Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,660 results · Feed

  • Critical max 9.8
    SUSE-SU-2026:20253-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20252-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20251-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20250-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Unscored

    audiofile-0.3.6-15.1 on GA media

    These are all security issues fixed in the audiofile-0.3.6-15.1 package on the GA media of openSUSE Tumbleweed.

    first May 3, 2025
  • Critical max 9.8

    tomcat10-10.1.40-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.40-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Critical max 9.8

    tomcat-9.0.104-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.104-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Critical max 9.8
    SUSE-SU-2026:20249-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Medium max 6.5

    hauler-1.2.4-1.1 on GA media

    These are all security issues fixed in the hauler-1.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Medium max 6.5

    docker-28.1.1_ce-16.1 on GA media

    These are all security issues fixed in the docker-28.1.1_ce-16.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • Critical max 9.1

    MozillaFirefox-138.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-138.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 2, 2025
  • High max 7.4

    libsoup-2_4-1-2.74.3-9.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-9.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2025
  • Medium max 5.3

    libsoup-3_0-0-3.6.5-3.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2025
  • Critical max 9.1

    MozillaThunderbird-128.10.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-128.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 1, 2025
  • High max 8.8

    Security update for chromium

    This update for chromium fixes the following issues: Chromium 136.0.7103.92 (boo#1242717) * CVE-2025-4372: Use after free in WebAudio

    first May 9, 2025
  • Critical max 9.8

    Security update for mozjs102

    This update for mozjs102 fixes the following issue: - CVE-2024-56431: avoid negative shift in huffdec.c (bsc#1234837).

    first May 9, 2025
  • Medium max 6.7

    Recommended update for shim

    This update for shim fixes the following issues: This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults c…

    first Mar 5, 2026
  • High max 7.8

    Recommended update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - Update to 3.0.8 - Font Loading Performance - Improvements in start-up time for users with a large number of fonts was backported from our 3.2 RC2 release. As a result, we now wait to load ima…

    first Feb 3, 2026
  • Medium max 5.8

    Recommended update for hauler

    This update for hauler fixes the following issues: Changes in hauler: - Update to version 1.4.1 (bsc#1256546, CVE-2026-22772): * fixed typos for containerd imports (#493) * fix and support containerd imports of `hauls` (#492) * bump github.com/sigstore/fulcio…

    first Jan 27, 2026
  • High max 8.8

    Recommended update for cloud-init

    This update for cloud-init fixes the following issues: Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed long ago * https://github.com/canonical/cloud-init/pull/1720 - Update to version …

    first Jan 29, 2026
  • Medium max 6.8

    Security update for virtiofsd

    This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912).

    first Mar 12, 2026
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-1965: bad reuse of HTTP Negotiate connection (bsc#1259362). - CVE-2026-3783: token leak with redirect and netrc (bsc#1259363). - CVE-2026-3784: wrong proxy connection reuse with credentials (bsc#1259…

    first Mar 12, 2026
  • Critical max 9.8
    SUSE-SU-2026:20720-1 129 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi: m…

    first Mar 11, 2026
  • Unscored

    Security update for kernel-livepatch-MICRO-6-0_Update_17

    This update for kernel-livepatch-MICRO-6-0_Update_17 fixes the following issues: Initial livepatch for Update 17 of SLE Micro 6.0 and 6.1 kernel.

    first Mar 11, 2026
  • Medium max 5.4

    Security update for vim

    This update for vim fixes the following issues: Update Vim to version 9.2.0045: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).

    first Mar 11, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2025-14876: Fixed unbounded allocation in virtio-crypto. (bsc#1255400) - CVE-2026-0665: Fixed PIRQ bounds check in xen_physdev_map_pirq. (bsc#1256484)

    first Mar 10, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859).

    first Mar 10, 2026
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-11468: preserving parens when folding comments in email headers. (bsc#1257029) - CVE-2026-0672: rejects control characters in http cookies. (bsc#1257031) - CVE-2026-0865: rejecting control chara…

    first Mar 9, 2026
  • High max 8.8

    Security update for zlib

    This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32_combine64 and crc32_combine_gen64 functions due to missing checks for negative lengths. (bsc#1258392) - CVE-2023-45853: Fixed an integer overflow and resul…

    first Mar 9, 2026
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issues: Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. * (bsc#1258083, jsc#PED-15752, jsc#P…

    first Mar 6, 2026
  • Medium max 6.2

    Security update for libxslt, libxml2

    This update for libxslt, libxml2 fixes the following issues: Changes in libxml2: - CVE-2026-0990: call stack overflow may lead to application crash due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811). - CVE-2026-0992: excessive r…

    first Mar 6, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 8.2

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-26007: missing validation can lead to security issues for signature verification (ECDSA) and shared key negotiation (ECDH) (bsc#1258074).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 5, 2026
  • Unscored

    Security update for ca-certificates-mozilla

    This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.84 state of Mozilla SSL root CAs (bsc#1258002) - Removed: - Baltimore CyberTrust Root - CommScope Public Trust ECC Root-01 - CommScope Public Trust ECC Root-02 - CommScope Publ…

    first Mar 4, 2026