Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,753 results · Clear filters · Feed

  • Medium max 6.1

    pocketbase-0.40.5-1.1 on GA media

    These are all security issues fixed in the pocketbase-0.40.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 17, 2026
  • Medium max 6.5

    libXtst-devel-1.2.5-3.1 on GA media

    These are all security issues fixed in the libXtst-devel-1.2.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • Medium max 4.4

    alsa-1.2.16.1-3.1 on GA media

    These are all security issues fixed in the alsa-1.2.16.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

    first Oct 16, 2026
  • Medium max 6.2

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…

    first Oct 16, 2026
  • Medium max 5.5

    libsndfile-devel-1.2.2-6.1 on GA media

    These are all security issues fixed in the libsndfile-devel-1.2.2-6.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 5.5

    libzbar-devel-0.23.95-2.1 on GA media

    These are all security issues fixed in the libzbar-devel-0.23.95-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    libpoppler-cpp3-26.10.0-1.1 on GA media

    These are all security issues fixed in the libpoppler-cpp3-26.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    openai-codex-0.162.1-2.1 on GA media

    These are all security issues fixed in the openai-codex-0.162.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    grok-build-1.0.45+git20260929.2bdd1d6-2.1 on GA media

    These are all security issues fixed in the grok-build-1.0.45+git20260929.2bdd1d6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.1

    Security update for swtpm

    This update for swtpm fixes the following issues: Security issue fixed: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for …

    first Oct 7, 2026
  • Medium max 5.1

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1…

    first Oct 6, 2026
  • Medium max 4.8

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow …

    first Oct 15, 2026
  • Medium max 4.3

    python-Twisted-doc-26.4.0-4.1 on GA media

    These are all security issues fixed in the python-Twisted-doc-26.4.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 5.9

    psqlODBC-18.00.0005-1.1 on GA media

    These are all security issues fixed in the psqlODBC-18.00.0005-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 6.9

    corepack24-24.21.0-1.1 on GA media

    These are all security issues fixed in the corepack24-24.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 6.9

    matrix-synapse-1.163.0-1.1 on GA media

    These are all security issues fixed in the matrix-synapse-1.163.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 5.9

    libsoup-2_4-1-2.74.3-25.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-25.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 6.9

    elemental3-3.0.4-1.1 on GA media

    These are all security issues fixed in the elemental3-3.0.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 5.9

    aspell-0.60.8.2-3.1 on GA media

    These are all security issues fixed in the aspell-0.60.8.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 14, 2026
  • Medium max 4.8

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing…

    first Oct 12, 2026
  • Medium max 6.8

    Security update for python-oauthlib

    This update for python-oauthlib fixes the following issues: - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). - CVE-2026-49265: Oauthlib: Timing Attack Vulnerabili…

    first Oct 12, 2026
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination…

    first Oct 10, 2026
  • Medium max 6.3

    Security update for glibc

    This update for glibc fixes the following issue: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509).

    first Oct 14, 2026
  • Medium max 6.3

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynam…

  • Medium max 6.3

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449).

    first Oct 13, 2026
  • Medium max 5.9

    python315-3.15.0-1.1 on GA media

    These are all security issues fixed in the python315-3.15.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 13, 2026
  • Medium max 4.3

    python313-vllm-0.30.0-2.1 on GA media

    These are all security issues fixed in the python313-vllm-0.30.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 13, 2026
  • Medium max 5.3

    python313-multidict-7.0.0-1.1 on GA media

    These are all security issues fixed in the python313-multidict-7.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 13, 2026
  • Medium max 5.3

    fetchmail-6.6.8-1.1 on GA media

    These are all security issues fixed in the fetchmail-6.6.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 13, 2026
  • Medium max 6.8

    Security update for virtiofsd

    This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * …

    first Oct 9, 2026
  • Medium max 6.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration p…

    first Oct 8, 2026
  • Medium max 6.5

    libxls-devel-1.6.4-1.1 on GA media

    These are all security issues fixed in the libxls-devel-1.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 12, 2026
  • Medium max 5.3

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2026-77050: potential denial-of-service in `get_supported_language_variant()` when processing many distinct, very long language codes (bsc#1284481). - CVE-2026-84429: potential denial-of-service …

    first Oct 12, 2026
  • Medium max 4.3

    libsbc1-2.2-2.1 on GA media

    These are all security issues fixed in the libsbc1-2.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 12, 2026
  • Medium max 6.5

    Security update for stunnel

    This update for stunnel fixes the following issues: - CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). - CVE-2026-70368: oversized log messages in logging routines can cause stack out-…

    first Oct 12, 2026
  • Medium max 4.8

    Security update for openssh8.4

    This update for openssh8.4 fixes the following issues: - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). - CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can all…

    first Oct 12, 2026
  • Medium max 5.3

    python313-Django-6.1.2-1.1 on GA media

    These are all security issues fixed in the python313-Django-6.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 10, 2026
  • Medium max 6.5

    iscsiuio-0.7.8.8-114.1 on GA media

    These are all security issues fixed in the iscsiuio-0.7.8.8-114.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 10, 2026
  • Medium max 5.3

    python313-Django5-5.2.18-1.1 on GA media

    These are all security issues fixed in the python313-Django5-5.2.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 9, 2026