Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,595 results · Clear filters · Feed

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 9.2

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme …

    first Oct 19, 2026
  • Critical max 9.6
    SUSE-SU-2026:24279-1 5 CVEs 1 exploited

    Security update for docker

    This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for squid

    This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authen…

  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-46028: crypto: algif_aead - s…

    first Oct 24, 2026
  • Critical max 9.1

    git-bug-0.11.0-3.1 on GA media

    These are all security issues fixed in the git-bug-0.11.0-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 24, 2026
  • Critical max 9.8

    MozillaFirefox-158.0.1-1.1 on GA media

    These are all security issues fixed in the MozillaFirefox-158.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 24, 2026
  • Critical max 9.6
    openSUSE-SU-2026:22158-1 5 CVEs 1 exploited

    Security update for docker

    This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…

    first Oct 23, 2026
  • Critical max 9.1

    Security update for go1.26

    This update for go1.26 fixes the following issues: Update to go 1.26.10 (bsc#1255111): - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial w…

    first Oct 21, 2026
  • Critical max 9.2
    openSUSE-SU-2026:22151-1 2 CVEs 2 exploited

    Security update for php8

    This update for php8 fixes the following issue: Update to php 8.4.27: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).

    first Oct 21, 2026
  • Critical max 9.1

    tomcat11-11.0.27-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.27-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.1

    tomcat10-10.1.61-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.61-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.1

    tomcat-9.0.123-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.123-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 10.0
    openSUSE-SU-2026:12252-1 2 CVEs 1 exploited

    libruby4_0-4_0-4.0.9-1.1 on GA media

    These are all security issues fixed in the libruby4_0-4_0-4.0.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.1

    perl-Mozilla-CA-20261020.0.0-1.1 on GA media

    These are all security issues fixed in the perl-Mozilla-CA-20261020.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.9

    libmariadbd-devel-12.3.2-3.1 on GA media

    These are all security issues fixed in the libmariadbd-devel-12.3.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.6

    chromedriver-156.0.8078.47-1.1 on GA media

    These are all security issues fixed in the chromedriver-156.0.8078.47-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.2
    openSUSE-SU-2026:12232-1 1 CVE 1 exploited

    brotli-1.2.1-1.1 on GA media

    These are all security issues fixed in the brotli-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076). - CVE-2023-54180: btrfs: handle case when repair hap…

    first Oct 23, 2026
  • Critical max 9.2
    openSUSE-SU-2026:12248-1 7 CVEs 1 exploited

    corepack24-24.22.1-1.1 on GA media

    These are all security issues fixed in the corepack24-24.22.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-6…

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). - CVE-2026-63887: scsi: targ…

  • Critical max 9.2

    python313-Pillow-13.0.0-1.1 on GA media

    These are all security issues fixed in the python313-Pillow-13.0.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 22, 2026
  • Critical max 9.2
    openSUSE-SU-2026:12228-1 1 CVE 1 exploited

    matomo-5.14.2-1.1 on GA media

    These are all security issues fixed in the matomo-5.14.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 22, 2026
  • Critical max 9.6

    MozillaThunderbird-153.5.1-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-153.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 22, 2026
  • Critical max 9.2
    SUSE-SU-2026:24271-1 2 CVEs 2 exploited

    Security update for php8

    This update for php8 fixes the following issue: Update to php 8.4.27: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).

    first Oct 21, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…

    first Oct 19, 2026
  • Critical max 9.2
    SUSE-SU-2026:4870-1 2 CVEs 2 exploited

    Security update for php74

    This update for php74 fixes the following issues: Fixed two security issues: - CVE-2026-109618: memory corruption leading to RCE - CVE-2026-109619: memory corruption leading to RCE

    first Oct 22, 2026
  • Critical max 9.8

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client c…

    first Oct 22, 2026
  • Critical max 9.8

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): - CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). - CVE-2026-56866: net/http: HTTP/1 client c…

    first Oct 22, 2026
  • Critical max 9.1

    Security update for go1.26

    This update for go1.26 fixes the following issues: Update to go1.26.10 (bsc#1255111): - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial wi…

    first Oct 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KV…

  • Critical max 9.8
    SUSE-SU-2026:4858-1 237 CVEs 2 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially expl…

  • Critical max 9.2
    SUSE-SU-2026:4853-1 12 CVEs 2 exploited

    Security update for php7

    This update for php7 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…

  • Critical max 9.2
    SUSE-SU-2026:4852-1 2 CVEs 2 exploited

    Security update for php8

    This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027).

  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolatio…

    first Oct 19, 2026
  • Critical max 9.2
    openSUSE-SU-2026:12219-1 2 CVEs 2 exploited

    php8-8.5.12-1.1 on GA media

    These are all security issues fixed in the php8-8.5.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 21, 2026
  • Critical max 9.8

    perl-Text-CSV_XS-1.650.0-1.1 on GA media

    These are all security issues fixed in the perl-Text-CSV_XS-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 21, 2026