Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • Critical max 9.8
    SUSE-SU-2026:1046-1 10 CVEs

    Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …

    first Mar 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:1044-1 9 CVEs

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 25, 2026
  • Medium max 6.9
    openSUSE-SU-2026:10433-1 2 CVEs

    LibVNCServer-devel-0.9.15-2.1 on GA media

    These are all security issues fixed in the LibVNCServer-devel-0.9.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:1083-1 8 CVEs

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…

    first Mar 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:1045-1 2 CVEs

    Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-6828…

    first Mar 25, 2026
  • High max 8.1
    SUSE-SU-2026:1068-1 1 CVE

    Security update for pgvector

    This update for pgvector fixes the following issue: Update to pgvector 0.8.2: - CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945). Changelog: * Fixed Index Searches in EXPLAIN output for Postgres 18

    first Mar 26, 2026
  • Low max 3.7
    openSUSE-SU-2026:20394-1 1 CVE

    Security update for mumble

    This update for mumble fixes the following issues: Changes in mumble: - CVE-2025-71264: (opus) incorrect size calculations allow for an out-of-bounds array access and can lead to a client crash (boo#1259721) - Update to version 1.5.857: * fixes for undesired …

    first Mar 18, 2026
  • High max 8.2
    openSUSE-SU-2026:20384-1 9 CVEs

    Security update for libsoup

    This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion (bsc#1252555). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Disc…

    first Mar 18, 2026
  • High max 8.7
    openSUSE-SU-2026:20393-1 1 CVE

    Security update for python-simpleeval

    This update for python-simpleeval fixes the following issues: Changes in python-simpleeval: - CVE-2026-32640: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox (bsc#1259685)

    first Mar 18, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20392-1 3 CVEs

    Security update for python-Authlib

    This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-27962: JWS `deserialize_compact()` allows for signature bypass by accepting user-controlled embedded JWK as verification key (bsc#1259738) - CVE-2026-28490: crypt…

    first Mar 18, 2026
  • Critical max 10.0
    openSUSE-SU-2026:20391-1 52 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.8.1 ESR * Add mail.openpgp.load_untested_gpgme_version to load untested GPGME version - Mozilla Thunderbird 140.8.0 ESR MFSA 2026-17 (boo#1…

    first Mar 18, 2026
  • High max 8.2
    openSUSE-SU-2026:20390-1 2 CVEs

    Security update for protobuf

    This update for protobuf fixes the following issues: Security fixes: - CVE-2025-4565: Fixed parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or messages that could lead to crash due to RecursionError (bsc#1244663).…

    first Mar 18, 2026
  • High max 8.8
    openSUSE-SU-2026:20388-1 4 CVEs

    Security update for postgresql17

    This update for postgresql17 fixes the following issues: - Update to version 17.9. (bsc#1258754) - CVE-2026-2003: Guard against unexpected dimensions of oidvector/int2vector (bsc#1258008) - CVE-2026-2004: Harden selectivity estimators against being attached t…

    first Mar 18, 2026
  • High max 7.0
    openSUSE-SU-2026:20387-1 2 CVEs

    Security update for busybox

    This update for busybox fixes the following issues: Changes in busybox: - CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. (bsc#1258163) - CVE-2026-26158: Fixed arbitrary file modification and privi…

    first Mar 18, 2026
  • Medium max 5.9
    openSUSE-SU-2026:20386-1 9 CVEs

    Security update for cosign

    This update for cosign fixes the following issues: Update to version 3.0.5: - CVE-2026-24122: Fixed improper validation of certificates that outlive expired CA certificates (bsc#1258542) - CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize r…

    first Mar 18, 2026
  • High max 8.7
    openSUSE-SU-2026:20385-1 2 CVEs

    Security update for libjxl

    This update for libjxl fixes the following issues: Update to libjxl 0.11.2: - CVE-2025-12474: a specially crafted file can cause the decoder to read pixel data from uninitialized allocated memory (bsc#1258090). - CVE-2026-1837: a specially crafted file can ca…

    first Mar 18, 2026
  • Critical max 9.8
    openSUSE-SU-2026:20383-1 1 CVE

    Security update for net-snmp

    This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).

    first Mar 18, 2026
  • Medium max 6.8
    openSUSE-SU-2026:20380-1 1 CVE

    Security update for snpguest

    This update for snpguest fixes the following issues: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257927). - Update to version 0.10.0 (bsc#1257877): * chore: updating tool version to 0.1…

    first Mar 17, 2026
  • High max 8.3
    openSUSE-SU-2026:20378-1 3 CVEs

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020) - CVE-2025-28162: Fixed a memory leaks when running `pngimage`. (bsc#1257364) - CVE-2025-28164: Fixed a …

    first Mar 17, 2026
  • Medium max 6.8
    openSUSE-SU-2026:20377-1 1 CVE

    Security update for python-maturin

    This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257918).

    first Mar 17, 2026
  • Medium max 6.7
    SUSE-SU-2026:20822-1 2 CVEs

    Security update for systemd

    This update for systemd fixes the following issues: Security issues: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method (bsc#1259650). - CVE-2026-29111: local unprivileged user can trigger an assert in systemd…

    first Mar 24, 2026
  • High max 7.5
    SUSE-SU-2026:20821-1 1 CVE

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issue: - CVE-2026-30922: Denial of Service via Unbounded Recursion (bsc#1259803).

    first Mar 24, 2026
  • High max 7.5
    SUSE-SU-2026:20820-1 4 CVEs

    Security update for salt

    This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…

    first Mar 24, 2026
  • Medium max 5.9
    SUSE-SU-2026:20194-1 2 CVEs

    Security update for postgresql17 and postgresql18

    This update for postgresql17 and postgresql18 fixes the following issues: Changes in postgresql17, postgresql18: Update to 17.7: * https://www.postgresql.org/about/news/p-3171/ * https://www.postgresql.org/docs/release/17.7/ * bsc#1253332, CVE-2025-12817: Mis…

    first Mar 18, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10424-1 2 CVEs

    jupyter-bqplot-jupyterlab-0.5.46-14.1 on GA media

    These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-14.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 8.2
    openSUSE-SU-2026:10423-1 6 CVEs

    nginx-1.29.7-1.1 on GA media

    These are all security issues fixed in the nginx-1.29.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 8.1
    SUSE-SU-2026:1037-1 5 CVEs

    Security update for grafana

    This update for grafana fixes the following issues: - Security issues fixed: - CVE-2026-21722: Public dashboards annotations: use dashboard timerange if time selection disabled (bsc#1258136) - CVE-2026-21721: Fixed access control by the dashboard permissions …

    first Mar 25, 2026
  • Low max 3.3
    openSUSE-SU-2026:10429-1 1 CVE

    jupyter-jupyterlab-templates-0.5.2-4.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 7.5
    openSUSE-SU-2026:10421-1 1 CVE

    kea-3.0.3-1.1 on GA media

    These are all security issues fixed in the kea-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 7.5
    openSUSE-SU-2026:10425-1 1 CVE

    python311-cbor2-5.9.0-1.1 on GA media

    These are all security issues fixed in the python311-cbor2-5.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10422-1 1 CVE

    libtpms-devel-0.10.2-1.1 on GA media

    These are all security issues fixed in the libtpms-devel-0.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.2
    openSUSE-SU-2026:10428-1 1 CVE

    python311-jupyter-ydoc-3.4.0-2.1 on GA media

    These are all security issues fixed in the python311-jupyter-ydoc-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10420-1 1 CVE

    amazon-cloudwatch-agent-1.300064.0-2.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300064.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 8.7
    SUSE-RU-2026:1001-1 1 CVE

    Recommended update for rust1.94

    This update for rust1.94 fixes the following issues: This update adds rust1.94. Release notes can be found externally: https://github.com/rust-lang/rust/releases/tag/1.94.0 - CVE-2026-31812: avoid unwrapping varint decoding during parameters parsing (bsc#1259…

    first Mar 25, 2026
  • Critical max 10.0
    SUSE-SU-2026:1042-1 124 CVEs

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260317T205859 2026-03-17T20:58:59Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4360 CVE-2026-0528 GHSA-w2gr-585j-r428 * GO…

    first Mar 25, 2026
  • High max 8.2
    openSUSE-SU-2026:10427-1 1 CVE

    jupyter-matplotlib-0.11.7-17.1 on GA media

    These are all security issues fixed in the jupyter-matplotlib-0.11.7-17.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10432-1 1 CVE

    golang-github-v2fly-v2ray-core-5.47.0-1.1 on GA media

    These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.47.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • High max 7.5
    SUSE-SU-2026:1029-1 4 CVEs

    Security update for salt

    This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…

    first Mar 25, 2026
  • High max 7.5
    SUSE-SU-2026:1030-1 4 CVEs

    Security update for salt

    This update for salt fixes the following issues: - Security issues fixed: * CVE-2025-67724: Fixed missing validation of supplied reason phrase (bsc#1254903) * CVE-2025-67725: Fixed DoS via malicious HTTP request (bsc#1254905) * CVE-2025-67726: Fixed HTTP head…

    first Mar 25, 2026
  • Critical max 9.4
    SUSE-SU-2026:1041-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2024-38542: RDMA/mana_ib: bound…

    first Mar 25, 2026