Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Medium max 6.9

    nodejs26-26.7.0-1.1 on GA media

    These are all security issues fixed in the nodejs26-26.7.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    helm3-3.21.3-6.1 on GA media

    These are all security issues fixed in the helm3-3.21.3-6.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Critical max 9.8

    python313-geopandas-1.1.4-1.1 on GA media

    These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.1

    busybox-1.38.0-2.1 on GA media

    These are all security issues fixed in the busybox-1.38.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    azure-storage-azcopy-10.32.7-1.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Medium max 5.3

    amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • High max 8.8

    389-ds-3.2.2+4b41542b2-1.1 on GA media

    These are all security issues fixed in the 389-ds-3.2.2+4b41542b2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • High max 8.6

    Security update for git-lfs

    This update for git-lfs fixes the following issue: - CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist (bsc#1252259). Changes for git-lfs: -…

    first Aug 25, 2026
  • Critical max 9.6

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing…

    first Aug 25, 2026
  • Critical max 9.6

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-n…

    first Aug 25, 2026
  • Critical max 9.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635…

    first Aug 25, 2026
  • Medium max 5.5

    Security update for sssd

    This update for sssd fixes the following issue: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925).

    first Aug 25, 2026
  • Critical max 10.0
    SUSE-SU-2026:3790-1 268 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Per…

    first Aug 25, 2026
  • Medium max 5.3

    cadvisor-0.60.5-2.1 on GA media

    These are all security issues fixed in the cadvisor-0.60.5-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • High max 8.8

    Security update for postgresql14

    This update for postgresql14 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 25, 2026
  • Medium max 6.8

    Security update for librest

    This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 25, 2026
  • Medium max 6.8

    Security update for librest

    This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator (bsc#1272399).

    first Aug 25, 2026
  • High max 8.8

    Security update for postgresql16

    This update for postgresql16 fixes the following issues: - CVE-2026-6464: `psql` `COPY FROM STDIN` early failure processes data lines as `psql` commands (bsc#1275046). - CVE-2026-6469: `ALTER TABLE ALTER TYPE` resets extended statistics ownership (bsc#1275044…

    first Aug 25, 2026
  • Medium max 6.0

    Security update for rmt-server

    This update for rmt-server fixes the following issue: Update to version 3.1 (bsc#1274715). - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 (bsc#1265369). Changes for rmt-server: …

    first Aug 25, 2026
  • High max 8.7

    Security update for snpguest

    This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270541). - CVE-2026-41678: openssl: incorre…

    first Aug 25, 2026
  • Unscored

    Security update for runc

    This update for runc rebuilds it against the current go security release.

    first Aug 25, 2026
  • Unscored

    Security update for distribution

    This update for distribution rebuilds it against the current go security release.

    first Aug 25, 2026
  • Critical max 9.1

    OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 on GA media

    These are all security issues fixed in the OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • High max 8.8

    LibVNCServer-devel-0.9.15-4.1 on GA media

    These are all security issues fixed in the LibVNCServer-devel-0.9.15-4.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go security release.

    first Aug 25, 2026
  • Medium max 6.5

    golang-github-v2fly-v2ray-core-5.53.0-1.1 on GA media

    These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.53.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 8.9

    tor-0.4.9.11-1.1 on GA media

    These are all security issues fixed in the tor-0.4.9.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 7.5

    python313-yarl-1.24.5-1.1 on GA media

    These are all security issues fixed in the python313-yarl-1.24.5-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 4.8

    python313-pypdf-6.16.2-1.1 on GA media

    These are all security issues fixed in the python313-pypdf-6.16.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 8.8

    python313-nltk-3.10.3-1.1 on GA media

    These are all security issues fixed in the python313-nltk-3.10.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 7.5

    python313-msgpack-1.2.1-1.1 on GA media

    These are all security issues fixed in the python313-msgpack-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 6.1

    python313-mistune-3.3.4-1.1 on GA media

    These are all security issues fixed in the python313-mistune-3.3.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Medium max 6.9

    expat-2.8.2-1.1 on GA media

    These are all security issues fixed in the expat-2.8.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 8.4
    openSUSE-SU-2026:11583-1 9 CVEs 1 exploited

    clamav-1.5.4-1.1 on GA media

    These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 7.5

    apache2-mod_auth_openidc-2.4.20.2-1.1 on GA media

    These are all security issues fixed in the apache2-mod_auth_openidc-2.4.20.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • High max 8.7

    Security update for python-sqlparse

    This update for python-sqlparse fixes the following issues: - CVE-2026-54284: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger (bsc#1275459). - CVE-2026-59893: Inefficient Regex Handling of Dollar-Quo…

    first Aug 24, 2026