Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

12,602 results · Clear filters · Feed

  • High max 8.1
    SUSE-SU-2026:20501-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20500-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20499-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 7.7

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2025-13601: Fixed integer overflow in in g_escape_uri_string() (bsc#1254297). - CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption (bsc#1254662). - CVE-2025-14512: Fixed i…

    first Feb 17, 2026
  • High max 8.2

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

    first Feb 17, 2026
  • High max 8.4

    Security update for gpg2

    This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" F…

    first Feb 17, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).

    first Feb 17, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …

    first Feb 17, 2026
  • High max 7.5

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).

    first Feb 17, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902).

    first Feb 17, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20470-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20465-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20464-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20463-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20462-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20461-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20459-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20460-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20458-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20457-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20456-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20455-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.5

    Security update for crun

    This update for crun fixes the following issues: - CVE-2025-24965: .krun_config.json symlink attack creates or overwrites file on the host (bsc#1237421).

    first Feb 17, 2026
  • High max 7.5

    Security update for docker-compose

    This update for docker-compose fixes the following issues: - CVE-2025-47914: non validated message size can cause a panic due to an out of bounds read (bsc#1254041). - CVE-2025-47913: client process termination when receiving an unexpected message type in res…

    first Feb 17, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902).

    first Feb 16, 2026
  • High max 8.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-1536: HTTP header injection or response splitting via CRLF injection in the Content-Disposition header (bsc#1257440). - CVE-2026-1761: incorrect length calculation when parsing of multipart HTTP r…

    first Feb 16, 2026
  • High max 8.4

    Security update for gpg2

    This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" F…

    first Feb 16, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …

    first Feb 16, 2026
  • High max 7.5

    Security update for nodejs22

    This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks (bsc#1256569). - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from …

    first Feb 15, 2026
  • High max 8.8

    Security update for fontforge

    This update for fontforge fixes the following issues: Update to version 20251009. Security issues fixed: - CVE-2025-15279: remote code execution via heap-based buffer overflow in BMP file parsing (bsc#1256013). - CVE-2025-15269: remote code execution via use-…

    first Feb 14, 2026
  • High max 7.5

    Security update for python-aiohttp, python-Brotli

    This update for python-aiohttp, python-Brotli fixes the following issues: Changes in python-aiohttp: - CVE-2025-69228: Fixed denial of service through large payloads (bsc#1256022). - CVE-2025-69226: Fixed brute-force leak of internal static file path componen…

    first Feb 12, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-40204: sctp…

    first Jan 19, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-40204: sctp…

    first Jan 19, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise kernel 6.12.0-160000.6.1 fixes one security issue The following security issue was fixed: - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439).

    first Mar 2, 2026