Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

5,613 results · Clear filters · Feed

  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_11

    This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376) - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right user…

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158) - …

    first Oct 24, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794) - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075) - CVE-2025-38396: f…

    first Oct 24, 2025
  • Critical max 9.8
    SUSE-SU-2025:20870-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: P…

    first Oct 23, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_3

    This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_8

    This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_8

    This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (b…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2025-38089: sunrpc: hand…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

    This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) - CVE-2024-53168: sunrpc: fix …

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) - CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) - CVE-2025-21791…

    first Oct 7, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2025-38006: net: mctp: Do …

    first Sep 23, 2025
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708). - CVE-2025-38006: net: mctp: Do …

    first Sep 23, 2025
  • Critical max 10.0
    SUSE-SU-2025:20602-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-36028: …

    first Aug 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:20601-1 235 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may - CVE-2024-3602…

    first Aug 25, 2025
  • Critical max 9.1

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2025-6021: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 [bsc#1244580] - CVE-2025-6170: stack buffer overflow may lead to a crash [bsc#1244700] - CVE-2025-7425: Heap Use…

    first Aug 27, 2025
  • Critical max 9.3

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) -…

    first Jul 30, 2025
  • Critical max 9.3

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow (bsc#1234854) - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885) - CVE-2024-53173: NFSv4.0:…

    first Aug 1, 2025
  • Critical max 9.3

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

    This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2024-53146: NFSD: prevent a potential integer overflow (bsc#1234854) - CVE-2024-53166: block, bfq: fix bfqq uaf in bfq_limit_depth() (bsc#1234885) - CVE-2024-53173: NFSv4…

    first Jul 30, 2025
  • Critical max 9.3

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2024-50208: RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (bsc#1233118) - CVE-2024-50250: fsdax: dax_unshare_iter needs to copy entire blocks (bsc#1233227) -…

    first Jul 30, 2025
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557). - CVE-2024-46713: kabi …

    first Jun 15, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900) - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE-20…

    first Jun 10, 2025
  • Critical max 9.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-49855: nbd: fix race between timeout and normal completion (bsc#1232900) - CVE-2025-21680: pktgen: avoid out-of-bounds access in get_imix_entries (bsc#1236701) - CVE…

    first Jun 10, 2025
  • Critical max 9.1

    Security update for helm

    This update for helm fixes the following issues: - Update to version 3.17.2 (bsc#1238688, CVE-2025-22870): * Updating to 0.37.0 for x/net * build(deps): bump the k8s-io group with 7 updates - Update to version 3.17.1: * merge null child chart objects * build(…

    first Apr 22, 2025
  • Critical max 9.8
    SUSE-SU-2025:20247-1 507 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register spill…

    first Mar 27, 2025
  • Critical max 9.2

    Security update for pam_pkcs11

    This update for pam_pkcs11 fixes the following issues: - CVE-2025-24031: Fixed segmentation fault on ctrl-c/ctrl-d when asked for PIN (bsc#1237058). - CVE-2025-24032: Fixed authentication bypass with default value for `cert_policy` (`none`) (bsc#1237062).

    first Apr 22, 2025
  • Critical max 9.8
    SUSE-SU-2025:20189-1 6 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0_Update_3

    This update for kernel-livepatch-MICRO-6-0_Update_3 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-56648: Fixed net: hsr: avoid potential out-of-bound access in fill_frame_info() (bsc#1235452) - C…

    first Apr 17, 2025
  • Critical max 9.1

    Security update for tpm2.0-tools, tpm2-0-tss

    This update for tpm2.0-tools, tpm2-0-tss fixes the following issues: tpm2-0-tss: Update to version 4.1: + Security - CVE-2024-29040: arbitrary quote data may go undetected by Fapi_VerifyQuote (bsc#1223690) + Fixed - fapi: Fix length check on FAPI auth callbac…

    first Mar 18, 2025
  • Critical max 9.3

    Security update for containerd

    This update for containerd fixes the following issues: - Update to containerd v1.7.21. Upstream release notes: https://github.com/containerd/containerd/releases/tag/v1.7.21 Fixes CVE-2023-47108. bsc#1217070 Fixes CVE-2023-45142. bsc#1228553 - Update to contai…

    first Feb 3, 2025
  • Critical max 10.0

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52752: smb: client: fix …

    first Feb 3, 2025
  • Critical max 10.0
    SUSE-SU-2025:20028-1 826 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41013: xfs: do not walk o…

    first Feb 3, 2025
  • Critical max 10.0

    Security update for docker

    This update for docker fixes the following issues: Security fixes: - CVE-2024-23651: Fixed arbitrary files write due to race condition on mounts (bsc#1219267) - CVE-2024-23652: Fixed insufficient validation of parent directory on mount (bsc#1219268) - CVE-202…

    first Feb 3, 2025