Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Medium max 5.3

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276667).

    first Sep 3, 2026
  • Medium max 6.7

    Security update for systemd

    This update for systemd fixes the following issue: Security issue fixed: - CVE-2026-16742: `systemd-homed`: local privilege escalation due to missing home record signature verification on the authentication path (bsc#1271444). Non security issue fixed: - `sys…

    first Sep 3, 2026
  • Low max 2.0

    Security update for fuse-overlayfs

    This update for fuse-overlayfs fixes the following issue: - CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100).

    first Sep 3, 2026
  • Unscored

    Security update for lkl

    This update for lkl fixes the following issues: Changes in lkl: - Updated to match current kernel.

    first Sep 2, 2026
  • High max 7.5

    Security update for dracut

    This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the `initramfs` (bsc#1268322). - CVE-202…

    first Sep 3, 2026
  • Medium max 5.5

    Security update for sssd

    This update for sssd fixes the following issues: Security issues fixed: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder sock…

    first Sep 3, 2026
  • Medium max 4.6

    Security update for cpio

    This update for cpio fixes the following issues: - CVE-2026-66484: improper sanitization in the tar archive extraction functionality allows for the creation of hard links outside intended directory via malicious tar archives (bsc#1274856). - CVE-2026-66485: i…

    first Sep 3, 2026
  • Medium max 6.8

    Security update for java-17-openjdk

    This update for java-17-openjdk fixes the following issues: Upgrade to upstream tag jdk-17.0.20.1+1 (August 2026 CSPU). - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to a subset of acce…

    first Sep 3, 2026
  • Critical max 9.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue (bsc#1274791). - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing cert…

    first Sep 2, 2026
  • Low max 2.3

    Security update for python-ruff

    This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged (bsc#1249011).

    first Sep 2, 2026
  • High max 7.8

    Security update for libvirt

    This update for libvirt fixes the following issues: - CVE-2026-18917: integer overflow in `NodeGetFreePages` RPC handler leads to heap buffer overflow and allows for possible local privilege escalation (bsc#1275863). - CVE-2026-61477: newline injection in net…

    first Sep 2, 2026
  • High max 7.1

    Security update for openexr

    This update for openexr fixes the following issues: - CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in `unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428). - CVE-2026-59184: out-…

    first Sep 2, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release (bsc#1274785) - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updat…

    first Sep 2, 2026
  • High max 8.8

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issue: - CVE-2026-50538: malicious or MiTM VNC servers can force a connecting `libvncclient` to write attacker-controlled data past the end of a framebuffer, which can lead to a crash or arbitrary code executio…

    first Sep 2, 2026
  • Critical max 9.8
    SUSE-SU-2026:3595-1 74 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097). - CVE-2023-53995: net: ipv4: fix one memleak in __inet_de…

  • Unscored

    Security update for freeciv

    This update for freeciv fixes the following issues: Changes in freeciv: - freeciv 3.2.6: * Fix Heap Buffer Overflow in worklist_load() via Crafted Save File (boo#1278695) * Fix Out-of-Bounds Read in activities.order[] via Crafted Save File (boo#1278696) * Fix…

    first Sep 7, 2026
  • Medium max 6.2

    Security update for libusb-1_0

    This update for libusb-1_0 fixes the following issues: - CVE-2026-23679: NULL pointer dereference in `parse_interface()` allows attackers to crash applications by supplying a malformed USB configuration descriptor (bsc#1266664). - CVE-2026-47104: one-byte out…

    first Sep 7, 2026
  • High max 7.2

    Security update for aws-nitro-enclaves-cli

    This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274300). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822…

    first Sep 7, 2026
  • Medium max 6.9

    python313-pypdf-6.16.2-3.1 on GA media

    These are all security issues fixed in the python313-pypdf-6.16.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Medium max 5.4

    jupyter-nbconvert-7.17.1-2.1 on GA media

    These are all security issues fixed in the jupyter-nbconvert-7.17.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Medium max 4.0

    python313-geopy-2.5.0-1.1 on GA media

    These are all security issues fixed in the python313-geopy-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 7.2

    python313-comfyui-frontend-package-1.52.7-1.1 on GA media

    These are all security issues fixed in the python313-comfyui-frontend-package-1.52.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Critical max 9.8

    helm-4.2.4-3.1 on GA media

    These are all security issues fixed in the helm-4.2.4-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 7.5

    git-bug-0.10.1-7.1 on GA media

    These are all security issues fixed in the git-bug-0.10.1-7.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Critical max 9.8

    ffmpeg-4-4.4.8-5.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.8-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Medium max 6.5

    rpcbind-1.2.9-2.1 on GA media

    These are all security issues fixed in the rpcbind-1.2.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 7.5

    rclone-1.75.1-1.1 on GA media

    These are all security issues fixed in the rclone-1.75.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Critical max 9.8

    perl-DBD-Pg-3.21.2-1.1 on GA media

    These are all security issues fixed in the perl-DBD-Pg-3.21.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Medium max 6.9

    libmariadb-devel-3.4.9-2.1 on GA media

    These are all security issues fixed in the libmariadb-devel-3.4.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 7.5

    ggml-devel-0.4.0-1.1 on GA media

    These are all security issues fixed in the ggml-devel-0.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Critical max 9.8

    gdk-pixbuf-loader-libheif-1.23.4-1.1 on GA media

    These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • High max 7.5

    corosync-3.1.10-5.1 on GA media

    These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11714-1 38 CVEs 1 exploited

    chromedriver-152.0.7977.82-1.1 on GA media

    These are all security issues fixed in the chromedriver-152.0.7977.82-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 8, 2026
  • Medium max 5.9

    bson-devel-2.5.2-1.1 on GA media

    These are all security issues fixed in the bson-devel-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 7.5

    kimi-code-0.41.0-1.1 on GA media

    These are all security issues fixed in the kimi-code-0.41.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 7.5

    insighttoolkit-devel-5.4.7-1.1 on GA media

    These are all security issues fixed in the insighttoolkit-devel-5.4.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 8.7

    hauler-2.1.0-3.1 on GA media

    These are all security issues fixed in the hauler-2.1.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 8.7

    google-guest-agent-20260903.00-1.1 on GA media

    These are all security issues fixed in the google-guest-agent-20260903.00-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 7.5

    amazon-ssm-agent-3.3.5226.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.5226.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026
  • High max 8.7

    trivy-0.74.0-4.1 on GA media

    These are all security issues fixed in the trivy-0.74.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 7, 2026