Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

12,597 results · Clear filters · Feed

  • High max 7.0
    openSUSE-SU-2026:11162-1 2 CVEs

    trivy-0.71.2-2.1 on GA media

    These are all security issues fixed in the trivy-0.71.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 30, 2026
  • High max 7.5
    openSUSE-SU-2026:11160-1 1 CVE

    python311-pydata-sphinx-theme-0.19.0-2.1 on GA media

    These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 30, 2026
  • High max 7.5
    openSUSE-SU-2026:11158-1 2 CVEs

    perl-JavaScript-Minifier-XS-0.160.0-1.1 on GA media

    These are all security issues fixed in the perl-JavaScript-Minifier-XS-0.160.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 30, 2026
  • High max 7.5
    openSUSE-SU-2026:11155-1 1 CVE

    kbfs-6.6.3-2.1 on GA media

    These are all security issues fixed in the kbfs-6.6.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 30, 2026
  • High max 7.5
    openSUSE-SU-2026:11154-1 1 CVE

    hauler-2.0.1-1.1 on GA media

    These are all security issues fixed in the hauler-2.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 30, 2026
  • High max 8.6
    SUSE-SU-2026:2709-1 1 CVE

    Security update for perl-Config-IniFiles

    This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).

    first Jun 30, 2026
  • High max 8.6
    SUSE-SU-2026:2716-1 1 CVE

    Security update for pacemaker

    This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).

    first Jun 30, 2026
  • High max 8.6
    SUSE-SU-2026:2710-1 1 CVE

    Security update for perl-Config-IniFiles

    This update for perl-Config-IniFiles fixes the following issue - CVE-2026-11527: OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle (bsc#1268236).

    first Jun 30, 2026
  • High max 7.5
    SUSE-SU-2026:2703-1 6 CVEs

    Security update for curl

    This update for curl fixes the following issues - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - C…

    first Jun 30, 2026
  • High max 8.6
    SUSE-SU-2026:2701-1 1 CVE

    Security update for pacemaker

    This update for pacemaker fixes the following issue - CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381).

    first Jun 30, 2026
  • High max 7.8
    SUSE-SU-2026:2700-1 1 CVE

    Security update for cifs-utils

    This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).

    first Jun 30, 2026
  • High max 7.8
    SUSE-SU-2026:2699-1 1 CVE

    Security update for cifs-utils

    This update for cifs-utils fixes the following issue - CVE-2026-12505: cifs.upcall local privilege escalation via request_key-controlled namespace switch and NSS loading (bsc#1267389).

    first Jun 30, 2026
  • High max 8.8
    SUSE-SU-2026:2696-1 8 CVEs

    Security update for 7zip

    This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure (bsc#1267858). - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation (…

    first Jun 30, 2026
  • High max 7.7
    SUSE-SU-2026:2695-1 19 CVEs

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: - CVE-2026-48618: tls: normalize hostname for server identity checks (bsc#1268593). - CVE-2026-48933: crypto: guard WebCrypto cipher output length (bsc#1268592). - CVE-2026-48615: lib,test: redact proxy cre…

    first Jun 30, 2026
  • High max 8.4
    openSUSE-SU-2026:21161-1 3 CVEs

    Security update for python-pdm

    This update for python-pdm fixes the following issues: Changes in python-pdm: - CVE-2026-47763: Do not follow symlinks when writing config files (bsc#1268384) - CVE-2026-47763: Do not write to paths outside the scheme dir (bsc#1268385) - CVE-2026-47781: Updat…

    first Jun 26, 2026
  • High max 8.7
    openSUSE-SU-2026:21159-1 3 CVEs

    Security update for python-py7zr

    This update for python-py7zr fixes the following issues: Changes in python-py7zr: - CVE-2026-23879: crafted malicious symbolic link chains in an archive can lead to an arbitrary file write (bsc#1268669) - CVE-2026-55195: unchecked extraction size can cause a …

    first Jun 25, 2026
  • High max 7.3
    openSUSE-SU-2026:21155-1 1 CVE

    Security update for hamlib

    This update for hamlib fixes the following issues: Changes in hamlib: - Update to 4.7.2: * Fix IC-7600/IC-7610 clock commands * Icom: Add CWR to modes eligible for DSP filtering * Kenwood: New model Hamgeek uSGX * Various fixes for Skywatcher, DX-SR8, FT-710,…

    first Jun 23, 2026
  • High max 8.1
    openSUSE-SU-2026:21154-1 16 CVEs

    Security update for ofono

    This update for ofono fixes the following issues: Changes in ofono: - Reference the tracking bugs for the SMS/STK/USSD decoder security fixes applied upstream across the 2.14-2.17 updates: * SMS decoder stack buffer overflows: CVE-2023-2794 (boo#1218292), CVE…

    first Jun 23, 2026
  • High max 8.8
    openSUSE-SU-2026:21152-1 1 CVE

    Security update for atril

    This update for atril fixes the following issues: Changes in atril: - Update to version 1.28.4 (bsc#1265880 CVE-2026-46519): * Build fixes * Fix tests imported from XReader * Fix tests with AT-SPI2 >= 2.53 * Improve search system * pdf: Always use poppler_doc…

    first Jun 23, 2026
  • High max 7.5
    openSUSE-SU-2026:21149-1 6 CVEs

    Security update for bitcoin

    This update for bitcoin fixes the following issues: Changes in bitcoin: - Reference the tracking bugs for CVEs already fixed in current bitcoin (the affected versions all predate the shipped release): * CVE-2018-20587 (boo#1125092) * CVE-2019-15947 (boo#11497…

    first Jun 23, 2026
  • High max 7.5
    openSUSE-SU-2026:21140-1 3 CVEs

    Security update for perl-Cpanel-JSON-XS

    This update for perl-Cpanel-JSON-XS fixes the following issues: Changes in perl-Cpanel-JSON-XS: - updated to 4.420.0 (4.42) see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.42 2026-06-27 (rurban) - Ensure encode with a type spec hashref does not chan…

    first Jun 19, 2026
  • High max 7.5
    openSUSE-SU-2026:21137-1 1 CVE

    Security update for perl-Crypt-PasswdMD5

    This update for perl-Crypt-PasswdMD5 fixes the following issues: Changes in perl-Crypt-PasswdMD5: - updated to 1.430.0 (1.43) see /usr/share/doc/packages/perl-Crypt-PasswdMD5/Changelog.ini [V 1.43] Date=2026-05-23T08:14:00 Deploy.Action=Upgrade Deploy.Reason=…

    first Jun 18, 2026
  • High max 7.5
    openSUSE-SU-2026:21136-1 3 CVEs

    Security update for golang-github-prometheus-alertmanager

    This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - Update to version 0.28.1 (jsc#PED-13285): * Improved performance of inhibition rules when using Equal labels. * Improve the d…

    first Jun 18, 2026
  • High max 8.8
    openSUSE-SU-2026:21129-1 16 CVEs

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…

    first Jun 20, 2026
  • High max 7.5
    openSUSE-SU-2026:21126-1 1 CVE

    Security update for perl-HTML-Parser

    This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (bsc#1267606).

    first Jun 20, 2026
  • High max 7.5
    openSUSE-SU-2026:21125-1 1 CVE

    Security update for perl-Protocol-HTTP2

    This update for perl-Protocol-HTTP2 fixes the following issue - CVE-2026-10725: denial of service due to absence of inbound HPACK header-list size limit (bsc#1267857).

    first Jun 20, 2026
  • High max 7.3
    openSUSE-SU-2026:21124-1 1 CVE

    Security update for graphite2

    This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).

    first Jun 20, 2026
  • High max 7.5
    openSUSE-SU-2026:21123-1 6 CVEs

    Security update for bind

    This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#12655…

    first Jun 20, 2026
  • High max 8.8
    openSUSE-SU-2026:21118-1 1 CVE

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issue - CVE-2026-44988: missing validation of rectangle width in tight gradient decoding can lead to server-triggered out-of- bounds write (bsc#1266459).

    first Jun 20, 2026
  • High max 8.8
    openSUSE-SU-2026:21116-1 11 CVEs

    Security update for freerdp

    This update for freerdp fixes the following issues Update to version 3.26.0: - CVE-2026-33982: heap-buffer-overflow READ vulnerability at 24 bytes before the allocation, in winpr_aligned_offset_recalloc() (bsc#1261222). - CVE-2026-33985: FreeRDP: Information …

    first Jun 20, 2026
  • High max 7.3
    openSUSE-SU-2026:21114-1 1 CVE

    Security update for mozjs128

    This update for mozjs128 fixes the following issue - CVE-2025-70103: libjxl: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266463).

    first Jun 20, 2026
  • High max 7.5
    openSUSE-SU-2026:21113-1 2 CVEs

    Security update for libyang

    This update for libyang fixes the following issues - CVE-2026-41401: use-after-free in `lyd_parser_set_data_flags` when processing crafted YANG XML documents with specific metadata attributes (bsc#1266316). - CVE-2026-44673: integer overflow in `lyb_read_stri…

    first Jun 20, 2026
  • High max 7.4
    openSUSE-SU-2026:21109-1 5 CVEs

    Security update for dovecot24

    This update for dovecot24 fixes the following issues - CVE-2026-27851: lib-var-expand: safe filter leaks to all following pipelines (bsc#1265146). - CVE-2026-33603: login: base64 input can contain tabs that bypass IPC protection (bsc#1265147). - CVE-2026-4001…

    first Jun 19, 2026
  • High max 8.4
    openSUSE-SU-2026:21111-1 1 CVE

    Security update for himmelblau

    This update for himmelblau fixes the following issue - CVE-2026-45108: authentication bypass vulnerability in the Device Authorization Grant (DAG) flow (bsc#1266662). Changes for himmelblau: - Update to version 2.3.11+git1.116c6763: * Update cargo vet audits …

    first Jun 19, 2026
  • High max 7.5
    openSUSE-SU-2026:21108-1 1 CVE

    Security update for ignition

    This update for ignition fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265751).

    first Jun 19, 2026
  • High max 8.1
    openSUSE-SU-2026:21107-1 1 CVE

    Security update for nginx

    This update for nginx fixes the following issue - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215).

    first Jun 19, 2026
  • High max 8.4
    openSUSE-SU-2026:21106-1 1 CVE

    Security update for papers

    This update for papers fixes the following issues Security issue: - CVE-2026-46529: command injection (bsc#1265880). Changes for papers: - Update to version 48.10 (bsc#1265880): - Update to version 48.9 (jsc#PED-15957, bsc#1261947): - Bug fixes: - Saved image…

    first Jun 19, 2026
  • High max 8.8
    openSUSE-SU-2026:21104-1 9 CVEs

    Security update for postgresql16

    This update for postgresql16 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…

    first Jun 19, 2026
  • High max 8.8
    openSUSE-SU-2026:21103-1 8 CVEs

    Security update for postgresql15

    This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…

    first Jun 19, 2026
  • High max 8.8
    openSUSE-SU-2026:21102-1 8 CVEs

    Security update for postgresql14

    This update for postgresql14 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified (bsc#1265172). - CVE-2026-6473: integer overflows in memory-allocation calculations (bsc#1265173). - CVE-202…

    first Jun 19, 2026