Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 9.6

    kyverno-1.19.1-1.1 on GA media

    These are all security issues fixed in the kyverno-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • Medium max 5.9

    kbfs-6.6.3-5.1 on GA media

    These are all security issues fixed in the kbfs-6.6.3-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.5

    helm-4.3.0-1.1 on GA media

    These are all security issues fixed in the helm-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.5

    fake-gcs-server-1.56.1-1.1 on GA media

    These are all security issues fixed in the fake-gcs-server-1.56.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • Medium max 5.5

    shadowsocks-rust-1.25.0-1.1 on GA media

    These are all security issues fixed in the shadowsocks-rust-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • High max 8.2

    python313-3.13.15-1.1 on GA media

    These are all security issues fixed in the python313-3.13.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Medium max 6.2

    python313-weasyprint-70.0-1.1 on GA media

    These are all security issues fixed in the python313-weasyprint-70.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Medium max 6.1

    python313-ansi2html-1.9.5-1.1 on GA media

    These are all security issues fixed in the python313-ansi2html-1.9.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Low max 3.7

    jsch-2.28.7-1.1 on GA media

    These are all security issues fixed in the jsch-2.28.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Critical max 9.1

    cloudflared-2026.9.1-1.1 on GA media

    These are all security issues fixed in the cloudflared-2026.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Critical max 9.6

    chromedriver-153.0.8010.47-1.1 on GA media

    These are all security issues fixed in the chromedriver-153.0.8010.47-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • High max 7.5

    amazon-ssm-agent-3.3.5390.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.5390.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • Critical max 10.0

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: * fixed: Deleting an Exchange account retained the outgoing server settings * fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 * fixed: Win…

    first Sep 18, 2026
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: denial of service vi…

    first Sep 18, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371) - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…

    first Sep 18, 2026
  • Medium max 6.9

    warewulf4-4.7.1-1.1 on GA media

    These are all security issues fixed in the warewulf4-4.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Medium max 5.3

    valkey-9.1.2-2.1 on GA media

    These are all security issues fixed in the valkey-9.1.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 8.3

    python313-pymongo-4.18.1-1.1 on GA media

    These are all security issues fixed in the python313-pymongo-4.18.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Medium max 6.5

    nginx-1.31.6-1.1 on GA media

    These are all security issues fixed in the nginx-1.31.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Critical max 9.1

    kit-0.107.0-1.1 on GA media

    These are all security issues fixed in the kit-0.107.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Critical max 9.8

    kernel-devel-7.2.6-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 8.7

    jetty-annotations-9.4.58-6.1 on GA media

    These are all security issues fixed in the jetty-annotations-9.4.58-6.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Critical max 9.8

    alloy-1.19.2-1.1 on GA media

    These are all security issues fixed in the alloy-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 7.8

    NetworkManager-applet-l2tp-1.52.6-1.1 on GA media

    These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • Low max 3.7

    ImageMagick-7.1.2.31-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.31-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 7.7

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request (bsc#1236258). - CVE-2025-23166: improper error handling in async cryptographic opera…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…

    first Sep 17, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.45 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-53360: KVM: SEV: Require…

    first Sep 17, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…

    first Sep 17, 2026
  • Critical max 9.1

    Security update for cjose

    This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…

    first Sep 17, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-202…

    first Sep 17, 2026
  • Critical max 9.1

    Security update for cjose

    This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…

    first Sep 17, 2026
  • Medium max 6.1

    Security update for tiff

    This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough (bsc#1280164).

    first Sep 17, 2026
  • High max 7.7

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs e…

    first Sep 17, 2026
  • High max 7.8

    Security update for netcdf

    This update for netcdf fixes the following issue: - CVE-2026-86095: out-of-bounds write in `NC4_HDF5_inq_attname()` due to missing length validation when processing a crafted HDF5 file (bsc#1279882).

    first Sep 17, 2026
  • High max 7.7

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request (bsc#1236258). - CVE-2025-23166: improper error handling in async cryptographic opera…

    first Sep 17, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESRi (MFSA 2026-93, bsc#1280371) - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…

    first Sep 17, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…

    first Sep 17, 2026
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: Update to python 3.11.15: - CVE-2025-6075: quadratic complexity in os.path.expandvars() (bsc#1252974). - CVE-2025-11468: header injection with carefully crafted inputs (bsc#1257029). - CVE-2025-12084: quad…

    first Sep 17, 2026
  • Critical max 9.8

    Security update for perl-Net-DNS

    This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: Updated to 1.570.0 (1.57): See /usr/share/doc/packages/perl-Net-DNS/Changes . - Resync with IANA DNS parameters registry. - EDNS: Add support for MQTYPE-QUERY option. - Unbounde…

    first Sep 15, 2026