Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Accept localhost hostnames if static (bsc#1257366)

    first Jun 5, 2026
  • Low max 2.9

    Security update for uriparser

    This update for uriparser fixes the following issue: - CVE-2025-67899: unbounded recursion and stack consumption (bsc#1255000).

    first Jun 5, 2026
  • Low max 2.3

    Security update for python-Flask

    This update for python-Flask fixes the following issue: - CVE-2026-27205: information disclosure due to Flask session not adding the `Vary: Cookie` header (bsc#1258700).

    first Jun 2, 2026
  • Low max 2.3

    steampipe-2.4.4-1.1 on GA media

    These are all security issues fixed in the steampipe-2.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Low max 2.5

    libpodofo-devel-1.1.0-1.1 on GA media

    These are all security issues fixed in the libpodofo-devel-1.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 8, 2026
  • Low max 2.9

    php8-8.5.7-1.1 on GA media

    These are all security issues fixed in the php8-8.5.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 5, 2026
  • Low max 2.7

    openssh-10.3p1-6.1 on GA media

    These are all security issues fixed in the openssh-10.3p1-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 2, 2026
  • Low max 2.9

    expat-2.8.1-1.1 on GA media

    These are all security issues fixed in the expat-2.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 16, 2026
  • Low max 3.7

    bettercap-2.41.7-1.1 on GA media

    These are all security issues fixed in the bettercap-2.41.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 11, 2026
  • Low max 3.7

    tor-0.4.9.8-1.1 on GA media

    These are all security issues fixed in the tor-0.4.9.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 8, 2026
  • Low max 3.7

    postfix-3.11.2-1.1 on GA media

    These are all security issues fixed in the postfix-3.11.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 6, 2026
  • Low max 3.7

    mutt-2.3.2-1.1 on GA media

    These are all security issues fixed in the mutt-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 5, 2026
  • Low max 2.5

    net-tools-3.14~alpha~git.20251212.7011617-1.1 on GA media

    These are all security issues fixed in the net-tools-3.14~alpha~git.20251212.7011617-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 4, 2026
  • Low max 2.1

    sed-4.10-1.1 on GA media

    These are all security issues fixed in the sed-4.10-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Low max 3.7

    hauler-1.4.2-1.1 on GA media

    These are all security issues fixed in the hauler-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 28, 2026
  • Low max 2.9

    libminizip1-1.3.1-2.1 on GA media

    These are all security issues fixed in the libminizip1-1.3.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 25, 2026
  • Low max 1.7

    Security update for python-pyOpenSSL

    This update for python-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).

    first Apr 23, 2026
  • Low max 3.7

    Security update for roundcubemail

    This update for roundcubemail fixes the following issues: Changes in roundcubemail: - update to 1.6.15 This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to some regressions introduced in the previous release as well a…

    first Apr 17, 2026
  • Low max 2.9

    php8-8.5.5-1.1 on GA media

    These are all security issues fixed in the php8-8.5.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • Low max 2.3

    libtree-sitter0_26-0.26.8-1.1 on GA media

    These are all security issues fixed in the libtree-sitter0_26-0.26.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 21, 2026
  • Low max 3.7

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - CVE-2025-11143: Fixed different parsing of invalid URIs (bsc#1259242).

    first Apr 20, 2026
  • Low max 3.9

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2025-49010: specially crafted smart card or USB device can lead to a stack buffer overflow write in `GET RESPONSE` (bsc#1261214). - CVE-2025-66037: specially crafted input processed by the `fuzz_pkcs15_…

    first Apr 20, 2026
  • Low max 1.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876)

    first Apr 14, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).

    first Apr 10, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).

    first Apr 10, 2026
  • Low max 1.7

    Security update for python-cryptography

    This update for python-cryptography fixes the following issues: - CVE-2026-34073: Fixed X.509 bypass of name constraints on wildcard SANs with matching peer names. (bsc#1260876)

    first Apr 14, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issue: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359).

    first Apr 17, 2026
  • Low max 2.3

    ruby4.0-rubygem-rails-html-sanitizer-1.7.0-1.1 on GA media

    These are all security issues fixed in the ruby4.0-rubygem-rails-html-sanitizer-1.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 17, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: - CVE-2025-9615: non-admin users are allowed to use certificates from other users (bsc#1257359).

    first Apr 16, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issues: - CVE-2025-9615: non-admin users are allowed to use certificates from other users (bsc#1257359).

    first Apr 16, 2026
  • Low max 3.3

    Security update for NetworkManager

    This update for NetworkManager fixes the following issue: Security fixes: - CVE-2025-9615: Fixed non-admin user using others' certificates (bsc#1257359). Other fixes: - Don't renew DHCP lease when software devices' MAC is empty (bsc#1225498).

    first Apr 17, 2026
  • Low max 2.5

    Security update for iproute2

    This update for iproute2 fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).

    first Apr 16, 2026
  • Low max 1.7

    Security update for python-pyOpenSSL

    This update for python-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception can result in connection not being cancelled (bsc#1259804).

    first Apr 16, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: Security issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: - recognize fuse 'portal' as a virtual file system (bsc#1234…

    first Apr 16, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Apr 15, 2026
  • Low max 2.7

    python311-aiohttp-3.13.5-2.1 on GA media

    These are all security issues fixed in the python311-aiohttp-3.13.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026
  • Low max 2.9

    amazon-ssm-agent-3.3.4121.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.4121.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026
  • Low max 1.7

    liblzma5-32bit-5.8.3-1.1 on GA media

    These are all security issues fixed in the liblzma5-32bit-5.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 4, 2026
  • Low max 2.1

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).

    first Mar 19, 2026
  • Low max 3.3

    python311-Pygments-2.20.0-2.1 on GA media

    These are all security issues fixed in the python311-Pygments-2.20.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 1, 2026