Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • High max 7.8

    ansible-core-2.21.0-3.1 on GA media

    These are all security issues fixed in the ansible-core-2.21.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Medium max 5.5

    Security update for GraphicsMagick

    This update for GraphicsMagick fixes the following issue - CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: Security fixes: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3842: hyperv/syndbg…

    first Jun 12, 2026
  • Critical max 9.1

    Security update for python

    This update for python fixes the following issues - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599). - CVE-2026-3219: pip doesn't reject concatenated ZIP …

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484). - CVE-20…

    first Jun 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables (bsc#1261700). - CVE-2026-31629: nfc: llcp: add missin…

    first Jun 12, 2026
  • Low max 2.9

    logback-1.5.34-2.1 on GA media

    These are all security issues fixed in the logback-1.5.34-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Critical max 9.1

    kubevirt-container-disk-1.8.3-1.1 on GA media

    These are all security issues fixed in the kubevirt-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Critical max 9.8

    kernel-devel-7.0.12-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Medium max 6.5

    grafana-11.6.14+security04-3.1 on GA media

    These are all security issues fixed in the grafana-11.6.14+security04-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Critical max 9.6

    golang-github-prometheus-node_exporter-1.11.1-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-node_exporter-1.11.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Critical max 9.6

    golang-github-prometheus-alertmanager-0.32.2-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.32.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Medium max 4.3

    glib-networking-2.80.1-3.1 on GA media

    These are all security issues fixed in the glib-networking-2.80.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • High max 7.8

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files (bsc#1258509). - CVE-2026-3195: heap buffer overflow when rea…

    first Jun 12, 2026
  • High max 7.5

    Security update for libyang

    This update for libyang fixes the following issue - CVE-2026-44673: integer overflow in `lyb_read_string()` of `src/parser_lyb.c` leads to heap buffer overflow when parsing a maliciously crafted LYB binary blob (bsc#1265330).

    first Jun 12, 2026
  • Critical max 9.3

    Security update for hplip

    This update for hplip fixes the following issues Update to HPLIP 3.26.4: Security issues: - CVE-2025-43023: weak code signing DSA key used to generate package signatures can lead to key spoofing and malicious software installation (bsc#1266031). - CVE-2026-86…

    first Jun 11, 2026
  • High max 7.5

    perl-Crypt-PasswdMD5-1.430.0-1.1 on GA media

    These are all security issues fixed in the perl-Crypt-PasswdMD5-1.430.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    strongswan-6.0.7-1.1 on GA media

    These are all security issues fixed in the strongswan-6.0.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    python311-kafka-python-2.3.2-1.1 on GA media

    These are all security issues fixed in the python311-kafka-python-2.3.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Low max 3.1

    python313-Django6-6.0.6-1.1 on GA media

    These are all security issues fixed in the python313-Django6-6.0.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Low max 3.1

    python311-Django-5.2.15-1.1 on GA media

    These are all security issues fixed in the python311-Django-5.2.15-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    postgresql-jdbc-42.7.11-1.1 on GA media

    These are all security issues fixed in the postgresql-jdbc-42.7.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Low max 2.9

    logback-1.5.34-1.1 on GA media

    These are all security issues fixed in the logback-1.5.34-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.2

    ldns-1.9.2-1.1 on GA media

    These are all security issues fixed in the ldns-1.9.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Critical max 9.6

    golang-github-prometheus-prometheus-3.12.0-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-prometheus-3.12.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Critical max 9.9

    cpp-httplib-devel-0.46.1-1.1 on GA media

    These are all security issues fixed in the cpp-httplib-devel-0.46.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Medium max 4.8

    apptainer-1.5.1-1.1 on GA media

    These are all security issues fixed in the apptainer-1.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Medium max 6.5

    git-bug-0.10.1-6.1 on GA media

    These are all security issues fixed in the git-bug-0.10.1-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Low max 2.9

    enc-1.1.5-2.1 on GA media

    These are all security issues fixed in the enc-1.1.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • Low max 2.3

    alloy-1.16.1-2.1 on GA media

    These are all security issues fixed in the alloy-1.16.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.8
    openSUSE-SU-2026:10991-1 1 CVE 1 exploited

    afl-5.00c-1.1 on GA media

    These are all security issues fixed in the afl-5.00c-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bsc#1267506). - CV…

    first Jun 11, 2026
  • Critical max 9.8

    Security update for tomcat10

    This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…

    first Jun 11, 2026
  • High max 8.8

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues Update to version 2.52.4: Security fixes: - CVE-2026-28847: processing maliciously crafted web content may lead to an unexpected process crash or arbitrary code execution due to a heap buffer overflow (bs…

    first Jun 11, 2026
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…

    first Jun 11, 2026
  • Critical max 9.8

    Security update for tomcat11

    This update for tomcat11 fixes the following issues Update to Tomcat 11.0.22: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling (bsc#1265162). - CVE-2026-41293: HTTP/2 request headers not validated (bsc#1265163). - CVE-2026-42498: WebSocke…

    first Jun 11, 2026
  • High max 7.5

    Security update for openssh

    This update for openssh fixes the following issues - CVE-2026-3497: information disclosure or denial of service due to uninitialized variables (bsc#1259642). - CVE-2026-35385: a file downloaded by scp may be installed setuid or setgid (bsc#1261427). - CVE-202…

    first Jun 11, 2026
  • Medium max 4.5

    tmux-3.6b-2.1 on GA media

    These are all security issues fixed in the tmux-3.6b-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.5

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issue - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265764). Changes for google-cloud-sap-agent: - Update to version 3.14 (bs…

    first Jun 11, 2026
  • High max 8.1

    Security update for nginx

    This update for nginx fixes the following issues - CVE-2026-9256: heap buffer overflow in the `ngx_http_rewrite_module` when using a configuration with overlapping captures (bsc#1266215). - CVE-2026-27651: denial of service via undisclosed requests when the `…

    first Jun 11, 2026