Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Medium max 4.3

    Security update for gvfs

    This update for gvfs fixes the following issues: - CVE-2026-28295: information disclosure when processing untrusted PASV responses from FTP servers (bsc#1258953). - CVE-2026-28296: arbitrary FTP command injection due to unsanitized CRLF sequences in user supp…

    first Mar 23, 2026
  • High max 7.8

    python311-pydicom-3.0.2-1.1 on GA media

    These are all security issues fixed in the python311-pydicom-3.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 23, 2026
  • High max 7.5

    python311-dynaconf-3.2.13-1.1 on GA media

    These are all security issues fixed in the python311-dynaconf-3.2.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 23, 2026
  • High max 8.1

    pgvector-devel-0.8.2-1.1 on GA media

    These are all security issues fixed in the pgvector-devel-0.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 23, 2026
  • Critical max 9.3

    freerdp-3.24.1-1.1 on GA media

    These are all security issues fixed in the freerdp-3.24.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 23, 2026
  • Critical max 9.1

    azure-storage-azcopy-10.32.2-1.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 23, 2026
  • Medium max 5.7

    Security update for python39

    This update for python39 fixes the following issue: - CVE-2026-2297: validation bypass via incorrectly handled hook in FileLoader (bsc#1259240).

    first Mar 23, 2026
  • Critical max 10.0

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2025-58181: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption (bsc#1253904).

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 23, 2026
  • High max 7.7

    Security update for freerdp

    This update for freerdp fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).

    first Mar 23, 2026
  • High max 7.7

    Security update for freerdp2

    This update for freerdp2 fixes the following issue: - CVE-2026-24491: Heap-use-after-free in video_timer additional fix (bsc#1257981).

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-p…

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-p…

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53794: cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1255163). - CVE-2023-53827: Bl…

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 23, 2026
  • High max 7.5

    Security update for sqlite3

    This update for sqlite3 fixes the following issues: Update to 3.51.3: - CVE-2025-7709: Integer Overflow in FTS5 Extension (bsc#1254670). - CVE-2025-70873: SQLite zipfile extension may disclose uninitialized heap memory during inflation (bsc#1259619). Changelo…

    first Mar 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 68 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.258 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: s…

    first Mar 22, 2026
  • High max 7.5

    lemon-3.51.3-1.1 on GA media

    These are all security issues fixed in the lemon-3.51.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Medium max 5.1

    python311-PyPDF2-2.11.1-8.1 on GA media

    These are all security issues fixed in the python311-PyPDF2-2.11.1-8.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Medium max 6.9

    GraphicsMagick-1.3.46-4.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.46-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-2025…

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix u…

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: c…

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-4025…

    first Mar 22, 2026
  • Medium max 5.7

    python314-3.14.3-3.1 on GA media

    These are all security issues fixed in the python314-3.14.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Medium max 6.0

    python310-3.10.20-2.1 on GA media

    These are all security issues fixed in the python310-3.10.20-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Medium max 5.1

    python311-pypdf-6.9.1-1.1 on GA media

    These are all security issues fixed in the python311-pypdf-6.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • High max 7.5

    freeciv-3.2.4-1.1 on GA media

    These are all security issues fixed in the freeciv-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • High max 8.8

    chromedriver-146.0.7680.153-2.1 on GA media

    These are all security issues fixed in the chromedriver-146.0.7680.153-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7 RT)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488:…

    first Mar 22, 2026
  • Critical max 9.8

    Security update for krb5-appl

    This update for krb5-appl fixes the following issues: Changes in krb5-appl: - CVE-2026-32746: Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd LINEMODE (bsc#1259691)

    first Mar 17, 2026
  • Low max 3.7

    Security update for python-Django

    This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-25674: Fixed race condition which can lead to potential incorrect permissions on newly created file system objects (bsc#1259142)

    first Mar 17, 2026
  • High max 7.9

    Security update for ocaml

    This update for ocaml fixes the following issues: - CVE-2026-28364: missing bounds validation in readblock() can lead to arbitrary code execution (bsc#1258992)

    first Mar 17, 2026
  • High max 7.5

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2025-58181: Fixed unbounded memory consumption. (bsc#1253904) - CVE-2025-30204: Fixed a bug in jwt-go which allows excessive memory allocation during header parsing. (bsc#1240513)

    first Mar 16, 2026
  • Critical max 10.0

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.8.0 ESR (bsc#1258568) - CVE-2026-2757: Incorrect boundary conditions in the WebRTC: Audio/Video component - CVE-2026-2758: Use-after-free in the JavaScript: GC c…

    first Mar 16, 2026
  • Medium max 6.8

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: - Update to version 0.2.8+116: - CVE-2026-25727: Update vendored crates to fix a date parser can lead to stack exhaustion in Time. (bsc#1257908)

    first Mar 16, 2026
  • High max 7.3

    Security update for osc, obs-scm-bridge

    This update for osc, obs-scm-bridge fixes the following issues: Changes in osc: - 1.24.0 - Command-line: - Add '--target-owner' option to 'git-obs repo fork' command - Add '--self' parameter to fix 'no matching parent repo' error message in 'git-obs pr create…

    first Mar 12, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - Update to version 10.0.8 - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)

    first Mar 13, 2026
  • High max 8.6

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422). - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy (bsc#1254876). - CVE-2025-32049: Denia…

    first Mar 13, 2026