Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 7.5

    heroic-games-launcher-2.22.0-3.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.22.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • High max 8.8

    Security update for libsolv, libzypp, zypper

    This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…

    first Jun 29, 2026
  • High max 7.8

    Security update for ansible-core

    This update for ansible-core fixes the following issues: - CVE-2026-11332: Argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).

    first Jun 29, 2026
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-5946: Invali…

    first Jun 29, 2026
  • High max 7.5

    Security update for freeipmi

    This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).

    first Jun 29, 2026
  • High max 7.5

    istioctl-1.30.2-1.1 on GA media

    These are all security issues fixed in the istioctl-1.30.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 7.3

    glibc-2.43-4.1 on GA media

    These are all security issues fixed in the glibc-2.43-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 8.3

    chromedriver-149.0.7827.200-1.1 on GA media

    These are all security issues fixed in the chromedriver-149.0.7827.200-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 7.5

    jupyter-jupyterlab-templates-0.5.3-2.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.9

    ocaml-4.14.4-1.1 on GA media

    These are all security issues fixed in the ocaml-4.14.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.5

    python311-jupyter-ydoc-3.5.0-1.1 on GA media

    These are all security issues fixed in the python311-jupyter-ydoc-3.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.0

    logback-1.5.36-1.1 on GA media

    These are all security issues fixed in the logback-1.5.36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.1

    jackson-databind-2.18.8-2.1 on GA media

    These are all security issues fixed in the jackson-databind-2.18.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.8

    hydra-9.7+git20.gbccaea1-1.1 on GA media

    These are all security issues fixed in the hydra-9.7+git20.gbccaea1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.5

    calibre-9.10.0-1.1 on GA media

    These are all security issues fixed in the calibre-9.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.1

    jq-1.8.2-1.1 on GA media

    These are all security issues fixed in the jq-1.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.5

    agama-web-ui-22+143.ee15dea20-46.1 on GA media

    These are all security issues fixed in the agama-web-ui-22+143.ee15dea20-46.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.1

    ImageMagick-7.1.2.25-3.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.25-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.2

    Security update for giflib

    This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).

    first Jun 26, 2026
  • High max 8.8

    Security update for openssl-3-livepatches

    This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CV…

    first Jun 26, 2026
  • High max 7.7

    Security update for nodejs22

    This update for nodejs22 fixes the following issues Update to 22.23.0: - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479). - CVE-2026-9496: pacote: excessive CPU consump…

    first Jun 26, 2026
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issues - CVE-2026-28532: Denial of Service due to integer overflow in OSPF TLV parser functions (bsc#1263859). - CVE-2026-37457: An off-by-one out-of-bounds write vulnerability in the bgp_flowspec_op_decode() function (…

    first Jun 26, 2026
  • High max 8.2

    Security update for giflib

    This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).

    first Jun 26, 2026
  • High max 7.5

    Security update for haproxy

    This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…

    first Jun 26, 2026
  • High max 7.5

    Security update for haproxy

    This update for haproxy fixes the following issues - CVE-2026-55203: integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record headers (bsc#1268557). - CVE-2026-55204: null pointer dereference vulnera…

    first Jun 26, 2026
  • High max 8.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …

    first Jun 26, 2026
  • High max 7.5

    Security update for libarchive

    This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…

    first Jun 22, 2026
  • High max 7.5

    Security update for freeipmi

    This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).

    first Jun 18, 2026
  • High max 7.5

    Security update for freeipmi

    This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).

    first Jun 19, 2026
  • High max 7.5

    Security update for libarchive

    This update for libarchive fixes the following issues - CVE-2025-60753: bsdtar hangs and OOMs with zero-length pattern matches (bsc#1253088). - CVE-2026-4111: logical deadlock the RAR5 filter subsystem and the half-window output limiter leads to infinite loop…

    first Jun 18, 2026
  • High max 7.4

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…

    first Jun 16, 2026
  • High max 8.2

    giflib-devel-32bit-5.2.2-4.1 on GA media

    These are all security issues fixed in the giflib-devel-32bit-5.2.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 25, 2026
  • High max 7.4

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…

    first Jun 25, 2026
  • High max 8.8

    Security update for libzypp

    This update for libzypp fixes the following issue - CVE-2026-25707: Handcrafted repo metadata may cause arbitrary local files to be overwritten (bsc#1259802). - CVE-2026-44942: Fixed possible path traversal attacks via .repo files 'path=' entries (bsc#1267874…

    first Jun 25, 2026
  • High max 7.7

    corepack24-24.17.0-1.1 on GA media

    These are all security issues fixed in the corepack24-24.17.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 25, 2026
  • High max 8.1

    jackson-databind-2.18.8-1.1 on GA media

    These are all security issues fixed in the jackson-databind-2.18.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 25, 2026
  • High max 7.7

    Security update for nodejs24

    This update for nodejs24 fixes the following issues Update to 24.17.0: - CVE-2026-2581: undici: Undici: Denial of Service due to uncontrolled resource consumption (bsc#1268480). - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive so…

    first Jun 25, 2026
  • High max 7.4

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues - CVE-2026-48522: `PyJWKClient` passes URI arguments directly to `urllib.request.urlopen()` and allows for SSRF and token forgery (bsc#1266798). - CVE-2026-48523: verifier-side algorithm allow-list bypas…

    first Jun 25, 2026
  • High max 8.4

    python311-pdm-2.28.0-1.1 on GA media

    These are all security issues fixed in the python311-pdm-2.28.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 25, 2026
  • High max 7.5

    jupyter-nbclassic-1.3.3-2.1 on GA media

    These are all security issues fixed in the jupyter-nbclassic-1.3.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 25, 2026