SUSE 5641 Published by Philipp Esselbach 0

SUSE has issued a wide array of security updates for openSUSE Leap and SUSE Linux Enterprise systems that address numerous vulnerabilities across both critical and moderate severity levels. These patches cover essential software including Wireshark, Django, nginx, and multiple Linux kernel live patches, alongside fixes for graphics libraries, container runtimes, and development tools. The resolved issues primarily involve memory corruption flaws, denial-of-service triggers, and privilege escalation risks that could destabilize systems or leak sensitive information. System administrators are advised to deploy these updates immediately through standard zypper patch commands to maintain a secure computing environment.

openSUSE-SU-2026:20699-1: moderate: Security update for openCryptoki
openSUSE-SU-2026:20704-1: moderate: Security update for python-Django
openSUSE-SU-2026:20697-1: low: Security update for cairo
openSUSE-SU-2026:20692-1: moderate: Security update for python-pytest
openSUSE-SU-2026:20688-1: moderate: Security update for Mesa
openSUSE-SU-2026:20685-1: important: Security update for wireshark
SUSE-SU-2026:1776-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1761-1: important: Security update for nginx
SUSE-SU-2026:1768-1: important: Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:1771-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1770-1: important: Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)
openSUSE-SU-2026:10707-1: moderate: postfix-3.11.2-1.1 on GA media
openSUSE-SU-2026:10706-1: moderate: podman-5.8.2-1.1 on GA media
openSUSE-SU-2026:10705-1: moderate: libpcp-devel-6.3.8-1.1 on GA media
openSUSE-SU-2026:10704-1: moderate: micropython-1.28.0-2.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE issued a series of security advisories to patch numerous vulnerabilities across its enterprise and community Linux distributions. These updates address critical flaws in widely used software like Java, Python frameworks, web browsers, and system libraries, with several patches carrying important ratings due to their potential for remote exploitation or service disruption. System administrators should apply the recommended fixes immediately through YaST or zypper commands to protect affected SUSE Linux Enterprise and openSUSE Leap installations. The release also bundles multiple kernel live patches that resolve high-risk networking and memory issues without forcing a full system restart.

SUSE-SU-2026:1753-1: important: Security update for 389-ds
SUSE-SU-2026:1755-1: important: Security update for freeipmi
SUSE-SU-2026:1744-1: moderate: Security update for python-pytest
SUSE-SU-2026:1732-1: important: Security update for java-17-openjdk
SUSE-SU-2026:1740-1: moderate: Security update for python-Django
SUSE-SU-2026:1749-1: moderate: Security update for webkit2gtk3
SUSE-SU-2026:1750-1: important: Security update for librsvg
SUSE-SU-2026:1735-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1728-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1736-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1733-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
openSUSE-SU-2026:10691-1: moderate: gnutls-3.8.13-1.1 on GA media
openSUSE-SU-2026:10690-1: moderate: cri-tools-1.36.0-1.1 on GA media
openSUSE-SU-2026:10696-1: moderate: nix-2.34.7-1.1 on GA media
openSUSE-SU-2026:10692-1: moderate: grafana-11.6.14+security01-3.1 on GA media
openSUSE-SU-2026:10694-1: moderate: libmariadbd-devel-11.8.6-1.1 on GA media
openSUSE-SU-2026:10695-1: moderate: mutt-2.3.2-1.1 on GA media
openSUSE-SU-2026:10689-1: moderate: chromedriver-148.0.7778.96-1.1 on GA media
openSUSE-SU-2026:10688-1: moderate: cf-cli-8.18.3+git.0.83ce51d9c-1.1 on GA media
openSUSE-SU-2026:10697-1: moderate: traefik-3.6.15-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE issued a comprehensive set of security patches that address numerous vulnerabilities across their Linux distributions. These updates tackle critical flaws in essential software like the Linux kernel live patch, Python three, Java twenty one OpenJDK, and curl, alongside moderate fixes for applications including Thunderbird, Erlang, and OpenSSL three. System administrators can mitigate risks involving privilege escalation, credential exposure, and remote service disruptions by running the provided zypper or YaST commands on their specific SUSE Linux Enterprise or openSUSE Leap installations. Each advisory includes detailed package lists and targeted installation steps to help organizations quickly secure their environments against these newly disclosed threats.

SUSE-SU-2026:1700-1: important: Security update for PackageKit
SUSE-SU-2026:1705-1: important: Security update for java-21-openjdk
openSUSE-SU-2026:10685-1: moderate: libthrift-0_23_0-0.23.0-1.1 on GA media
openSUSE-SU-2026:10683-1: moderate: skim-4.6.1-1.1 on GA media
openSUSE-SU-2026:10682-1: moderate: rclone-1.74.0-1.1 on GA media
openSUSE-SU-2026:10687-1: moderate: MozillaThunderbird-140.10.1-1.1 on GA media
openSUSE-SU-2026:10681-1: moderate: python311-social-auth-core-4.8.7-1.1 on GA media
openSUSE-SU-2026:10678-1: moderate: liblxc-devel-7.0.0-1.1 on GA media
SUSE-SU-2026:1715-1: important: Security update for python3
SUSE-SU-2026:1711-1: moderate: Security update for openssl-3
SUSE-SU-2026:1714-1: important: Security update for erlang
SUSE-SU-2026:1723-1: moderate: Security update for openCryptoki
SUSE-SU-2026:1717-1: important: Security update for curl
SUSE-SU-2026:1718-1: important: Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP4)

SUSE 5641 Published by Philipp Esselbach 0

SUSE has released a batch of moderate security updates to patch multiple vulnerabilities across several key software packages. The fixes target widely used tools such as Xen, curl, Firefox, Grafana, and Prometheus on openSUSE Tumbleweed, Leap 15.4, and SUSE Linux Enterprise Micro systems. These patches resolve specific cross-referenced CVEs that could potentially allow local privilege escalation or denial of service attacks. Administrators need to apply the updates right away through zypper or YaST, and they must reboot any machines running Xen to complete the process.

SUSE-SU-2026:1692-1: moderate: Security update for xen
openSUSE-SU-2026:10676-1: moderate: golang-github-prometheus-prometheus-3.11.3-1.1 on GA media
openSUSE-SU-2026:10675-1: moderate: dpkg-1.22.22-1.1 on GA media
openSUSE-SU-2026:10674-1: moderate: curl-8.20.0-1.1 on GA media
openSUSE-SU-2026:10673-1: moderate: coredns-1.14.3-1.1 on GA media
openSUSE-SU-2026:10670-1: moderate: avahi-0.8-43.1 on GA media
openSUSE-SU-2026:10677-1: moderate: grafana-11.6.14+security01-2.1 on GA media
openSUSE-SU-2026:10671-1: moderate: bubblewrap-0.11.2-1.1 on GA media
openSUSE-SU-2026:10668-1: moderate: MozillaFirefox-150.0.1-1.1 on GA media
openSUSE-SU-2026:10669-1: moderate: alloy-1.16.0-2.1 on GA media
openSUSE-SU-2026:10672-1: moderate: cmctl-2.5.0-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE recently pushed a batch of security patches for openSUSE systems that tackle dozens of vulnerabilities across several key packages. MozillaThunderbird and FreeRDP receive the most urgent attention, as their updates resolve severe memory corruption flaws and potential remote execution risks. Additional updates cover moderate and important vulnerabilities in Helm, Trivy, Xen, himmelblau, plus a necessary kernel refresh for Leap 15.6.

openSUSE-SU-2026:10660-1: moderate: xen-4.21.1_04-1.1 on GA media
openSUSE-SU-2026:20657-1: important: Security update for freerdp
openSUSE-SU-2026:20662-1: moderate: Security update for hauler
openSUSE-SU-2026:20664-1: important: Security update for MozillaThunderbird
openSUSE-SU-2026:20659-1: moderate: Security update for libspectre
openSUSE-SU-2026:20655-1: moderate: Security update for helm
openSUSE-SU-2026:20658-1: moderate: Security update for himmelblau
SUSE-SU-2026:1671-2: important: Security update for the Linux Kernel
openSUSE-SU-2026:0163-1: important: Security update for trivy

SUSE 5641 Published by Philipp Esselbach 0

SUSE has rolled out a batch of security patches addressing flaws across multiple Linux distributions and software packages. The highest priority fix targets Chromium with thirty-three critical vulnerabilities, including several dangerous use after free errors that could destabilize systems. OpenSUSE Tumbleweed users need to install moderate updates for core tools like OpenJDK, Vim, Trivy, and libtiff to patch known weaknesses. Lower severity adjustments also improve regex processing in python-Pygments across various SUSE Linux Enterprise modules.

openSUSE-SU-2026:0161-1: critical: Security update for chromium
SUSE-SU-2026:1666-1: low: Security update for python-Pygments
SUSE-SU-2026:1667-1: low: Security update for python-Pygments
openSUSE-SU-2026:10658-1: moderate: python311-pypdf-6.10.2-2.1 on GA media
openSUSE-SU-2026:10657-1: moderate: krb5-appl-clients-1.0.3-6.1 on GA media
openSUSE-SU-2026:10655-1: moderate: google-osconfig-agent-20260330.00-2.1 on GA media
openSUSE-SU-2026:10652-1: moderate: gvim-9.2.0398-1.1 on GA media
openSUSE-SU-2026:10656-1: moderate: java-1_8_0-openjdk-1.8.0.492-1.1 on GA media
openSUSE-SU-2026:10654-1: moderate: google-guest-agent-20260402.00-2.1 on GA media
openSUSE-SU-2026:10651-1: moderate: trivy-0.70.0-1.1 on GA media
openSUSE-SU-2026:10649-1: moderate: sed-4.10-1.1 on GA media
openSUSE-SU-2026:10650-1: moderate: libtiff-devel-32bit-4.7.1-5.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE has released a comprehensive batch of security advisories targeting numerous open source packages across its Linux distributions. The updates address critical and important vulnerabilities in widely used tools like grafana, radare2, libssh, and libsodium, alongside several Python and Java libraries. Administrators will find fixes for dozens of common vulnerability identifiers, with some flaws carrying severity scores that reach the maximum level due to remote code execution or denial of service risks. System owners can apply these patches immediately using standard zypper commands or the YaST online update utility to keep their openSUSE Leap and Tumbleweed environments secure.

openSUSE-SU-2026:20654-1: critical: Security update for grafana
openSUSE-SU-2026:20651-1: important: Security update for ntfs-3g_ntfsprogs
openSUSE-SU-2026:20647-1: moderate: Security update for libssh
openSUSE-SU-2026:20653-1: critical: Security update for radare2
openSUSE-SU-2026:20642-1: moderate: Security update for libsodium
openSUSE-SU-2026:20646-1: important: Security update for PackageKit
openSUSE-SU-2026:20652-1: important: Security update for openexr
openSUSE-SU-2026:20645-1: important: Security update for python-Mako
openSUSE-SU-2026:20650-1: moderate: Security update for python-PyNaCl
openSUSE-SU-2026:20644-1: important: Security update for python-jwcrypto
SUSE-SU-2026:1662-1: important: Security update for glibc-livepatches
openSUSE-SU-2026:10648-1: moderate: python315-3.15.0~a8-3.1 on GA media
openSUSE-SU-2026:10639-1: moderate: java-25-openjdk-25.0.3.0-1.1 on GA media
openSUSE-SU-2026:10646-1: moderate: python311-pyOpenSSL-26.1.0-1.1 on GA media
openSUSE-SU-2026:10642-1: moderate: libmozjs-140-0-140.10.0-1.1 on GA media
openSUSE-SU-2026:10644-1: moderate: prometheus-postgres_exporter-0.10.1-6.1 on GA media
openSUSE-SU-2026:10640-1: moderate: libpng12-0-1.2.59-5.1 on GA media
openSUSE-SU-2026:10641-1: moderate: libixml11-1.18.5-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE rolled out a batch of security advisories to patch vulnerabilities across its enterprise Linux distributions and several core software packages. The highest priority update focuses on the Linux Kernel, where fourteen separate flaws were resolved to prevent potential local privilege escalation and system crashes. Other moderate fixes address memory management bugs and race conditions within python-requests, xen, openCryptoki, sed, and dnsdist. IT teams need to apply these patches through standard package managers right away, though they should plan for a mandatory server restart after installing the kernel or Xen components.

SUSE-SU-2026:1643-1: important: Security update for the Linux Kernel
SUSE-SU-2026:1644-1: moderate: Security update for python-requests
SUSE-SU-2026:1647-1: moderate: Security update for python-requests
SUSE-SU-2026:1657-1: important: Security update for xen
SUSE-SU-2026:1658-1: moderate: Security update for openCryptoki
SUSE-SU-2026:1659-1: moderate: Security update for sed
openSUSE-SU-2026:10632-1: moderate: dnsdist-2.0.5-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

MariaDB receives an important security patch for openSUSE Leap 16.0 that resolves a heap buffer overflow capable of triggering crashes or remote code execution. A moderate update for container-suseconnect on the same platform simply switches its build environment to Go version 1.25 without addressing specific exploits. Users running openSUSE Tumbleweed should apply a patch for pocketbase to fix a security issue linked to CVE-2026-33809. The Xen virtualization suite also gets an important update that closes three separate vulnerabilities across several SUSE distributions and mandates a system reboot once applied.

openSUSE-SU-2026:20629-1: important: Security update for mariadb
openSUSE-SU-2026:20628-1: moderate: Security update for container-suseconnect
openSUSE-SU-2026:10628-1: moderate: pocketbase-0.37.3-1.1 on GA media
SUSE-SU-2026:1645-1: important: Security update for xen

SUSE 5641 Published by Philipp Esselbach 0

SUSE rolled out a batch of security advisories that impact various Linux distributions and widely used open source software. Kernel live patches for SUSE Linux Enterprise address critical race conditions in ALSA alongside privilege escalation flaws within AppArmor. Firefox Extended Support Release gets a major upgrade to version 140.10.0, which closes 25 separate vulnerabilities tied to memory corruption and boundary checking failures. System administrators should also apply important fixes for freerdp that resolve multiple heap overflows, while moderate updates quietly patch security gaps in freeciv, systemd components, Emacs, and the ngtcp2 library.

SUSE-SU-2026:1622-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:1621-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)
openSUSE-SU-2026:0155-1: moderate: Security update for freeciv
openSUSE-SU-2026:20621-1: important: Security update for MozillaFirefox
openSUSE-SU-2026:10624-1: moderate: libsystemd0-259.5-1.3 on GA media
openSUSE-SU-2026:10619-1: moderate: emacs-30.2-8.1 on GA media
openSUSE-SU-2026:10621-1: moderate: libngtcp2-16-1.22.1-1.1 on GA media
SUSE-SU-2026:1630-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:1632-1: important: Security update for freerdp
SUSE-SU-2026:1634-1: important: Security update for freerdp

SUSE 5641 Published by Philipp Esselbach 0

openSUSE has released a series of security updates targeting multiple packages across Tumbleweed and SLE Backports distributions. These patches address numerous vulnerabilities rated from moderate to important, including critical flaws in Chromium and Kyverno alongside several issues affecting OVMF, FreeRDP2, and Mako templates. Administrators managing these systems should prioritize installing the fixes through zypper or YaST to prevent potential exploitation of the listed CVEs. Each announcement provides detailed package lists and direct links to SUSE security pages for further technical reference.

openSUSE-SU-2026:10615-1: moderate: ovmf-202602-9.1 on GA media
openSUSE-SU-2026:10617-1: moderate: libminizip1-1.3.1-2.1 on GA media
openSUSE-SU-2026:10611-1: moderate: freerdp2-2.11.7-8.1 on GA media
openSUSE-SU-2026:10612-1: moderate: golang-github-prometheus-alertmanager-0.31.1-3.1 on GA media
openSUSE-SU-2026:10616-1: moderate: python311-Mako-1.3.11-1.1 on GA media
openSUSE-SU-2026:10613-1: moderate: kyverno-1.17.2-1.1 on GA media
openSUSE-SU-2026:0152-1: important: Security update for chromium
openSUSE-SU-2026:0153-1: important: Security update for chromium

SUSE 5641 Published by Philipp Esselbach 0

openSUSE Tumbleweed users can now install a moderate security update for Mozilla Thunderbird version 140.9.1. The release fixes 25 separate vulnerabilities that could otherwise be exploited by attackers. You should apply the patch right away to keep your email client secure. This package also brings updated translation files and OpenPGP support alongside the core application.

openSUSE-SU-2026:10610-1: moderate: MozillaThunderbird-140.9.1-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE recently issued a series of security advisories targeting critical flaws in the Linux kernel live patches alongside popular applications like flatpak, vim, and ImageMagick. These updates resolve dozens of common vulnerability exposures that could enable unauthorized code execution, privilege escalation, or system crashes for local and remote attackers. Administrators managing SUSE Linux Enterprise Server versions 15 SP4 through SP7 will also need to apply these changes across various openSUSE Leap distributions.

SUSE-SU-2026:1578-1: important: Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:1583-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1584-1: important: Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:1600-1: important: Security update for flatpak
SUSE-SU-2026:1602-1: moderate: Security update for libpng16
SUSE-SU-2026:1605-1: moderate: Security update for openssl-3
SUSE-SU-2026:1607-1: important: Security update for vim
SUSE-SU-2026:1592-1: important: Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)
openSUSE-SU-2026:20618-1: moderate: Security update for haproxy
openSUSE-SU-2026:20617-1: important: Security update for python-Pillow
openSUSE-SU-2026:20619-1: important: Security update for coredns
openSUSE-SU-2026:10607-1: moderate: golang-github-prometheus-prometheus-3.11.2-1.1 on GA media
openSUSE-SU-2026:10608-1: moderate: libXpm-devel-3.5.18-2.1 on GA media
openSUSE-SU-2026:10606-1: moderate: frr-10.5.1-3.1 on GA media
SUSE-SU-2026:1597-1: important: Security update for ImageMagick
SUSE-SU-2026:1599-1: important: Security update for librsvg
SUSE-SU-2026:1619-1: moderate: Security update for PackageKit
SUSE-SU-2026:1613-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1611-1: important: Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

SUSE 5641 Published by Philipp Esselbach 0

SUSE just pushed out a massive batch of security advisories covering dozens of essential packages across their Linux distributions. Many of these patches tackle dangerous flaws like buffer overflows in ImageMagick and libraw, authentication bypasses in Tomcat and rclone, plus several kernel vulnerabilities that could enable privilege escalation or system crashes. System administrators should apply the recommended zypper or YaST updates right away to close these critical gaps before attackers can exploit them. Beyond the main security fixes, each bulletin also bundles routine dependency upgrades and minor stability improvements for the affected software versions.

SUSE-SU-2026:1555-1: important: Security update for libraw
SUSE-SU-2026:1556-1: important: Security update for libraw
SUSE-SU-2026:1558-1: important: Security update for tomcat11
openSUSE-SU-2026:20609-1: important: Security update for google-guest-agent
openSUSE-SU-2026:20607-1: important: Security update for erlang
openSUSE-SU-2026:20612-1: important: Security update for tomcat10
openSUSE-SU-2026:20611-1: important: Security update for tomcat
openSUSE-SU-2026:20606-1: important: Security update for ImageMagick
openSUSE-SU-2026:20605-1: important: Security update for openexr
openSUSE-SU-2026:20603-1: important: Security update for ignition
openSUSE-SU-2026:20601-1: moderate: Security update for giflib
SUSE-SU-2026:1562-1: moderate: Security update for openssl-1_1
SUSE-SU-2026:1563-1: important: Security update for the Linux Kernel
SUSE-SU-2026:1565-1: moderate: Security update for libssh
SUSE-SU-2026:1560-1: important: Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)
openSUSE-SU-2026:0145-1: moderate: Security update for ocaml-patch, opam
openSUSE-SU-2026:0147-1: moderate: Security update for tor
openSUSE-SU-2026:10599-1: moderate: cacti-1.2.30+git306.82d5aef5-1.1 on GA media
openSUSE-SU-2026:10600-1: moderate: csync2-2.0+git.1600444747.83b3644-3.1 on GA media
openSUSE-SU-2026:10598-1: moderate: libtree-sitter0_26-0.26.8-1.1 on GA media
openSUSE-SU-2026:0151-1: critical: Security update for rclone
openSUSE-SU-2026:0150-1: important: Security update for flannel
openSUSE-SU-2026:0149-1: important: Security update for flannel
openSUSE-SU-2026:0148-1: critical: Security update for cacti, cacti-spine
SUSE-SU-2026:1568-1: moderate: Security update for haproxy
SUSE-SU-2026:1574-1: important: Security update for the Linux Kernel
SUSE-SU-2026:1577-1: important: Security update for openssl-1_1
SUSE-SU-2026:1576-1: important: Security update for gdk-pixbuf

SUSE 5641 Published by Philipp Esselbach 0

SUSE has released a batch of security patches addressing multiple vulnerabilities across essential software packages like flatpak, podman, openssl-1_1, and gdk-pixbuf. These updates tackle critical flaws ranging from sandbox escape risks in container tools to denial of service attacks triggered by malformed images or crafted network messages. Administrators managing SUSE Linux Enterprise Server, openSUSE Leap, or Tumbleweed systems should apply these fixes immediately using zypper patch or YaST to prevent potential system compromise. The patches also include routine version bumps and bug corrections for utilities like kea and python-multipart alongside the primary security hardening measures.

openSUSE-SU-2026:20590-1: moderate: Security update for gnome-remote-desktop
openSUSE-SU-2026:20598-1: moderate: Security update for python-PyPDF2
SUSE-SU-2026:1541-1: important: Security update for flatpak
SUSE-SU-2026:1540-1: important: Security update for podman
SUSE-SU-2026:1539-1: important: Security update for gdk-pixbuf
SUSE-SU-2026:1544-1: moderate: Security update for python-python-multipart
SUSE-SU-2026:1548-1: important: Security update for kea
SUSE-SU-2026:1550-1: moderate: Security update for openssl-1_1
openSUSE-SU-2026:10593-1: moderate: openCryptoki-3.26.0-6.1 on GA media
openSUSE-SU-2026:10591-1: moderate: kissfft-131.2.0-2.1 on GA media
openSUSE-SU-2026:10585-1: moderate: GraphicsMagick-1.3.46-6.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE just released a massive wave of security advisories targeting dozens of essential packages across their Linux distributions. These updates fix critical flaws in widely used software like ImageMagick, Python, Node.js, Go, and the core kernel itself. Many of the patches address dangerous memory corruption bugs that could let attackers crash systems or execute arbitrary code remotely. Administrators need to apply these fixes immediately using zypper or YaST to stay protected.

SUSE-SU-2026:1497-1: important: Security update for ImageMagick
SUSE-SU-2026:1494-1: important: Security update for rootlesskit
SUSE-SU-2026:1498-1: important: Security update for glibc-livepatches
SUSE-SU-2026:1502-1: moderate: Security update for python312
SUSE-SU-2026:1504-1: moderate: Security update for GraphicsMagick
SUSE-SU-2026:1531-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1530-1: important: Security update for python311
SUSE-SU-2026:1527-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1513-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)
openSUSE-SU-2026:10582-1: moderate: python311-PyPDF2-2.11.1-9.1 on GA media
openSUSE-SU-2026:10581-1: moderate: haproxy-3.3.6+git91.af5637e93-1.1 on GA media
openSUSE-SU-2026:20588-1: critical: Security update for chromium
openSUSE-SU-2026:20558-1: important: Security update for gdk-pixbuf
openSUSE-SU-2026:20578-1: important: Security update for python-Django
openSUSE-SU-2026:20581-1: important: Security update for nebula
openSUSE-SU-2026:20574-1: important: Security update for libraw
openSUSE-SU-2026:20560-1: important: Security update for xwayland
openSUSE-SU-2026:20571-1: important: Security update for go1.26
openSUSE-SU-2026:20570-1: important: Security update for go1.25
openSUSE-SU-2026:20579-1: important: Security update for gosec
openSUSE-SU-2026:20567-1: important: Security update for qemu
openSUSE-SU-2026:20586-1: important: Security update for roundcubemail
openSUSE-SU-2026:20572-1: important: Security update for the Linux Kernel
openSUSE-SU-2026:20552-1: important: Security update for LibVNCServer
openSUSE-SU-2026:20569-1: moderate: Security update for rust1.94
openSUSE-SU-2026:20547-1: important: Security update for strongswan
openSUSE-SU-2026:20544-1: important: Security update for xorg-x11-server
openSUSE-SU-2026:20556-1: important: Security update for freeipmi
openSUSE-SU-2026:20536-1: moderate: Security update for GraphicsMagick
openSUSE-SU-2026:20554-1: important: Security update for dovecot24
openSUSE-SU-2026:20535-1: important: Security update for plexus-utils
openSUSE-SU-2026:20540-1: important: Security update for vim
openSUSE-SU-2026:20532-1: important: Security update for cockpit-subscriptions
openSUSE-SU-2026:20517-1: important: Security update for python313
openSUSE-SU-2026:20512-1: moderate: Security update for pcre2
openSUSE-SU-2026:20528-1: critical: Security update for Botan
openSUSE-SU-2026:20504-1: important: Security update for cockpit
openSUSE-SU-2026:20501-1: important: Security update for glibc
openSUSE-SU-2026:20506-1: important: Security update for python-cryptography
openSUSE-SU-2026:20519-1: important: Security update for nodejs24
openSUSE-SU-2026:20502-1: important: Security update for cockpit-podman
openSUSE-SU-2026:20486-1: important: Security update for MozillaFirefox
openSUSE-SU-2026:20499-1: moderate: Security update for ovmf
openSUSE-SU-2026:20495-1: moderate: Security update for util-linux
openSUSE-SU-2026:20497-1: moderate: Security update for python-gi-docgen
openSUSE-SU-2026:20479-1: moderate: Security update for clamav
SUSE-SU-2026:1508-1: important: Security update for podman
SUSE-SU-2026:1511-1: important: Security update for flatpak
SUSE-SU-2026:1505-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1509-1: important: Security update for nodejs22

SUSE 5641 Published by Philipp Esselbach 0

SUSE released a batch of critical security updates to address multiple vulnerabilities across their Linux distributions. These patches fix serious flaws in widely used software such as the Linux kernel live modules, image processing libraries, webmail clients, and container tools like Kubernetes and Cosign. Many of the identified issues carry high severity ratings because they could allow unprivileged users to escalate privileges or trigger memory corruption through malformed input files.

SUSE-SU-2026:1464-1: important: Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:1463-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:1461-1: low: Security update for jetty-minimal
SUSE-SU-2026:1481-1: important: Security update for gegl
SUSE-SU-2026:1480-1: important: Security update for buildah
openSUSE-SU-2026:10580-1: moderate: python315-3.15.0~a8-2.1 on GA media
openSUSE-SU-2026:10579-1: moderate: python310-3.10.20-5.1 on GA media
openSUSE-SU-2026:0142-1: important: Security update for Botan
openSUSE-SU-2026:0141-1: important: Security update for roundcubemail
SUSE-SU-2026:1488-1: important: Security update for rekor
SUSE-SU-2026:1489-1: important: Security update for kubernetes-old
SUSE-SU-2026:1486-1: important: Security update for cosign
SUSE-SU-2026:1491-1: important: Security update for buildah
SUSE-SU-2026:1490-1: important: Security update for kubernetes
openSUSE-SU-2026:0144-1: important: Security update for roundcubemail

SUSE 5641 Published by Philipp Esselbach 0

OpenSUSE has released a series of moderate severity security updates covering several key packages across its Tumbleweed and Backports distributions. These patches address dozens of vulnerabilities in widely used software like kubo, chromedriver, bouncycastle, Pillow, Django, and Jetty. Each announcement provides specific CVE identifiers along with detailed installation commands for system administrators to apply the fixes quickly. Users should prioritize these updates to prevent potential exploitation of the newly disclosed flaws.

openSUSE-SU-2026:0135-1: moderate: Security update for kubo
openSUSE-SU-2026:10577-1: moderate: skopeo-1.22.1-1.1 on GA media
openSUSE-SU-2026:10578-1: moderate: tempo-cli-2.10.4-1.1 on GA media
openSUSE-SU-2026:10575-1: moderate: python311-Pillow-12.2.0-2.1 on GA media
openSUSE-SU-2026:10573-1: moderate: cpp-httplib-devel-0.42.0-1.1 on GA media
openSUSE-SU-2026:10571-1: moderate: bouncycastle-1.84-1.1 on GA media
openSUSE-SU-2026:10570-1: moderate: aardvark-dns-1.17.1-1.1 on GA media
openSUSE-SU-2026:10576-1: moderate: python311-jwcrypto-1.5.7-2.1 on GA media
openSUSE-SU-2026:10572-1: moderate: chromedriver-147.0.7727.101-1.1 on GA media
openSUSE-SU-2026:10574-1: moderate: jetty-annotations-9.4.58-4.1 on GA media
openSUSE-SU-2026:0138-1: moderate: Security update for python-djangorestframework, python-Django

SUSE 5641 Published by Philipp Esselbach 0

openSUSE Tumbleweed just pushed out a moderate security fix for opam and its related development tools. This update tackles CVE-2026-41082, which scores around 5.1 on the CVSS scale depending on how you measure it. You should install the new packages right away to block any local exploitation attempts. The upgrade brings everything up to version 2.5.1 and patches the underlying security gap.

openSUSE-SU-2026:10568-1: moderate: opam-2.5.1-1.1 on GA media

SUSE 5641 Published by Philipp Esselbach 0

SUSE has released a batch of security patches addressing multiple vulnerabilities across its Linux distributions and enterprise software packages. The updates range from low to important severity ratings and fix critical issues like denial of service attacks, memory corruption flaws, and improper certificate handling in tools such as NetworkManager, openssl-3, and bind. Administrators can apply these fixes using standard zypper commands or the YaST interface on affected systems including openSUSE Leap, SUSE Linux Enterprise Server, and Tumbleweed. Prompt installation is recommended to mitigate risks associated with CVEs affecting widely used networking, cryptographic, and development libraries.

SUSE-SU-2026:1418-1: low: Security update for iproute2
SUSE-SU-2026:1421-1: moderate: Security update for python-CairoSVG
SUSE-SU-2026:1422-1: moderate: Security update for smc-tools
SUSE-SU-2026:1436-1: moderate: Security update for python-ecdsa
SUSE-SU-2026:1440-1: moderate: Security update for openvswitch3
SUSE-SU-2026:1441-1: moderate: Security update for avahi
SUSE-SU-2026:1443-1: moderate: Security update for NetworkManager
SUSE-SU-2026:1423-1: important: Security update for podman
SUSE-SU-2026:1424-1: moderate: Security update for polkit
SUSE-SU-2026:1429-1: moderate: Security update for openssl-3
SUSE-SU-2026:1432-1: important: Security update for libcap
SUSE-SU-2026:1428-1: important: Security update for bind
SUSE-SU-2026:1427-1: moderate: Security update for NetworkManager
openSUSE-SU-2026:10565-1: moderate: libraw-devel-0.22.1-1.1 on GA media
openSUSE-SU-2026:10560-1: moderate: blender-5.1-5.1.1-1.1 on GA media
openSUSE-SU-2026:10567-1: moderate: python311-Django-5.2.13-1.1 on GA media
openSUSE-SU-2026:10562-1: moderate: flannel-0.28.4-1.1 on GA media
openSUSE-SU-2026:10566-1: moderate: liblog4cxx-devel-1.7.0-2.1 on GA media
openSUSE-SU-2026:10559-1: moderate: ImageMagick-7.1.2.19-1.1 on GA media
openSUSE-SU-2026:10558-1: moderate: GraphicsMagick-1.3.46-5.1 on GA media
openSUSE-SU-2026:10564-1: moderate: libpng16-16-1.6.57-1.1 on GA media
openSUSE-SU-2026:10563-1: moderate: leancrypto-devel-1.7.2-1.1 on GA media