Security updates for openSUSE are provided by the SUSE Security Team for two months after the second-next release, which currently is around 18 months. See the openSUSE Lifetime page for details.
A well defined Incident Handling Process
is used to track, coordinate and release updates.
Security announcements are sent to the
mailinglist. An archive is also available. There is also a RSS feed that you can subscribe to.
Security Update Informations can be found via Hermes:
Updates are freely available on our Update Mirrors. Desktop applets warn users about new updates and offer to install them with just some mouse clicks. Alternatively command line update tools (zypper) or graphical package management tools (YaST) are also available for installing updates, or you can even turn on fully automatic update installation.