Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

All Critical High Medium Low With exploited CVEs

35,581 results · Feed

  • High max 8.8
    openSUSE-SU-2026:21508-1 23 CVEs

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution (bsc#1271638). - CVE-2026-39872: maliciously crafted web content can lead to an unexpected proce…

    first Aug 1, 2026
  • High max 7.8
    openSUSE-SU-2026:11430-1 1 CVE

    librrd8-1.10.3-1.1 on GA media

    These are all security issues fixed in the librrd8-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.7
    openSUSE-SU-2026:11429-1 4 CVEs

    python315-3.15.0~b4-1.1 on GA media

    These are all security issues fixed in the python315-3.15.0~b4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.7
    openSUSE-SU-2026:11428-1 9 CVEs

    python312-3.12.13-8.1 on GA media

    These are all security issues fixed in the python312-3.12.13-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.7
    openSUSE-SU-2026:11427-1 9 CVEs

    python311-3.11.15-8.1 on GA media

    These are all security issues fixed in the python311-3.11.15-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.7
    openSUSE-SU-2026:11426-1 6 CVEs

    python310-3.10.20-8.1 on GA media

    These are all security issues fixed in the python310-3.10.20-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Medium max 5.3
    openSUSE-SU-2026:11425-1 1 CVE

    python313-sentry-sdk-2.66.1-1.1 on GA media

    These are all security issues fixed in the python313-sentry-sdk-2.66.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.1
    openSUSE-SU-2026:11418-1 3 CVEs

    php8-8.5.9-1.1 on GA media

    These are all security issues fixed in the php8-8.5.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Medium max 4.7
    openSUSE-SU-2026:11417-1 1 CVE

    libntpc1-1.2.5-1.1 on GA media

    These are all security issues fixed in the libntpc1-1.2.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Medium max 5.3
    openSUSE-SU-2026:11415-1 1 CVE

    gio-branding-upstream-2.88.3-1.1 on GA media

    These are all security issues fixed in the gio-branding-upstream-2.88.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Medium max 5.9
    openSUSE-SU-2026:11424-1 2 CVEs

    python313-pydantic-2.13.4-2.1 on GA media

    These are all security issues fixed in the python313-pydantic-2.13.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 7.5
    openSUSE-SU-2026:11421-1 2 CVEs

    python313-certifi-2026.7.22-1.1 on GA media

    These are all security issues fixed in the python313-certifi-2026.7.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Medium max 5.0
    openSUSE-SU-2026:11420-1 1 CVE

    python313-asteval-1.0.9-1.1 on GA media

    These are all security issues fixed in the python313-asteval-1.0.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11419-1 3 CVEs

    python313-GitPython-3.1.56-1.1 on GA media

    These are all security issues fixed in the python313-GitPython-3.1.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.7
    openSUSE-SU-2026:11416-1 4 CVEs

    gdk-pixbuf-loader-libheif-1.23.1-1.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.1
    openSUSE-SU-2026:11414-1 2 CVEs

    GraphicsMagick-1.3.48-1.1 on GA media

    These are all security issues fixed in the GraphicsMagick-1.3.48-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Critical max 9.3
    openSUSE-SU-2026:11432-1 14 CVEs

    libthrift-0_24_0-0.24.0-1.1 on GA media

    These are all security issues fixed in the libthrift-0_24_0-0.24.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.8
    openSUSE-SU-2026:11431-1 4 CVEs

    ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

    These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Low max 2.3
    openSUSE-SU-2026:11423-1 1 CVE

    python313-joserfc-1.7.4-2.1 on GA media

    These are all security issues fixed in the python313-joserfc-1.7.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • Unscored
    openSUSE-SU-2026:11422-1 0 CVEs

    python313-huggingface-hub-1.26.0-1.1 on GA media

    These are all security issues fixed in the python313-huggingface-hub-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 1, 2026
  • High max 8.3
    openSUSE-SU-2026:11413-1 3 CVEs

    perses-cli-0.54.0-1.1 on GA media

    These are all security issues fixed in the perses-cli-0.54.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 31, 2026
  • Medium max 6.6
    openSUSE-SU-2026:11412-1 1 CVE

    evince-48.4-2.1 on GA media

    These are all security issues fixed in the evince-48.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 31, 2026
  • Medium max 5.3
    openSUSE-SU-2026:11411-1 7 CVEs

    dnsdist-2.0.7-1.1 on GA media

    These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 31, 2026
  • Critical max 9.1
    openSUSE-SU-2026:11410-1 1 CVE

    cf-cli-8.18.4+git.0.3fcd823a1-1.1 on GA media

    These are all security issues fixed in the cf-cli-8.18.4+git.0.3fcd823a1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 31, 2026
  • Critical max 9.1
    openSUSE-SU-2026:21497-1 5 CVEs

    Security update for perl-YAML-Syck

    This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - updated to 1.470.0 (1.47) [Security] - Fix four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load() path on untrusted input with no special flags (rep…

    first Jul 29, 2026
  • Critical max 9.1
    openSUSE-SU-2026:21496-1 1 CVE

    Security update for perl-Mojolicious

    This update for perl-Mojolicious fixes the following issues: Changes in perl-Mojolicious: - updated to 9.480.0 (9.48) - Fixed a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every reques…

    first Jul 29, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21494-1 1 CVE

    Security update for gh

    This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version (boo#1266618).

    first Jul 29, 2026
  • Low max 3.3
    openSUSE-SU-2026:21492-1 1 CVE

    Security update for keybase-client

    This update for keybase-client fixes the following issues: Changes in keybase-client: - CVE-2026-39824: failure to reject ASCII-only Punycode-encoded labels

    first Jul 29, 2026
  • High max 8.6
    openSUSE-SU-2026:21489-1 9 CVEs

    Security update for bind

    This update for bind fixes the following issues - Upgrade to release 9.20.26 - CVE-2026-10723: Incorrect acceptance of NSEC3 records (bsc#1271982). - CVE-2026-10822: Key Record using PRIVATEDNS algorithm may lead to unexpected exit (bsc#1271983). - CVE-2026-1…

    first Jul 30, 2026
  • Medium max 6.0
    openSUSE-SU-2026:21488-1 2 CVEs

    Security update for openvpn

    This update for openvpn fixes the following issues: - CVE-2026-13122: denial of service via a malformed authentication token that triggers a reachable assertion when external-auth is enabled (bsc#1270413). - CVE-2026-13698: denial of service via memory leak t…

    first Jul 30, 2026
  • Critical max 10.0
    openSUSE-SU-2026:21483-1 1734 CVEs 2 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260723T184607 2026-07-23T18:46:07Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4730 CVE-2026-33022 GHSA-cv4x-93xx-wgfj * GO-2…

    first Jul 30, 2026
  • High max 8.7
    openSUSE-SU-2026:21502-1 4 CVEs

    Security update for nsd

    This update for nsd fixes the following issues: Changes in nsd: - Update nsd.keyring - update to 4.14.3: https://github.com/NLnetLabs/nsd/blob/NSD_4_14_3_REL/doc/ChangeLog * CVE-2026-12490: Bypass of client certificate verification with transfer over TLS (bsc…

    first Jul 29, 2026
  • Medium max 6.5
    openSUSE-SU-2026:21501-1 2 CVEs

    Security update for s2n

    This update for s2n fixes the following issues: Changes in s2n: - CVE-2026-16318: Denial of Service due to memory leak in QUIC transport parameters handler (bsc#1272352) - CVE-2026-16317: man-in-the-middle attack can silently discard individual application da…

    first Jul 29, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21500-1 2 CVEs

    Security update for yq

    This update for yq fixes the following issues: Changes in yq: - Update the golang.org/x/net dependency to version v0.57.0 to fix CVE-2026-39821 for good (bsc#1267199). - update to v4.53.3 Add --ini-preserve-quotes flag for INI round-trip quote preservation. F…

    first Jul 29, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21499-1 2 CVEs

    Security update for apptainer

    This update for apptainer fixes the following issues: Changes in apptainer: - Update to version 1.5.3: * If the ptrace() system call does not work while building an image as an unprivileged user, skip using PRoot to preserve file ownership and print an INFO m…

    first Jul 29, 2026
  • Critical max 9.6
    openSUSE-SU-2026:21482-1 2 CVEs

    Security update for ignition

    This update for ignition fixes the following issues: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode…

    first Jul 30, 2026
  • Critical max 9.1
    openSUSE-SU-2026:21487-1 2 CVEs

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requiremen…

    first Jul 30, 2026
  • Critical max 9.1
    openSUSE-SU-2026:21486-1 2 CVEs

    Security update for tomcat

    This update for tomcat fixes the following issues: Update to Tomcat 9.0.120. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in `RewriteValve` may allow security control bypass (bsc#1271397). - CVE-2026-59084: `EncryptInterceptor` requirements…

    first Jul 30, 2026
  • High max 8.8
    openSUSE-SU-2026:21485-1 2 CVEs

    Security update for valkey

    This update for valkey fixes the following issues: Update to version 8.0.10. - CVE-2026-56684: RCE via CLIENT KILL due to use-after-free in TLS connection handling (bsc#1272443). - CVE-2026-63639: RCE via corrupt stream RDB files due to use-after-free when lo…

    first Jul 30, 2026
  • High max 8.1
    openSUSE-SU-2026:21484-1 9 CVEs

    Security update for ntfs-3g_ntfsprogs

    This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2026-42616: heap buffer overflow in `cat()` of `cat.c` can lead to heap corruption in the ntfscat binary via a specially crafted NTFS image (bsc#1271102). - CVE-2026-42617: heap buffer overfl…

    first Jul 30, 2026