Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • High max 7.9

    libblkid-devel-2.42.3-1.1 on GA media

    These are all security issues fixed in the libblkid-devel-2.42.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Critical max 9.1

    rsync-3.5.1-1.1 on GA media

    These are all security issues fixed in the rsync-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 6.3

    python314-3.14.7-2.1 on GA media

    These are all security issues fixed in the python314-3.14.7-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 5.3

    libsoup-2_4-1-2.74.3-23.1 on GA media

    These are all security issues fixed in the libsoup-2_4-1-2.74.3-23.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Low max 3.7

    ImageMagick-7.1.2.31-2.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.31-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 5.3

    python313-soupsieve-2.9.2-1.1 on GA media

    These are all security issues fixed in the python313-soupsieve-2.9.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Critical max 9.8

    python313-sglang-0.5.20-1.1 on GA media

    These are all security issues fixed in the python313-sglang-0.5.20-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 6.1

    python-WebOb-doc-1.8.11-1.1 on GA media

    These are all security issues fixed in the python-WebOb-doc-1.8.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 6.2

    libp11-kit0-0.26.5-1.1 on GA media

    These are all security issues fixed in the libp11-kit0-0.26.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • High max 7.5

    obs-service-cargo-7.2.2-3.1 on GA media

    These are all security issues fixed in the obs-service-cargo-7.2.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Unscored

    gdk-pixbuf-loader-libheif-1.23.5-1.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Critical max 9.3

    hplip-3.26.6-1.1 on GA media

    These are all security issues fixed in the hplip-3.26.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Medium max 5.4

    gitoxide-0.58.0-2.1 on GA media

    These are all security issues fixed in the gitoxide-0.58.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • High max 8.7

    ansible-lint-26.9.0-1.1 on GA media

    These are all security issues fixed in the ansible-lint-26.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • High max 7.1

    PackageKit-1.4.0-1.1 on GA media

    These are all security issues fixed in the PackageKit-1.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: re…

    first Sep 23, 2026
  • High max 8.7

    Security update for apptainer

    This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278666). - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel…

    first Sep 23, 2026
  • Unscored

    Security update for podofo

    This update for podofo fixes the following issues: - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete() (bsc#1084891). - CVE-2020-18971: stack-based buffer overflow in src/base/PdfDictionary.cpp (bsc#1190178). - CVE-2021-30470: uncontrolled rec…

    first Sep 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove m…

    first Sep 23, 2026
  • High max 8.4

    Security update for gimp

    This update for gimp fixes the following issues: Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: arbitrary code execution in PSD plugin due to unsigned underflow (b…

    first Sep 23, 2026
  • High max 7.0

    Security update for gdb

    This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).

    first Sep 20, 2026
  • Critical max 9.8

    Security update for perl-Authen-SASL

    This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).

  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53613: Loca…

  • High max 7.0

    Security update for gdb

    This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF (bsc#1277757).

  • High max 8.7

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…

  • High max 8.7

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276722). - CVE-2026-56852: golang.org/x/text/…

  • Medium max 6.3

    golang-github-v2fly-v2ray-core-5.54.2-1.1 on GA media

    These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.54.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 5.3

    python313-autobahn-26.7.1-2.1 on GA media

    These are all security issues fixed in the python313-autobahn-26.7.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 6.5

    python313-asyncssh-2.24.0-1.1 on GA media

    These are all security issues fixed in the python313-asyncssh-2.24.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • High max 8.7

    perl-Mojolicious-9.490.0-2.1 on GA media

    These are all security issues fixed in the perl-Mojolicious-9.490.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 4.7

    helm-4.3.0-2.1 on GA media

    These are all security issues fixed in the helm-4.3.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 5.3

    google-osconfig-agent-20260918.01-1.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260918.01-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • High max 7.5

    forgejo-longterm-15.0.8-1.1 on GA media

    These are all security issues fixed in the forgejo-longterm-15.0.8-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 4.0

    aria2-1.37.0-3.1 on GA media

    These are all security issues fixed in the aria2-1.37.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • High max 7.5

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898).

    first Sep 22, 2026
  • Unscored

    Security update for openssl-certs

    This update for openssl-certs fixes the following issue: - Updated to 2.90 state (bsc#1279961): * Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Author…

    first Sep 22, 2026
  • High max 7.5

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278681) - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established c…

    first Sep 22, 2026
  • High max 7.7

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure (bsc#1271504). - CVE-2026-59944: path traversal and link following issue can make files world readable and…

    first Sep 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784). - CVE-2024-57841: ne…

    first Sep 22, 2026
  • High max 8.2

    openai-codex-0.155.1-1.1 on GA media

    These are all security issues fixed in the openai-codex-0.155.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026