Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • High max 7.8

    flatpak-builder-1.4.12-1.1 on GA media

    These are all security issues fixed in the flatpak-builder-1.4.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • Medium max 6.1

    cockpit-files-44-1.1 on GA media

    These are all security issues fixed in the cockpit-files-44-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 22, 2026
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…

    first Sep 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev->needed_headroom (bsc#1242405 bsc#1275784). - CVE-2024-57841: net: …

    first Sep 22, 2026
  • Critical max 10.0
    SUSE-SU-2026:4282-1 234 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against (bsc#1254894). - CVE-2025-68214: timers: Fix NULL function pointer…

    first Sep 22, 2026
  • Medium max 4.3

    Security update for cups

    This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in `cupsUTF32ToUTF8()` due to missing source-length bound can be reached via the SNMP supply-description parsing (bsc#1279945).

    first Sep 22, 2026
  • Critical max 9.8

    Security update for perl-Authen-SASL

    This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in `server_step` (bsc#1279806).

    first Sep 22, 2026
  • Medium max 6.5

    Security update for libtpms

    This update for libtpms fixes the following issues: - CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads (bsc#1244528). - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked block_skip_read() blocksize …

    first Sep 22, 2026
  • Critical max 9.8

    Security update for freeipmi

    This update for freeipmi fixes the following issues: - CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client (bsc#1267605). - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses (bsc#1278719). - CVE-202…

    first Sep 22, 2026
  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

    first Sep 21, 2026
  • Critical max 9.8

    rke2-1.36-1.36.4+rke2r1-1.1 on GA media

    These are all security issues fixed in the rke2-1.36-1.36.4+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.5

    python313-uv-0.12.17-1.1 on GA media

    These are all security issues fixed in the python313-uv-0.12.17-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.8

    python3-pytest-ansible-26.8.0-1.1 on GA media

    These are all security issues fixed in the python3-pytest-ansible-26.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.3

    python313-graphifyy-0.9.65-1.1 on GA media

    These are all security issues fixed in the python313-graphifyy-0.9.65-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Medium max 5.9

    pijul-1.0.0~beta.23-1.1 on GA media

    These are all security issues fixed in the pijul-1.0.0~beta.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.7

    mcphost-0.34.0-11.1 on GA media

    These are all security issues fixed in the mcphost-0.34.0-11.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Medium max 6.5

    libtpms-devel-0.10.2-2.1 on GA media

    These are all security issues fixed in the libtpms-devel-0.10.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Medium max 5.5

    librepods-0.1.0+git20260515.672e65a-1.1 on GA media

    These are all security issues fixed in the librepods-0.1.0+git20260515.672e65a-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.9

    libXrender-devel-0.9.12-2.1 on GA media

    These are all security issues fixed in the libXrender-devel-0.9.12-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.5

    libX11-6-1.8.13-2.1 on GA media

    These are all security issues fixed in the libX11-6-1.8.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.8

    helm3-3.22.0-1.1 on GA media

    These are all security issues fixed in the helm3-3.22.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.7

    bazel-rules-python-source-2.3.3-1.1 on GA media

    These are all security issues fixed in the bazel-rules-python-source-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.7

    apptainer-1.5.3-4.1 on GA media

    These are all security issues fixed in the apptainer-1.5.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 8.3

    apko-1.4.4-1.1 on GA media

    These are all security issues fixed in the apko-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Critical max 9.8

    amazon-cloudwatch-agent-1.300072.0-1.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300072.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Critical max 9.8

    MozillaThunderbird-140.16.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • Critical max 9.8

    MozillaFirefox-156.0-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-156.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 21, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…

    first Sep 21, 2026
  • Medium max 6.5

    Security update for helm

    This update for helm fixes the following issues: Update to version 3.20.2. Security issued fixed: - CVE-2025-55199: specially crafted JSON Schema can lead to out of memory (OOM) termination (bsc#1248093). - CVE-2026-35206: specially crafted Chart will have co…

    first Sep 21, 2026
  • Critical max 9.8

    Security update for libheif

    This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scale_nearest_neighbor() via duplicate alpha planes from nested iden/auxl items (bsc#1279443). - CVE-2026-84384: brotli/zlib decompression paths lack output-size lim…

    first Sep 21, 2026
  • Medium max 6.8

    Security update for openCryptoki

    This update for openCryptoki fixes the following issue: - CVE-2026-40253: malformed BER-encoded cryptographic objects can lead to information disclosure and denial of service (bsc#1262283).

    first Sep 18, 2026
  • High max 8.1

    Security update for jq

    This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd() function (bsc#976992). - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in `decNumberToString` (bsc#1218034)…

  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

  • Critical max 9.1

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on tru…

  • Medium max 5.3

    Security update for dovecot22

    This update for dovecot22 fixes the following issue: - CVE-2026-40016: Sieve :contains/:matches O(NxM) substring match bypasses sieve_max_cpu_time limit (bsc#1265148).

  • Critical max 9.1

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260264). - CVE-2026-56852: golang.org/x/text/unicode/norm: infini…

  • High max 7.5

    libipa_hbac-devel-2.13.1-3.1 on GA media

    These are all security issues fixed in the libipa_hbac-devel-2.13.1-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.1

    python313-PyMuPDF-1.28.2-1.1 on GA media

    These are all security issues fixed in the python313-PyMuPDF-1.28.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026
  • High max 7.6

    libsoup-3_0-0-3.6.6-9.1 on GA media

    These are all security issues fixed in the libsoup-3_0-0-3.6.6-9.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 19, 2026