Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,581 results · Feed

  • Unscored

    redis-8.10.1-1.1 on GA media

    These are all security issues fixed in the redis-8.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 8.1

    python313-unearth-0.18.3-1.1 on GA media

    These are all security issues fixed in the python313-unearth-0.18.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 7.5

    python313-pytest-html-4.2.0-5.1 on GA media

    These are all security issues fixed in the python313-pytest-html-4.2.0-5.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 7.2

    postorius-1.3.13-8.1 on GA media

    These are all security issues fixed in the postorius-1.3.13-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 7.5

    python313-datamodel-code-generator-0.72.3-1.1 on GA media

    These are all security issues fixed in the python313-datamodel-code-generator-0.72.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 7.1

    libjxl-devel-0.12.0-1.1 on GA media

    These are all security issues fixed in the libjxl-devel-0.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • Critical max 9.6

    go1.27-1.27rc3-1.1 on GA media

    These are all security issues fixed in the go1.27-1.27rc3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 7.5

    bun-1.4.0~git20260808.52bf09cb-2.1 on GA media

    These are all security issues fixed in the bun-1.4.0~git20260808.52bf09cb-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 18, 2026
  • High max 8.7

    Security update for snphost

    This update for snphost fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwrap…

    first Aug 18, 2026
  • High max 8.4

    Security update for htop

    This update for htop fixes the following issues: Changes in htop: - Update to version 3.5.3: * Improve the htoprc settings parser to avoid segfaults on tampered configuration files (sanitised sort keys, validated configuration invariants, NULL safety for head…

    first Aug 17, 2026
  • High max 8.5

    Security update for open-iscsi

    This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…

    first Aug 14, 2026
  • Critical max 9.6

    Security update for go1.26

    This update for go1.26 fixes the following issues: Security issues fixed: - CVE-2026-33818: encoding/asn1: enforce maximum recursion depth (bsc#1275034). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for …

  • Critical max 9.6

    Security update for go1.25

    This update for go1.25 fixes the following issues: Security issues fixed: - CVE-2026-33818: encoding/asn1: enforce maximum recursion depth (bsc#1275034). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for …

  • High max 7.5

    Security update for redis7

    This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).

  • High max 7.5

    Security update for redis

    This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).

  • High max 7.5

    Security update for redis

    This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).

  • High max 7.5

    Security update for redis7

    This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer (bsc#1273162).

  • High max 8.7

    Security update for python

    This update for python fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the …

  • High max 8.7

    python313-3.13.14-2.1 on GA media

    These are all security issues fixed in the python313-3.13.14-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • Medium max 6.6

    Security update for texlive

    This update for texlive fixes the following issues: - CVE-2023-46048: NULL pointer dereference in texk/web2c/pdftexdir/writet1.c (bsc#1222126). - CVE-2023-46051: NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c (bsc#1222127). - CVE-2026-63729: use…

    first Aug 17, 2026
  • Medium max 5.4

    python313-tablib-3.10.0-1.1 on GA media

    These are all security issues fixed in the python313-tablib-3.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • High max 7.5

    mihomo-1.19.30-1.1 on GA media

    These are all security issues fixed in the mihomo-1.19.30-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • High max 8.4

    htop-3.5.3-1.1 on GA media

    These are all security issues fixed in the htop-3.5.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • Medium max 5.3

    gh-2.97.0-1.1 on GA media

    These are all security issues fixed in the gh-2.97.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • Medium max 5.5

    forgejo-cli-0.6.0-2.1 on GA media

    These are all security issues fixed in the forgejo-cli-0.6.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 17, 2026
  • Critical max 9.1

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under 'use chroot = no' (bsc#1269042). …

    first Aug 17, 2026
  • High max 8.8

    Security update for ffmpeg

    This update for ffmpeg fixes the following issue: - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution (bsc#1269490).

    first Aug 17, 2026
  • High max 8.7

    Security update for jetty-minimal

    This update for jetty-minimal fixes the following issues: - CVE-2026-10050: ISO-8859-1 lossy encoding allows authentication bypass via character substitution (bsc#1272393).

    first Aug 17, 2026
  • Critical max 9.6

    Security update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-container-1.6, virt-pr-helper-container-1.6, virt-synchronization-controller-container-1.6

    This update for kubevirt-1.6, virt-api-container-1.6, virt-controller-container-1.6, virt-exportproxy-container-1.6, virt-exportserver-container-1.6, virt-handler-container-1.6, virt-launcher-container-1.6, virt-libguestfs-tools-container-1.6, virt-operator-c…

    first Aug 17, 2026
  • High max 7.0

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511). - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).

    first Aug 17, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: Security issues fixed: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459). - CVE-2026-46968: unauthorized creation, deletion or mod…

    first Aug 14, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1272459). - CVE-2026-46968: unauthorized creation, deletion or modification access to cri…

    first Aug 14, 2026
  • High max 8.5

    Security update for open-iscsi

    This update for open-iscsi fixes the following issues: Update to version 2.1.12.suse+0.8f77cf16: - CVE-2026-44943: improper limitation of pathname to a restricted directory allows remote MITM attackers to create root-owned files outside the database and injec…

    first Aug 14, 2026
  • Medium max 5.5

    Security update for git-cliff

    This update for git-cliff fixes the following issues: Changes in git-cliff: - Update to version 2.13.1: * Support more configuration file locations * Add per-commit statistics * Expose determined bump type in release context * Add configurable commit processi…

    first Aug 14, 2026
  • High max 8.7

    Security update for snpguest

    This update for snpguest fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270541). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in `aes::unwra…

    first Aug 13, 2026
  • Medium max 6.5

    libs2n1-1.7.7-1.1 on GA media

    These are all security issues fixed in the libs2n1-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.5

    rustup-1.29.0~0-1.1 on GA media

    These are all security issues fixed in the rustup-1.29.0~0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.3

    python313-h2-4.4.1-1.1 on GA media

    These are all security issues fixed in the python313-h2-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.5

    obs-service-cargo-7.2.2-2.1 on GA media

    These are all security issues fixed in the obs-service-cargo-7.2.2-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • High max 8.8

    ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media

    These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026