Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).

    first Nov 26, 2025
  • High max 8.8

    Security update for sssd

    This update for sssd fixes the following issues: - CVE-2025-11561: Fixed privilege escalation on AD-joined Linux systems due to default Kerberos configuration disabling localauth an2ln plugin (bsc#1251827) Other fixes: - Install file in krb5.conf.d to include…

    first Nov 25, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.153 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…

    first Nov 25, 2025
  • High max 7.5

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)

    first Nov 25, 2025
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Cache-poisoning due to weak pseudo-random number generator (bsc#1252380).

    first Nov 25, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.141 fixes various security issues The following security issues were fixed: - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251983). - CVE-2024-5314…

    first Nov 24, 2025
  • High max 8.5

    Security update for helm

    This update for helm fixes the following issues: - Update to version 3.19.1 - CVE-2025-53547: Fixed local code execution in Helm Chart. (bsc#1246152) - CVE-2025-58190: Fixed excessive memory consumption by `html.ParseFragment` when processing specially crafte…

    first Nov 24, 2025
  • High max 7.8

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - CVE-2025-61662: F…

    first Nov 24, 2025
  • High max 8.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: - Update Mozilla Thunderbird to version 140.5 (bsc#1253188) - CVE-2025-13012: Race condition in the Graphics component. - CVE-2025-13016: Incorrect boundary conditions in the JavaScript: WebAssemb…

    first Nov 24, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 62 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.234 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).

    first Nov 24, 2025
  • High max 7.5

    Security update for amazon-ssm-agent

    This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. (bsc#1253598)

    first Nov 24, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP3)

    This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.185 fixes various security issues The following security issues were fixed: - CVE-2022-50388: nvme: fix multipath crash caused by flush request when blktrace is enabled (bsc#1250295). - CVE-202…

    first Nov 23, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: fix u…

    first Nov 22, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.17 fixes various security issues The following security issues were fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778). - CVE-2025-23145: mptcp: f…

    first Nov 22, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes one security issue The following security issue was fixed: - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778).

    first Nov 23, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes one security issue The following security issue was fixed: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).

    first Nov 22, 2025
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.29 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: f…

    first Nov 22, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.91 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched:…

    first Nov 12, 2025
  • High max 8.4

    Security update for runc

    This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Up…

    first Nov 12, 2025
  • High max 8.4

    Security update for runc

    This update for runc fixes the following issues: Update to runc v1.3.3. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.3.3>. bsc#1252232 * CVE-2025-31133 * CVE-2025-52565 * CVE-2025-52881 Update to runc v1.3.2. Up…

    first Nov 12, 2025
  • High max 7.3

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096)

    first Nov 12, 2025
  • High max 7.3

    Security update for buildah

    This update for buildah fixes the following issues: - CVE-2025-52881: Fixed container breakouts by bypassing runc's restrictions for writing to arbitrary /proc files (bsc#1253096) Other fixes: - podman and buildah with runc 1.3.2 fail with lots of warnings as…

    first Nov 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 60 for SUSE Linux Enterprise 15 SP3)

    This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.215 fixes various security issues The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2022-50252: igb: Do not free q_…

    first Nov 12, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.136 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched…

    first Nov 10, 2025
  • High max 7.1

    Security update for erlang26

    This update for erlang26 fixes the following issues: - CVE-2025-48041: Fixed exhaustion of file handles in ssh (bsc#1249473)

    first Nov 10, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2025-38617: net/packet: fix …

    first Nov 10, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3)

    This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.179 fixes various security issues The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2022-50252: igb: Do not free q_…

    first Nov 10, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 61 for SLE 15 SP3)

    This update for the Linux Kernel 5.3.18-150300_59_218 fixes several issues. The following security issues were fixed: - CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249841). - CVE-2025-38664: ice: Fix a null pointer dereference in ice_…

    first Nov 9, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 30 for SLE 15 SP5)

    This update for the Linux Kernel 5.14.21-150500_55_121 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2022-50252: igb: Do not free q_vector …

    first Nov 9, 2025
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP7)

    This update for the Linux Kernel 6.4.0-150700_53_3 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38511: drm/xe/pf: Clear all LMTT page…

    first Nov 9, 2025
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: - CVE-2025-40778: Address various spoofing attacks (bsc#1252379).

    first Nov 6, 2025
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - CVE-2025-53057: Fixed an issue where an unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-2025-53066: Fixed an issue wh…

    first Nov 6, 2025
  • High max 7.5

    Security update for java-1_8_0-ibm

    This update for java-1_8_0-ibm fixes the following issues: - CVE-2025-53057: Fixed an issue where an unauthenticated attacker can achieve unauthorized creation, deletion or modification access to critical data (bsc#1252414) - CVE-2025-53066: Fixed an issue wh…

    first Nov 6, 2025
  • High max 8.8

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2025-9900: Fixed Write-What-Where in libtiff via TIFFReadRGBAImageOriented (bsc#1250413).

    first Nov 6, 2025
  • High max 8.4

    Security update for runc

    This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related …

    first Nov 5, 2025
  • High max 8.4

    Security update for runc

    This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions (bsc#1252232). - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related …

    first Nov 5, 2025
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP6)

    This update for the Linux Kernel 6.4.0-150600_23_42 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38617: net/packet: fix a race in pac…

    first Nov 4, 2025
  • High max 8.1

    Security update for strongswan

    This update for strongswan fixes the following issues: - CVE-2025-62291: fixed buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)

    first Nov 1, 2025
  • High max 8.6

    Security update for bind

    This update for bind fixes the following issues: Upgrade to release 9.20.15: - CVE-2025-8677: DNSSEC validation fails if matching but invalid DNSKEY is found (bsc#1252378). - CVE-2025-40778: Address various spoofing attacks (bsc#1252379). - CVE-2025-40780: Ca…

    first Oct 31, 2025
  • High max 8.1

    Security update for strongswan

    This update for strongswan fixes the following issues: - CVE-2025-62291: fixed a buffer overflow when handling EAP-MSCHAPv2 failure requests (bsc#1251941)

    first Oct 30, 2025