Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,581 results · Feed

  • High max 8.4

    helm-4.2.4-1.1 on GA media

    These are all security issues fixed in the helm-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • Medium max 6.5

    hauler-2.0.3-1.1 on GA media

    These are all security issues fixed in the hauler-2.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • Unscored

    hare-0.26.0.1-1.1 on GA media

    These are all security issues fixed in the hare-0.26.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 22, 2026
  • High max 7.5

    python313-graphifyy-0.9.48-1.1 on GA media

    These are all security issues fixed in the python313-graphifyy-0.9.48-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Medium max 6.1

    python313-djangorestframework-3.18.0-1.1 on GA media

    These are all security issues fixed in the python313-djangorestframework-3.18.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Critical max 9.8

    python313-django-allauth-65.19.1-1.1 on GA media

    These are all security issues fixed in the python313-django-allauth-65.19.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Medium max 5.9

    python313-aiosmtplib-5.1.2-1.1 on GA media

    These are all security issues fixed in the python313-aiosmtplib-5.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    python313-Pygments-2.21.0-1.1 on GA media

    These are all security issues fixed in the python313-Pygments-2.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    python313-Mako-1.4.1-1.1 on GA media

    These are all security issues fixed in the python313-Mako-1.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    python313-GitPython-3.1.59-2.1 on GA media

    These are all security issues fixed in the python313-GitPython-3.1.59-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    libecpg6-18.6-1.1 on GA media

    These are all security issues fixed in the libecpg6-18.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Critical max 9.8

    perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 on GA media

    These are all security issues fixed in the perl-Dancer2-Plugin-Auth-Extensible-0.713.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.8

    ffmpeg-4-4.4.8-4.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.8-4.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 8.2

    comfyui-0.33.3-1.1 on GA media

    These are all security issues fixed in the comfyui-0.33.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • Critical max 9.6

    chromedriver-151.0.7922.169-1.1 on GA media

    These are all security issues fixed in the chromedriver-151.0.7922.169-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 21, 2026
  • High max 7.5

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issue: - CVE-2026-9375: oversized Brotli payload via the streaming API can lead to a denial of service (bsc#1268683).

    first Aug 12, 2026
  • High max 7.5

    Security update for python-msgpack

    This update for python-msgpack fixes the following issue - CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of-bounds read and a crash (bsc#1269947).

    first Aug 6, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-59884: BER/CER/DER decoder denial of service via unbounded long-form tag IDs (bsc#1271464). - CVE-2026-59885: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows den…

    first Aug 6, 2026
  • High max 7.5

    Security update for wget

    This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffe…

    first Aug 4, 2026
  • Unscored

    Security update for multipath-tools

    This update for multipath-tools fixes the following issues: Update to version 0.10.7~1+211+suse.18f1559. Security issues fixed: - kpartx: integer overflow in the GPT partition table size calculation can lead to heap OOB read via crafted USB device or disk ima…

    first Aug 4, 2026
  • High max 8.8

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 11, 2026
  • Unscored

    Security update for libarchive

    This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable (bsc#1254340). - file descriptor l…

    first Aug 11, 2026
  • Unscored

    Security update for openssl-3

    This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712).

    first Aug 7, 2026
  • Medium max 6.4

    Security update for sssd

    This update for sssd fixes the following issue: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807).

    first Aug 7, 2026
  • Critical max 9.6

    Security update for ignition

    This update for ignition fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266606). - CVE-2026-56852: golang.org/x/text/unicode/…

    first Aug 7, 2026
  • Medium max 6.5

    Security update for libssh

    This update for libssh fixes the following issues - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service …

    first Aug 6, 2026
  • Low max 3.3

    Security update for runc

    This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations (bsc#1268275). Changes for runc: - update to 1.3.6: * Various integration test improve…

    first Aug 4, 2026
  • Critical max 9.6

    Security update for helm

    This update for helm fixes the following issues: Update to version 3.21.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266598). - CVE-2026-48978: ora…

    first Aug 4, 2026
  • Medium max 5.5

    Security update for avahi

    This update for avahi fixes the following issue - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTS_MAX (bsc#1255451).

    first Aug 4, 2026
  • High max 8.7

    Security update for python313

    This update for python313 fixes the following issues: - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#12570…

    first Aug 19, 2026
  • High max 7.6

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…

    first Aug 21, 2026
  • High max 7.5

    Security update for sccache

    This update for sccache fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274146). - CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Va…

    first Aug 21, 2026
  • Unscored

    Security update for podman

    This update for podman rebuilds it against the current go security release.

  • Unscored

    Security update for containerd

    This update for containerd rebuilds it against the current go security release.

  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go security release.

  • Unscored

    Security update for docker

    This update for docker rebuilds it against the current go security release.

  • Unscored

    Security update for buildah

    This update for buildah rebuilds it against the current go security release.

  • Unscored

    Security update for cosign

    This update for cosign rebuilds it against the current go security release.

  • High max 8.8

    postgresql14-14.24-1.1 on GA media

    These are all security issues fixed in the postgresql14-14.24-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 19, 2026
  • Critical max 9.8

    firefox-esr-153.1.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-153.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 19, 2026