Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 7.6

    Security update for gstreamer-plugins-good

    This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).

    first Jul 10, 2026
  • High max 7.5

    Security update for dracut

    This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322). Changes for dracut: - Update to version 059+suse.570.g2b84048d7: * fix(network-legacy): sanitize DHCP values in dhclient-sc…

    first Jul 10, 2026
  • High max 7.6

    Security update for gstreamer-plugins-good

    This update for gstreamer-plugins-good fixes the following issue - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).

    first Jul 10, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: Ignore HCI_ERROR_CANCELLED_BY_HOST on adv set terminated event (bsc#1264145). - CVE-2026-43038: ipv6: …

    first Jul 10, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145). - CVE-2026-43038: ipv…

    first Jul 10, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416). - CVE-2026-43198: tcp: fix potent…

    first Jul 10, 2026
  • High max 7.8

    traefik2-2.11.52-1.1 on GA media

    These are all security issues fixed in the traefik2-2.11.52-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 7.5

    python313-websockets-16.0-2.1 on GA media

    These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 8.8

    spectre-meltdown-checker-26.36.0602723-1.1 on GA media

    These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 8.8

    rclone-1.74.4-1.1 on GA media

    These are all security issues fixed in the rclone-1.74.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Medium max 6.1

    python313-tornado6-6.5.7-2.1 on GA media

    These are all security issues fixed in the python313-tornado6-6.5.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 8.7

    python313-pypdf-6.14.2-1.1 on GA media

    These are all security issues fixed in the python313-pypdf-6.14.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 8.7

    python313-maturin-1.14.1-1.1 on GA media

    These are all security issues fixed in the python313-maturin-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Critical max 9.8

    python313-Django4-4.2.30-4.1 on GA media

    These are all security issues fixed in the python313-Django4-4.2.30-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 8.5

    libXfont2-2-2.0.7-2.1 on GA media

    These are all security issues fixed in the libXfont2-2-2.0.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 7.8

    go1.26-1.26.5-1.1 on GA media

    These are all security issues fixed in the go1.26-1.26.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 7.5

    flannel-0.28.7-1.1 on GA media

    These are all security issues fixed in the flannel-0.28.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Critical max 9.8

    curl-8.21.0-1.1 on GA media

    These are all security issues fixed in the curl-8.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Critical max 9.0

    xorg-x11-server-21.1.21-8.1 on GA media

    These are all security issues fixed in the xorg-x11-server-21.1.21-8.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Medium max 6.1

    python313-Django6-6.0.7-1.1 on GA media

    These are all security issues fixed in the python313-Django6-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Critical max 9.8

    perl-DBI-1.650.0-1.1 on GA media

    These are all security issues fixed in the perl-DBI-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 7.5

    MozillaFirefox-152.0.4-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-152.0.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • Medium max 6.5

    ImageMagick-7.1.2.27-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 9, 2026
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…

    first Jul 9, 2026
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…

    first Jul 9, 2026
  • High max 8.7

    Security update for rustup

    This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). - …

    first Jul 9, 2026
  • Critical max 9.6

    Security update for warewulf4

    This update for warewulf4 fixes the following issues: Update to v4.7.0. Security issues fixed: - CVE-2025-69725: incorrect input validation in the `RedirectSlashes` function can lead to an open redirect (bsc#1258511). - CVE-2026-33814: golang.org/x/net/http2:…

    first Jul 9, 2026
  • High max 7.6

    Security update for libaom

    This update for libaom fixes the following issues: - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650). - CVE-2026-56209: crafted video frames with specific Y-plane pixel values c…

    first Jul 9, 2026
  • High max 7.5

    Security update for clamav

    This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service (bsc#1270107). - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remo…

    first Jul 9, 2026
  • High max 8.7

    Security update for rustup

    This update for rustup fixes the following issues Security issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). - CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). - …

    first Jul 9, 2026
  • Critical max 10.0

    Security update for cosign

    This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files (bsc#1267044). - CVE-2026-33815: memory-safety vulnerability (bsc#1261811). - CVE-2026-3982…

    first Jul 9, 2026
  • High max 8.7

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…

    first Jul 9, 2026
  • High max 8.7

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues - Update to version 0.2.9+49 - Update openssl to 0.10.81 - CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270174). - CVE-2026-41677: o…

    first Jul 9, 2026
  • Critical max 10.0

    Security update for alloy

    This update for alloy fixes the following issues - CVE-2026-10722: github.com/cilium/ebpf: BTF string offset boundary check can lead to crash when parsing malformed ELF/BTF input (bsc#1267811). - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE…

    first Jul 9, 2026
  • Critical max 9.6

    Security update for helm

    This update for helm fixes the following issues - Update to version 3.21.2 - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: ora…

    first Jul 9, 2026
  • High max 7.8

    Security update for go1.25

    This update for go1.25 fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CVE-2026-2…

    first Jul 9, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Removed obsolete mozilla-nss-certs and recommends p11-kit-nss-trust (bsc#1269226) Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: …

    first Jul 9, 2026
  • Medium max 4.3

    Security update for glib-networking

    This update for glib-networking fixes the following issue - CVE-2026-10028: two certificates which are each signed by the other can lead to an infinite loop (bsc#1267979).

    first Jul 9, 2026
  • Medium max 6.9

    Security update for python-idna

    This update for python-idna fixes the following issue - CVE-2026-45409: specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413).

    first Jul 9, 2026
  • High max 8.2

    Security update for gnutls

    This update for gnutls fixes the following issues - CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and SANs (bsc#1257960). - CVE-2026-3833: incorrectly accep…

    first Jul 9, 2026