Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2026:20838-1 176 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues. The following security issues were fixed: - CVE-2025-39753: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (bsc#1249590). - CVE-2025-39964: crypto: af_alg - Disallow concurre…

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-402…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488: smb: …

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues The following security issues were fixed: - CVE-2025-40214: af_unix: Initialise scc_index in unix_add_edge() (bsc#1255052). - CVE-2025-40258: mptcp: fix race cond…

    first Mar 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues The following security issues were fixed: - CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (bsc#1255378). - CVE-202…

    first Mar 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.3 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-38488…

    first Mar 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40284: Bluetooth: MGMT: …

    first Mar 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…

    first Mar 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.81 fixes various security issues The following security issues were fixed: - CVE-2025-40258: mptcp: fix race condition in mptcp_schedule_work() (bsc#1255053). - CVE-2025-40297: net: bridge: fix …

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.65 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…

    first Mar 26, 2026
  • Critical max 9.6

    openbao-2.5.2-1.1 on GA media

    These are all security issues fixed in the openbao-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:1081-1 155 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2025-37861: scsi: mpi3mr: Synchronou…

    first Mar 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:1078-1 68 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50453: gpiolib: cdev: fix NULL-pointer dereferences (bsc#1250887). - CVE-2023-53794: cifs: fix session state check in …

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2025-38159: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (bsc#1257629). - CVE-2025-3848…

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2025-21738: …

    first Mar 26, 2026
  • Critical max 10.0
    SUSE-SU-2026:1058-1 43 CVEs 2 exploited

    Security update for tomcat

    This update for tomcat fixes the following issues: Update to Tomcat 9.0.115: - CVE-2025-48989: HTTP/2 protocol (including DNS over HTTPS) is vulnerable to 'MadeYouReset' DoS attack (bsc#1243895). - CVE-2025-52434: race condition on connection close when using…

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.100 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.124 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53781: …

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: …

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.60 fixes various security issues The following security issues were fixed: - CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). - CVE-2025-40…

    first Mar 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues The following security issues were fixed: - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-6828…

    first Mar 25, 2026
  • Critical max 9.1

    Security update for python-Authlib

    This update for python-Authlib fixes the following issues: Changes in python-Authlib: - CVE-2026-27962: JWS `deserialize_compact()` allows for signature bypass by accepting user-controlled embedded JWK as verification key (bsc#1259738) - CVE-2026-28490: crypt…

    first Mar 18, 2026
  • Critical max 10.0

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.8.1 ESR * Add mail.openpgp.load_untested_gpgme_version to load untested GPGME version - Mozilla Thunderbird 140.8.0 ESR MFSA 2026-17 (boo#1…

    first Mar 18, 2026
  • Critical max 9.8

    Security update for net-snmp

    This update for net-snmp fixes the following issues: - CVE-2025-68615: Fixed snmptrapd buffer overflow (bsc#1255491).

    first Mar 18, 2026
  • Critical max 9.2

    jupyter-bqplot-jupyterlab-0.5.46-14.1 on GA media

    These are all security issues fixed in the jupyter-bqplot-jupyterlab-0.5.46-14.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.2

    python311-jupyter-ydoc-3.4.0-2.1 on GA media

    These are all security issues fixed in the python311-jupyter-ydoc-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.1

    amazon-cloudwatch-agent-1.300064.0-2.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300064.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 10.0

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260317T205859 2026-03-17T20:58:59Z. Refs jsc#PED-11136 Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-4360 CVE-2026-0528 GHSA-w2gr-585j-r428 * GO…

    first Mar 25, 2026
  • Critical max 9.1

    golang-github-v2fly-v2ray-core-5.47.0-1.1 on GA media

    These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.47.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.4
    SUSE-SU-2026:1041-1 27 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). - CVE-2024-38542: RDMA/mana_ib: bound…

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: w…

    first Mar 25, 2026
  • Critical max 9.8

    python311-lmdb-2.1.1-1.1 on GA media

    These are all security issues fixed in the python311-lmdb-2.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.116 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …

    first Mar 25, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2023-53257: …

    first Mar 25, 2026
  • Critical max 9.8

    Security update 5.0.7 for Multi-Linux Manager Client Tools

    This update fixes the following issues: dracut-saltboot: - Version update to 1.1.0: * Retry DHCP requests up to 3 times (bsc#1253004) golang-github-QubitProducts-exporter_exporter: - Non-customer-facing optimization and update golang-github-boynux-squid_expor…

    first Mar 25, 2026