Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,597 results · Clear filters · Feed

  • High max 8.7

    netty-4.1.135-1.1 on GA media

    These are all security issues fixed in the netty-4.1.135-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2026
  • High max 7.5

    google-osconfig-agent-20260611.00-1.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260611.00-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 15, 2026
  • High max 7.5

    Security update for perl-XML-LibXML

    This update for perl-XML-LibXML fixes the following issue - CVE-2026-8177: read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences (bsc#1264715).

    first Jun 15, 2026
  • High max 8.8

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: N…

    first Jun 15, 2026
  • High max 8.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap …

    first Jun 15, 2026
  • High max 8.8

    Security update for openssl-1_0_0

    This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: N…

    first Jun 15, 2026
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…

    first Jun 15, 2026
  • High max 7.8

    Security update for libcaca

    This update for libcaca fixes the following issue - CVE-2026-42046: an integer overflow vulnerability in libcaca's canvas import functionality may allow an attacker to cause a controlled heap out-of-bounds write (bsc#1264984).

    first Jun 15, 2026
  • High max 8.8

    Security update for openssl-1_1

    This update for openssl-1_1 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Hea…

    first Jun 15, 2026
  • High max 7.7

    python311-tornado6-6.5.7-1.1 on GA media

    These are all security issues fixed in the python311-tornado6-6.5.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 13, 2026
  • High max 7.4

    python311-PyJWT-2.13.0-1.1 on GA media

    These are all security issues fixed in the python311-PyJWT-2.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 13, 2026
  • High max 7.3

    kitty-0.47.3-1.1 on GA media

    These are all security issues fixed in the kitty-0.47.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 13, 2026
  • High max 7.5

    freeipmi-1.6.18-1.1 on GA media

    These are all security issues fixed in the freeipmi-1.6.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 13, 2026
  • High max 8.6

    Security update for java-17-openj9

    This update for java-17-openj9 fixes the following issues: Changes in java-17-openj9: - Make post scripts less noisy (bsc#1267355) - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 17…

    first Jun 11, 2026
  • High max 7.3

    Security update for perl-YAML-Syck

    This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - CVE-2026-5089: prevent buffer underflow in base60 (sexagesimal) parsing (PR #133) (bsc#1265155).

    first Jun 10, 2026
  • High max 7.5

    Security update for perl-CryptX

    This update for perl-CryptX fixes the following issues: Changes in perl-CryptX: - updated to 0.89.0 (0.089) see /usr/share/doc/packages/perl-CryptX/Changes 0.089 2026-05-10 - new: Crypt::ASN1 - new: Crypt::AuthEnc::SIV - new: Crypt::AuthEnc::XChaCha20Poly1305…

    first Jun 10, 2026
  • High max 8.4

    Security update for libzypp

    This update for libzypp fixes the following issues Version 17.38.13 (35): - CVE-2026-44941: path traversal via "keyhint" (bsc#1267426). - CVE-2026-44942: .repo files can have an optional path which can lead to path traversal attacks (bsc#1267874).

    first Jun 9, 2026
  • High max 7.3

    Security update for graphite2

    This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).

    first Jun 9, 2026
  • High max 7.3

    Security update for graphite2

    This update for graphite2 fixes the following issue - CVE-2026-50593: Out-of-bounds write via Graphite actions (bsc#1267733).

    first Jun 9, 2026
  • High max 8.4

    Security update for libzypp

    This update for libzypp fixes the following issue Version 17.38.12 (35): - CVE-2026-44941: path traversal via "keyhint" (bsc#1267426).

    first Jun 8, 2026
  • High max 8.8

    Security update for wicked

    This update for wicked fixes the following issues: Changes in wicked: - Update to version 0.6.79 - Fix an indirect remote shell command injection via unsanitized dhcp strings and leaseinfo dump (bsc#1265221,CVE-2026-44932): - Fix to escape single-quotes in le…

    first Jun 12, 2026
  • High max 8.3

    python313-yt-dlp-2026.06.09-1.1 on GA media

    These are all security issues fixed in the python313-yt-dlp-2026.06.09-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • High max 8.6

    Security update for java-21-openj9

    This update for java-21-openj9 fixes the following issues: Changes in java-21-openj9: - Make post scripts less noisy (bsc#1267355) - Use libalternatives instead of update-alternatives for distributions where libalternatives is available - Update to OpenJDK 21…

    first Jun 12, 2026
  • High max 8.8

    wicked-0.6.79-1.1 on GA media

    These are all security issues fixed in the wicked-0.6.79-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • High max 7.5

    ffmpeg-7-7.1.4-3.1 on GA media

    These are all security issues fixed in the ffmpeg-7-7.1.4-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • High max 7.8

    ansible-core-2.21.0-3.1 on GA media

    These are all security issues fixed in the ansible-core-2.21.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: Security fixes: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3842: hyperv/syndbg…

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484). - CVE-20…

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3195: heap buffer overflow when rea…

    first Jun 12, 2026
  • High max 7.5

    Security update for libyang

    This update for libyang fixes the following issue - CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob (bsc#1265330).

    first Jun 12, 2026
  • High max 7.5

    perl-Crypt-PasswdMD5-1.430.0-1.1 on GA media

    These are all security issues fixed in the perl-Crypt-PasswdMD5-1.430.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    strongswan-6.0.7-1.1 on GA media

    These are all security issues fixed in the strongswan-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    python311-kafka-python-2.3.2-1.1 on GA media

    These are all security issues fixed in the python311-kafka-python-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    postgresql-jdbc-42.7.11-1.1 on GA media

    These are all security issues fixed in the postgresql-jdbc-42.7.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.2

    ldns-1.9.2-1.1 on GA media

    These are all security issues fixed in the ldns-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.8
    openSUSE-SU-2026:10991-1 1 CVE 1 exploited

    afl-5.00c-1.1 on GA media

    These are all security issues fixed in the afl-5.00c-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…

    first Jun 11, 2026
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: Security fixes: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bs…

    first Jun 11, 2026
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…

    first Jun 11, 2026
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…

    first Jun 11, 2026