Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

895 results · Clear filters · Feed

  • Low max 3.3

    libbd_btrfs-devel-3.5.0-2.1 on GA media

    These are all security issues fixed in the libbd_btrfs-devel-3.5.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Low max 2.0

    hivex-1.3.24-4.1 on GA media

    These are all security issues fixed in the hivex-1.3.24-4.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Low max 1.9

    libQt6Core5Compat6-6.12.0-2.1 on GA media

    These are all security issues fixed in the libQt6Core5Compat6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Low max 3.3

    libinih-devel-63-1.1 on GA media

    These are all security issues fixed in the libinih-devel-63-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Low max 2.7

    libQt6HttpServer6-6.12.0-2.1 on GA media

    These are all security issues fixed in the libQt6HttpServer6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Low max 3.3

    ImageMagick-7.1.2.35-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.35-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Low max 3.7

    ruby4.0-rubygem-rack-3.2.8-1.1 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rack-3.2.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Low max 3.7

    Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j

    This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation whe…

    first Nov 2, 2026
  • Low max 2.5

    Security update for mutt

    This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).

  • Low max 2.9

    ibus-typing-booster-2.31.2-1.1 on GA media

    These are all security issues fixed in the ibus-typing-booster-2.31.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 21, 2026
  • Low max 2.5

    Security update for mutt

    This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).

  • Low max 3.5

    libpolkit-agent-1-0-128-1.1 on GA media

    These are all security issues fixed in the libpolkit-agent-1-0-128-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 20, 2026
  • Low max 2.5

    Security update for mutt

    This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).

    first Oct 14, 2026
  • Low max 3.7

    Security update for libheif

    This update for libheif fixes the following issues: - CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). - Caller-configured sec…

    first Oct 8, 2026
  • Low max 3.7

    Security update for putty

    This update for putty fixes the following issues: Changes in putty: - Update to release 0.85 * Fixed a remotely triggerable use-after-free in Pageant. * Fixed a remotely triggerable buffer overflow if the OpenSSH encrypt-then-MAC cipher modes are in use. (Onl…

    first Oct 19, 2026
  • Low max 2.5

    Security update for mutt

    This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).

    first Oct 14, 2026
  • Low max 3.7

    Security update for libheif

    This update for libheif fixes the following issues: - CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). - AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). - Caller-configured sec…

    first Oct 8, 2026
  • Low max 2.9

    freetype2-devel-2.15.0-1.1 on GA media

    These are all security issues fixed in the freetype2-devel-2.15.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 18, 2026
  • Low max 3.7

    putty-0.85-2.1 on GA media

    These are all security issues fixed in the putty-0.85-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 17, 2026
  • Low max 3.3

    librecad-2.2.1.5-2.1 on GA media

    These are all security issues fixed in the librecad-2.2.1.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • Low max 2.5

    Security update for mutt

    This update for mutt fixes the following issue: - CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739).

    first Oct 15, 2026
  • Low max 3.7

    python313-sglang-0.5.21-2.1 on GA media

    These are all security issues fixed in the python313-sglang-0.5.21-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 13, 2026
  • Low max 3.4

    Security update for python3-paramiko

    This update for python3-paramiko fixes the following issue: - CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225).

    first Oct 12, 2026
  • Low max 2.5

    mutt-2.4.2-2.1 on GA media

    These are all security issues fixed in the mutt-2.4.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 9, 2026
  • Low max 3.3

    onefetch-3.0.0-1.1 on GA media

    These are all security issues fixed in the onefetch-3.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Low max 1.8

    aspell-0.60.8.2-2.1 on GA media

    These are all security issues fixed in the aspell-0.60.8.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Low max 2.1

    jupyter-jupyterlab-templates-0.5.3-3.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 7, 2026
  • Low max 3.3

    python313-markdown-it-py-4.2.0-1.2 on GA media

    These are all security issues fixed in the python313-markdown-it-py-4.2.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Low max 3.7

    python313-django-registration-5.2.1-1.3 on GA media

    These are all security issues fixed in the python313-django-registration-5.2.1-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Low max 3.7

    python313-configobj-5.0.9-1.6 on GA media

    These are all security issues fixed in the python313-configobj-5.0.9-1.6 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Low max 3.3

    python313-pydrive2-1.18.1-2.4 on GA media

    These are all security issues fixed in the python313-pydrive2-1.18.1-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Low max 3.3

    libpoppler-cpp3-26.09.0-3.1 on GA media

    These are all security issues fixed in the libpoppler-cpp3-26.09.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2026
  • Low max 2.1

    python313-3.13.15-2.1 on GA media

    These are all security issues fixed in the python313-3.13.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 1, 2026
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocati…

    first Sep 29, 2026
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). - CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocati…

    first Sep 29, 2026
  • Low max 3.7

    gdk-pixbuf-loader-libheif-1.23.5-2.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…

    first Sep 22, 2026
  • Low max 3.7

    python313-django-allauth-65.19.4-1.1 on GA media

    These are all security issues fixed in the python313-django-allauth-65.19.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 28, 2026
  • Low max 3.8

    Security update for opensc

    This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in `piv_process_history()` allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device (bsc#1266964).

    first Sep 9, 2026
  • Low max 2.0

    Security update for fuse-overlayfs

    This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).

    first Sep 3, 2026