Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,597 results · Clear filters · Feed

  • High max 7.6
    openSUSE-SU-2026:11462-1 1 CVE

    gleam-1.18.1-1.1 on GA media

    These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 6, 2026
  • High max 7.5
    SUSE-SU-2026:3521-1 11 CVEs

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…

    first Aug 6, 2026
  • High max 8.6
    SUSE-SU-2026:3517-1 10 CVEs

    Security update for bind

    This update for bind fixes the following issues: - CVE-2022-3094: UPDATE message flood may cause `named` to exhaust all available memory (bsc#1207471). - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-…

    first Aug 6, 2026
  • High max 8.8
    openSUSE-SU-2026:11465-1 4 CVEs

    python313-Django4-4.2.30-5.1 on GA media

    These are all security issues fixed in the python313-Django4-4.2.30-5.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 6, 2026
  • High max 8.8
    openSUSE-SU-2026:11466-1 4 CVEs

    python313-GitPython-3.1.58-1.1 on GA media

    These are all security issues fixed in the python313-GitPython-3.1.58-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 6, 2026
  • High max 8.8
    openSUSE-SU-2026:11464-1 4 CVEs

    python313-Django-6.0.8-1.1 on GA media

    These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 6, 2026
  • High max 8.1
    openSUSE-SU-2026:21535-1 1 CVE

    Security update for rsyslog

    This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…

    first Aug 5, 2026
  • High max 7.5
    openSUSE-SU-2026:21534-1 16 CVEs

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…

    first Aug 5, 2026
  • High max 8.1
    openSUSE-SU-2026:21532-1 3 CVEs

    Security update for php8

    This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks (bsc#1273077). - CVE-2026-9672: Upgrade libgd (bsc#1273078). - CVE-2026-17543: SQL injection in ext-pgsql via E'...' back…

    first Aug 5, 2026
  • High max 7.5
    openSUSE-SU-2026:11457-1 2 CVEs

    perl-Date-Manip-6.990.0-2.1 on GA media

    These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 5, 2026
  • High max 8.7
    openSUSE-SU-2026:11456-1 1 CVE

    open-isns-0.103+4.60de8b5-1.1 on GA media

    These are all security issues fixed in the open-isns-0.103+4.60de8b5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 5, 2026
  • High max 8.1
    SUSE-SU-2026:3510-1 2 CVEs

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543:…

    first Aug 5, 2026
  • High max 8.8
    openSUSE-SU-2026:11454-1 6 CVEs

    libssh2-1-1.11.1-4.1 on GA media

    These are all security issues fixed in the libssh2-1-1.11.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 5, 2026
  • High max 7.5
    openSUSE-SU-2026:11460-1 13 CVEs

    libwireshark19-4.6.7-3.1 on GA media

    These are all security issues fixed in the libwireshark19-4.6.7-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 5, 2026
  • High max 7.5
    openSUSE-SU-2026:11453-1 10 CVEs

    java-1_8_0-openjdk-1.8.0.502-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.502-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 5, 2026
  • High max 8.1
    SUSE-SU-2026:3514-1 3 CVEs

    Security update for php8

    This update for php8 fixes the following issues: Update to version 8.2.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security i…

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3501-1 56 CVEs

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 4.6.7: - CVE-2026-5299: ICMPv6 dissector crash (bsc#1263757). - CVE-2026-5401: AFP dissector crash (bsc#1263756). - CVE-2026-5402: TLS dissector crash and possible code execution (bsc#126…

    first Aug 5, 2026
  • High max 8.1
    SUSE-SU-2026:3513-1 2 CVEs

    Security update for php8

    This update for php8 fixes the following issues: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion (bsc#1273077). - CVE-2026-9672: security issues in `libgd` (bsc#1273078). - CVE-2026-17543:…

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3508-1 6 CVEs

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3507-1 6 CVEs

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3506-1 6 CVEs

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3505-1 6 CVEs

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 5, 2026
  • High max 8.7
    SUSE-SU-2026:3504-1 1 CVE

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service (bsc#1262266).

    first Aug 5, 2026
  • High max 8.8
    SUSE-SU-2026:3503-1 4 CVEs

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2026-15307: server-side file-write and request forgery via spatial lookups (bsc#1272997). - CVE-2026-15337: potential denial-of-service vulnerability in `check_for_language()` (bsc#1272998). - CV…

    first Aug 5, 2026
  • High max 7.1
    openSUSE-SU-2026:21529-1 1 CVE

    Security update for perl-HTTP-Tiny

    This update for perl-HTTP-Tiny fixes the following issues: Changes in perl-HTTP-Tiny: - updated to 0.096 - CVE-2026-7017: Fixed forwarded credential headers to cross-origin redirect targets (bsc#1271020) - Caller-supplied Authorization, Cookie, and Proxy-Auth…

    first Aug 4, 2026
  • High max 7.5
    openSUSE-SU-2026:21526-1 1 CVE

    Security update for python-httplib2

    This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError o…

    first Aug 4, 2026
  • High max 7.8
    openSUSE-SU-2026:21525-1 1 CVE

    Security update for rrdtool

    This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

    first Aug 4, 2026
  • High max 8.1
    openSUSE-SU-2026:21524-1 1 CVE

    Security update for nginx

    This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).

    first Aug 4, 2026
  • High max 8.8
    openSUSE-SU-2026:21522-1 5 CVEs

    Security update for ffmpeg-4

    This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder (bsc#1272758) - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c (bsc#1272754) - CVE-2026-64830: Heap…

    first Aug 3, 2026
  • High max 7.8
    openSUSE-SU-2026:21521-1 3 CVEs

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-66757: signed integer overflow in `file-sgi` causes the plugin to crash when RLE-compressed SGI images are processed (bsc#1273151) - CVE-2026-66758: integer overflow in `file-fits` p…

    first Aug 3, 2026
  • High max 8.7
    openSUSE-SU-2026:21518-1 1 CVE

    Security update for python-ujson

    This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump() can lead to memory leaks (bsc#1270301).

    first Aug 3, 2026
  • High max 7.9
    openSUSE-SU-2026:21516-1 1 CVE

    Security update for python-sh

    This update for python-sh fixes the following issue - CVE-2026-54552: `_uid` option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation (bsc#1272424).

    first Aug 3, 2026
  • High max 7.8
    openSUSE-SU-2026:11449-1 3 CVEs

    gimp-3.2.4-3.1 on GA media

    These are all security issues fixed in the gimp-3.2.4-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 8.8
    openSUSE-SU-2026:11448-1 5 CVEs

    ffmpeg-4-4.4.8-3.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.8-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 7.5
    openSUSE-SU-2026:11447-1 1 CVE

    cockpit-subscriptions-16.3-1.1 on GA media

    These are all security issues fixed in the cockpit-subscriptions-16.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 7.5
    openSUSE-SU-2026:11446-1 1 CVE

    cockpit-repos-4.9-1.1 on GA media

    These are all security issues fixed in the cockpit-repos-4.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 7.5
    openSUSE-SU-2026:11444-1 1 CVE

    azure-storage-azcopy-10.32.6-1.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 8.3
    openSUSE-SU-2026:11442-1 8 CVEs

    OpenImageIO-3.1.16.0-1.1 on GA media

    These are all security issues fixed in the OpenImageIO-3.1.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 4, 2026
  • High max 8.7
    SUSE-SU-2026:3482-1 19 CVEs

    Security update for netty, netty-tcnative

    This update for netty, netty-tcnative fixes the following issues: Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed - CVE-2026-44891: memory exhaustion in `io.netty:netty-codec-stomp` (bsc#1271435). - …

    first Aug 4, 2026
  • High max 8.1
    SUSE-SU-2026:3478-1 1 CVE

    Security update for rsyslog

    This update for rsyslog fixes the following issues: - CVE-2026-61548: parsing of crafted RFC 5424 messages in `mmpstrucdata` can lead to a stack buffer overflow (bsc#1272414). - Configuration-dependent issue in the optional `imptcp` input module can allow an …

    first Aug 4, 2026