Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 8.7

    snpguest-0.10.0-3.1 on GA media

    These are all security issues fixed in the snpguest-0.10.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 26, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 26, 2026
  • High max 8.8

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).

    first Aug 25, 2026
  • High max 8.8

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 24, 2026
  • High max 7.5

    Security update for dracut

    This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…

    first Aug 24, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: Security issues fixed: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop de…

    first Aug 24, 2026
  • High max 8.8

    Security update for postgresql17

    This update for postgresql17 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 30, 2026
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 30, 2026
  • High max 8.8

    Security update for postgresql15

    This update for postgresql15 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 30, 2026
  • High max 8.8

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 30, 2026
  • High max 8.8

    Security update for dhcpcd

    This update for dhcpcd fixes the following issues: Update to 10.5.0. Security issues fixed: - CVE-2026-56113: crafted DHCPv6 RENEW reply can lead to a denial of service (bsc#1268980). - CVE-2026-56115: crafted DHCPv6 ADVERTISE message can cause a one-byte sta…

    first Aug 30, 2026
  • High max 7.1

    Security update for python-aiohttp

    This update for python-aiohttp fixes the following issues: - CVE-2026-59881: excessive resource consumption due to WebSocket client accepting compressed frames without negotiated permessage-deflate (bsc#1273125). - CVE-2026-69243: HTTP request smuggling via t…

    first Aug 30, 2026
  • High max 7.8

    Security update for udisks2

    This update for udisks2 fixes the following issue: - CVE-2026-7867: insufficient authorization checks on the `as-user` option in the `org.freedesktop.UDisks2.Filesystem.Mount()` D-Bus method can lead to local privilege escalation (bsc#1274430).

    first Aug 30, 2026
  • High max 8.8

    Security update for postgresql18

    This update for postgresql18 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 30, 2026
  • High max 8.8

    Security update for 389-ds

    This update for 389-ds fixes the following issues: Update to version 3.0.6~git382.7a51ea5f5. Security issues fixed: - CVE-2026-11610: heap buffer overflow in the SASL I/O layer via a crafted oversized LDAP UNBIND packet (bsc#1270695). - CVE-2026-11611: unboun…

    first Aug 30, 2026
  • High max 8.7

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption (bsc#1275459). - CVE-2026-59893:…

    first Aug 30, 2026
  • High max 8.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-69247: PKCS#7 `EnvelopedData` decryption exposes a Bleichenbacher oracle through distinguishable errors and timing (bsc#1273551). - CVE-2026-69248: verifier accepts wildcard DNS names …

    first Aug 30, 2026
  • High max 8.6

    kernel-devel-7.2.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.2.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 30, 2026
  • High max 7.0

    lact-0.10.0-1.1 on GA media

    These are all security issues fixed in the lact-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 8.7

    jackson-core-2.18.9-2.1 on GA media

    These are all security issues fixed in the jackson-core-2.18.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can…

    first Aug 28, 2026
  • High max 8.5

    tuxguitar-2.1.0-1.1 on GA media

    These are all security issues fixed in the tuxguitar-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    java-25-openj9-25.0.4.1-1.1 on GA media

    These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    java-21-openj9-21.0.12.1-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    java-1_8_0-openj9-1.8.0.504-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    java-17-openj9-17.0.20.1-1.1 on GA media

    These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    java-11-openj9-11.0.32.1-1.1 on GA media

    These are all security issues fixed in the java-11-openj9-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.8

    emacs-31.1-1.1 on GA media

    These are all security issues fixed in the emacs-31.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • High max 7.5

    python313-uv-0.12.7-1.1 on GA media

    These are all security issues fixed in the python313-uv-0.12.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • High max 8.6

    jupyter-jupyterlab-4.5.10-1.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-4.5.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • High max 7.5

    istioctl-1.30.4-1.1 on GA media

    These are all security issues fixed in the istioctl-1.30.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • High max 7.8

    libvirt-12.6.0-2.1 on GA media

    These are all security issues fixed in the libvirt-12.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • High max 7.5

    Security update for wget

    This update for wget fixes the following issues: Security issued fixed: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only UR…

    first Aug 27, 2026
  • High max 8.7

    python313-starlette-1.6.0-1.1 on GA media

    These are all security issues fixed in the python313-starlette-1.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • High max 7.5

    java-25-openjdk-25.0.4.1-1.1 on GA media

    These are all security issues fixed in the java-25-openjdk-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • High max 7.5

    grafana-12.4.5-4.1 on GA media

    These are all security issues fixed in the grafana-12.4.5-4.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • High max 8.2

    coturn-4.17.2-1.1 on GA media

    These are all security issues fixed in the coturn-4.17.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • High max 8.9

    Security update for tor

    This update for tor fixes the following issues: Changes in tor: - Update to 0.4.9.11 * Major bugfixes + onion services: Prevent a race condition (boo#1275918, CVE-2026-77638) + client: no longer assert and exit if an onion service encodes an all-zero public k…

    first Aug 25, 2026
  • High max 8.7

    Security update for libheif

    This update for libheif fixes the following issues: Update to version 1.23.1 (jsc#PED-16355). Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application (bsc#1273079). - CVE-2026-62291: heap out-of…

    first Aug 25, 2026