Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Critical max 9.6

    Add headmore to SUSE PackageHub

    This update makes headmore available in the SUSE Package Hub. headmore is a VNC client for character terminals.

    first Nov 5, 2016
  • Critical max 9.6

    chromedriver-149.0.7827.155-1.1 on GA media

    These are all security issues fixed in the chromedriver-149.0.7827.155-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 20, 2026
  • High max 8.7

    freerdp-3.27.1-1.1 on GA media

    These are all security issues fixed in the freerdp-3.27.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.5

    warewulf4-4.7.0-2.1 on GA media

    These are all security issues fixed in the warewulf4-4.7.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • Medium max 4.0

    squid-7.6-1.1 on GA media

    These are all security issues fixed in the squid-7.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • Critical max 9.1

    python311-3.11.15-6.1 on GA media

    These are all security issues fixed in the python311-3.11.15-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • Medium max 5.3

    python311-joserfc-1.7.1-1.1 on GA media

    These are all security issues fixed in the python311-joserfc-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 8.1

    nginx-1.31.2-1.1 on GA media

    These are all security issues fixed in the nginx-1.31.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.8

    ansible-core-2.20-2.20.7-1.1 on GA media

    These are all security issues fixed in the ansible-core-2.20-2.20.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.8

    ansible-core-2.18-2.18.18-1.1 on GA media

    These are all security issues fixed in the ansible-core-2.18-2.18.18-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.8

    ansible-core-2.19-2.19.11-1.1 on GA media

    These are all security issues fixed in the ansible-core-2.19-2.19.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.5

    ImageMagick-7.1.2.25-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.25-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 19, 2026
  • High max 7.1

    Security update for apache-sshd, jpgpj

    This update for apache-sshd, jpgpj fixes the following issues - CVE-2020-36843: no check performed on scalar to avoid signature malleability (bsc#1239551). - CVE-2026-48827: Apache MINA SSHD: Path traversal in org.apache.sshd: sshd-git (bsc#1267018). Changes …

    first Jun 19, 2026
  • Critical max 10.0

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…

    first Jun 19, 2026
  • Critical max 9.6

    Security update for azure-storage-azcopy

    This update for azure-storage-azcopy fixes the following issues Update to 10.32.4: - CVE-2025-47907: database/sql: incorrect results returned from Rows.Scan (bsc#1247720). - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validati…

    first Jun 19, 2026
  • Critical max 9.1

    Security update for python313

    This update for python313 fixes the following issues Security issues: - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-478…

    first Jun 19, 2026
  • High max 8.2

    Security update for ldns

    This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).

    first Jun 19, 2026
  • Critical max 10.0

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…

    first Jun 19, 2026
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-4046: Use pending character state in IBM1390, IBM1399 character sets (bsc#1261206, BZ #33980)

    first Jun 19, 2026
  • High max 8.6

    Security update for openvswitch

    This update for openvswitch fixes the following issues Update ovn to 25.03.3: - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499).

    first Jun 19, 2026
  • High max 8.2

    Security update for ldns

    This update for ldns fixes the following issue - CVE-2026-10846: When ldns is used by applications for (stub) resolving, it does not sufficiently verify that received responses belong to a sent query (bsc#1267670).

    first Jun 19, 2026
  • High max 8.7

    Security update for kubernetes-old

    This update for kubernetes-old fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265747). - CVE-2026-35469: github.com/moby/spdystream: memory amplification in …

    first Jun 18, 2026
  • High max 7.5

    Security update for strongswan

    This update for strongswan fixes the following issues - CVE-2026-35328: infinite loop when handling supported versions TLS extension (bsc#1261712). - CVE-2026-35329: null pointer dereference when processing padding in PKCS#7 (bsc#1261717). - CVE-2026-35330: i…

    first Jun 18, 2026
  • High max 8.6

    Security update for openvswitch

    This update for openvswitch fixes the following issues - CVE-2026-5265: heap over-read in ICMP error response generation (bsc#1262498). - CVE-2026-5367: heap over-read in OVN DHCPv6 client ID processing (bsc#1262499). - CVE-2026-34956: Invalid memory access i…

    first Jun 17, 2026
  • High max 7.5

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631). - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (…

    first Jun 17, 2026
  • High max 7.8

    lemon-3.53.2-2.1 on GA media

    These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Low max 3.7

    python311-starlette-1.3.1-1.1 on GA media

    These are all security issues fixed in the python311-starlette-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Critical max 9.6

    alloy-1.17.0-1.1 on GA media

    These are all security issues fixed in the alloy-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Critical max 9.1
    openSUSE-SU-2026:11057-1 9 CVEs 1 exploited

    kubevirt-1.8-container-disk-1.8.3-1.1 on GA media

    These are all security issues fixed in the kubevirt-1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • High max 7.5

    inspektor-gadget-0.53.2-1.1 on GA media

    These are all security issues fixed in the inspektor-gadget-0.53.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Critical max 9.6

    firefox-esr-140.12.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • High max 8.3

    containerized-data-importer-1.65-api-1.65.0-1.1 on GA media

    These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Critical max 9.8

    MozillaFirefox-152.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • High max 8.4

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues - CVE-2026-2291: VU#471747: dnsmasq can be abused to record false cached data enabling DoS or attacker redirect (bsc#1258251). - CVE-2026-4890: DoS vulnerability in the DNSSEC validation (bsc#1265001). - CVE-…

    first Jun 18, 2026
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issue: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…

    first Jun 18, 2026
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issues - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026-37457: Fix off-by-on…

    first Jun 18, 2026
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues - CVE-2026-22007: APIs in the specified component can lead to an unauthorized read access (bsc#1262490). - CVE-2026-22013: unauthenticated attacker with network access can access to critical data (bsc#…

    first Jun 18, 2026
  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go security release.

    first Jun 18, 2026
  • Critical max 9.1

    tinyproxy-1.11.3-3.1 on GA media

    These are all security issues fixed in the tinyproxy-1.11.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issues Update to frr 8.5.7: - CVE-2026-5107: Fixed an improper access controls in EVPN Type-2 Route Handler (bsc#1261013). - CVE-2026-28532: Harden TE/SR TLV iteration against malformed lengths (bsc#1263859). - CVE-2026…

    first Jun 18, 2026