Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,532 results · Clear filters · Feed

  • Critical max 9.1

    Security update for apr-util

    This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). -…

    first Oct 27, 2026
  • Critical max 9.6

    Security update for Multi-Linux Manager Monitoring stack

    This update fixes the following issues: prometheus-postgres_exporter: - CVE-2022-21698: Replace github.com/prometheus/client_golang with version 1.11.1 and prevent validation bypass and privilege escalation (bsc#1248699) golang-github-prometheus-alertmanager:…

    first Aug 24, 2026
  • Critical max 9.2
    SUSE-SU-2026:24597-1 2 CVEs 1 exploited

    Security update for python-Brotli

    This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Upda…

    first Oct 29, 2026
  • Critical max 9.2
    SUSE-SU-2026:24601-1 1 CVE 1 exploited

    Security update for brotli

    This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

    first Nov 1, 2026
  • Critical max 9.4

    python310-3.10.22-3.1 on GA media

    These are all security issues fixed in the python310-3.10.22-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 9, 2026
  • Critical max 9.8
    openSUSE-SU-2026:12505-1 3 CVEs 1 exploited

    rclone-1.76.0-1.1 on GA media

    These are all security issues fixed in the rclone-1.76.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 9, 2026
  • Critical max 9.8

    python313-pybars3-0.9.7-3.1 on GA media

    These are all security issues fixed in the python313-pybars3-0.9.7-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 9, 2026
  • Critical max 9.1

    Recommended update for openssl-3

    This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…

    first Nov 9, 2026
  • Critical max 9.1

    Recommended update for openssl-3

    This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-3…

    first Nov 9, 2026
  • Critical max 9.2

    Security update for python

    This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969).

    first Nov 9, 2026
  • Critical max 9.8
    SUSE-SU-2026:5145-1 147 CVEs 1 exploited

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptograp…

    first Nov 9, 2026
  • Critical max 9.1

    Recommended update for openssl-3

    This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero valu…

    first Nov 9, 2026
  • Critical max 9.2
    SUSE-SU-2026:24600-1 7 CVEs 1 exploited

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-20…

    first Oct 30, 2026
  • Critical max 9.1

    perl-Math-Clipper-1.300.0-1.1 on GA media

    These are all security issues fixed in the perl-Math-Clipper-1.300.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 8, 2026
  • Critical max 10.0

    openai-codex-0.166.0-2.1 on GA media

    These are all security issues fixed in the openai-codex-0.166.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 8, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.2
    SUSE-SU-2026:24556-1 1 CVE 1 exploited

    Security update for brotli

    This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

    first Oct 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…

    first Nov 2, 2026
  • Critical max 9.1

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing…

    first Oct 29, 2026
  • Critical max 9.2

    python316-3.16.0~a1-1.1 on GA media

    These are all security issues fixed in the python316-3.16.0~a1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 9.1

    perl-Net-IDN-Encode-2.600.0-1.1 on GA media

    These are all security issues fixed in the perl-Net-IDN-Encode-2.600.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 9.8

    perl-Email-Sender-2.603.0-1.1 on GA media

    These are all security issues fixed in the perl-Email-Sender-2.603.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 9.1

    alloy-1.21.3-1.1 on GA media

    These are all security issues fixed in the alloy-1.21.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 9.8

    ansible-14-14.6.0-1.1 on GA media

    These are all security issues fixed in the ansible-14-14.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 10.0

    gleam-1.19.2-1.1 on GA media

    These are all security issues fixed in the gleam-1.19.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 6, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.1

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1286994). - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed fra…

    first Nov 3, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-89544: SUNRPC: fix gssx_dec_option_arr…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-64217: netfs: Fix overrun check in netfs_extr…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infinite loo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026