Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_9

    This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS …

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

    This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - …

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_12

    This update for kernel-livepatch-MICRO-6-0_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_8

    This update for kernel-livepatch-MICRO-6-0_Update_8 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_6

    This update for kernel-livepatch-MICRO-6-0_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_11

    This update for kernel-livepatch-MICRO-6-0_Update_11 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_12

    This update for kernel-livepatch-MICRO-6-0-RT_Update_12 fixes the following issues: - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_11

    This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_10

    This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672) - CVE-2025-38616: tls: handle data disappearing from under the TLS UL…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_5

    This update for kernel-livepatch-MICRO-6-0_Update_5 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (b…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_4

    This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - CVE…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface…

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_4

    This update for kernel-livepatch-MICRO-6-0-RT_Update_4 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - …

    first Nov 28, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_3

    This update for kernel-livepatch-MICRO-6-0-RT_Update_3 fixes the following issues: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882) - CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1245778) - …

    first Nov 28, 2025
  • High max 7.8

    Security update for grub2

    This update for grub2 fixes the following issues: - CVE-2025-54770: Missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930) - CVE-2025-54771: grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-20…

    first Nov 21, 2025
  • High max 7.3

    Security update for containerd

    This update for containerd fixes the following issues: Update to containerd v1.7.29: - CVE-2024-25621: Fixed overly broad default permission vulnerability (bsc#1253126). - CVE-2025-64329: Fixed goroutine leaks that could have led to memory exhaustion on the h…

    first Nov 14, 2025
  • High max 8.4

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-31133,CVE-2025-52565,CVE-2025-52881: Fixed various container breakouts (bsc#1252376): - Fixed podman & buildah with runc 1.3.2 fail with lots of warnings as rootless (bsc#1252543)

    first Nov 10, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

    This update for kernel-livepatch-MICRO-6-0-RT_Update_2 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE…

    first Nov 6, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) -…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_8

    This update for kernel-livepatch-MICRO-6-0-RT_Update_8 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_11

    This update for kernel-livepatch-MICRO-6-0-RT_Update_11 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207)

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_11

    This update for kernel-livepatch-MICRO-6-0_Update_11 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38678: nf_tables: reject duplicate device on updates (bsc#1249534)

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_10

    This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207)

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_10

    This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) -…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_9

    This update for kernel-livepatch-MICRO-6-0-RT_Update_9 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019) - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-20…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_7

    This update for kernel-livepatch-MICRO-6-0_Update_7 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - CVE…

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_6

    This update for kernel-livepatch-MICRO-6-0-RT_Update_6 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_7

    This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_10

    This update for kernel-livepatch-MICRO-6-0_Update_10 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207)

    first Nov 5, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_5

    This update for kernel-livepatch-MICRO-6-0-RT_Update_5 fixes the following issues: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631) - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207) - …

    first Nov 5, 2025
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-11021: Ignore invalid date when processing cookies to prevent out-of-bounds read (bsc#1250562).

    first Nov 4, 2025
  • High max 9.8

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: Security issues: - CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap (bsc#1250232) - Disable LTO for userspace livepatching [jsc#PED-13245]

    first Oct 22, 2025
  • High max 8.3

    Security update for podman

    This update for podman fixes the following issues: - CVE-2025-9566: Fixed kube play command overwriting host files (bsc#1249154)

    first Oct 22, 2025
  • High max 8.6
    SUSE-SU-2025:20855-1 6 CVEs 1 exploited

    Security update for git

    This update for git fixes the following issues: Update to 2.51.0: - CVE-2025-27613: arbitrary writable file creation and truncation in Gitk (bsc#1245938) - CVE-2025-27614: arbitrary script execution via repo clonation in gitk (bsc#1245939) - CVE-2025-46835: u…

    first Oct 9, 2025
  • High max 7.8

    Security update for kernel-livepatch-MICRO-6-0_Update_9

    This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: - CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315)

    first Oct 7, 2025