Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2026:22742-1 255 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…

    first Jul 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:22743-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 15, 2026
  • Critical max 9.8
    SUSE-SU-2026:22719-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22717-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22718-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22716-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22715-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22714-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22713-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22712-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22710-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8

    Security update for curl

    This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…

    first Jul 14, 2026
  • Critical max 9.6

    Security update for docker-compose

    This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…

    first Jul 7, 2026
  • Critical max 9.8

    python313-pandas-3.0.3-1.2 on GA media

    These are all security issues fixed in the python313-pandas-3.0.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6

    gh-2.96.0-2.1 on GA media

    These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6

    prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

    These are all security issues fixed in the prometheus-ha_cluster_exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 10.0

    kernel-devel-7.1.4-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8

    firefox-esr-140.13.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6

    google-osconfig-agent-20260708.00-2.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260708.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 140.13.0 ESR (MFSA 2026-70, bsc#1271649): - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the D…

    first Jul 22, 2026
  • Critical max 9.6

    Security update for terraform-provider-susepubliccloud

    This update for terraform-provider-susepubliccloud fixes the following issue - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266477).

    first Jul 22, 2026
  • Critical max 9.6

    Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls

    This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, t…

    first Jul 22, 2026
  • Critical max 9.8
    SUSE-SU-2026:22731-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22730-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.6

    Security update for ctop

    This update for ctop fixes the following issues: Changes in ctop embedded dependencies: - CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710) - CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#…

    first Jul 18, 2026
  • Critical max 9.8
    SUSE-SU-2026:22735-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22734-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22733-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22732-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22729-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22728-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22727-1 9 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22726-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22725-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22724-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22723-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22722-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22721-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22720-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.1

    Security update for tomcat

    This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example (bsc#1269791). - CVE-2026-53404: always-incorrect control flow…

    first Jul 21, 2026