Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.50 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…

    first Jun 24, 2026
  • Critical max 10.0

    Security update for apptainer

    This update for apptainer fixes the following issues - CVE-2026-24137: github.com/sigstore/sigstore/pkg/tuf: legacy TUF client allows for arbitrary file writes with target cache path traversal (bsc#1264177). - CVE-2026-33186: google.golang.org/grpc: authoriza…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.103 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanou…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.149 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 23, 2026
  • Critical max 9.1

    Security update for perl-Crypt-SaltedHash

    This update for perl-Crypt-SaltedHash fixes the following issues: Changes in perl-Crypt-SaltedHash: updated to 0.110.0 (0.11) * 0.11 2026-05-20 14:05:07+01:00 Europe/London - Fixed metadata - Moved author tests into xt * 0.10 2026-05-19 - Maintenance taken ov…

    first Jun 15, 2026
  • Critical max 9.1

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: Changes in google-guest-agent: Update to version 20260430.00 * Update OWNERS (#609) * Update THIRD_PARTY_LICENSES to be package specific location. (#608) * Update dependencies and go version to 1.…

    first Jun 15, 2026
  • Critical max 9.1

    Security update for unbound

    This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…

    first Jun 18, 2026
  • Critical max 10.0

    Security update for distribution

    This update for distribution fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265788). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Pun…

    first Jun 18, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-23254: net: gro: fix outer network offset (bsc#1259884). - CVE-2026-23303: smb: client: Don't log plaintext credentials in ci…

    first Jun 15, 2026
  • Critical max 9.1

    Security update for unbound

    This update for unbound fixes the following issues - CVE-2026-32792: Packet of death with DNSCrypt (bsc#1265583). - CVE-2026-33278: Possible remote code execution during DNSSEC validation (bsc#1265587). - CVE-2026-40622: "Ghost domain name" variant (bsc#12655…

    first Jun 18, 2026
  • Critical max 10.0

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues Update to version 3.3.4624.0: - CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239342). - CVE-2025-22870: golang.org/x/net/proxy: prox…

    first Jun 17, 2026
  • Critical max 9.1

    python312-3.12.13-6.1 on GA media

    These are all security issues fixed in the python312-3.12.13-6.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1
    openSUSE-SU-2026:11091-1 9 CVEs 1 exploited

    kubevirt1.8-container-disk-1.8.3-1.1 on GA media

    These are all security issues fixed in the kubevirt1.8-container-disk-1.8.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-asn1-types-0.4.1-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-asn1-types-0.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-asn1-parse-0.10.0-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-asn1-parse-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    git-annex-10.20260601-2.1 on GA media

    These are all security issues fixed in the git-annex-10.20260601-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-x509-validation-1.9.1-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-x509-validation-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-x509-system-1.9.0-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-x509-system-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-x509-store-1.9.0-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-x509-store-1.9.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-x509-1.9.1-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-x509-1.9.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-pem-0.3.0-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-pem-0.3.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media

    These are all security issues fixed in the ghc-crypton-asn1-encoding-0.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.1

    ghc-aws-0.25.2-1.1 on GA media

    These are all security issues fixed in the ghc-aws-0.25.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.6

    MozillaThunderbird-140.12.0-1.1 on GA media

    These are all security issues fixed in the MozillaThunderbird-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.299 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout UA…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38549: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). - CVE-2025-68324: scsi: im…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes various security issues The following security issues were fixed: - CVE-2026-23278: netfilter: nf_tables: always walk all pending catchall elements (bsc#1260907). - CVE-2026-31402: nfsd…

    first Jun 23, 2026
  • Critical max 9.6

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox 140.12.0 ESR (MFSA 2026-58, bsc#1268071): - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component. - CVE-2026-12290: Memory safety bug fixed in Firefox ESR 140.12…

    first Jun 23, 2026
  • Critical max 10.0

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2026-39827: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39828: Update golang.org/x/crypto dependency (bsc#1266171). - CVE-2026-39829: Update golang.org/x/crypto dependenc…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 23, 2026
  • Critical max 9.6

    docker-stable-24.0.9_ce-18.1 on GA media

    These are all security issues fixed in the docker-stable-24.0.9_ce-18.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.103 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanou…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.37 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.37 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fanout …

    first Jun 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 46 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.184 fixes various security issues The following security issues were fixed: - CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). - CVE-2026-31504: net: fix fan…

    first Jun 22, 2026