Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,753 results · Clear filters · Feed

  • Medium max 5.3

    python313-tornado6-6.6-1.1 on GA media

    These are all security issues fixed in the python313-tornado6-6.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Medium max 4.3

    proftpd-1.3.9e-1.1 on GA media

    These are all security issues fixed in the proftpd-1.3.9e-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Medium max 6.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…

  • Medium max 6.6

    Security update for parted

    This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).

  • Medium max 4.4

    xen-4.22.0_08-1.1 on GA media

    These are all security issues fixed in the xen-4.22.0_08-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 5.5

    libansilove-devel-1.4.4-1.1 on GA media

    These are all security issues fixed in the libansilove-devel-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 6.8

    dnsmasq-2.93-3.1 on GA media

    These are all security issues fixed in the dnsmasq-2.93-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 6.5

    Security update for nmap

    This update for nmap fixes the following issue: - CVE-2026-72712: crafted packet containing a zero-length TCP option causes the `Packet:parse_options()` function to allocate objects in an infinite loop and cause an OOM condition (bsc#1275288).

    first Nov 1, 2026
  • Medium max 6.5

    Security update for aws-efs-utils

    This update for aws-efs-utils fixes the following issues: Security issues fixed: - CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records (bsc#1272354). - CVE-2026-16318: s2n-tls: Denial of Service due to me…

    first Nov 4, 2026
  • Medium max 5.6

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue: - CVE-2026-109964: heap buffer overwrite in PICT decoder on 32-bit systems (bsc#1285423).

  • Medium max 5.5

    python313-imagecodecs-2026.10.10-2.1 on GA media

    These are all security issues fixed in the python313-imagecodecs-2026.10.10-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.4

    Security update for libreoffice

    This update for libreoffice fixes the following issues: Changes in libreoffice: - Upgrade to 26.8.1.1. - Perfect spec file sync between Factory, SLE and Leap 16.X. - Update to LibreOffice 26.2.5.1 (was 25.2.5.2). - Fix the following security issues: * CVE-202…

    first Nov 3, 2026
  • Medium max 6.9

    libtesseract5-5.5.4-2.1 on GA media

    These are all security issues fixed in the libtesseract5-5.5.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.1

    schismtracker-20261102-1.1 on GA media

    These are all security issues fixed in the schismtracker-20261102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.3

    python313-opentelemetry-api-1.45.1-1.1 on GA media

    These are all security issues fixed in the python313-opentelemetry-api-1.45.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.9

    netty-tcnative-2.0.85-1.1 on GA media

    These are all security issues fixed in the netty-tcnative-2.0.85-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 5.9

    mariadb-java-client-3.5.11-1.1 on GA media

    These are all security issues fixed in the mariadb-java-client-3.5.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.5

    libjpeg-turbo-3.2.1-86.1 on GA media

    These are all security issues fixed in the libjpeg-turbo-3.2.1-86.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.1

    afflib-devel-3.7.23-1.1 on GA media

    These are all security issues fixed in the afflib-devel-3.7.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 3, 2026
  • Medium max 6.6

    Security update for parted

    This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).

    first Nov 3, 2026
  • Medium max 4.4

    Security update for xen

    This update for xen fixes the following issues: Security issue fixed: - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: - Xen: Missing upstream bug fixes (bsc#1027519).

    first Nov 3, 2026
  • Medium max 6.8

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807). - CVE-2026-68742: unvalidated address lengths in NSS respon…

  • Medium max 5.3

    Security update for libsoup

    This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).

  • Medium max 4.3

    Security update for cups

    This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticate…

  • Medium max 5.3

    Security update for libsoup

    This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831).

  • Medium max 6.1

    libzvbi-chains0-0.2.46-2.1 on GA media

    These are all security issues fixed in the libzvbi-chains0-0.2.46-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 5.4

    python313-pylint-4.1.3-1.1 on GA media

    These are all security issues fixed in the python313-pylint-4.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.8

    bugwarden-0.7.0-1.1 on GA media

    These are all security issues fixed in the bugwarden-0.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.9

    google-osconfig-agent-20261022.00-2.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 6.9

    google-guest-agent-20261022.00-2.1 on GA media

    These are all security issues fixed in the google-guest-agent-20261022.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 2, 2026
  • Medium max 5.3

    Security update for gnutls

    This update for gnutls fixes the following issue: - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960).

    first Oct 30, 2026
  • Medium max 4.3

    libQt63DAnimation6-6.12.0-2.1 on GA media

    These are all security issues fixed in the libQt63DAnimation6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 1, 2026
  • Medium max 5.2

    bson-devel-2.5.7-1.1 on GA media

    These are all security issues fixed in the bson-devel-2.5.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 1, 2026
  • Medium max 4.3

    libQt6Concurrent6-6.12.0-2.1 on GA media

    These are all security issues fixed in the libQt6Concurrent6-6.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 1, 2026
  • Medium max 6.8

    epiphany-51.2-1.1 on GA media

    These are all security issues fixed in the epiphany-51.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 1, 2026
  • Medium max 5.5

    efivar-39-1.1 on GA media

    These are all security issues fixed in the efivar-39-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 1, 2026
  • Medium max 5.3

    Security update for python-Django

    This update for python-Django fixes the following issues: Changes in python-Django: - CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset, without any permission on the targeted object, marking an o…

    first Oct 28, 2026
  • Medium max 6.0

    Security update for python-pypdf

    This update for python-pypdf fixes the following issues: Changes in python-pypdf: - CVE-2026-113786: PDF containing image data labeled with the `/DCTDecode` filter causes Pillow to select and invoke an unintended image parser when the image is loaded (bsc#128…

    first Oct 26, 2026
  • Medium max 6.9

    hugo-0.169.0-1.1 on GA media

    These are all security issues fixed in the hugo-0.169.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 31, 2026
  • Medium max 6.5

    Security update for stgit

    This update for stgit fixes the following issues: Changes in stgit: - Update to version 2.7.0: * Allow unambiguous command shorthands, opt-in with `stgit.infer-commands`. * Accept git approxidate spellings for dates, e.g. "2 days ago" and "@<epoch>"; relative…

    first Oct 29, 2026