Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.4

    Security update for curl

    This update for curl fixes the following issues: - CVE-2024-11053: Fixed password leak used for the first host to the followed-to host under certain circumstances (bsc#1234068)

    first Feb 3, 2025
  • Low max 2.9

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-43965: Fixed mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659) - CVE-2025-46393: Fixed mishandling of packet_size leads to rendering of channels…

    first May 5, 2025
  • Low max 3.7

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)

    first May 5, 2025
  • Low max 3.7

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-4945: Add value checks for date/time parsing (bsc#1243314).

    first Aug 29, 2025
  • Low max 3.3

    Security update for cmake3

    This update for cmake3 fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation (bsc#1248461)

    first Aug 25, 2025
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530) - CVE-2025-53019: Fixed format specifiers in a filename template may cause a memory leak (bsc#1246534)

    first Aug 11, 2025
  • Low max 2.9

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing (bsc#1241659). - CVE-2025-46393: mishandling of packet_size and rendering of ch…

    first Jul 1, 2025
  • Low max 2.9

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2025-43965: Fixed mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659) - CVE-2025-46393: Fixed mishandling of packet_size leads to rendering of channels…

    first May 29, 2025
  • Low max 3.3

    Security update for jq

    This update for jq fixes the following issue: - CVE-2025-9403: test suite assertion failure in JSON parsing consistency validation (bsc#1248600).

    first Mar 19, 2026
  • Low max 3.7

    mumble-1.5.857-2.1 on GA media

    These are all security issues fixed in the mumble-1.5.857-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 18, 2026
  • Low max 2.3

    ruby4.0-rubygem-activesupport-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-activesupport-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-activestorage-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.7

    ruby4.0-rubygem-activerecord-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-activerecord-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-activemodel-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-activemodel-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-activejob-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-activejob-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actionview-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actionview-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actiontext-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actiontext-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actionpack-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actionpack-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actionmailer-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actionmailer-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actionmailbox-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actionmailbox-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-actioncable-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-actioncable-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-railties-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-railties-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.3

    ruby4.0-rubygem-rails-8.0-8.0.3-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rails-8.0-8.0.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 2.8

    ruby4.0-rubygem-thor-1.4.0-1.3 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-thor-1.4.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Mar 13, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Mar 10, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Mar 10, 2026
  • Low max 2.3

    Security update for python-Flask

    This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the `Vary: Cookie` header (bsc#1258700).

    first Mar 9, 2026
  • Low max 3.7

    jetty-annotations-9.4.58-3.1 on GA media

    These are all security issues fixed in the jetty-annotations-9.4.58-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 7, 2026
  • Low max 3.3

    NetworkManager-applet-strongswan-1.6.4-1.1 on GA media

    These are all security issues fixed in the NetworkManager-applet-strongswan-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 7, 2026
  • Low max 1.3

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: CVE-2025-67746: Fixed ANSI control characters injection in the terminal output of various Composer commands via attacker controlled remote sources. (bsc#1255768)

    first Mar 5, 2026
  • Low max 3.7

    Security update for python-Django

    This update for python-Django fixes the following issue: - CVE-2026-25674: race condition can lead to potential incorrect permissions on newly created file system objects (bsc#1259142).

  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Mar 4, 2026
  • Low max 2.0

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2026-1703: Fixed a potential path traversal in python-pip. (bsc#1257599)

    first Mar 4, 2026
  • Low max 2.9

    Security update for zlib

    This update for zlib fixes the following issue: - CVE-2026-27171: Fixed infinite loop via the `crc32_combine64` and `crc32_combine_gen64` functions due to missing checks for negative lengths (bsc#1258392).

    first Mar 3, 2026
  • Low max 2.3

    Security update for zabbix

    This update for zabbix fixes the following issues: - CVE-2024-36469: Introduced clamping for mitigation of timing attacks. (bsc#1240676) - CVE-2024-42325: Restricted access to user fields using user.get API method for users of User and Admin type, and restric…

    first Feb 12, 2026
  • Low max 2.0

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2026-1703: Fixed a potential path traversal in python-pip. (bsc#1257599)

    first Feb 10, 2026
  • Low max 2.3

    Security update for python-maturin

    This update for python-maturin fixes the following issues: - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249011)

    first Feb 5, 2026
  • Low max 3.3

    micropython-1.26.1-2.1 on GA media

    These are all security issues fixed in the micropython-1.26.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 6, 2026
  • Low max 3.7

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805)

    first Feb 5, 2026
  • Low max 3.7

    ldap-proxy-0.1.0~90-1.1 on GA media

    These are all security issues fixed in the ldap-proxy-0.1.0~90-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 8, 2025