Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Medium max 5.5

    libraw-devel-0.22.2-2.1 on GA media

    These are all security issues fixed in the libraw-devel-0.22.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 30, 2026
  • High max 8.7

    velero-1.18.4-1.1 on GA media

    These are all security issues fixed in the velero-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Critical max 9.1

    libunbound8-1.26.1-1.1 on GA media

    These are all security issues fixed in the libunbound8-1.26.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 7.5

    rpcbind-1.2.9-3.1 on GA media

    These are all security issues fixed in the rpcbind-1.2.9-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Unscored

    python313-pyramid-2.1-2.1 on GA media

    These are all security issues fixed in the python313-pyramid-2.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 8.1

    python313-litellm-1.103.0-1.1 on GA media

    These are all security issues fixed in the python313-litellm-1.103.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 7.5

    python313-grpcio-1.84.0-1.1 on GA media

    These are all security issues fixed in the python313-grpcio-1.84.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 8.7

    prometheus-blackbox_exporter-0.26.0-9.1 on GA media

    These are all security issues fixed in the prometheus-blackbox_exporter-0.26.0-9.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Medium max 6.6

    libparted-fs-resize0-3.8-1.1 on GA media

    These are all security issues fixed in the libparted-fs-resize0-3.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 7.5

    openai-codex-0.158.0-1.1 on GA media

    These are all security issues fixed in the openai-codex-0.158.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Unscored

    libslirp-devel-4.9.5+1-1.1 on GA media

    These are all security issues fixed in the libslirp-devel-4.9.5+1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Low max 3.7

    gdk-pixbuf-loader-libheif-1.23.5-2.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 8.8

    grafana-12.4.11-1.1 on GA media

    These are all security issues fixed in the grafana-12.4.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Medium max 5.5

    gnumeric-1.12.62+8-1.1 on GA media

    These are all security issues fixed in the gnumeric-1.12.62+8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 7.1

    flatpak-1.18.4-1.1 on GA media

    These are all security issues fixed in the flatpak-1.18.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Critical max 9.8

    firefox-esr-153.4.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-153.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 7.5

    bind-9.20.29-1.1 on GA media

    These are all security issues fixed in the bind-9.20.29-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Medium max 5.3

    binaryen-133-1.1 on GA media

    These are all security issues fixed in the binaryen-133-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • High max 8.7

    amazon-ecs-init-1.107.0-1.1 on GA media

    These are all security issues fixed in the amazon-ecs-init-1.107.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 29, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

    first Sep 22, 2026
  • Medium max 6.1

    Security update for swtpm

    This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653).

    first Sep 22, 2026
  • Medium max 6.5

    Security update for libtpms

    This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize (bsc#1279628).

    first Sep 22, 2026
  • Medium max 4.3

    Security update for cups

    This update for cups fixes the following issue: - CVE-2026-87875: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).

    first Sep 21, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56854,CVE-2026-56855,CVE-…

    first Sep 18, 2026
  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

    first Sep 18, 2026
  • Critical max 9.8

    Security update for perl-DBI

    This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).

    first Sep 25, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.3.0 ESR (MFSA 2026-93, bsc#1280371): - CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. - CVE-2026-92006: Privilege escalation du…

    first Sep 24, 2026
  • Critical max 9.8

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denia…

    first Sep 24, 2026
  • Critical max 9.8

    Security update for perl-Authen-SASL

    This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).

    first Sep 24, 2026
  • High max 7.5

    Security update for expat

    This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…

    first Sep 24, 2026
  • High max 7.8

    Security update for kbd

    This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441).

    first Sep 23, 2026
  • Critical max 9.1

    Security update for cjose

    This update for cjose fixes the following issues: - CVE-2026-53938: missing encrypted_key length validation during AES Key Wrap decryption can cause heap-based buffer overflow (bsc#1279844). - CVE-2026-53939: zero-filled content-encryption key generation in A…

    first Sep 23, 2026
  • High max 8.7

    Security update for libpcap

    This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access (bsc#1279782). - CVE-2026-6244: libpcap B…

    first Sep 23, 2026
  • High max 8.2

    Security update for pcre2

    This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - …

    first Sep 23, 2026
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…

    first Sep 22, 2026
  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…

    first Sep 22, 2026
  • High max 8.9

    Security update for libXrender

    This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow (bsc#1280911).

    first Sep 22, 2026
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910).

    first Sep 22, 2026
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225). - CVE-2025-68358: btrfs: fix racy bitf…

    first Sep 22, 2026
  • High max 7.5

    Security update for expat

    This update for expat fixes the following issues: - CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). - CVE-2026-45186: In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial o…

    first Sep 24, 2026