Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

697 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2026:2895-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:2894-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race cond…

    first Jul 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:2866-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 12, 2026
  • Critical max 9.8
    SUSE-SU-2026:2887-1 22 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.40 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:2858-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.31 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2862-1 9 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bondi…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2857-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.28 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 11, 2026
  • Critical max 9.8
    SUSE-SU-2026:2855-1 22 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of…

    first Jul 11, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11261-1 24 CVEs 1 exploited

    python313-Pillow-12.3.0-1.1 on GA media

    These are all security issues fixed in the python313-Pillow-12.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 12, 2026
  • Critical max 9.8
    SUSE-SU-2026:22522-1 89 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: …

    first Jul 6, 2026
  • Critical max 9.8
    SUSE-SU-2026:22521-1 89 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029). - CVE-2025-71294: drm/amdgpu: fix…

    first Jul 6, 2026
  • Critical max 9.8
    SUSE-SU-2026:20873-1 176 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…

    first Mar 25, 2026
  • Critical max 10.0
    SUSE-SU-2026:20560-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • Critical max 9.8
    SUSE-SU-2026:2800-1 105 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764). - CVE-2025-40341: futex: Don't leak robust_list poi…

    first Jul 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:2799-1 168 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290). - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr…

    first Jul 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:22489-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22488-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22474-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:22462-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22412-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22411-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22402-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22425-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:2238-1 204 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 (bsc#1243603). - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resour…

    first Jun 30, 2026
  • Critical max 9.8
    SUSE-SU-2026:2686-1 66 CVEs 1 exploited

    Security update for apache2

    This update for apache2 fixes the following issues - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). - CVE-2026-28780: heap buffer overflow in `…

    first Jun 29, 2026
  • Critical max 9.1
    openSUSE-SU-2026:11091-1 9 CVEs 1 exploited

    kubevirt1.8-container-disk-1.8.3-1.1 on GA media

    These are all security issues fixed in the kubevirt1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.8
    openSUSE-SU-2026:11105-1 2 CVEs 1 exploited

    apache-commons-validator-1.10.1-1.1 on GA media

    These are all security issues fixed in the apache-commons-validator-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 23, 2026
  • Critical max 9.1
    openSUSE-SU-2026:11057-1 9 CVEs 1 exploited

    kubevirt-1.8-container-disk-1.8.3-1.1 on GA media

    These are all security issues fixed in the kubevirt-1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 18, 2026
  • Critical max 9.6
    openSUSE-SU-2026:11008-1 74 CVEs 1 exploited

    chromedriver-149.0.7827.102-1.1 on GA media

    These are all security issues fixed in the chromedriver-149.0.7827.102-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 12, 2026
  • Critical max 9.8
    openSUSE-SU-2026:10954-1 274 CVEs 1 exploited

    kernel-devel-7.0.11-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 4, 2026
  • Critical max 9.1
    SUSE-SU-2026:1604-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 24, 2026
  • Critical max 9.1
    SUSE-SU-2026:1603-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 24, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20611-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (bsc#1261852). - …

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20612-1 11 CVEs 1 exploited

    Security update for tomcat10

    This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.54 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 22, 2026
  • Critical max 9.1
    SUSE-SU-2026:1572-1 11 CVEs 1 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved (…

    first Apr 23, 2026
  • Critical max 9.1
    SUSE-SU-2026:1558-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: Security fixes: - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is not preserved…

    first Apr 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:20595-1 11 CVEs 1 exploited

    Security update for tomcat11

    This update for tomcat11 fixes the following issues: - Update to Tomcat 11.0.21 - CVE-2026-24880: Request smuggling via invalid chunk extension (bsc#1261850). - CVE-2026-25854: Occasionally open redirect (bsc#1261851). - CVE-2026-29129: TLS cipher order is no…

    first Apr 21, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10549-1 10 CVEs 1 exploited

    tomcat11-11.0.21-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.21-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10548-1 10 CVEs 1 exploited

    tomcat10-10.1.54-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.54-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026
  • Critical max 9.1
    openSUSE-SU-2026:10547-1 10 CVEs 1 exploited

    tomcat-9.0.117-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.117-1.1 package on the GA media of openSUSE Tumbleweed.

    first Apr 14, 2026