Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 7.5

    python311-pytest-html-4.2.0-3.1 on GA media

    These are all security issues fixed in the python311-pytest-html-4.2.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • Medium max 6.8

    Security update for alsa

    This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory (bsc#1268853).

    first Jun 28, 2026
  • Medium max 5.3

    python311-pydata-sphinx-theme-0.19.0-1.1 on GA media

    These are all security issues fixed in the python311-pydata-sphinx-theme-0.19.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • High max 8.2

    python-lxml-doc-6.1.1-1.1 on GA media

    These are all security issues fixed in the python-lxml-doc-6.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • High max 7.5

    libonnxruntime1-1.26.0-1.1 on GA media

    These are all security issues fixed in the libonnxruntime1-1.26.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • High max 7.5

    heroic-games-launcher-2.22.0-3.1 on GA media

    These are all security issues fixed in the heroic-games-launcher-2.22.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • Critical max 9.6

    docker-29.4.0_ce-40.1 on GA media

    These are all security issues fixed in the docker-29.4.0_ce-40.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • Unscored

    dash-0.5.13.4-1.1 on GA media

    These are all security issues fixed in the dash-0.5.13.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 29, 2026
  • Critical max 9.6

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266604).

    first Jun 29, 2026
  • Critical max 9.6

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-39821: Update golang.org/x/net dependency (bsc#1266604).

    first Jun 29, 2026
  • Critical max 9.8

    Security update for tomcat

    This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocket …

    first Jun 29, 2026
  • High max 8.8

    Security update for libsolv, libzypp, zypper

    This update for libsolv, libzypp, zypper fixes the following issues - CVE-2026-9149: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (bsc#1265935). - CVE-2026-9150: Stack-based buffer overflow in libsolv's Debian met…

    first Jun 29, 2026
  • High max 7.8

    Security update for ansible-core

    This update for ansible-core fixes the following issues: - CVE-2026-11332: Argument injection in ansible-galaxy role install leads to arbitrary code execution (bsc#1267822).

    first Jun 29, 2026
  • Medium max 5.0

    Security update for opensc

    This update for opensc fixes the following issues - CVE-2025-49010: stack-buffer-overflow via crafted smart card or USB device responses (bsc#1261214). - CVE-2025-66215: crafted smart card or USB device can cause a stack-buffer-overflow write (bsc#1261220). -…

    first Jun 29, 2026
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-5946: Invali…

    first Jun 29, 2026
  • Medium max 5.3

    Security update for libsoup2

    This update for libsoup2 fixes the following issue - CVE-2026-1801: HTTP Request Smuggling in soup_filter_input_stream_read_line() (bsc#1257649).

    first Jun 29, 2026
  • Medium max 6.8

    Security update for openCryptoki

    This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).

    first Jun 29, 2026
  • High max 7.5

    Security update for freeipmi

    This update for freeipmi fixes the following issue - CVE-2026-50031: denial of service via buffer overflow in ipmi-oem client (bsc#1267605).

    first Jun 29, 2026
  • Unscored

    libQXmppQt6-10-1.16.1-1.1 on GA media

    These are all security issues fixed in the libQXmppQt6-10-1.16.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 7.5

    istioctl-1.30.2-1.1 on GA media

    These are all security issues fixed in the istioctl-1.30.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 7.3

    glibc-2.43-4.1 on GA media

    These are all security issues fixed in the glibc-2.43-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 8.3

    chromedriver-149.0.7827.200-1.1 on GA media

    These are all security issues fixed in the chromedriver-149.0.7827.200-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 28, 2026
  • High max 7.5

    jupyter-jupyterlab-templates-0.5.3-2.1 on GA media

    These are all security issues fixed in the jupyter-jupyterlab-templates-0.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.9

    ocaml-4.14.4-1.1 on GA media

    These are all security issues fixed in the ocaml-4.14.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.5

    python311-jupyter-ydoc-3.5.0-1.1 on GA media

    These are all security issues fixed in the python311-jupyter-ydoc-3.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.0

    logback-1.5.36-1.1 on GA media

    These are all security issues fixed in the logback-1.5.36-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.1

    jackson-databind-2.18.8-2.1 on GA media

    These are all security issues fixed in the jackson-databind-2.18.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.8

    hydra-9.7+git20.gbccaea1-1.1 on GA media

    These are all security issues fixed in the hydra-9.7+git20.gbccaea1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.5

    calibre-9.10.0-1.1 on GA media

    These are all security issues fixed in the calibre-9.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • Medium max 5.3

    assimp-devel-6.0.5-4.1 on GA media

    These are all security issues fixed in the assimp-devel-6.0.5-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • Medium max 6.5

    libslirp-devel-4.9.3+4-1.1 on GA media

    These are all security issues fixed in the libslirp-devel-4.9.3+4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.1

    jq-1.8.2-1.1 on GA media

    These are all security issues fixed in the jq-1.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 7.5

    agama-web-ui-22+143.ee15dea20-46.1 on GA media

    These are all security issues fixed in the agama-web-ui-22+143.ee15dea20-46.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.1

    ImageMagick-7.1.2.25-3.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.25-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 27, 2026
  • High max 8.2

    Security update for giflib

    This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).

    first Jun 26, 2026
  • Critical max 10.0

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header (bsc#1260264). - CVE-2026-39821: Update golang.org/x/net/idna depend…

    first Jun 26, 2026
  • Critical max 9.1

    Security update for python, python-base, python-doc

    This update for python, python-base, python-doc fixes the following issues Security fixes: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599). - CVE-2026-3…

    first Jun 26, 2026
  • Low max 2.7

    Security update for exiv2

    This update for exiv2 fixes the following issues - CVE-2025-54080: out-of-bounds read in `Exiv2::EpsImage::writeMetadata()` when writing metadata into a crafted image file (bsc#1248962). - CVE-2026-25884: out-of-bounds read in `CrwMap::decode0x0805` (bsc#1259…

    first Jun 26, 2026
  • High max 8.8

    Security update for openssl-3-livepatches

    This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CV…

    first Jun 26, 2026
  • High max 7.7

    Security update for nodejs22

    This update for nodejs22 fixes the following issues Update to 22.23.0: - CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery (bsc#1268479). - CVE-2026-9496: pacote: excessive CPU consump…

    first Jun 26, 2026