Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 8.0

    Security update for cockpit

    This update for cockpit fixes the following issue - CVE-2026-4802: remote command execution via unsanitized user-controlled parameters within crafted links in system logs UI (bsc#1265040).

    first Jul 2, 2026
  • Critical max 9.1

    python314-3.14.6-1.1 on GA media

    These are all security issues fixed in the python314-3.14.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 7.5

    perl-List-SomeUtils-XS-0.590.0-1.1 on GA media

    These are all security issues fixed in the perl-List-SomeUtils-XS-0.590.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 8.7

    openQA-5.1782995932.ffeb09be-1.1 on GA media

    These are all security issues fixed in the openQA-5.1782995932.ffeb09be-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 7.5

    kitty-0.47.4-2.1 on GA media

    These are all security issues fixed in the kitty-0.47.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 8.8

    kernel-devel-7.1.2-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • Medium max 5.0

    krb5-1.22.2-4.1 on GA media

    These are all security issues fixed in the krb5-1.22.2-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • Low max 2.0

    gzip-1.14-2.1 on GA media

    These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 7.5

    etcd-3.6.13-1.1 on GA media

    These are all security issues fixed in the etcd-3.6.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • Medium max 5.3

    dnsmasq-2.93-2.1 on GA media

    These are all security issues fixed in the dnsmasq-2.93-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 2, 2026
  • High max 8.6

    Security update for gstreamer-plugins-good

    This update for gstreamer-plugins-good fixes the following issues - CVE-2024-47540: uninitialized stack memory in Matroska/WebM demuxer (bsc#1234421). - CVE-2026-53705: Heap buffer overflow in WavPack decoder via integer overflow (bsc#1268449).

    first Jul 2, 2026
  • High max 7.7

    Security update for python-tornado

    This update for python-tornado fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CVE…

    first Jul 2, 2026
  • High max 7.7

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issues - CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395). - CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396). - CV…

    first Jul 2, 2026
  • Medium max 6.6

    Security update for python-python-dotenv

    This update for python-python-dotenv fixes the following issue: - CVE-2026-28684: follow symbolic links when rewriting `.env` files (bsc#1262423)

    first Jul 1, 2026
  • Medium max 6.0

    Security update for python311

    This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). Other updates and bugfixes: - Rewrite stru…

    first Jul 1, 2026
  • High max 7.8

    Security update for stgit

    This update for stgit fixes the following issues: Changes in stgit: - Update to version 2.6.0: * chore: update changelog for 2.6.0 * fix(import): respect --name verbatim, ignoring stgit.namelength * test(refresh): use test_when_finished for status.renames cle…

    first Jun 30, 2026
  • High max 7.7

    Security update for coturn

    This update for coturn fixes the following issues: Changes in coturn: - Update to version 4.14.0 New * No more dependency on prometheus-client-c * HTTPS support for prometheus client (optional) * TLS support for redis - now compatible with managed redis (opti…

    first Jun 30, 2026
  • High max 7.5

    Security update for python-python-engineio

    This update for python-python-engineio fixes the following issues: Changes in python-python-engineio: - CVE-2026-48802: remote user can cause the creation of unnecessary background threads in the server through the heartbeat mechanism and cause a DoS (bsc#126…

    first Jun 30, 2026
  • High max 7.5

    Security update for mupdf

    This update for mupdf fixes the following issues: Changes in mupdf: - Build and ship MuPDF as a shared library (make shared=yes) instead of static-only: * New subpackage libmupdf27_2 carries libmupdf.so.27.2 (the SONAME tracks the upstream minor.patch version…

    first Jun 30, 2026
  • High max 7.3

    Security update for perl-IO-Compress

    This update for perl-IO-Compress fixes the following issues: Changes in perl-IO-Compress: - updated to 2.220.0 (2.220) see /usr/share/doc/packages/perl-IO-Compress/Changes 2.220 16 May 2026 * remove use of eval in globmapper. #73 CVE-2026-48962 bsc#1266382 * …

    first Jun 30, 2026
  • Medium max 5.5

    Security update for nilfs-utils

    This update for nilfs-utils fixes the following issues: Changes in nilfs-utils: - CVE-2026-55392: Fixed undefined behavior in nilfs_sb_is_valid() (bsc#1268553)

    first Jun 30, 2026
  • Medium max 5.3

    Security update for lrzip

    This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: * Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzma_decompress_buf() and a NULL pointer dereference in ucompthr…

    first Jun 30, 2026
  • High max 7.5

    Security update for python-pytest-html

    This update for python-pytest-html fixes the following issues: Changes in python-pytest-html: - Revendor updating shell-quote and js-yaml deps: - CVE-2026-13311: shell-quote: inefficient input parsing can lead to a denial of service (bsc#1269361) - CVE-2026-5…

    first Jun 30, 2026
  • Medium max 6.5

    Security update for python-zeroconf

    This update for python-zeroconf fixes the following issues: Changes in python-zeroconf: - CVE-2026-47180: zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service (bsc#1268341) - CVE-2026-47183: zeroconf: Unb…

    first Jun 30, 2026
  • High max 7.5

    python311-python-socketio-5.16.3-1.1 on GA media

    These are all security issues fixed in the python311-python-socketio-5.16.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • High max 7.5

    python311-python-engineio-4.13.3-1.1 on GA media

    These are all security issues fixed in the python311-python-engineio-4.13.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Medium max 5.4

    python3-onionshare-2.6.4-1.1 on GA media

    These are all security issues fixed in the python3-onionshare-2.6.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Medium max 5.9

    perl-CGI-Session-4.490.0-1.1 on GA media

    These are all security issues fixed in the perl-CGI-Session-4.490.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Critical max 9.4

    kubectl-cnpg-1.29.2-1.1 on GA media

    These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Medium max 6.3

    c3p0-0.14.1-1.1 on GA media

    These are all security issues fixed in the c3p0-0.14.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Low max 3.3

    alloy-1.17.1-1.1 on GA media

    These are all security issues fixed in the alloy-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Medium max 6.5

    MozillaThunderbird-140.12.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.12.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 1, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …

    first Jul 1, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…

    first Jun 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…

    first Jun 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…

    first Jun 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd:…

    first Jun 25, 2026