Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for perl-DBI

    This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director (bsc#1271629). - CVE-2026-15043: `DBI:SQ…

    first Jul 22, 2026
  • Critical max 9.1

    Security update for perl

    This update for perl fixes the following issues: - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with malformed DOS date (bsc#1266361). - CVE-2026-8376: heap buffer overflow when compiling regular expressions with…

    first Jul 22, 2026
  • Critical max 9.8

    Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

    This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to …

    first Jul 21, 2026
  • Critical max 9.6

    Security update for trivy

    This update for trivy fixes the following issues - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266495). - CVE-2026-50151: oras-go: Credential forwardin…

    first Jul 20, 2026
  • Critical max 9.6

    Security update for hauler

    This update for hauler fixes the following issues: Changes in hauler: - update embedded dependency x/net to 0.57 to fix CVE-2026-39821 (bsc#1266602)

    first Jul 22, 2026
  • Critical max 9.8
    openSUSE-SU-2026:21388-1 255 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…

    first Jul 21, 2026
  • Critical max 9.6

    Security update 5.0.5 for Multi-Linux Manager Salt Bundle

    This update fixes the following issues: venv-salt-minion: - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation (bsc#1244561) - CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport (bsc#12445…

    first Jul 23, 2025
  • Critical max 9.1

    Security update for perl-XML-Bare

    This update for perl-XML-Bare fixes the following issues: Changes in perl-XML-Bare: - CVE-2026-13401: XML:Bare would hang when parsing malformed attributes (bsc#1271640) - CVE-2026-57074: Fixed unbounded character lookahead (bsc#1271637)

    first Jul 22, 2026
  • Critical max 9.8

    Security update for perl-Net-DNS

    This update for perl-Net-DNS fixes the following issues: Changes in perl-Net-DNS: - CVE-2026-64194: Fixed a Denial of Service via deep DNS compression pointer chains [bsc#1272214] - CVE-2026-64193: Fixed a remote execution injection [bsc#1272212]

    first Jul 22, 2026
  • Critical max 10.0

    Security update for rclone

    This update for rclone fixes the following issues: Changes in rclone: - Update to version 1.74.4 (boo#1267192): * Version v1.74.4 * gui: update embedded release to 1.1.10 * local: stop --links symlinks escaping the destination directory CVE-2026-54572 * local…

    first Jul 22, 2026
  • Critical max 9.1

    perl-XML-Bare-0.53-7.1 on GA media

    These are all security issues fixed in the perl-XML-Bare-0.53-7.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 23, 2026
  • Critical max 9.6

    chromedriver-150.0.7871.181-1.1 on GA media

    These are all security issues fixed in the chromedriver-150.0.7871.181-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 23, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649): - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the DO…

    first Jul 23, 2026
  • Critical max 9.6

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603).

    first Jul 23, 2026
  • Critical max 9.6

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266603).

    first Jul 23, 2026
  • Critical max 10.0

    Security update for kubevirt

    This update for kubevirt fixes the following issues: - Security: re-vendor the bundled Go dependencies (no upstream source changes; tarball rebuilt from v1.7.4 with updated go.mod/vendor): * golang.org/x/net v0.48.0 -> v0.55.0: CVE-2026-33814 (bsc#1265736), C…

    first Jul 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:22786-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22785-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22784-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22781-1 20 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22780-1 20 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22778-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22777-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22775-1 20 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22783-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22782-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22776-1 20 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:22769-1 255 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…

    first Jul 21, 2026
  • Critical max 9.8

    Security update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions

    This update for cockpit, cockpit-machines, cockpit-packages, cockpit-podman, cockpit-repos, cockpit-subscriptions fixes the following issues: Security issues fixed: - CVE-2025-13465: lodash: prototype pollution in the _.unset and _.omit functions can lead to …

    first Jul 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:22763-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 20, 2026
  • Critical max 9.8
    SUSE-SU-2026:22762-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 20, 2026
  • Critical max 9.8
    SUSE-SU-2026:22761-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 20, 2026
  • Critical max 9.8
    SUSE-SU-2026:22758-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 20, 2026
  • Critical max 9.8
    SUSE-SU-2026:22759-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-o…

    first Jul 20, 2026
  • Critical max 9.8
    SUSE-SU-2026:22755-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 18, 2026
  • Critical max 9.8
    SUSE-SU-2026:22749-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22748-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22747-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22746-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22744-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 15, 2026