Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

898 results · Clear filters · Feed

  • Low max 3.3

    gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.21.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 29, 2026
  • Low max 2.1

    Security update for poppler

    This update for poppler fixes the following issues: - CVE-2025-11896: infinite recursion leading to stack overflow due to object loop in PDF CMap (bsc#1252337).

    first Mar 19, 2026
  • Low max 1.7

    python311-cryptography-46.0.6-1.1 on GA media

    These are all security issues fixed in the python311-cryptography-46.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Low max 3.6

    gsl-2.8-5.1 on GA media

    These are all security issues fixed in the gsl-2.8-5.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 28, 2026
  • Low max 3.7

    Security update for mumble

    This update for mumble fixes the following issues: Changes in mumble: - CVE-2025-71264: (opus) incorrect size calculations allow for an out-of-bounds array access and can lead to a client crash (boo#1259721) - Update to version 1.5.857: * fixes for undesired …

    first Mar 18, 2026
  • Low max 3.3

    jupyter-jupyterlab-templates-0.5.2-4.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: Security issue: - CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: - recognize fuse 'portal' as a virtual file system (bsc#1234…

    first Mar 24, 2026
  • Low max 3.7

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-3184: Fix full hostname usage for PAM to ensure correct access control for 'login -h' (bsc#1258859).

    first Mar 23, 2026
  • Low max 3.7

    Security update for python-Django

    This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-25674: Fixed race condition which can lead to potential incorrect permissions on newly created file system objects (bsc#1259142)

    first Mar 17, 2026
  • Low max 2.8

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-2239: Fixed a heap buffer overflow in psd-util.c (bsc#1257959).

    first Feb 25, 2026
  • Low max 3.3

    Security update for autogen

    This update for autogen fixes the following issues: - CVE-2025-8746: Fixed improper input validation and memory bounds checking when processing certain malformed configuration files (bsc#1247921)

    first Feb 26, 2026
  • Low max 2.0

    Security update for python-pip

    This update for python-pip fixes the following issues: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599).

    first Feb 11, 2026
  • Low max 3.3

    Security update for micropython

    This update for micropython fixes the following issues: Changes in micropython: - CVE-2026-1998: Fixed segmentation fault in `mp_map_lookup` via `mp_import_all` (bsc#1257803). - Version 1.26.1 * esp32: update esp_tinyusb component to v1.7.6 * tools: add an en…

    first Feb 11, 2026
  • Low max 3.7

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2026-0989: Fixed call stack exhaustion leading to application crash due to RelaxNG parser not limiting the recursion depth when resolving `<include>` directives (bsc#1256805).

    first Feb 5, 2026
  • Low max 1.9

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds read and write (bsc#1255765).

    first Jan 22, 2026
  • Low max 3.3

    heroic-games-launcher-2.20.1-2.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.20.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 5, 2026
  • Low max 3.7

    libblkid-devel-2.41.3-4.1 on GA media

    These are all security issues fixed in the libblkid-devel-2.41.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Low max 3.7

    python313-Django6-6.0.3-1.1 on GA media

    These are all security issues fixed in the python313-Django6-6.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Low max 3.7

    python311-Django4-4.2.29-1.1 on GA media

    These are all security issues fixed in the python311-Django4-4.2.29-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Low max 2.3

    python311-Flask-3.1.3-1.1 on GA media

    These are all security issues fixed in the python311-Flask-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • Low max 3.7

    libsoup-2_4-1-2.74.3-17.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-17.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • Low max 3.7

    libsoup-3_0-0-3.6.6-1.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • Low max 2.3

    weblate-5.16-1.1 on GA media

    These are all security issues fixed in the weblate-5.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • Low max 3.9

    ucode-intel-20260210-1.1 on GA media

    These are all security issues fixed in the ucode-intel-20260210-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 19, 2026
  • Low max 2.0

    python311-pip-26.0.1-1.1 on GA media

    These are all security issues fixed in the python311-pip-26.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 16, 2026
  • Low max 3.1

    openjfx-17.0.18.0-1.1 on GA media

    These are all security issues fixed in the openjfx-17.0.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 14, 2026
  • Low max 2.8

    gimp-3.0.8-2.1 on GA media

    These are all security issues fixed in the gimp-3.0.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 13, 2026
  • Low max 1.8

    logback-1.2.13-2.1 on GA media

    These are all security issues fixed in the logback-1.2.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 29, 2026
  • Low max 2.7

    teleport-17.7.14-1.1 on GA media

    These are all security issues fixed in the teleport-17.7.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 27, 2026
  • Low max 3.7

    libxml2-16-2.14.5-2.1 on GA media

    These are all security issues fixed in the libxml2-16-2.14.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2026
  • Low max 3.7

    gio-branding-upstream-2.86.3-2.1 on GA media

    These are all security issues fixed in the gio-branding-upstream-2.86.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 26, 2026
  • Low max 2.9

    tdom-0.9.6-1.1 on GA media

    These are all security issues fixed in the tdom-0.9.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 23, 2026
  • Low max 1.3

    php-composer2-2.9.3-1.1 on GA media

    These are all security issues fixed in the php-composer2-2.9.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 15, 2026
  • Low max 3.3

    NetworkManager-applet-l2tp-1.52.0-1.1 on GA media

    These are all security issues fixed in the NetworkManager-applet-l2tp-1.52.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 15, 2026
  • Low max 2.9

    liburiparser1-1.0.0-1.1 on GA media

    These are all security issues fixed in the liburiparser1-1.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 13, 2026
  • Low max 2.7

    python311-pypdf-6.6.0-1.1 on GA media

    These are all security issues fixed in the python311-pypdf-6.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 13, 2026
  • Low max 3.7

    python311-Django-5.2.12-1.1 on GA media

    These are all security issues fixed in the python311-Django-5.2.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 5, 2026
  • Low max 1.9

    libpcap-devel-1.10.6-1.1 on GA media

    These are all security issues fixed in the libpcap-devel-1.10.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jan 12, 2026
  • Low max 3.6

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198). - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (…

    first Nov 28, 2025
  • Low max 2.0

    Security update for openexr

    This update for openexr fixes the following issues: - CVE-2025-64181: Fixed use of uninitialized memory in function generic_unpack() (bsc#1253233)

    first Nov 19, 2025