Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 5.4

    Security update for wicked

    This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…

    first Aug 27, 2026
  • Medium max 5.4

    Security update for wicked

    This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…

    first Aug 27, 2026
  • Medium max 5.4

    Security update for wicked

    This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…

    first Aug 27, 2026
  • Medium max 5.4

    Security update for wicked

    This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing (bsc#1274627). - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyon…

    first Aug 27, 2026
  • Medium max 6.8

    Security update for librest0_7

    This update for librest0_7 fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 27, 2026
  • Medium max 5.4

    bson-devel-2.5.1-1.1 on GA media

    These are all security issues fixed in the bson-devel-2.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 5.4

    python313-aiosmtpd-1.4.6-6.1 on GA media

    These are all security issues fixed in the python313-aiosmtpd-1.4.6-6.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 5.3

    helm-4.2.4-1.1 on GA media

    These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 5.3

    libmsgpack-c2-7.0.2-2.1 on GA media

    These are all security issues fixed in the libmsgpack-c2-7.0.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 6.8

    mcphost-0.34.0-10.1 on GA media

    These are all security issues fixed in the mcphost-0.34.0-10.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 5.3

    apptainer-1.5.3-3.1 on GA media

    These are all security issues fixed in the apptainer-1.5.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 2, 2026
  • Medium max 5.5

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - Update CVE-2026-66757 patch. The original patch wasn't allocating enough bytes.

    first Sep 1, 2026
  • Medium max 6.5

    perl-URI-5.360.0-1.1 on GA media

    These are all security issues fixed in the perl-URI-5.360.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 5.3

    grafana-12.4.5-5.1 on GA media

    These are all security issues fixed in the grafana-12.4.5-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 6.6

    glibc-2.44-1.1 on GA media

    These are all security issues fixed in the glibc-2.44-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 6.8

    aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 on GA media

    These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.5.0~git0.2950b36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 1, 2026
  • Medium max 5.5

    libtree-sitter0_26-0.26.8-5.1 on GA media

    These are all security issues fixed in the libtree-sitter0_26-0.26.8-5.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Medium max 6.8

    java-1_8_0-openjdk-1.8.0.504-1.1 on GA media

    These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Medium max 6.9

    Botan-3.13.0-1.1 on GA media

    These are all security issues fixed in the Botan-3.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 31, 2026
  • Medium max 6.5

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).

    first Aug 24, 2026
  • Medium max 6.8

    Security update for librest

    This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 30, 2026
  • Medium max 5.3

    Security update for python-h2

    This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate `Host` headers are accepted and forwarded to consuming applications, which can lead to request smuggling (bsc#1274386).

    first Aug 30, 2026
  • Medium max 6.9

    Security update for gstreamer-devtools

    This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subsc…

    first Aug 30, 2026
  • Medium max 5.3

    httpcomponents-client-4.5.14-2.1 on GA media

    These are all security issues fixed in the httpcomponents-client-4.5.14-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 30, 2026
  • Medium max 4.6

    Security update for broot

    This update for broot fixes the following issues: Changes in broot: - v1.59.0 (CVE-2026-72847 boo#1275994) * new shell_command verb attribute: run a command through a shell (sh -c / cmd /C) so &&, ; and pipes work, without leaving broot - Fix #1145 * fix inva…

    first Aug 28, 2026
  • Medium max 5.3

    Security update for coredns

    This update for coredns fixes the following issues: Changes in coredns: - Update to version 1.14.7: * plugin/acl, plugin/cache, plugin/file, plugin/forward, plugin/kubernetes: assorted correctness fixes (stale-cache races, AXFR zone contamination, DoH health-…

    first Aug 28, 2026
  • Medium max 5.1

    wget-1.25.0-7.1 on GA media

    These are all security issues fixed in the wget-1.25.0-7.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 29, 2026
  • Medium max 5.4

    wicked-0.6.80-2.1 on GA media

    These are all security issues fixed in the wicked-0.6.80-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • Medium max 6.1

    php-composer2-2.10.3-1.1 on GA media

    These are all security issues fixed in the php-composer2-2.10.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • Medium max 6.8

    owasp-modsecurity-crs-4.29.0-1.1 on GA media

    These are all security issues fixed in the owasp-modsecurity-crs-4.29.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • Medium max 4.8

    bzip2-1.0.8-6.1 on GA media

    These are all security issues fixed in the bzip2-1.0.8-6.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 28, 2026
  • Medium max 6.9

    Security update for gzip

    This update for gzip fixes the following issues: - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression formats within a single execution (bsc#1269623, bsc#1272554).

    first Aug 27, 2026
  • Medium max 5.3

    python313-djangorestframework-3.18.0-2.1 on GA media

    These are all security issues fixed in the python313-djangorestframework-3.18.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • Medium max 6.3

    python313-django-oauth-toolkit-3.4.1-1.1 on GA media

    These are all security issues fixed in the python313-django-oauth-toolkit-3.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • Medium max 6.8

    java-21-openjdk-21.0.12.1-1.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • Medium max 4.6

    cpio-2.15-8.1 on GA media

    These are all security issues fixed in the cpio-2.15-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • Medium max 6.9

    Security update for cloudflared

    This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.8.2 * Update vendor archive to fix github.com/go-chi/chi/v5 (boo#1276196, CVE-2026-72815, CVE-2026-72816, CVE-2026-72817) * Add OpenRC support * Migrate c…

    first Aug 27, 2026
  • Medium max 5.4

    Security update for wicked

    This update for wicked fixes the following issues: Changes in wicked: - Fix two OOB reads in ni_capture_inspect_udp_header and improve: - Reject packets with ip_len < ihl to avoid a size_t underflow of the UDP length, which the checksum truncates to uint16_t …

    first Aug 27, 2026
  • Medium max 6.5

    Security update for file-roller

    This update for file-roller fixes the following issues: Changes in file-roller: - CVE-2026-78322: Check line length when parsing command output (bsc#1276442).

    first Aug 27, 2026
  • Medium max 6.9

    Security update for trivy

    This update for trivy fixes the following issue: - CVE-2026-72815,CVE-2026-72816,CVE-2026-72817: github.com/go-chi/chi/v5: multiple IP spoofing vulnerabilities allow authentication bypass, authorization override, and log forgery (bsc#1276128). Changes for tri…

    first Aug 25, 2026