Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Medium max 5.3

    apptainer-1.5.3-3.1 on GA media

    These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • High max 7.5

    Security update for java-25-openjdk

    This update for java-25-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70906: OpenJDK: Improve font loading (bsc#1275763). …

    first Aug 31, 2026
  • Critical max 10.0

    Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen

    This update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.1.0 ESR. * Fixed: Various security fixes. MFSA 2026-77 (bsc#1274867): * CVE-2026-74934 Site is…

    first Aug 31, 2026
  • High max 7.8

    Security update for emacs

    This update for emacs fixes the following issues: Security issues fixed: - Arbitrary code execution when opening a specially crafted file (bsc#1275941). - CVE-2026-77219: integer overflow in the PBM/PPM/PGM image loader leads to heap memory content leaks when…

    first Aug 31, 2026
  • Unscored

    Security update for libgpg-error

    This update for libgpg-error fixes the following issue: - Out-of-bounds read in `_gpgrt_vfnameconcat` of `stringutils.c` when the `GPGRT_FCONCAT_SYSCONF` flag is used (bsc#1263078).

    first Aug 31, 2026
  • Medium max 5.5

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes.

    first Sep 1, 2026
  • High max 7.8

    Security update for gegl

    This update for gegl fixes the following issues: Changes in gegl: - CVE-2026-18300: libs/rgbe: fix >200kb report from ZDI (bsc#1276229)

    first Sep 1, 2026
  • Unscored

    Security update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb

    This update for orthanc, orthanc-authorization, orthanc-postgresql, orthanc-dicomweb fixes the following issues: Changes in orthanc: - Version 1.13.0 Highlights: * complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded…

    first Sep 1, 2026
  • High max 7.5

    Security update for c-ares

    This update for c-ares fixes the following issues: Updat to c-ares 1.36.8. - CVE-2026-33630: remotely triggerable use-after-free/double-free in query-completion handling via `ares_getaddrinfo()` over TCP (bsc#1270416). - CVE-2026-69184: CPU exhaustion denial …

    first Sep 1, 2026
  • Critical max 9.1

    Security update for dovecot24

    This update for dovecot24 fixes the following issues: Update to 2.4.5. - CVE-2026-33263: `submission-login`: panic when `mail_max_userip_connections` is reached (bsc#1276794). - CVE-2026-27852: DoS by sending mail with bad header (bsc#1276799). - CVE-2026-336…

    first Sep 1, 2026
  • High max 7.5

    Security update for apache2-mod_auth_openidc

    This update for apache2-mod_auth_openidc fixes the following issue: - CVE-2026-54789: out-of-bounds read and one-byte out-of-bounds write in the state-cookie parser of `mod_auth_openidc` (bsc#1276217).

    first Sep 1, 2026
  • Unscored

    Security update for wicked2nm

    This update for wicked2nm fixes the following issue: Update to v1.5.2. Security issues fixed: - `serde_with`: `KeyValueMap` serialization panics on empty sequence or map entries (bsc#1271848). Other updates and bugfixes: * Build(deps): bump `serde_with` from …

    first Sep 1, 2026
  • Critical max 9.8

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.186 (boo#1272460): * CVE-2026-16807: Out of bounds write in Codecs * CVE-2026-16806: Use after free in WebMCP * CVE-2026-16805: Use after free in Blink * CVE-2026-…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21135-1 562 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 149.0.7827.155 (boo#1268373): * CVE-2026-12437: Use after free in WebShare * CVE-2026-12438: Inappropriate implementation in WebView * CVE-2026-12439: Use after free in Digit…

    first Aug 31, 2026
  • Critical max 9.6

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 148.0.7778.215 (boo#1266471): * CVE-2026-9872: Out of bounds write in GPU * CVE-2026-9873: Use after free in Network * CVE-2026-9874: Use after free in Dawn * CVE-2026-9875: …

    first Aug 31, 2026
  • Critical max 9.8

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 147.0.7727.137 (boo#1263158) * CVE-2026-7363: Use after free in Canvas * CVE-2026-7361: Use after free in iOS * CVE-2026-7344: Use after free in Accessibility * CVE-2026-7343…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:20460-1 86 CVEs 3 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 (boo#1261249) * CVE-2026-5273: Use after free in CSS * CVE-2026-5272: Heap buffer overflow in GPU * CVE-2026-5274: Integer overflow in Codecs * CVE-2026-5275: …

    first Aug 31, 2026
  • Critical max 9.8

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 144.0.7559.132 (boo#1257650) * CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap co…

    first Aug 31, 2026
  • High max 8.8
    openSUSE-SU-2026:20020-1 19 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 (boo#1256067): * CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 (stable released 2025-12-18) * no cve listed yet Chrom…

    first Aug 31, 2026
  • Critical max 9.6
    openSUSE-SU-2026:20332-1 28 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 145.0.7632.159 (boo#1259213) * CVE-2026-3536: Integer overflow in ANGLE * CVE-2026-3537: Object lifecycle issue in PowerVR * CVE-2026-3538: Integer overflow in Skia * CVE-202…

    first Aug 31, 2026
  • Medium max 6.5

    perl-URI-5.360.0-1.1 on GA media

    These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • High max 7.5

    openai-codex-0.152.0-1.1 on GA media

    These are all security issues fixed in the openai-codex-0.152.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 5.3

    grafana-12.4.5-5.1 on GA media

    These are all security issues fixed in the grafana-12.4.5-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 6.6

    glibc-2.44-1.1 on GA media

    These are all security issues fixed in the glibc-2.44-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Critical max 9.8

    ffmpeg-9-libavcodec-devel-9.0.1-3.1 on GA media

    These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Unscored

    exiv2-0.28.9-1.1 on GA media

    These are all security issues fixed in the exiv2-0.28.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • High max 7.5

    dracut-112+suse.47.gec0b378-1.1 on GA media

    These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 6.8

    aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media

    These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 5.5

    libtree-sitter0_26-0.26.8-5.1 on GA media

    These are all security issues fixed in the libtree-sitter0_26-0.26.8-5.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • High max 8.7

    snphost-0.7.0-3.1 on GA media

    These are all security issues fixed in the snphost-0.7.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • High max 8.7

    snpguest-0.10.0-3.1 on GA media

    These are all security issues fixed in the snpguest-0.10.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Medium max 6.8

    java-1_8_0-openjdk-1.8.0.504-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Critical max 9.9

    incus-7.4-1.1 on GA media

    These are all security issues fixed in the incus-7.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Low max 2.9

    gopass-1.17.0-1.1 on GA media

    These are all security issues fixed in the gopass-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Medium max 6.9

    Botan-3.13.0-1.1 on GA media

    These are all security issues fixed in the Botan-3.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Critical max 9.6

    Security update for go1.27

    This update for go1.27 fixes the following issues: - go1.27.0 (released 2026-08-19) is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.299 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-…

    first Aug 26, 2026
  • Unscored

    Security update for kubernetes-old

    This update for kubernetes-old rebuilds it against the current go security release.

    first Aug 26, 2026
  • Unscored

    Security update for kubernetes

    This update for kubernetes rebuilds it against the current go security release.

    first Aug 26, 2026