Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,765 results · Clear filters · Feed

  • Medium max 5.6

    Security update for python-pip

    This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk (bsc#1273090).

    first Aug 25, 2026
  • Medium max 5.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-56365: memory leak in the PNG encoder when writing MNG images (bsc#1270004). - CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575). -…

    first Aug 24, 2026
  • Medium max 5.9

    Security update for liboqs

    This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized `encaps_derand` pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed o…

    first Aug 24, 2026
  • Medium max 6.5

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).

    first Aug 24, 2026
  • Medium max 5.5

    Recommended update for sequoia-sq

    This update for sequoia-sq fixes the following issues: Changes in sequoia-sq: - Legal review Change main license to LGPL-2.0-or-later from GPL-2.0-only * LICENSE.txt confirms it * Correct Legal-Review-Notice usage - Update dependencies due to security issues …

    first Aug 25, 2026
  • Medium max 5.5

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder socket (bsc#1273922). - CVE…

    first Aug 21, 2026
  • Medium max 5.1

    Security update for himmelblau

    This update for himmelblau fixes the following issues: Update to version 2.3.14+git0.e23b4c54. Security issues fixed: - CVE-2026-45784: incorrect sizing of output buffers in `CipherCtxRef::cipher_update_inplace` when used with AES key-wrap-with-padding cipher…

    first Aug 12, 2026
  • Medium max 5.3

    distribution-registry-3.1.1-5.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.1-5.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    coredns-1.14.7-1.1 on GA media

    These are all security issues fixed in the coredns-1.14.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 6.9

    cloudflared-2026.8.2-1.1 on GA media

    These are all security issues fixed in the cloudflared-2026.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 6.9

    nodejs26-26.7.0-1.1 on GA media

    These are all security issues fixed in the nodejs26-26.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    helm3-3.21.3-6.1 on GA media

    These are all security issues fixed in the helm3-3.21.3-6.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.1

    busybox-1.38.0-2.1 on GA media

    These are all security issues fixed in the busybox-1.38.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    azure-storage-azcopy-10.32.7-1.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.5

    Security update for sssd

    This update for sssd fixes the following issue: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925).

    first Aug 25, 2026
  • Medium max 5.3

    cadvisor-0.60.5-2.1 on GA media

    These are all security issues fixed in the cadvisor-0.60.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 6.8

    Security update for librest

    This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 25, 2026
  • Medium max 6.8

    Security update for librest

    This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 25, 2026
  • Medium max 6.0

    Security update for rmt-server

    This update for rmt-server fixes the following issue: Update to version 3.1 (bsc#1274715). - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: …

    first Aug 25, 2026
  • Medium max 6.5

    golang-github-v2fly-v2ray-core-5.53.0-1.1 on GA media

    These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.53.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 4.8

    python313-pypdf-6.16.2-1.1 on GA media

    These are all security issues fixed in the python313-pypdf-6.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 6.1

    python313-mistune-3.3.4-1.1 on GA media

    These are all security issues fixed in the python313-mistune-3.3.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 6.9

    expat-2.8.2-1.1 on GA media

    These are all security issues fixed in the expat-2.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 4.6

    Security update for patch

    This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…

    first Aug 18, 2026
  • Medium max 5.5

    Security update for rpm

    This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

    first Aug 17, 2026
  • Medium max 5.5

    Security update for rpm

    This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

    first Aug 18, 2026
  • Medium max 6.8

    java-11-openjdk-11.0.32.1-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • Medium max 6.1

    swtpm-0.10.2-1.1 on GA media

    These are all security issues fixed in the swtpm-0.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • Medium max 4.2

    libsoup-3_0-0-3.6.6-8.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.6-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • Medium max 5.5

    boringssl-devel-0.20260813-1.1 on GA media

    These are all security issues fixed in the boringssl-devel-0.20260813-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • Medium max 6.8

    java-17-openjdk-17.0.20.1-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 25, 2026
  • Medium max 6.5

    trivy-0.74.0-1.1 on GA media

    These are all security issues fixed in the trivy-0.74.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • Medium max 4.2

    libsoup-2_4-1-2.74.3-22.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-22.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • Medium max 6.5

    hauler-2.0.3-1.1 on GA media

    These are all security issues fixed in the hauler-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • Medium max 6.1

    python313-djangorestframework-3.18.0-1.1 on GA media

    These are all security issues fixed in the python313-djangorestframework-3.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Medium max 5.9

    python313-aiosmtplib-5.1.2-1.1 on GA media

    These are all security issues fixed in the python313-aiosmtplib-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Medium max 6.4

    Security update for sssd

    This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).

    first Aug 7, 2026
  • Medium max 6.5

    Security update for libssh

    This update for libssh fixes the following issues - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service …

    first Aug 6, 2026
  • Medium max 5.5

    Security update for avahi

    This update for avahi fixes the following issue - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).

    first Aug 4, 2026