Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,588 results · Clear filters · Feed

  • High max 7.8

    nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

    These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.20-2.20.9-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.20-2.20.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.19-2.19.13-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.19-2.19.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.18-2.18.19-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.18-2.18.19-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.21.4-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.21.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.1

    Security update for valkey

    This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).

    first Sep 30, 2026
  • High max 8.4

    Security update for helm

    This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…

    first Sep 30, 2026
  • High max 8.7

    Security update for sccache

    This update for sccache fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavi…

    first Sep 30, 2026
  • High max 8.4

    Security update for helm

    This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…

    first Sep 30, 2026
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…

    first Oct 5, 2026
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…

    first Oct 5, 2026
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…

    first Oct 5, 2026
  • High max 7.1

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). - Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd

    first Oct 5, 2026
  • High max 7.1

    Security update for valkey

    This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).

    first Oct 5, 2026
  • High max 7.1

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).

    first Oct 5, 2026
  • High max 7.1

    Security update for valkey

    This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read (bsc#1281417).

    first Oct 5, 2026
  • High max 7.5

    Security update for python-msgpack

    This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).

  • High max 7.5

    Security update for perl-DBI

    This update for perl-DBI fixes the following issues: - CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). - CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKey…

  • High max 8.2

    Security update for pcre2

    This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …

  • High max 7.5

    Security update for rpcbind

    This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).

  • High max 8.7

    Security update for terraform-provider-susepubliccloud

    This update for terraform-provider-susepubliccloud fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc…

  • High max 7.5

    python313-validators-0.35.0-1.4 on GA media

    These are all security issues fixed in the python313-validators-0.35.0-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-requests-2.34.2-1.2 on GA media

    These are all security issues fixed in the python313-requests-2.34.2-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-pywbem-1.8.1-2.5 on GA media

    These are all security issues fixed in the python313-pywbem-1.8.1-2.5 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-markdown2-2.5.5-1.3 on GA media

    These are all security issues fixed in the python313-markdown2-2.5.5-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-colander-2.0-2.4 on GA media

    These are all security issues fixed in the python313-colander-2.0-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-rsa-4.9.1-1.4 on GA media

    These are all security issues fixed in the python313-rsa-4.9.1-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.5

    python313-rpyc-6.0.2-1.5 on GA media

    These are all security issues fixed in the python313-rpyc-6.0.2-1.5 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-py-1.11.0-9.5 on GA media

    These are all security issues fixed in the python313-py-1.11.0-9.5 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.8
    openSUSE-SU-2026:12010-1 1 CVE 1 exploited

    python313-imagecodecs-2026.3.6-2.10 on GA media

    These are all security issues fixed in the python313-imagecodecs-2026.3.6-2.10 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-httptools-0.8.0-1.3 on GA media

    These are all security issues fixed in the python313-httptools-0.8.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.4

    python313-ecdsa-0.19.2-2.2 on GA media

    These are all security issues fixed in the python313-ecdsa-0.19.2-2.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.4

    python313-confluent-kafka-2.15.1-1.1 on GA media

    These are all security issues fixed in the python313-confluent-kafka-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.4

    qsnapper-1.3.3-1.4 on GA media

    These are all security issues fixed in the qsnapper-1.3.3-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.8

    qemu-11.1.1-2.1 on GA media

    These are all security issues fixed in the qemu-11.1.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-waitress-3.0.2-1.7 on GA media

    These are all security issues fixed in the python313-waitress-3.0.2-1.7 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.2

    python313-openpyxl-3.1.5-1.8 on GA media

    These are all security issues fixed in the python313-openpyxl-3.1.5-1.8 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.8
    openSUSE-SU-2026:12022-1 2 CVEs 1 exploited

    python313-oletools-0.60.2-2.4 on GA media

    These are all security issues fixed in the python313-oletools-0.60.2-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.1

    python313-mysql-connector-python-9.7.0-1.2 on GA media

    These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 7.5

    python313-python-rapidjson-1.23-1.4 on GA media

    These are all security issues fixed in the python313-python-rapidjson-1.23-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026