Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,648 results · Feed

  • Medium max 6.1
    openSUSE-SU-2025:20068-1 1 CVE

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-52885: Fixed raw pointers leading to dangling pointers when the vector is resized (bsc#1251940)

    first Nov 20, 2025
  • Critical max 9.8
    openSUSE-SU-2025:20065-1 24 CVEs

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.5.0 ESR: * Fixed: Various security fixes (MFSA 2025-88 bsc#1253188): * CVE-2025-13012 Race condition in the Graphics component * CVE-202…

    first Nov 19, 2025
  • Medium max 6.6
    openSUSE-SU-2025:20059-1 1 CVE

    Security update for ongres-scram

    This update for ongres-scram fixes the following issues: - CVE-2025-59432: Fixed timing attack vulnerability in SCRAM Authentication (bsc#1250399)

    first Nov 19, 2025
  • Low max 2.0
    openSUSE-SU-2025:20056-1 1 CVE

    Security update for openexr

    This update for openexr fixes the following issues: - CVE-2025-64181: Fixed use of uninitialized memory in function generic_unpack() (bsc#1253233)

    first Nov 19, 2025
  • High max 7.5
    openSUSE-SU-2025:20055-1 1 CVE

    Security update for expat

    This update for expat fixes the following issues: - CVE-2025-59375: Fixed large dynamic memory allocations via a small document submitted for parsing (bsc#1249584)

    first Nov 19, 2025
  • Medium max 5.5
    openSUSE-SU-2025:20050-1 2 CVEs

    Security update for libxslt

    This update for libxslt fixes the following issues: Changes in libxslt: - CVE-2025-11731: Fixed type confusion in exsltFuncResultCompfunction leading to denial of service (bsc#1251979) - CVE-2025-10911: Fixed use-after-free with key data stored cross-RVT (bsc…

    first Nov 19, 2025
  • High max 8.8
    openSUSE-SU-2025:20049-1 7 CVEs

    Security update for tiff

    This update for tiff fixes the following issues: tiff was updated to 4.7.1: * Software configuration changes: * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h. * CMake: define WORDS_BIGENDIAN via tif_config.h * doc/CMakeLists.txt: remove…

    first Nov 19, 2025
  • Critical max 10.0
    openSUSE-SU-2025:20048-1 2 CVEs

    Security update for samba

    This update for samba fixes the following issues: Update to 4.22.5: * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280). * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279). - Relax samba-gpupdate req…

    first Nov 18, 2025
  • Medium max 5.3
    openSUSE-SU-2025:20035-1 1 CVE

    Security update for micropython

    This update for micropython fixes the following issues: Changes in micropython: - Build with mbedtls-3.6.5 instead of bundled 3.6.2 to fix CVE-2025-59438 Version 1.26.0: * Added machine.I2CTarget for creating I2C target devices on multiple ports. * New MCU su…

    first Nov 10, 2025
  • Medium max 5.3
    openSUSE-SU-2025:20031-1 1 CVE

    Security update for warewulf4

    This update for warewulf4 fixes the following issues: Changes in warewulf4: - Update to version 4.6.4: * v4.6.4 release updates * Convert disk booleans from wwbool to *bool which allows bools in disk to be set to false via command line (bsc#1248768) * Update …

    first Oct 27, 2025
  • Critical max 9.8
    openSUSE-SU-2025:20026-1 8 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 140.4: * changed: Account Hub is now disabled by default for second email account * changed: Flatpak runtime has been updated to Freedesktop SDK 24.08 * fixed: Users could not …

    first Nov 7, 2025
  • High max 7.1
    openSUSE-SU-2025:20022-1 2 CVEs

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-59681: Fixed a potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB (boo#1250485) - CVE-2025-59682: Fixed a potential partial directory-trav…

    first Oct 31, 2025
  • High max 8.8
    openSUSE-SU-2025:20021-1 7 CVEs

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.3.0 ESR: * Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded draft subject * Thunderbird could crash on startup * Thunderbird …

    first Oct 29, 2025
  • Medium max 5.1
    openSUSE-SU-2025:20013-1 1 CVE

    Recommended update of flake-pilot

    This update for flake-pilot fixes the following issues: Update version to 3.1.22. - Fixes to use flakes as normal user Running a flake is a container based instance provisioning and startup. Some part of this process requires root permissions for example moun…

    first Oct 15, 2025
  • Medium max 5.3
    openSUSE-SU-2025:15854-1 2 CVEs

    kepler-0.11.3-1.1 on GA media

    These are all security issues fixed in the kepler-0.11.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 31, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15850-1 3 CVEs

    python312-3.12.12-4.1 on GA media

    These are all security issues fixed in the python312-3.12.12-4.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 29, 2025
  • Critical max 9.1
    openSUSE-SU-2025:15853-1 1 CVE

    weblate-5.14.3-2.1 on GA media

    These are all security issues fixed in the weblate-5.14.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 30, 2025
  • High max 7.5
    openSUSE-SU-2025:15852-1 4 CVEs

    trivy-0.68.2-1.1 on GA media

    These are all security issues fixed in the trivy-0.68.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 29, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15851-1 3 CVEs

    python313-3.13.11-1.1 on GA media

    These are all security issues fixed in the python313-3.13.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 29, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15849-1 3 CVEs

    python311-3.11.14-3.1 on GA media

    These are all security issues fixed in the python311-3.11.14-3.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 29, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15848-1 1 CVE

    python311-openapi-core-0.22.0-1.1 on GA media

    These are all security issues fixed in the python311-openapi-core-0.22.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 28, 2025
  • Low max 2.3
    openSUSE-SU-2025:15847-1 1 CVE

    anubis-1.24.0-1.1 on GA media

    These are all security issues fixed in the anubis-1.24.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 28, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15846-1 3 CVEs

    python39-3.9.25-2.1 on GA media

    These are all security issues fixed in the python39-3.9.25-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 24, 2025
  • High max 8.1
    openSUSE-SU-2025:15845-1 2 CVEs

    podman-5.7.1-1.1 on GA media

    These are all security issues fixed in the podman-5.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 24, 2025
  • Critical max 10.0
    openSUSE-SU-2025:15844-1 2 CVEs

    cpp-httplib-devel-0.28.0-1.1 on GA media

    These are all security issues fixed in the cpp-httplib-devel-0.28.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 24, 2025
  • High max 7.3
    openSUSE-SU-2025:15843-1 1 CVE

    buildah-1.42.2-1.1 on GA media

    These are all security issues fixed in the buildah-1.42.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 24, 2025
  • Medium max 4.8
    openSUSE-SU-2025:15842-1 1 CVE

    libnbd-1.24.0-2.1 on GA media

    These are all security issues fixed in the libnbd-1.24.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 23, 2025
  • Medium max 5.3
    openSUSE-SU-2025:15841-1 1 CVE

    zk-0.15.2-1.1 on GA media

    These are all security issues fixed in the zk-0.15.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 22, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15840-1 3 CVEs

    python315-3.15.0~a3-1.1 on GA media

    These are all security issues fixed in the python315-3.15.0~a3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 22, 2025
  • Medium max 6.3
    openSUSE-SU-2025:15839-1 3 CVEs

    python310-3.10.19-3.1 on GA media

    These are all security issues fixed in the python310-3.10.19-3.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 22, 2025
  • High max 7.5
    openSUSE-SU-2025:15838-1 3 CVEs

    python311-tornado6-6.5.4-1.1 on GA media

    These are all security issues fixed in the python311-tornado6-6.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • High max 8.2
    openSUSE-SU-2025:15837-1 3 CVEs

    php8-8.4.16-1.1 on GA media

    These are all security issues fixed in the php8-8.4.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • Critical max 9.8
    openSUSE-SU-2025:15836-1 14 CVEs

    kernel-devel-6.18.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-6.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • High max 7.5
    openSUSE-SU-2025:15835-1 1 CVE

    duc-1.4.6-1.1 on GA media

    These are all security issues fixed in the duc-1.4.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • Medium max 6.5
    openSUSE-SU-2025:15834-1 2 CVEs

    busybox-1.37.0-8.1 on GA media

    These are all security issues fixed in the busybox-1.37.0-8.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • Critical max 9.8
    openSUSE-SU-2025:15833-1 2 CVEs

    MozillaFirefox-146.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-146.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 20, 2025
  • High max 7.5
    openSUSE-SU-2025:15832-1 1 CVE

    coredns-for-k8s1.35-1.13.1-2.1 on GA media

    These are all security issues fixed in the coredns-for-k8s1.35-1.13.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2025
  • High max 8.8
    openSUSE-SU-2025:15831-1 3 CVEs 1 exploited

    chromedriver-143.0.7499.146-1.1 on GA media

    These are all security issues fixed in the chromedriver-143.0.7499.146-1.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2025
  • High max 7.5
    openSUSE-SU-2025:15830-1 3 CVEs

    alloy-1.12.0-2.1 on GA media

    These are all security issues fixed in the alloy-1.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2025
  • High max 7.5
    openSUSE-SU-2025:15829-1 1 CVE

    ImageMagick-7.1.2.10-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.10-2.1 package on the GA media of openSUSE Tumbleweed.

    first Dec 19, 2025