Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • High max 8.7

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…

    first Sep 19, 2026
  • High max 8.7

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272118). - CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authenticat…

    first Sep 18, 2026
  • High max 8.1

    Security update for ruby3.4

    This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations (bsc#1250016). - CVE-2026-27820: insufficient checks in `zstream_buffer_ungets` can lead to a buffer overflow (bsc#12…

    first Sep 18, 2026
  • Critical max 9.8

    Security update for ffmpeg-7

    This update for ffmpeg-7 fixes the following issues: - CVE-2023-6602: HLS Force TTY Demuxer (bsc#1220546). - CVE-2023-6604: HLS XBIN Demuxer DoS Amplification (bsc#1220549). - CVE-2024-35367: FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_a…

    first Sep 18, 2026
  • High max 8.8

    Security update for gvfs

    This update for gvfs fixes the following issues: - CVE-2026-84267: `read_string()` allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks (bs…

    first Sep 18, 2026
  • Critical max 9.8

    Security update for python-GitPython

    This update for python-GitPython fixes the following issues: - CVE-2026-67322: environment-variable exfiltration in `Repo.clone_from()` URL via os.path.expandvars() (bsc#1273357). - CVE-2026-67323: unguarded Git options passed as keyword arguments in `Repo.ar…

    first Sep 18, 2026
  • Medium max 5.0

    Security update for opensc

    This update for opensc fixes the following issues: - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation (bsc#1267246). - CVE-2026-40528: stack and heap buffer overrun in the `do_key_value()` function due to…

    first Sep 17, 2026
  • Unscored

    Security update for memcached

    This update for memcached fixes the following issue: - heap buffer overflows in default-config LRU-crawler metadump and proxy backend-response length truncation (bsc#1270716).

    first Sep 17, 2026
  • Medium max 4.8

    Security update for libsoup

    This update for libsoup fixes the following issues - CVE-2026-0716: out-of-bounds read when processing a crafted unmasked frame with a payload length near `UINT64_MAX` sent by a WebSocket server (bsc#1256418).

    first Sep 17, 2026
  • High max 8.6

    libtesseract5-5.5.3-2.1 on GA media

    These are all security issues fixed in the libtesseract5-5.5.3-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 6.3

    python311-3.11.16-2.1 on GA media

    These are all security issues fixed in the python311-3.11.16-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 6.3

    libpoppler-cpp3-26.09.0-2.1 on GA media

    These are all security issues fixed in the libpoppler-cpp3-26.09.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 7.4

    pi-coding-agent-0.87.1-1.1 on GA media

    These are all security issues fixed in the pi-coding-agent-0.87.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 5.6

    pcapplusplus-devel-26.07-1.1 on GA media

    These are all security issues fixed in the pcapplusplus-devel-26.07-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Critical max 9.1

    netty-4.1.138-1.1 on GA media

    These are all security issues fixed in the netty-4.1.138-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 8.7

    kubectl-cnpg-1.30.1-1.1 on GA media

    These are all security issues fixed in the kubectl-cnpg-1.30.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Critical max 9.8

    kernel-devel-7.2.7-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Unscored

    jackson-dataformat-csv-2.18.11-1.1 on GA media

    These are all security issues fixed in the jackson-dataformat-csv-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 7.5

    jackson-dataformat-cbor-2.18.11-1.1 on GA media

    These are all security issues fixed in the jackson-dataformat-cbor-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 7.5

    jackson-databind-2.18.11-1.1 on GA media

    These are all security issues fixed in the jackson-databind-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 7.5

    jackson-core-2.18.11-1.1 on GA media

    These are all security issues fixed in the jackson-core-2.18.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 6.3

    helm-4.3.0-3.1 on GA media

    These are all security issues fixed in the helm-4.3.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 8.8

    goose-1.51.0-1.1 on GA media

    These are all security issues fixed in the goose-1.51.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 8.8

    flatpak-1.18.3-1.1 on GA media

    These are all security issues fixed in the flatpak-1.18.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 6.3

    distribution-registry-3.1.1-8.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.1-8.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • High max 8.7

    cosign-3.1.3-1.1 on GA media

    These are all security issues fixed in the cosign-3.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 24, 2026
  • Medium max 5.9

    Security update for liboqs

    This update for liboqs fixes the following issues: Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized `encaps_derand` pointer dereference - CVE-2026-46344, CVE-2026-44518: Fixed o…

    first Sep 21, 2026
  • Medium max 6.5

    Security update for helm

    This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-35206: specially crafted Chart will have co…

    first Sep 21, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233) - CVE-2026-18301: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnera…

    first Sep 24, 2026
  • High max 7.8

    Security update for haveged

    This update for haveged fixes the following issues: Changes in haveged: - CVE-2026-41054: Fixed local privilege escalation via the haveged command socket (bsc#1264086).

    first Sep 24, 2026
  • High max 8.6

    Security update for tesseract-ocr

    This update for tesseract-ocr fixes the following issues: Changes in tesseract-ocr: - Update to version 5.5.3 (sync with Factory): * CVE-2026-73067: heap out-of-bounds read in SquishedDawg on crafted model (boo#1275623) * CVE-2026-88047: stack buffer overflow…

    first Sep 24, 2026
  • Medium max 5.4

    Security update for gitoxide

    This update for gitoxide fixes the following issues: Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host spoofing (boo#1281749)

    first Sep 24, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). Changes for glib2: - Fix segfault when monitoring hard links (bsc#1281419).

  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). - CVE-2026-23451: bonding: …

    first Sep 24, 2026
  • Critical max 9.8

    Security update for perl-DBI

    This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704).

    first Sep 24, 2026
  • Medium max 6.8

    Security update for java-11-openjdk

    This update for java-11-openjdk fixes the following issues: - CVE-2026-60589: OpenJDK: Improve Resource Resolving (bsc#1275777). - CVE-2026-61308: OpenJDK: Enhance HTTP Connections (bsc#1275778). - CVE-2026-70907: OpenJDK: Enhance TLS server (bsc#1275764). Ch…

  • Critical max 9.3

    Security update for hplip

    This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain c…

  • Low max 3.7

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: denial of service vi…

  • Medium max 4.3

    python313-vllm-0.30.0-1.1 on GA media

    These are all security issues fixed in the python313-vllm-0.30.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • High max 7.5

    perl-XS-Parse-Keyword-0.500.0-1.1 on GA media

    These are all security issues fixed in the perl-XS-Parse-Keyword-0.500.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026