Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

6,765 results · Clear filters · Feed

  • Medium max 5.3
    openSUSE-SU-2026:20105-1 3 CVEs

    Security update for sbctl

    This update for sbctl fixes the following issues: Changes in sbctl: - Upgrade the embedded golang.org/x/net to 0.46.0 * Fixes: bsc#1251399, CVE-2025-47911: various algorithms with quadratic complexity when parsing HTML documents * Fixes: bsc#1251609, CVE-2025…

    first Jan 23, 2026
  • Medium max 6.5
    openSUSE-SU-2026:20090-1 2 CVEs

    Security update for busybox

    This update for busybox fixes the following issues: Security fixes: - CVE-2025-60876: HTTP request header injection in wget (bsc#1253245). - CVE-2025-46394: Fixed tar hidden files via escape sequence (bsc#1241661). Other fixes: - Set CONFIG_FIRST_SYSTEM_ID to…

    first Jan 22, 2026
  • Medium max 5.3
    openSUSE-SU-2026:20087-1 1 CVE

    Security update for python-marshmallow

    This update for python-marshmallow fixes the following issues: - CVE-2025-68480: Fixed possible DoS when using Schema.load(data, many=True) (bsc#1255473).

    first Jan 22, 2026
  • Medium max 4.5
    openSUSE-SU-2026:20086-1 1 CVE

    Security update for python-virtualenv

    This update for python-virtualenv fixes the following issues: - CVE-2026-22702: Fixed local attacker can redirect file operations via TOCTOU race condition (bsc#1256458).

    first Jan 22, 2026
  • Medium max 6.8
    openSUSE-SU-2026:20083-1 2 CVEs

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2026-22695: Fixed heap buffer over-read in png_image_finish_read (bsc#1256525). - CVE-2026-22801: Fixed integer truncation causing heap buffer over-read in png_image_write_* (bsc#1256526).

    first Jan 22, 2026
  • Medium max 6.1
    openSUSE-SU-2026:20082-1 1 CVE

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: * Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported (it previously was an experime…

    first Jan 22, 2026
  • Medium max 6.5
    openSUSE-SU-2026:20076-1 1 CVE

    Security update for libheif

    This update for libheif fixes the following issues: - CVE-2025-68431: heap buffer over-read in `HeifPixelImage::overlay()` via crafted HEIF file that exercises the overlay image item path (bsc#1255735).

    first Jan 22, 2026
  • Medium max 6.5
    openSUSE-SU-2026:20060-1 3 CVEs

    Security update for cargo-c

    This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discard_all_messages (bsc#1243179) - CVE-2025-58160: tracing-subscriber: Fixed log pollution (bsc#1249012) - CVE-2024-12224: idna: Fi…

    first Jan 19, 2026
  • Medium max 6.5
    openSUSE-SU-2026:20058-1 3 CVEs

    Security update for go-sendxmpp

    This update for go-sendxmpp fixes the following issues: Changes in go-sendxmpp: - Update to 0.15.1: Added * Add XEP-0359 Origin-ID to messages (requires go-xmpp >= v0.2.18). Changed * HTTP upload: Ignore timeouts on disco IQs as some components do not reply. …

    first Jan 17, 2026
  • Medium max 5.1
    openSUSE-SU-2026:20057-1 1 CVE

    Security update for docker

    This update for docker fixes the following issues: Changes in docker: - Update to Docker 28.5.1-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/28/#2851> - Update to Docker 28.5.0-ce. See upstream changelog online at <https:…

    first Jan 17, 2026
  • Medium max 6.9
    openSUSE-SU-2026:20043-1 3 CVEs

    Security update for erlang

    This update for erlang fixes the following issues: Update the ssh component to the latest in the maint-27 branch. Security issues fixed: - CVE-2025-48040: ssh: overly tolerant handling of data received from unauthenticated users when processing key exchange m…

    first Jan 15, 2026
  • Medium max 6.3
    openSUSE-SU-2026:20031-1 5 CVEs

    Security update for curl

    This update for curl fixes the following issues: This update for curl fixes the following issues: - CVE-2025-14017: broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-1…

    first Jan 14, 2026
  • Medium max 6.3
    openSUSE-SU-2026:20022-1 2 CVEs

    Security update for matio

    This update for matio fixes the following issues: - update to version 1.5.29: * Fix printing rank-1-variable in Mat_VarPrint * Fix array index out of bounds in Mat_VarPrint when printing UTF-8 character data (boo#1239678, CVE-2025-2337) * Fix heap-based buffe…

    first Jan 11, 2026
  • Medium max 5.3
    openSUSE-SU-2026:20013-1 1 CVE

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2024-52615: Fixed DNS spoofing (bsc#1233421)

    first Jan 11, 2026
  • Medium max 6.1
    openSUSE-SU-2026:10322-1 2 CVEs

    python311-lxml_html_clean-0.4.4-1.1 on GA media

    These are all security issues fixed in the python311-lxml_html_clean-0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 6.9
    openSUSE-SU-2026:10321-1 1 CVE

    python311-PyPDF2-2.11.1-6.1 on GA media

    These are all security issues fixed in the python311-PyPDF2-2.11.1-6.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 6.5
    openSUSE-SU-2026:10319-1 1 CVE

    helm3-3.20.0-2.1 on GA media

    These are all security issues fixed in the helm3-3.20.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 6.5
    openSUSE-SU-2026:10318-1 1 CVE

    helm-4.1.1-3.1 on GA media

    These are all security issues fixed in the helm-4.1.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 6.3
    openSUSE-SU-2026:10316-1 1 CVE

    ghostty-1.3.0-1.1 on GA media

    These are all security issues fixed in the ghostty-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10315-1 1 CVE

    GraphicsMagick-1.3.46-2.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.46-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 10, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10289-1 1 CVE

    freetype2-devel-2.14.2-1.1 on GA media

    These are all security issues fixed in the freetype2-devel-2.14.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 5, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10285-1 1 CVE

    python311-pillow-heif-1.3.0-1.1 on GA media

    These are all security issues fixed in the python311-pillow-heif-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Medium max 6.6
    openSUSE-SU-2026:10284-1 2 CVEs

    python311-PyPDF2-2.11.1-5.1 on GA media

    These are all security issues fixed in the python311-PyPDF2-2.11.1-5.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Medium max 5.3
    openSUSE-SU-2026:10278-1 2 CVEs

    ImageMagick-7.1.2.15-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.15-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 4, 2026
  • Medium max 6.9
    openSUSE-SU-2026:10277-1 2 CVEs

    python311-pypdf-6.7.5-1.1 on GA media

    These are all security issues fixed in the python311-pypdf-6.7.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 2, 2026
  • Medium max 5.8
    openSUSE-SU-2026:10276-1 3 CVEs

    libsoup-3_0-0-3.6.6-2.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 1, 2026
  • Medium max 4.3
    openSUSE-SU-2026:10275-1 2 CVEs

    gvfs-1.58.2-1.1 on GA media

    These are all security issues fixed in the gvfs-1.58.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 1, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10274-1 3 CVEs

    libwireshark19-4.6.4-1.1 on GA media

    These are all security issues fixed in the libwireshark19-4.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • Medium max 6.5
    openSUSE-SU-2026:10272-1 1 CVE

    libIex-3_4-33-3.4.5-1.1 on GA media

    These are all security issues fixed in the libIex-3_4-33-3.4.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 27, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10265-1 1 CVE

    qemu-10.2.1-1.1 on GA media

    These are all security issues fixed in the qemu-10.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • Medium max 5.6
    openSUSE-SU-2026:10262-1 1 CVE

    evolution-data-server-3.58.3-2.1 on GA media

    These are all security issues fixed in the evolution-data-server-3.58.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • Medium max 6.6
    openSUSE-SU-2026:10261-1 1 CVE

    docker-29.2.1_ce-37.1 on GA media

    These are all security issues fixed in the docker-29.2.1_ce-37.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 26, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10244-1 1 CVE

    libsignal-protocol-c-devel-2.3.3-2.1 on GA media

    These are all security issues fixed in the libsignal-protocol-c-devel-2.3.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • Medium max 6.1
    openSUSE-SU-2026:10241-1 1 CVE

    cacti-1.2.30+git231.bca15e70c-1.1 on GA media

    These are all security issues fixed in the cacti-1.2.30+git231.bca15e70c-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 24, 2026
  • Medium max 4.7
    openSUSE-SU-2026:10239-1 1 CVE

    warewulf4-4.6.5-2.1 on GA media

    These are all security issues fixed in the warewulf4-4.6.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • Medium max 6.9
    openSUSE-SU-2026:10238-1 4 CVEs

    python311-PyPDF2-2.11.1-4.1 on GA media

    These are all security issues fixed in the python311-PyPDF2-2.11.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • Medium max 5.9
    openSUSE-SU-2026:10235-1 6 CVEs

    cosign-3.0.5-1.1 on GA media

    These are all security issues fixed in the cosign-3.0.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 23, 2026
  • Medium max 5.5
    openSUSE-SU-2026:10232-1 3 CVEs

    cosign-3.0.4-2.1 on GA media

    These are all security issues fixed in the cosign-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 20, 2026
  • Medium max 6.0
    openSUSE-SU-2026:10223-1 5 CVEs

    python313-3.13.12-1.1 on GA media

    These are all security issues fixed in the python313-3.13.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026
  • Medium max 6.3
    openSUSE-SU-2026:10222-1 8 CVEs

    python312-3.12.12-5.1 on GA media

    These are all security issues fixed in the python312-3.12.12-5.1 package on the GA media of openSUSE Tumbleweed.

    first Feb 18, 2026