Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8
    SUSE-SU-2026:20380-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20377-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20379-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8

    chromedriver-136.0.7103.59-1.1 on GA media

    These are all security issues fixed in the chromedriver-136.0.7103.59-1.1 package on the GA media of openSUSE Tumbleweed.

    first May 4, 2025
  • Critical max 9.8
    SUSE-SU-2026:20378-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20376-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-57849: s390…

    first Jan 19, 2026
  • Critical max 9.8
    SUSE-SU-2026:20248-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: rpl:…

    first Jan 19, 2026
  • Critical max 9.8

    Security update for libsodium

    This update for libsodium fixes the following issues: - CVE-2025-15444: missing checks when validating elliptic curve points allows for cryptographic bypass (bsc#1256070).

    first Jan 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…

    first Feb 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…

    first Feb 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). - CVE-2025-39880: ceph: fix race conditio…

    first Feb 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251982). - CVE-2025-40204: sctp: Fix M…

    first Jan 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251982). - CVE-2025-40204: sctp: Fix M…

    first Jan 28, 2026
  • Critical max 9.8
    SUSE-SU-2026:20169-1 14 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019). - CVE-2025-38500: xfrm: interface: fix use-…

    first Jan 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251982). - CVE-2025-40204: sctp: Fix M…

    first Jan 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196).

    first Jan 26, 2026
  • Critical max 9.8
    SUSE-SU-2026:20164-1 14 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019). - CVE-2025-38500: xfrm: interface: fix use-…

    first Jan 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196).

    first Jan 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:20149-1 14 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.5.1 fixes various security issues The following security issues were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019). - CVE-2025-38500: xfrm: interface: fix use-…

    first Jan 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196).

    first Jan 23, 2026
  • Critical max 9.1

    Security update for go1.25

    This update for go1.25 fixes the following issues: Update to go1.25.6 (released 2026-01-15) (bsc#1244485) Security fixes: - CVE-2025-61730: crypto/tls: handshake messages may be processed at the incorrect encryption level (bsc#1256821). - CVE-2025-68119: cmd/…

    first Jan 22, 2026
  • Critical max 9.8
    SUSE-SU-2026:20102-1 30 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Jan 20, 2026
  • Critical max 10.0

    Security update for cpp-httplib

    This update for cpp-httplib fixes the following issues: - CVE-2025-66570: IP spoofing, log poisoning, and authorization bypass via header shadowing due to acceptance and parsing of client-controlled injected HTTP headers in incoming requests (bsc#1254734). - …

    first Jan 15, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.7.0 ESR (bsc#1256340). - MFSA 2026-03 (bsc#1256340) * CVE-2026-0877: Mitigation bypass in the DOM: Security component * CVE-2026-0878: Sandbox escape due…

    first Jan 15, 2026
  • Critical max 9.6

    Security update for tomcat

    This update for tomcat fixes the following issues: - Update to Tomcat 9.0.111 - Security fixes: - CVE-2025-55752: directory traversal via rewrite with possible RCE if PUT is enabled (bsc#1252753). - CVE-2025-55754: improper neutralization of Escape, Meta, or …

    first Jan 14, 2026
  • Critical max 10.0

    Security update for squid

    This update for squid fixes the following issues: - CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). - CVE-2025-59362: SNMP message …

    first Jan 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-536…

    first Jan 7, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-536…

    first Jan 7, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 140.6.0 ESR was released: * Fixed: Various security fixes. MFSA 2025-94 (bsc#1254551): * CVE-2025-14321: Use-after-free in the WebRTC: Signa…

    first Jan 12, 2026
  • Critical max 10.0

    Security update of valkey

    This update for valkey fixes the following issues: Update to 8.0.6: - Security fixes: - CVE-2025-49844: Fixed that a Lua script may lead to remote code execution (bsc#1250995) - CVE-2025-46817: Fixed that a Lua script may lead to integer overflow and potentia…

    first Jan 7, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …

    first Dec 19, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …

    first Dec 19, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2025-37916: pds_core: remove …

    first Dec 19, 2025
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.290 fixes one security issue The following security issue was fixed: - CVE-2022-50717: nvmet-tcp: add bounds check on Transfer Tag (bsc#1255845).

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 27, 2026
  • Critical max 9.1

    Security update for go1

    This update for go1 fixes the following issues: Update to version 1.24.13 (jsc#SLE-18320, bsc#1236217). Security issues fixed: - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68…

    first Feb 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses to …

    first Feb 20, 2026