Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - …

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes one security issue: The following security issue was fixed: - CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

  • Critical max 9.6

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HT…

  • Critical max 9.6

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HT…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). …

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…

    first Oct 5, 2026
  • Critical max 9.8

    Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

    This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-202…

    first Sep 30, 2026
  • Critical max 9.2

    iperf-3.22-1.1 on GA media

    These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.8

    grype-db-0.54.4-1.1 on GA media

    These are all security issues fixed in the grype-db-0.54.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.1

    golang-github-lusitaniae-apache_exporter-1.1.1-1.1 on GA media

    These are all security issues fixed in the golang-github-lusitaniae-apache_exporter-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 10.0

    distribution-registry-3.1.2-1.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 2, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditi…

    first Sep 30, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - C…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…

    first Oct 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 53 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.214 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: …

    first Oct 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). …

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 4, 2026
  • Critical max 9.8

    python313-reportlab-4.5.1-1.2 on GA media

    These are all security issues fixed in the python313-reportlab-4.5.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-asyncpg-0.31.0-1.4 on GA media

    These are all security issues fixed in the python313-asyncpg-0.31.0-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-pipreqs-0.5.0-2.2 on GA media

    These are all security issues fixed in the python313-pipreqs-0.5.0-2.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-kubernetes-35.0.0-2.4 on GA media

    These are all security issues fixed in the python313-kubernetes-35.0.0-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-impacket-0.13.1-1.2 on GA media

    These are all security issues fixed in the python313-impacket-0.13.1-1.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.2

    libthrift-0_25_0-0.25.0-1.1 on GA media

    These are all security issues fixed in the libthrift-0_25_0-0.25.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-urllib3_1-1.26.20-7.2 on GA media

    These are all security issues fixed in the python313-urllib3_1-1.26.20-7.2 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-urllib3-2.8.0-1.1 on GA media

    These are all security issues fixed in the python313-urllib3-2.8.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-rope-1.14.0-1.4 on GA media

    These are all security issues fixed in the python313-rope-1.14.0-1.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.9

    python313-CairoSVG-2.9.0-1.3 on GA media

    These are all security issues fixed in the python313-CairoSVG-2.9.0-1.3 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.9

    incus-7.5.1-1.1 on GA media

    These are all security issues fixed in the incus-7.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    python313-PyYAML-6.0.3-1.6 on GA media

    These are all security issues fixed in the python313-PyYAML-6.0.3-1.6 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.1

    python313-PyJWT-2.15.1-1.1 on GA media

    These are all security issues fixed in the python313-PyJWT-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • Critical max 9.8

    ghostscript-10.08.0-1.1 on GA media

    These are all security issues fixed in the ghostscript-10.08.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2026
  • Critical max 9.1

    pvetui-1.4.3-1.1 on GA media

    These are all security issues fixed in the pvetui-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 2, 2026