Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 10.0
    SUSE-SU-2026:20560-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • Critical max 9.1

    python313-pytest-html-4.2.0-4.1 on GA media

    These are all security issues fixed in the python313-pytest-html-4.2.0-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.6

    Security update for cadvisor

    This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.3: * Move OOM watching out of the lib module into the binary * lib/model: make ContainerStats sub-stats pointers to convey collection presence - update to 0.60.1: * cpu…

    first Jul 6, 2026
  • Critical max 10.0

    Security update for alloy

    This update for alloy fixes the following issues: Update to version 1.17.0. Security issues fixed: - CVE-2026-25680: golang.org/x/net/html: parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service (bsc#1267185). - CVE-2026-…

    first Jul 7, 2026
  • Critical max 9.6

    Security update for docker-compose

    This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…

    first Jul 7, 2026
  • Critical max 10.0

    Security update for podman

    This update for podman fixes the following issues - CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing encrypted key can lead to a denial of service (bsc#1262856). - CVE-2026-39827: Invoking memory le…

    first Jul 6, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …

    first Jul 6, 2026
  • Critical max 10.0

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers. - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HT…

    first Jul 6, 2026
  • Critical max 9.8

    fluidsynth-2.5.6-1.1 on GA media

    These are all security issues fixed in the fluidsynth-2.5.6-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.1

    tomcat10-10.1.56-1.1 on GA media

    These are all security issues fixed in the tomcat10-10.1.56-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 7, 2026
  • Critical max 9.0

    xwayland-24.1.12-1.1 on GA media

    These are all security issues fixed in the xwayland-24.1.12-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • Critical max 9.1

    tomcat-9.0.119-1.1 on GA media

    These are all security issues fixed in the tomcat-9.0.119-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 7, 2026
  • Critical max 9.6

    go-sendxmpp-0.16.0-1.1 on GA media

    These are all security issues fixed in the go-sendxmpp-0.16.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 7, 2026
  • Critical max 9.8

    cosign-3.1.1-1.1 on GA media

    These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 7, 2026
  • Critical max 9.0

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).

    first Jul 8, 2026
  • Critical max 9.0

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).

    first Jul 8, 2026
  • Critical max 9.0

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…

    first Jul 8, 2026
  • Critical max 9.0

    Security update for xwayland

    This update for xwayland fixes the following issues - CVE-2026-55999: glamor Font Atlas Heap Buffer Overflow (bsc#1268893). - CVE-2026-56000: GLX contextTags Use-After-Free in CommonMakeCurrent() (bsc#1268894).

    first Jul 8, 2026
  • Critical max 9.0

    Security update for xorg-x11-server

    This update for xorg-x11-server fixes the following issues - CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). - CVE-2026-56000: improper memor…

    first Jul 8, 2026
  • Critical max 9.8

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to go1.26.4 (bsc#1255111). Security issues fixed: - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG (bsc#1261653). - CVE-2026-27143: cmd/compile: possible memory corruption a…

    first Jul 7, 2026
  • Critical max 9.8
    SUSE-SU-2026:2800-1 105 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr alignment (bsc#1259764). - CVE-2025-40341: futex: Don't leak robust_list poi…

    first Jul 8, 2026
  • Critical max 9.8
    SUSE-SU-2026:2799-1 168 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Ultra definitions (bsc#1266290). - CVE-2025-40216: io_uring/rsrc: don't rely on user vaddr…

    first Jul 8, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…

    first Jun 29, 2026
  • Critical max 9.1

    tomcat11-11.0.23-1.1 on GA media

    These are all security issues fixed in the tomcat11-11.0.23-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 6, 2026
  • Critical max 9.8

    python313-openapi-spec-validator-0.9.0-1.1 on GA media

    These are all security issues fixed in the python313-openapi-spec-validator-0.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 6, 2026
  • Critical max 9.8

    python313-dulwich-1.2.7-1.1 on GA media

    These are all security issues fixed in the python313-dulwich-1.2.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 6, 2026
  • Critical max 10.0

    obs-service-appimage-0.12.4-1.1 on GA media

    These are all security issues fixed in the obs-service-appimage-0.12.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 6, 2026
  • Critical max 9.6

    Security update 5.1.4 for Multi-Linux Manager Server

    This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.4 * Added note about migration for SUSE Linux Enterprise Server 16 on SSH managed minions * Product Migration from SUSE Linux Enterprise Server 15 SP7 t…

    first Jul 6, 2026
  • Critical max 9.6

    Security update 5.1.4 for Multi-Linux Manager Client Tools

    This update fixes the following issues: dracut-saltboot updated to version 1.2.1: - Key Update Highlights (v1.2.1) - Added wait check for minion start (default 10s), configurable using rd.saltboot.salt_start_timeout option (bsc#1260870) - Decouple salt key wa…

    first Jul 6, 2026
  • Critical max 9.8

    Security update for apache2

    This update for apache2 fixes the following issues - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976). - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977). - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978). - CVE-2026-34356: malicious …

    first Jul 6, 2026
  • Critical max 9.8

    chromedriver-150.0.7871.46-1.1 on GA media

    These are all security issues fixed in the chromedriver-150.0.7871.46-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …

    first Jun 24, 2026
  • Critical max 9.8
    SUSE-SU-2026:22489-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix he…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd: fix he…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UAF in …

    first Jun 25, 2026
  • Critical max 9.8
    SUSE-SU-2026:22488-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK…

    first Jun 24, 2026