Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,581 results · Feed

  • Critical max 9.6

    containerized-data-importer1.66-api-1.66.0-1.1 on GA media

    These are all security issues fixed in the containerized-data-importer1.66-api-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.5

    cargo-c-0.10.23-2.1 on GA media

    These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.5

    wasm-bindgen-0.2.100-2.1 on GA media

    These are all security issues fixed in the wasm-bindgen-0.2.100-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • High max 7.5

    sccache-0.17.0~1-2.1 on GA media

    These are all security issues fixed in the sccache-0.17.0~1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • High max 7.5

    python313-pysaml2-7.5.4-1.1 on GA media

    These are all security issues fixed in the python313-pysaml2-7.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • High max 8.8

    libgit2-1_9-1.9.7-1.1 on GA media

    These are all security issues fixed in the libgit2-1_9-1.9.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Critical max 9.6

    kubevirt1.9-container-disk-1.9.0-1.1 on GA media

    These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Critical max 9.2

    kubeshark-cli-53.4.0-1.1 on GA media

    These are all security issues fixed in the kubeshark-cli-53.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 6.9

    gzip-1.14-3.1 on GA media

    These are all security issues fixed in the gzip-1.14-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Critical max 9.6

    go1.26-1.26.6-1.1 on GA media

    These are all security issues fixed in the go1.26-1.26.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Critical max 9.6

    go1.25-1.25.13-1.1 on GA media

    These are all security issues fixed in the go1.25-1.25.13-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Medium max 5.5

    cargo-audit-0.22.2~git0.281452c-2.1 on GA media

    These are all security issues fixed in the cargo-audit-0.22.2~git0.281452c-2.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 15, 2026
  • Critical max 10.0
    SUSE-SU-2026:23068-1 894 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …

    first Aug 11, 2026
  • Critical max 10.0
    SUSE-SU-2026:23066-1 894 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …

    first Aug 11, 2026
  • High max 8.8

    chromedriver-151.0.7922.137-1.1 on GA media

    These are all security issues fixed in the chromedriver-151.0.7922.137-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 14, 2026
  • Low max 3.3

    Security update for amazon-ecs-init

    This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF …

    first Aug 12, 2026
  • Critical max 9.0

    Security update for libXfont2

    This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…

    first Aug 6, 2026
  • High max 7.5

    Security update for python-httplib2

    This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError o…

    first Aug 4, 2026
  • High max 7.8

    Security update for rrdtool

    This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

    first Aug 4, 2026
  • High max 8.1

    Security update for nginx

    This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).

    first Aug 4, 2026
  • High max 8.8

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …

    first Aug 3, 2026
  • High max 8.7

    Security update for python-ujson

    This update for python-ujson fixes the following issue: - CVE-2026-44660: failing to decrement a serialized JSON object during a write exception in ujson.dump() can lead to memory leaks (bsc#1270301).

    first Aug 3, 2026
  • High max 7.5

    Security update for nodejs24

    This update for nodejs24 fixes the following issues: Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…

    first Aug 10, 2026
  • Critical max 9.0

    Security update for libXfont2

    This update for libXfont2 fixes the following issues: - CVE-2026-44950: fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow (bsc#1272661). - CVE-2026-59679: fs_read_glyphs() heap OOB read/write via encoding array index mismatch (bsc#12726…

    first Aug 6, 2026
  • High max 8.1

    Security update for rsyslog

    This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910). C…

    first Aug 5, 2026
  • High max 7.5

    Security update for python-httplib2

    This update for python-httplib2 fixes the following issue - CVE-2026-59939: Fixed a vulnerability where a malicious or compromised HTTP server could return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError o…

    first Aug 4, 2026
  • High max 7.8

    Security update for rrdtool

    This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

    first Aug 4, 2026
  • High max 8.1

    Security update for nginx

    This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability (bsc#1271514).

    first Aug 4, 2026
  • High max 8.8

    Security update for php-composer2

    This update for php-composer2 fixes the following issues: - CVE-2026-45793: Github Actions issued `GITHUB_TOKEN` disclosure in GitHub Actions logs (bsc#1271504). - CVE-2026-59946: path traversal in package `bin` field lets dependencies `chmod` arbitrary host …

    first Aug 3, 2026
  • High max 7.9

    Security update for python-sh

    This update for python-sh fixes the following issue - CVE-2026-54552: `_uid` option performs an incomplete privilege drop on Linux/Unix-like systems and allows for privilege escalation (bsc#1272424).

    first Aug 3, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 31, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to 22.23.2. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust- boundary checks (bsc#1272882). - CVE-2026-56846: HTTP/2 retained h…

    first Aug 10, 2026
  • High max 7.5

    Security update for wireshark

    This update for wireshark fixes the following issues: Update to version 4.4.17. - CVE-2026-6867: SMB2 protocol dissector crash (bsc#1263727). - CVE-2026-7375: UDS protocol dissector infinite loop (bsc#1263761). - CVE-2026-7376: Sharkd utility crash (bsc#12637…

    first Aug 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate ND optio…

    first Jul 28, 2026
  • High max 7.5

    Security update for glib2

    This update for glib2 fixes the following issues - CVE-2026-58010: error during gvs_tuple_is_normal alignment validation could cause a 1-byte out-of-bounds read (bsc#1270009). - CVE-2026-58011: invalid GDateTime in g_date_time_get_ymd could trigger a 2-byte o…

    first Aug 3, 2026