450-1 6 CVEs

    incus-6.23-1.1 on GA media

    These are all security issues fixed in the incus-6.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Critical max 9.3
    SUSE-SU-2026:1129-1 6 CVEs

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing (bsc#1258979). - CVE-2026-26955: Out-of-bounds Write in freerdp (bsc#1258982). - CVE-2026-26965: Out-of-bounds Write in freerdp (bsc#1258985). - C…

    first Mar 27, 2026
  • Critical max 10.0
    SUSE-SU-2026:1127-1 38 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR (MFSA 2026-22, bsc#1260083): - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Gr…

    first Mar 27, 2026
  • Critical max 9.8
    SUSE-SU-2026:20863-1 8 CVEs

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20862-1 8 CVEs

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20859-1 7 CVEs

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20866-1 7 CVEs

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20857-1 8 CVEs

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-38159: wi…

    first Mar 24, 2026
  • High max 7.5
    SUSE-SU-2026:20869-1 1 CVE

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issue: - CVE-2026-32597: validate the `crit` Header Parameter defined in RFC 7515 (bsc#1259616).

    first Mar 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:20856-1 7 CVEs

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: cancel m…

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20858-1 7 CVEs

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:20853-1 8 CVEs

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40258: mpt…

    first Mar 24, 2026