Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,648 results · Feed

  • Medium max 5.4

    Security update for nghttp2

    This update for nghttp2 fixes the following issue - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning (bsc#1269489).

    first Jul 21, 2026
  • High max 8.7

    Security update for aws-nitro-enclaves-cli

    This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length (bsc#1270542). - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion i…

    first Jul 21, 2026
  • High max 7.8

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 (bsc#1244485). - CVE-2026-25679: net/url: reject IPv6 literal not at start of host (bsc#1259264). - CVE-2026-27139: os: FileInfo can escape from a Root (bsc#1259268). - CV…

    first Jul 21, 2026
  • Low max 2.5

    Security update for iproute2

    This update for iproute2 fixes the following issue - CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).

    first Jul 21, 2026
  • Medium max 5.3

    Security update for ffmpeg

    This update for ffmpeg fixes the following issue - CVE-2025-10256: NULL pointer dereference in Firequalizer filter (bsc#1249431).

    first Jul 21, 2026
  • High max 7.5

    Security update for wget

    This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buff…

    first Jul 21, 2026
  • Critical max 9.8

    python313-bleach-6.4.0-1.1 on GA media

    These are all security issues fixed in the python313-bleach-6.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 21, 2026
  • High max 7.0

    7zip-26.02-1.1 on GA media

    These are all security issues fixed in the 7zip-26.02-1.1 package on the GA media of openSUSE Tumbleweed.

    first Jul 21, 2026
  • Medium max 5.6

    Security update for php8

    This update for php8 fixes the following issues - Update to version 8.3.32 - CVE-2026-12184: Failure to setup TLS with a remote server can result in a remote DoS (bsc#1270712). - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension c…

    first Jul 21, 2026
  • Medium max 5.9

    Security update for pam

    This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).

    first Jul 21, 2026
  • Medium max 5.9

    Security update for pam

    This update for pam fixes the following issue - CVE-2026-54411: timing discrepancy in the pam_userdb module's plaintext-password comparison (bsc#1268290).

    first Jul 21, 2026
  • Medium max 4.6

    Security update for patch

    This update for patch fixes the following issues - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).

    first Jul 21, 2026
  • Unscored

    Security update for python-tornado

    This update for python-tornado fixes the following issues: - GHSA-pw6j-qg29-8w7f: `CurlAsyncHTTPClient` leaks per-request credentials on handle reuse (bsc#1269012).

    first Jul 21, 2026
  • Low max 3.7

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issue: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bs…

    first Jul 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:3156-1 44 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1264484). - CVE-2026-46052: ceph: only d_add() negative…

    first Jul 21, 2026
  • Unscored

    Security update for python-tornado6

    This update for python-tornado6 fixes the following issue - GHSA-pw6j-qg29-8w7f: `CurlAsyncHTTPClient` leaks per-request credentials on handle reuse (bsc#1269012).

    first Jul 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:22698-1 9 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22697-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22696-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22695-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22694-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22693-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22692-1 21 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22691-1 24 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22690-1 25 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Unscored

    Security update for kernel-livepatch-MICRO-6-0-RT_Update_26

    This update for kernel-livepatch-MICRO-6-0-RT_Update_26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26

    first Jul 6, 2026
  • Critical max 9.8
    SUSE-SU-2026:22687-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22686-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22685-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22684-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22683-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22682-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22681-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22680-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22679-1 9 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (bsc#1266015). - CVE-2026-45970: bonding: alb…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22678-1 21 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22677-1 24 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peer_mep deletion (bsc#1260524). - CVE-2026-31505: iavf: fix out-of-bounds…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22676-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22675-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:22674-1 25 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256615). - CVE-2026-23393: bridge: cfm: Fix race condition in…

    first Jul 16, 2026