Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,581 results · Feed

  • Critical max 9.8
    SUSE-SU-2026:22744-1 20 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() (bsc#1263094). - CVE-2026-31533: net/tls: …

    first Jul 15, 2026
  • Critical max 9.8
    SUSE-SU-2026:22742-1 255 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290). - CVE-2025-39894: netfilter: br_netfilter: do not check conf…

    first Jul 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:22743-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condi…

    first Jul 15, 2026
  • High max 8.4

    Security update for vim

    This update for vim fixes the following issues: Update to version 9.2.0780. Security issues fixed: - CVE-2026-59856: arbitrary code execution via PHP omni-completion due to improper escaping (bsc#1271194). - CVE-2026-59857: out-of-bounds write in SAL soundfol…

    first Jul 18, 2026
  • Medium max 6.5

    Security update for nmap

    This update for nmap fixes the following issue - CVE-2026-58058: crafted IPv6 response with a truncated extension header can trigger out-of-bounds reads and a crash (bsc#1269570).

    first Jul 15, 2026
  • Critical max 9.8
    SUSE-SU-2026:22719-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22717-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22718-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22716-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22715-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22714-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22713-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22712-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22710-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8

    Security update for curl

    This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8924: traling dot domain super cookie (bsc#1268409). - CVE-2026-8927:…

    first Jul 14, 2026
  • Unscored

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issue - GHSA-pw6j-qg29-8w7f: `CurlAsyncHTTPClient` leaks per-request credentials on handle reuse (bsc#1269012).

    first Jul 14, 2026
  • Medium max 5.4

    Security update for nghttp2

    This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP request/response smuggling via upgrade request with `Content-Length` (bsc#1269489).

    first Jul 10, 2026
  • Medium max 5.9

    Security update for dnsmasq

    This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in `log_query()` when logging unsupported DS/DNSKEY replies (bsc#1268764). - CVE-2026-12969: out-of-bounds read in `find_soa()` due to missing extrabytes validation (bsc…

    first Jul 10, 2026
  • High max 8.2

    Security update for jq

    This update for jq fixes the following issues Security issues fixed: - CVE-2025-9403: reacheable assertion in `run_jq_tests` can lead to program termination when processing malformed JSON input containing invalid Unicode escape sequences (bsc#1248600). - CVE-…

    first Jul 8, 2026
  • High max 7.5

    Security update for python-msgpack

    This update for python-msgpack fixes the following issue - CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read (bsc#1269947).

    first Jul 8, 2026
  • Critical max 9.6

    Security update for docker-compose

    This update for docker-compose fixes the following issues - CVE-2025-0495: buildx: credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration (bsc#1239766). - CVE-2025-22869: golang.or…

    first Jul 7, 2026
  • Medium max 5.0

    Security update for krb5

    This update for krb5 fixes the following issue - CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).

    first Jul 7, 2026
  • High max 7.8

    python313-3.13.14-1.1 on GA media

    These are all security issues fixed in the python313-3.13.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8

    python313-pandas-3.0.3-1.2 on GA media

    These are all security issues fixed in the python313-pandas-3.0.3-1.2 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    jline3-3.30.15-3.1 on GA media

    These are all security issues fixed in the jline3-3.30.15-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    helm-4.2.3-3.1 on GA media

    These are all security issues fixed in the helm-4.2.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6

    gh-2.96.0-2.1 on GA media

    These are all security issues fixed in the gh-2.96.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.6

    prometheus-ha_cluster_exporter-1.4.2-1.1 on GA media

    These are all security issues fixed in the prometheus-ha_cluster_exporter-1.4.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 10.0

    kernel-devel-7.1.4-1.1 on GA media

    These are all security issues fixed in the kernel-devel-7.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    java-26-openjdk-26.0.2.0-1.1 on GA media

    These are all security issues fixed in the java-26-openjdk-26.0.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    java-17-openjdk-17.0.20.0-1.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.20.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    java-11-openjdk-11.0.32.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.32.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Critical max 9.8

    firefox-esr-140.13.0-1.1 on GA media

    These are all security issues fixed in the firefox-esr-140.13.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    helm3-3.21.3-3.1 on GA media

    These are all security issues fixed in the helm3-3.21.3-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    grafana-12.4.5-3.1 on GA media

    These are all security issues fixed in the grafana-12.4.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Medium max 5.4

    apache-ivy-2.6.0-1.1 on GA media

    These are all security issues fixed in the apache-ivy-2.6.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • Unscored

    Security update for joe

    This update for joe fixes the following issue - CVE-2026-13412: arbitrary command execution via malicious tags file (bsc#1269379).

    first Jul 22, 2026
  • High max 8.8

    Security update for sssd

    This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation (bsc#1270709). - CVE-2026-14476: GPO cache path traversal via unsanitized gPCFil…

    first Jul 22, 2026
  • Critical max 9.6

    google-osconfig-agent-20260708.00-2.1 on GA media

    These are all security issues fixed in the google-osconfig-agent-20260708.00-2.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026
  • High max 7.5

    distribution-registry-3.1.1-4.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.1-4.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 22, 2026