Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,592 results · Clear filters · Feed

  • Critical max 9.2
    SUSE-SU-2026:5125-1 1 CVE 1 exploited

    Security update for python-Brotli

    This update for python-Brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779).

  • Critical max 9.2
    openSUSE-SU-2026:12439-1 1 CVE 1 exploited

    python313-autobahn-26.11.1-1.1 on GA media

    These are all security issues fixed in the python313-autobahn-26.11.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Critical max 9.8

    chromedriver-157.0.8103.38-1.1 on GA media

    These are all security issues fixed in the chromedriver-157.0.8103.38-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: s…

    first Nov 3, 2026
  • Critical max 9.1

    java-21-openj9-21.0.13.0-1.1 on GA media

    These are all security issues fixed in the java-21-openj9-21.0.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 5, 2026
  • Critical max 9.8

    Security update for perl-Text-CSV_XS

    This update for perl-Text-CSV_XS fixes the following issues: - CVE-2026-110752: unclamped RFC 7111 selector range pre-allocation in fragment() can cause memory exhaustion via large index ranges (bsc#1286138). - CVE-2026-110754: unfreed field array memory leak…

    first Nov 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918). - CVE-2025-68741: scsi:…

    first Nov 5, 2026
  • Critical max 9.8

    Security update for cephfs

    This update for cephfs fixes the following security issues: - CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472). - CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446). …

  • Critical max 9.1

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). - CVE-2026-74049: Jasper JSTL <c:redirect> plug-in implementation omits page abort (bsc#1286555). - CVE-2026-80353: TOC…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).

    first Nov 4, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.1

    java-11-openjdk-11.0.33.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.1

    amazon-ssm-agent-3.3.5708.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.5708.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on sub…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64053: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (bsc#1272986). - CVE-2026-64217: netfs:…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-80521: af_unix: Unlink scc_ent…

    first Nov 2, 2026
  • Critical max 9.2
    SUSE-SU-2026:24518-1 1 CVE 1 exploited

    Security update for brotli

    This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

    first Nov 1, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).

    first Nov 2, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav`…

    first Nov 4, 2026
  • Critical max 9.1

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues: - CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). - CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067).

  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.1

    Security update for cadvisor

    This update for cadvisor fixes the following issues: Changes in cadvisor: - update vendor.tar to address: * bsc#1288588, CVE-2026-116591: github.com/klauspost/compress/zstd: crafted ~27 KB two-block zstd frame makes DecodeAll and the streaming decoder panic *…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite loop in fi…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on submount u…

    first Nov 2, 2026
  • Critical max 9.6

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 156.0.8078.79 (boo#1288840): * CVE-2026-76024: Memory corruption in MediaStream * CVE-2026-76025: Use after free in FileSystem * CVE-2026-76026: Memory corruption in Autofill…

    first Nov 1, 2026
  • Critical max 9.2
    openSUSE-SU-2026:22213-1 1 CVE 1 exploited

    Security update for brotli

    This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

    first Nov 1, 2026