Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

806 results · Clear filters · Feed

  • High max 7.7
    openSUSE-SU-2026:12316-1 4 CVEs 1 exploited

    bun-1.4.4-1.1 on GA media

    These are all security issues fixed in the bun-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 28, 2026
  • High max 8.8
    openSUSE-SU-2026:12177-1 1 CVE 1 exploited

    dssim-3.5.1-1.1 on GA media

    These are all security issues fixed in the dssim-3.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 18, 2026
  • High max 8.8
    openSUSE-SU-2026:12010-1 1 CVE 1 exploited

    python313-imagecodecs-2026.3.6-2.10 on GA media

    These are all security issues fixed in the python313-imagecodecs-2026.3.6-2.10 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.8
    openSUSE-SU-2026:12022-1 2 CVEs 1 exploited

    python313-oletools-0.60.2-2.4 on GA media

    These are all security issues fixed in the python313-oletools-0.60.2-2.4 package on the GA media of openSUSE Tumbleweed.

    first Oct 4, 2026
  • High max 8.4
    SUSE-SU-2026:23706-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • High max 8.4
    SUSE-SU-2026:23727-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • High max 8.4
    SUSE-SU-2026:4208-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

  • High max 8.4
    SUSE-SU-2026:4180-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 14, 2026
  • High max 8.4
    SUSE-SU-2026:4179-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 14, 2026
  • High max 8.4
    openSUSE-SU-2026:21831-1 9 CVEs 1 exploited

    Security update for clamav

    This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser (bsc#1274597). - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records (bsc#1274598). - CVE…

    first Sep 11, 2026
  • High max 7.8
    openSUSE-SU-2026:11765-1 1 CVE 1 exploited

    docker-29.7.2_ce-41.1 on GA media

    These are all security issues fixed in the docker-29.7.2_ce-41.1 package on the GA media of openSUSE Tumbleweed.

    first Sep 12, 2026
  • High max 8.8
    openSUSE-SU-2025:20076-1 28 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: Chromium 142.0.7444.175 (boo#1253698): * CVE-2025-13223: Type Confusion in V8 * CVE-2025-13224: Type Confusion in V8 Chromium 142.0.7444.162 (boo#1253267): * CVE-2025-13042: Inappropria…

    first Aug 31, 2026
  • High max 8.8
    openSUSE-SU-2026:20020-1 19 CVEs 1 exploited

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 143.0.7499.192 (boo#1256067): * CVE-2026-0628: Insufficient policy enforcement in WebView tag - Chromium 143.0.7499.169 (stable released 2025-12-18) * no cve listed yet Chrom…

    first Aug 31, 2026
  • High max 8.4
    openSUSE-SU-2026:11583-1 9 CVEs 1 exploited

    clamav-1.5.4-1.1 on GA media

    These are all security issues fixed in the clamav-1.5.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Aug 24, 2026
  • High max 8.8
    SUSE-SU-2026:23100-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…

    first Jul 28, 2026
  • High max 8.8
    SUSE-SU-2026:23079-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…

    first Jul 28, 2026
  • High max 8.8
    SUSE-SU-2026:23031-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…

    first Jul 28, 2026
  • High max 8.8
    SUSE-SU-2026:23010-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set netns_immut…

    first Jul 28, 2026
  • High max 8.8
    SUSE-SU-2026:3369-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …

    first Jul 28, 2026
  • High max 7.8
    SUSE-SU-2026:22879-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 20, 2026
  • High max 7.8
    SUSE-SU-2026:22871-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 16, 2026
  • High max 7.8
    SUSE-SU-2026:22866-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…

    first Jul 15, 2026
  • High max 7.8
    SUSE-SU-2026:22779-1 8 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 14, 2026
  • High max 7.8
    SUSE-SU-2026:22774-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 14, 2026
  • High max 7.8
    SUSE-SU-2026:22773-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…

    first Jul 14, 2026
  • High max 7.8
    SUSE-SU-2026:22766-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 20, 2026
  • High max 7.8
    SUSE-SU-2026:22751-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues The following security issues were fixed: - CVE-2026-45970: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). - CVE-2026-46120: ip6_gre: U…

    first Jul 16, 2026
  • High max 7.8
    SUSE-SU-2026:22745-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…

    first Jul 15, 2026
  • High max 7.8
    SUSE-SU-2026:3083-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent p…

    first Jul 16, 2026
  • High max 7.8
    SUSE-SU-2026:3008-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.118 fixes various security issues The following security issues were fixed: - CVE-2026-46173: exit: prevent preemption of oopsing TASK_DEAD task (bsc#1267723). - CVE-2026-52909: ip6_vti: set net…

    first Jul 15, 2026
  • High max 7.8
    SUSE-SU-2026:3002-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent …

    first Jul 15, 2026
  • High max 7.8
    SUSE-SU-2026:2863-1 6 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267893). - CVE-2026-46173: exit: prevent pr…

    first Jul 11, 2026
  • High max 7.8
    SUSE-SU-2026:21779-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013). - CVE-2026-46300: net: s…

    first May 15, 2026
  • High max 7.8
    SUSE-SU-2026:21460-1 1 CVE 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algif_aead (bsc#1262573).

    first May 2, 2026
  • High max 8.8
    openSUSE-SU-2026:11214-1 2 CVEs 1 exploited

    kernel-devel-7.1.3-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 8, 2026
  • High max 7.5
    openSUSE-SU-2026:20975-1 3 CVEs 1 exploited

    Security update for python-starlette

    This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …

    first Jun 17, 2026
  • High max 7.5
    SUSE-SU-2026:22151-1 3 CVEs 1 exploited

    Security update for python-starlette

    This update for python-starlette fixes the following issues - CVE-2025-54121: denial-of-service when parsing a multi-part form with large files (bsc#1246855). - CVE-2025-62727: DoS via Range header merging (bsc#1252805). - CVE-2026-48710: Missing Host header …

    first Jun 17, 2026
  • High max 8.8
    openSUSE-SU-2026:10991-1 1 CVE 1 exploited

    afl-5.00c-1.1 on GA media

    These are all security issues fixed in the afl-5.00c-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jun 11, 2026
  • High max 7.8
    SUSE-SU-2026:22042-1 6 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…

    first Jun 2, 2026
  • High max 7.8
    SUSE-SU-2026:22035-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues The following security issues were fixed: - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264096). - CVE-2026-23243: RDMA/umad: Reject negative data…

    first Jun 2, 2026