Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • High max 7.7

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended…

    first Oct 23, 2026
  • Critical max 9.4

    Security update for containerd

    This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). - CVE-2026-47262: Denial of Service (DoS) condit…

    first Oct 23, 2026
  • High max 7.5

    Security update for cyrus-sasl

    This update for cyrus-sasl fixes the following issues: Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: -…

    first Oct 22, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2026-43091: x…

    first Oct 21, 2026
  • Critical max 9.1

    Security update for podman

    This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#…

    first Oct 20, 2026
  • Critical max 9.1

    Security update for python-PyJWT

    This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTT…

    first Oct 20, 2026
  • High max 8.7

    traefik-3.7.16-1.1 on GA media

    These are all security issues fixed in the traefik-3.7.16-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • High max 7.0

    python313-nltk-3.10.4-1.1 on GA media

    These are all security issues fixed in the python313-nltk-3.10.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • High max 7.6

    python313-langgraph-sdk-0.4.9-1.1 on GA media

    These are all security issues fixed in the python313-langgraph-sdk-0.4.9-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • Medium max 5.8

    python313-fpdf2-2.8.9-2.1 on GA media

    These are all security issues fixed in the python313-fpdf2-2.8.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • High max 7.5

    python313-djangorestframework-3.18.2-1.1 on GA media

    These are all security issues fixed in the python313-djangorestframework-3.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • High max 7.5

    perl-Plack-1.0057-1.1 on GA media

    These are all security issues fixed in the perl-Plack-1.0057-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • High max 8.2

    libonnxruntime1-1.31.0-1.1 on GA media

    These are all security issues fixed in the libonnxruntime1-1.31.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • Medium max 6.7

    benchdnn-3.14-1.1 on GA media

    These are all security issues fixed in the benchdnn-3.14-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2026-43091: x…

    first Oct 21, 2026
  • High max 8.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an int…

    first Oct 21, 2026
  • High max 7.5

    Security update for libXi

    This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2…

    first Oct 20, 2026
  • Critical max 9.1

    perl-Starman-0.4019-1.1 on GA media

    These are all security issues fixed in the perl-Starman-0.4019-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • Medium max 5.2

    dlib-devel-20.0.1-1.1 on GA media

    These are all security issues fixed in the dlib-devel-20.0.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 26, 2026
  • Critical max 9.1

    Security update for unbound

    This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). - CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). - CVE-2026-78227: Use-after-free in DoQ stream out…

    first Oct 20, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). - CVE-2026-78669: golang.org/x/net/http2: excessive C…

    first Oct 26, 2026
  • Medium max 6.8

    Security update for ca-certificates-mozilla

    This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1

    first Oct 23, 2026
  • High max 7.8

    Security update for cifs-utils

    This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932).

    first Oct 23, 2026
  • High max 7.0

    Security update for gcc13

    This update for gcc13 fixes the following issues: Security issue fixed: - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fi…

    first Oct 20, 2026
  • High max 7.5

    Security update for libX11

    This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). - CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). - CVE-2026-94284…

    first Oct 20, 2026
  • High max 7.1

    Security update for cpupower

    This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: - intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663)…

    first Oct 22, 2026
  • Medium max 6.8

    Security update for go1.27

    This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): - CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261).

    first Oct 21, 2026
  • Critical max 9.1

    Security update for go1.26

    This update for go1.26 fixes the following issues: Update to go 1.26.10 (bsc#1255111): - CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). - CVE-2026-78669: net/http: excessive CPU consumption from repeated initial w…

    first Oct 21, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63795: 9p: avoid put…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63795: 9p: avoid put…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026