Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 8.4

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2026-59088: GIMP: Denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (bsc#1274840).

    first Aug 21, 2026
  • High max 7.6

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…

    first Aug 21, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 21, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 21, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…

    first Aug 21, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…

    first Aug 21, 2026
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#…

    first Aug 17, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: Updated to version 9.2.0957. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash …

    first Aug 18, 2026
  • High max 8.6

    Security update for openvswitch

    This update for openvswitch fixes the following issues: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).

    first Aug 17, 2026
  • High max 8.8

    Security update for libssh2_org

    This update for libssh2_org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the `sftp_symlink()` function in `src/sftp.c` (bsc#1268546). - CVE-2026-7598: integer overflow in function `userauth_password` of file `src/user…

    first Aug 17, 2026
  • High max 7.2

    ucode-intel-20260812-1.1 on GA media

    These are all security issues fixed in the ucode-intel-20260812-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • High max 8.7

    python314-3.14.7-1.1 on GA media

    These are all security issues fixed in the python314-3.14.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • High max 7.5

    c-ares-devel-1.34.8-1.1 on GA media

    These are all security issues fixed in the c-ares-devel-1.34.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • High max 8.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549). - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-buildi…

    first Aug 19, 2026
  • High max 7.5

    Security update for dracut

    This update for dracut fixes the following issue: Update to version 059+suse.645.g79fd74d. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other update…

    first Aug 19, 2026
  • High max 8.8

    chromedriver-151.0.7922.173-1.1 on GA media

    These are all security issues fixed in the chromedriver-151.0.7922.173-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 23, 2026
  • High max 7.4

    Security update for weechat

    This update for weechat fixes the following issues: Changes in weechat: - Update to 4.10.0: Added * core: add command /theme (#1338) * core: add built-in "light" theme, applied automatically on first start on light-background terminals (#1338) * core: add the…

    first Aug 20, 2026
  • High max 7.7

    Security update for redis

    This update for redis fixes the following issues: Changes in redis: - Update to 8.10.1 Update urgency: SECURITY: There are security fixes in the release. - Security fixes - (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OO…

    first Aug 20, 2026
  • High max 7.1

    Security update for apptainer

    This update for apptainer fixes the following issues: Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. …

    first Aug 20, 2026
  • High max 8.6

    Security update for git-lfs

    This update for git-lfs fixes the following issues: Changes in git-lfs: - update to 3.7.1: (boo#1252259 CVE-2025-26625) This release introduces security fixes for Linux, macOS, and Windows systems, which have been collectively assigned CVE-2025-26625. When po…

    first Aug 21, 2026
  • High max 8.1

    libwireshark19-4.6.8-2.1 on GA media

    These are all security issues fixed in the libwireshark19-4.6.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • High max 7.0

    python313-eventlet-0.41.2-1.1 on GA media

    These are all security issues fixed in the python313-eventlet-0.41.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • High max 8.4

    helm-4.2.4-1.1 on GA media

    These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • High max 7.5

    python313-graphifyy-0.9.48-1.1 on GA media

    These are all security issues fixed in the python313-graphifyy-0.9.48-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    python313-Pygments-2.21.0-1.1 on GA media

    These are all security issues fixed in the python313-Pygments-2.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    python313-Mako-1.4.1-1.1 on GA media

    These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    python313-GitPython-3.1.59-2.1 on GA media

    These are all security issues fixed in the python313-GitPython-3.1.59-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    libecpg6-18.6-1.1 on GA media

    These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    ffmpeg-4-4.4.8-4.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.8-4.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.2

    comfyui-0.33.3-1.1 on GA media

    These are all security issues fixed in the comfyui-0.33.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service (bsc#1268683).

    first Aug 12, 2026
  • High max 7.5

    Security update for python-msgpack

    This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).

    first Aug 6, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…

    first Aug 6, 2026
  • High max 7.5

    Security update for wget

    This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffe…

    first Aug 4, 2026
  • High max 8.8

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 11, 2026
  • High max 8.7

    Security update for python313

    This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…

    first Aug 19, 2026
  • High max 7.6

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…

    first Aug 21, 2026
  • High max 7.5

    Security update for sccache

    This update for sccache fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274146). - CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Va…

    first Aug 21, 2026
  • High max 8.8

    postgresql14-14.24-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.24-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 19, 2026
  • High max 8.8

    ffmpeg-9-libavcodec-devel-9.0.1-2.1 on GA media

    These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 19, 2026