Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,722 results · Clear filters · Feed

  • Medium max 5.3

    python313-mistune-3.4.0-3.1 on GA media

    These are all security issues fixed in the python313-mistune-3.4.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 6.8

    pluto-5.24.5-1.1 on GA media

    These are all security issues fixed in the pluto-5.24.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 6.8

    polaris-10.2.6-1.1 on GA media

    These are all security issues fixed in the polaris-10.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 6.8

    nova-3.12.3-1.1 on GA media

    These are all security issues fixed in the nova-3.12.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 5.3

    python313-configobj-5.0.9-2.1 on GA media

    These are all security issues fixed in the python313-configobj-5.0.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 6.8

    golang-github-prometheus-alertmanager-0.34.2-1.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.34.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 5.3

    libaec-devel-1.1.8-1.1 on GA media

    These are all security issues fixed in the libaec-devel-1.1.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 6.3

    argocd-cli-3.6.1-1.1 on GA media

    These are all security issues fixed in the argocd-cli-3.6.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Medium max 5.8

    ghostscript-10.08.0-4.1 on GA media

    These are all security issues fixed in the ghostscript-10.08.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Medium max 5.3

    python313-tornado6-6.6-1.1 on GA media

    These are all security issues fixed in the python313-tornado6-6.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Medium max 4.3

    proftpd-1.3.9e-1.1 on GA media

    These are all security issues fixed in the proftpd-1.3.9e-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Medium max 6.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…

  • Medium max 6.6

    Security update for parted

    This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).

  • Medium max 4.4

    xen-4.22.0_08-1.1 on GA media

    These are all security issues fixed in the xen-4.22.0_08-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 5.5

    libansilove-devel-1.4.4-1.1 on GA media

    These are all security issues fixed in the libansilove-devel-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 6.8

    dnsmasq-2.93-3.1 on GA media

    These are all security issues fixed in the dnsmasq-2.93-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 6.5

    Security update for nmap

    This update for nmap fixes the following issue: - CVE-2026-72712: crafted packet containing a zero-length TCP option causes the `Packet:parse_options()` function to allocate objects in an infinite loop and cause an OOM condition (bsc#1275288).

    first Nov 1, 2026
  • Medium max 6.5

    Security update for aws-efs-utils

    This update for aws-efs-utils fixes the following issues: Security issues fixed: - CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records (bsc#1272354). - CVE-2026-16318: s2n-tls: Denial of Service due to me…

    first Nov 4, 2026
  • Medium max 5.6

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue: - CVE-2026-109964: heap buffer overwrite in PICT decoder on 32-bit systems (bsc#1285423).

  • Medium max 5.5

    python313-imagecodecs-2026.10.10-2.1 on GA media

    These are all security issues fixed in the python313-imagecodecs-2026.10.10-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.4

    Security update for libreoffice

    This update for libreoffice fixes the following issues: Changes in libreoffice: - Upgrade to 26.8.1.1. - Perfect spec file sync between Factory, SLE and Leap 16.X. - Update to LibreOffice 26.2.5.1 (was 25.2.5.2). - Fix the following security issues: * CVE-202…

    first Nov 3, 2026
  • Medium max 6.9

    libtesseract5-5.5.4-2.1 on GA media

    These are all security issues fixed in the libtesseract5-5.5.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.1

    schismtracker-20261102-1.1 on GA media

    These are all security issues fixed in the schismtracker-20261102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.3

    python313-opentelemetry-api-1.45.1-1.1 on GA media

    These are all security issues fixed in the python313-opentelemetry-api-1.45.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.9

    netty-tcnative-2.0.85-1.1 on GA media

    These are all security issues fixed in the netty-tcnative-2.0.85-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.9

    mariadb-java-client-3.5.11-1.1 on GA media

    These are all security issues fixed in the mariadb-java-client-3.5.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.5

    libjpeg-turbo-3.2.1-86.1 on GA media

    These are all security issues fixed in the libjpeg-turbo-3.2.1-86.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.1

    afflib-devel-3.7.23-1.1 on GA media

    These are all security issues fixed in the afflib-devel-3.7.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.6

    Security update for parted

    This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).

    first Nov 3, 2026
  • Medium max 4.4

    Security update for xen

    This update for xen fixes the following issues: Security issue fixed: - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: - Xen: Missing upstream bug fixes (bsc#1027519).

    first Nov 3, 2026
  • Medium max 6.8

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807). - CVE-2026-68742: unvalidated address lengths in NSS respon…

  • Medium max 5.3

    Security update for libsoup

    This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).

  • Medium max 4.3

    Security update for cups

    This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticate…

  • Medium max 5.3

    Security update for libsoup

    This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).

  • Medium max 6.1

    libzvbi-chains0-0.2.46-2.1 on GA media

    These are all security issues fixed in the libzvbi-chains0-0.2.46-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 5.4

    python313-pylint-4.1.3-1.1 on GA media

    These are all security issues fixed in the python313-pylint-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.8

    bugwarden-0.7.0-1.1 on GA media

    These are all security issues fixed in the bugwarden-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.9

    google-osconfig-agent-20261022.00-2.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.9

    google-guest-agent-20261022.00-2.1 on GA media

    These are all security issues fixed in the google-guest-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issue: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).

    first Oct 30, 2026