Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,559 results · Feed

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 24, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-46028: crypto: algif_aead - s…

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…

    first Oct 24, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: S…

    first Oct 24, 2026
  • High max 7.0

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issue: - CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338).

    first Oct 23, 2026
  • Unscored

    Security update for haproxy

    This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: - Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: t…

    first Oct 23, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 23, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: …

    first Oct 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-6…

    first Oct 23, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-46028: crypto: algif_aead - s…

    first Oct 24, 2026
  • Unscored

    Security update for haproxy

    This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: - Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: t…

    first Oct 23, 2026
  • High max 8.7

    warewulf4-4.7.1-2.1 on GA media

    These are all security issues fixed in the warewulf4-4.7.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 31, 2026
  • Medium max 6.9

    hugo-0.169.0-1.1 on GA media

    These are all security issues fixed in the hugo-0.169.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 31, 2026
  • Medium max 6.5

    Security update for stgit

    This update for stgit fixes the following issues: Changes in stgit: - Update to version 2.7.0: * Allow unambiguous command shorthands, opt-in with `stgit.infer-commands`. * Accept git approxidate spellings for dates, e.g. "2 days ago" and "@<epoch>"; relative…

    first Oct 29, 2026
  • High max 8.4

    Security update for tailscale

    This update for tailscale fixes the following issues: Changes in tailscale: Update to version 1.104.1: + Go is updated to version 1.27 + WireGuard packet buffering uses less memory while waiting for peer handshakes + WireGuard packet queue depth scales with C…

    first Oct 29, 2026
  • High max 7.0

    Security update for vlc

    This update for vlc fixes the following issues: Changes in vlc: - Add conditional for pkgconfig(vpl) BuildRequires and plugin, exclude %{arm} ppc64le %{ppc} s390x. - Add conditional for pkgconfig(libnfs) BuildRequires and plugin, exclude %{arm} - Switch to qt…

    first Oct 28, 2026
  • High max 7.5

    Security update for gosec

    This update for gosec fixes the following issues: Changes in gosec: - Update to version 2.30.0 (bsc#1287590, CVE-2026-97032): * fix(g602): recognize equality comparison in minimumLenForBranch (#1796) * fix(G112): honor read timeouts assigned through a struct …

    first Oct 28, 2026
  • High max 8.1

    Security update for rsyslog

    This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910). - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - CVE-2026-78002: Raine…

    first Oct 29, 2026
  • Critical max 9.2
    openSUSE-SU-2026:22183-1 2 CVEs 1 exploited

    Security update for python-Brotli

    This update for python-Brotli fixes the following issues: - CVE-2025-6176: denial of service (DoS) due to a flaw in its brotli decompression (bsc#1252945). - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287779). Upda…

    first Oct 29, 2026
  • High max 8.7

    Security update for python-CairoSVG

    This update for python-CairoSVG fixes the following issue: - CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832).

    first Oct 29, 2026
  • High max 8.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an int…

    first Oct 29, 2026
  • Critical max 9.1

    Security update for kubevirt1.9

    This update for kubevirt1.9 fixes the following issues: - CVE-2026-13622: virt-handler migration proxy follows symlinks allowing container escape to host (bsc#1272840). - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer h…

    first Oct 28, 2026
  • Critical max 10.0

    podman-6.1.4-1.1 on GA media

    These are all security issues fixed in the podman-6.1.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2026
  • Critical max 9.1

    Security update for perl-Mozilla-CA

    This update for perl-Mozilla-CA fixes the following issues: Changes in perl-Mozilla-CA: - updated to 20261020.0.0 (20261020) * 20261020 - Update from Mozilla repository to 2026-10-20 - Denylisted certificates: CVE-2026-113812 bsc#1287179 - emSign ECC Root CA …

    first Oct 29, 2026
  • Critical max 9.6

    Security update for chromium

    This update for chromium fixes the following issues: Changes in chromium: - Chromium 156.0.8078.73 (boo#1288218): * CVE-2026-118306: Memory corruption in FileSystem * CVE-2026-118331: Improper input validation in FileAPI * CVE-2026-118348: Improper input vali…

    first Oct 29, 2026
  • Medium max 5.3

    Security update for mapserver

    This update for mapserver fixes the following issues: Changes in mapserver: - Update to release 8.6.1 * msSLDParseRasterSymbolizer: fix potential heap buffer overflow [boo#1260869] [CVE-2026-33721] * GetFeatureInfo with IDENTIFY CLASSAUTO: take into account S…

    first Oct 30, 2026
  • Medium max 6.8

    diun-4.33.1-1.1 on GA media

    These are all security issues fixed in the diun-4.33.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2026
  • Critical max 9.4

    python315-3.15.2-1.1 on GA media

    These are all security issues fixed in the python315-3.15.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • High max 7.5

    perl-MIME-tools-5.522.0-1.1 on GA media

    These are all security issues fixed in the perl-MIME-tools-5.522.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • Critical max 9.1

    java-21-openjdk-21.0.13.0-2.1 on GA media

    These are all security issues fixed in the java-21-openjdk-21.0.13.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • Critical max 9.1

    java-17-openjdk-17.0.21.0-2.1 on GA media

    These are all security issues fixed in the java-17-openjdk-17.0.21.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • High max 7.1

    buildah-1.46.0-1.1 on GA media

    These are all security issues fixed in the buildah-1.46.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • High max 8.7

    amazon-cloudwatch-agent-1.300073.2-3.1 on GA media

    These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.2-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 29, 2026
  • High max 7.8

    screen-5.0.2-1.1 on GA media

    These are all security issues fixed in the screen-5.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2026
  • High max 7.8

    python313-virtualenv-21.15.1-1.1 on GA media

    These are all security issues fixed in the python313-virtualenv-21.15.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2026
  • Medium max 6.1

    python313-filelock-4.2.4-1.1 on GA media

    These are all security issues fixed in the python313-filelock-4.2.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 30, 2026