Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 7.8

    python3-pytest-ansible-26.8.0-1.1 on GA media

    These are all security issues fixed in the python3-pytest-ansible-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.3

    python313-graphifyy-0.9.65-1.1 on GA media

    These are all security issues fixed in the python313-graphifyy-0.9.65-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.7

    mcphost-0.34.0-11.1 on GA media

    These are all security issues fixed in the mcphost-0.34.0-11.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.9

    libXrender-devel-0.9.12-2.1 on GA media

    These are all security issues fixed in the libXrender-devel-0.9.12-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.5

    libX11-6-1.8.13-2.1 on GA media

    These are all security issues fixed in the libX11-6-1.8.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.8

    helm3-3.22.0-1.1 on GA media

    These are all security issues fixed in the helm3-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.7

    bazel-rules-python-source-2.3.3-1.1 on GA media

    These are all security issues fixed in the bazel-rules-python-source-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.7

    apptainer-1.5.3-4.1 on GA media

    These are all security issues fixed in the apptainer-1.5.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.3

    apko-1.4.4-1.1 on GA media

    These are all security issues fixed in the apko-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…

    first Sep 21, 2026
  • High max 8.1

    Security update for jq

    This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd() function (bsc#976992). - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in `decNumberToString` (bsc#1218034)…

  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

  • High max 7.5

    libipa_hbac-devel-2.13.1-3.1 on GA media

    These are all security issues fixed in the libipa_hbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.1

    python313-PyMuPDF-1.28.2-1.1 on GA media

    These are all security issues fixed in the python313-PyMuPDF-1.28.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.6

    libsoup-3_0-0-3.6.6-9.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.6-9.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.5

    helm-4.3.0-1.1 on GA media

    These are all security issues fixed in the helm-4.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.5

    fake-gcs-server-1.56.1-1.1 on GA media

    These are all security issues fixed in the fake-gcs-server-1.56.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 8.2

    python313-3.13.15-1.1 on GA media

    These are all security issues fixed in the python313-3.13.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • High max 7.5

    amazon-ssm-agent-3.3.5390.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.5390.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 18, 2026
  • High max 8.3

    python313-pymongo-4.18.1-1.1 on GA media

    These are all security issues fixed in the python313-pymongo-4.18.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 8.7

    jetty-annotations-9.4.58-6.1 on GA media

    These are all security issues fixed in the jetty-annotations-9.4.58-6.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 7.8

    NetworkManager-applet-l2tp-1.52.6-1.1 on GA media

    These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 17, 2026
  • High max 7.7

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request (bsc#1236258). - CVE-2025-23166: improper error handling in async cryptographic opera…

  • High max 7.7

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs e…

    first Sep 17, 2026
  • High max 7.8

    Security update for netcdf

    This update for netcdf fixes the following issue: - CVE-2026-86095: out-of-bounds write in `NC4_HDF5_inq_attname()` due to missing length validation when processing a crafted HDF5 file (bsc#1279882).

    first Sep 17, 2026
  • High max 7.7

    Security update for nodejs18

    This update for nodejs18 fixes the following issues: - CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request (bsc#1236258). - CVE-2025-23166: improper error handling in async cryptographic opera…

    first Sep 17, 2026
  • High max 7.8

    Security update for mbedtls-2

    This update for mbedtls-2 fixes the following issues: Changes in mbedtls-2: - CVE-2025-52496: race condition in AESNI support detection, AES key disclosure / GCM forgery in multithreaded programs (boo#1245810) - CVE-2025-59438: padding oracle through timing o…

    first Sep 16, 2026
  • High max 7.5

    ffmpeg-8-8.1.2-5.1 on GA media

    These are all security issues fixed in the ffmpeg-8-8.1.2-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 16, 2026
  • High max 7.5

    Security update for openai-codex

    This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: * Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume * Answer questions inline while Codex keeps w…

    first Sep 16, 2026
  • High max 7.0

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations (bsc#1277378) - CVE-2026-78475: unbounded variable-length stack allocations in t…

    first Sep 16, 2026
  • High max 7.8

    Security update for mkvtoolnix

    This update for mkvtoolnix fixes the following issues: Changes in mkvtoolnix: - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic (boo#1280126).

    first Sep 16, 2026
  • High max 7.8

    Security update for chirp

    This update for chirp fixes the following issues: Changes in chirp: - Update to version 20260911: * ftm300d: Experimental Yaesu FTM-300DR driver * Update Ukrainian localization * ar8200: Fix importing memories with AM mode * Unify Baofeng setting descriptions…

    first Sep 16, 2026
  • High max 7.5

    Security update for gh

    This update for gh fixes the following issues: Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH channel messages (CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, bsc…

    first Sep 15, 2026
  • High max 7.0

    Security update for rpm

    This update for rpm fixes the following issues: Changes in rpm: - split imaevmsign plugin into a multibuild flavor Changes in rpm: - Add Requires: (rpm-plugin-selinux if selinux-policy) - harden ndb code [bsc#1269584] [CVE-2026-44605] - split all plugins into…

    first Sep 16, 2026
  • High max 7.4

    ant-1.10.18-2.1 on GA media

    These are all security issues fixed in the ant-1.10.18-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 16, 2026
  • High max 8.7

    Security update for openvpn

    This update for openvpn fixes the following issue: - CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613).

  • High max 8.2

    Security update for pcre2

    This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …

  • High max 8.8

    Security update for gvfs

    This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…

  • High max 8.7

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…