Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    libopenssl-3-devel-3.5.3-8.1 on GA media

    These are all security issues fixed in the libopenssl-3-devel-3.5.3-8.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 27, 2026
  • Critical max 9.6

    Security update for v2ray-core

    This update for v2ray-core fixes the following issues: Changes in v2ray-core: - Update version to 5.53.0 * Add X-Forwarded-For support to gRPC transport * Add Stream based Packet Addr for UDP Connections * rrpit: compact session, async send, session recovery …

    first Aug 25, 2026
  • Critical max 9.4

    Security update for qt6-svg

    This update for qt6-svg fixes the following issue: - CVE-2025-10729: use-after-free when processing `pattern` group nodes (bsc#1250994).

    first Aug 24, 2026
  • Critical max 9.1

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). - CVE-2026-53785: --relative implied-parent creation…

    first Aug 24, 2026
  • Critical max 10.0
    SUSE-SU-2026:23244-1 647 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert "s…

    first Aug 18, 2026
  • Critical max 10.0
    SUSE-SU-2026:23241-1 648 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert…

    first Aug 18, 2026
  • Critical max 10.0
    SUSE-SU-2026:23237-1 894 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …

    first Aug 11, 2026
  • Critical max 10.0
    SUSE-SU-2026:23231-1 894 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …

    first Aug 11, 2026
  • Critical max 9.6

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w * GO-2…

    first Aug 10, 2026
  • Critical max 10.0
    SUSE-SU-2026:23221-1 894 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866). - CVE-2026-31443: dmaengine: idxd: …

    first Aug 11, 2026
  • Critical max 9.6

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z (jsc#PED-11136): Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w * GO-2…

    first Aug 10, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues Update to 2.4.66 (jsc#PED-16334): Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#12…

  • Critical max 9.6

    Security update for gh

    This update for gh fixes the following issues: Changes in gh: - Update to version 2.98.0: * chore: fix extra whitespace * Default Codespaces port forwarding to loopback * Bump gh-aw-actions to v0.87.1 and recompile workflows * Fix issue triage action compatib…

    first Aug 26, 2026
  • Critical max 10.0

    Security update for glab

    This update for glab fixes the following issues: Changes in glab: - Update to version 1.114.0: * feat(api): support dynamic custom headers for authenticating proxies * feat(artifact-registry): add glab artifact-registry login --docker * feat(artifact-registry…

    first Aug 26, 2026
  • Critical max 9.1

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). …

    first Aug 26, 2026
  • Critical max 9.8

    python313-GitPython-3.1.59-3.1 on GA media

    These are all security issues fixed in the python313-GitPython-3.1.59-3.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Critical max 9.8

    python313-geopandas-1.1.4-1.1 on GA media

    These are all security issues fixed in the python313-geopandas-1.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Critical max 9.6

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing…

    first Aug 25, 2026
  • Critical max 9.6

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-n…

    first Aug 25, 2026
  • Critical max 9.1

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-5545: wrong reuse of HTTP Negotiate connection (bsc#1262632). - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-6253: proxy credentials leak over redirect-to proxy (bsc#1262635…

    first Aug 25, 2026
  • Critical max 10.0
    SUSE-SU-2026:3790-1 268 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Per…

    first Aug 25, 2026
  • Critical max 9.1

    OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 on GA media

    These are all security issues fixed in the OpenRGB-1.0~rc3.1+git0.g5e81e26f-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.197 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.6

    Security update for grafana

    This update for grafana fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217) - CVE-2026-33382: Limit t…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026