Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

6,753 results · Clear filters · Feed

  • Medium max 4.3

    GraphicsMagick-1.3.48-3.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.48-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 9, 2026
  • Medium max 6.1

    Security update for swtpm

    This update for swtpm fixes the following issues: Security issue fixed: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for …

    first Oct 7, 2026
  • Medium max 5.3

    Security update for fetchmail

    This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).

  • Medium max 5.3

    Security update for fetchmail

    This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).

  • Medium max 6.3

    Security update for python-hpack

    This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035).

    first Oct 8, 2026
  • Medium max 4.3

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue: - CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing (bsc#1283767).

    first Oct 8, 2026
  • Medium max 6.6

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726). - CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723). - C…

    first Oct 8, 2026
  • Medium max 5.1

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1…

    first Oct 6, 2026
  • Medium max 5.3

    python313-Django4-4.2.30-6.1 on GA media

    These are all security issues fixed in the python313-Django4-4.2.30-6.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Medium max 5.9

    git-bug-0.11.0-2.1 on GA media

    These are all security issues fixed in the git-bug-0.11.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Medium max 5.9

    bcel-6.13.0-1.1 on GA media

    These are all security issues fixed in the bcel-6.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Medium max 6.2

    ImageMagick-7.1.2.32-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.32-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 8, 2026
  • Medium max 6.3

    libxreaderdocument3-4.6.9-2.1 on GA media

    These are all security issues fixed in the libxreaderdocument3-4.6.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 7, 2026
  • Medium max 6.3

    glibc-2.44-3.1 on GA media

    These are all security issues fixed in the glibc-2.44-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 7, 2026
  • Medium max 4.6

    AusweisApp-2.6.0-1.1 on GA media

    These are all security issues fixed in the AusweisApp-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 7, 2026
  • Medium max 5.5

    Security update for openexr

    This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).

    first Oct 2, 2026
  • Medium max 5.3

    Security update for fetchmail

    This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).

    first Oct 7, 2026
  • Medium max 5.4

    perl-Net-Whois-Raw-2.99044-1.1 on GA media

    These are all security issues fixed in the perl-Net-Whois-Raw-2.99044-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Medium max 5.3

    perl-Net-OAuth-0.330.0-2.1 on GA media

    These are all security issues fixed in the perl-Net-OAuth-0.330.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Medium max 5.5

    Security update for openexr

    This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).

  • Medium max 6.5

    golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.34.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Medium max 5.1

    Security update for wget

    This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).

    first Oct 1, 2026
  • Medium max 6.3

    Security update for distribution

    This update for distribution fixes the following issues: - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). - CVE-2026-81872: …

    first Oct 1, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

    first Sep 30, 2026
  • Medium max 5.1

    Security update for wget

    This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).

    first Oct 1, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

    first Sep 30, 2026
  • Medium max 6.8

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: improve resource resolving (bsc#1275777). - CVE-2026-61308: enhance HTTP connections (bsc#1275778). - CVE-2026-70907: enhance TLS server (bsc#1275764). Changes for java-11-openjdk: …

    first Oct 5, 2026
  • Medium max 5.5

    Security update for rpm

    This update for rpm fixes the following issue: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584). Other updates and bugfixes: - Fix `libelf` handl…

  • Medium max 6.4

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925). - CVE-2026-12610: cancelled or…

  • Medium max 4.3

    Security update for cups

    This update for cups fixes the following issue: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116).

  • Medium max 5.1

    Security update for rubygem-rails-html-sanitizer

    This update for rubygem-rails-html-sanitizer fixes the following issue: - CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275199).

  • Medium max 6.5

    python313-redis-7.0.1-2.5 on GA media

    These are all security issues fixed in the python313-redis-7.0.1-2.5 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.9

    python313-paramiko-5.0.0-1.2 on GA media

    These are all security issues fixed in the python313-paramiko-5.0.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.6

    python313-logilab-common-2.1.0-1.4 on GA media

    These are all security issues fixed in the python313-logilab-common-2.1.0-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.3

    python313-black-26.5.1-1.3 on GA media

    These are all security issues fixed in the python313-black-26.5.1-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.3

    python313-bjoern-3.2.2-2.6 on GA media

    These are all security issues fixed in the python313-bjoern-3.2.2-2.6 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.5

    python313-azure-identity-1.25.3-1.3 on GA media

    These are all security issues fixed in the python313-azure-identity-1.25.3-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 5.9

    python313-pycryptodome-3.23.0-1.6 on GA media

    These are all security issues fixed in the python313-pycryptodome-3.23.0-1.6 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 4.6

    python313-jupyter-server-2.20.0-1.3 on GA media

    These are all security issues fixed in the python313-jupyter-server-2.20.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Medium max 6.2

    python313-zipp-4.1.0-1.2 on GA media

    These are all security issues fixed in the python313-zipp-4.1.0-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026