Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63795: 9p: avoid put…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63795: 9p: avoid put…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68158: li…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). - CVE-2026-63794: KVM: SVM: Fix…

    first Oct 19, 2026
  • High max 8.4

    Security update for helm

    This update for helm fixes the following issues: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). - CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file wr…

    first Oct 19, 2026
  • Medium max 6.3

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynam…

    first Oct 19, 2026
  • Critical max 9.2

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme …

    first Oct 19, 2026
  • Critical max 9.6
    SUSE-SU-2026:24279-1 5 CVEs 1 exploited

    Security update for docker

    This update for docker fixes the following issues: Security issues fixed: - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). - CVE-2026-39821: golang.org/x/net/idna: failure to rej…

    first Oct 19, 2026
  • High max 7.1

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).

    first Oct 19, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…

    first Oct 19, 2026
  • High max 7.5

    Security update for rpcbind

    This update for rpcbind fixes the following issue: - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326).

    first Oct 19, 2026
  • High max 8.2

    Security update for openssl-3

    This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-758…

    first Oct 19, 2026
  • Unscored

    Security update for rekor

    This update for rekor rebuilds it against the current go security release.

    first Oct 26, 2026
  • High max 7.7

    Security update for gcc7

    This update for gcc7 fixes the following issues: - CVE-2026-95619: libstdc++ integer overflow in `new` operator (bsc#1282500). - CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority qu…

  • Unscored

    Security update for kubernetes-old

    This update for kubernetes-old rebuilds it against the current go security release.

  • Unscored

    Security update for runc

    This update for runc rebuilds it against the current go security release.

  • Critical max 10.0

    Security update for squid

    This update for squid fixes the following issues: - CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). - CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). - CVE-2025-62168: failure to redact HTTP authen…

  • High max 7.7

    Security update for openssh8.4

    This update for openssh8.4 fixes the following issues: - CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). - CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argumen…

  • Medium max 6.5

    Security update for krb5

    This update for krb5 fixes the following issues: - CVE-2026-107708: Denial of Service via malformed PAC in S4U2Proxy requests (bsc#1284816). - CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817).

  • High max 8.4

    Security update for python, python-base, python-doc

    This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459).

  • Unscored

    Security update for cosign

    This update for cosign rebuilds it against the current go security release.

    first Oct 25, 2026
  • Unscored

    Security update for container-suseconnect

    This update for container-suseconnect rebuilds it against the current go security release.

    first Oct 24, 2026
  • Unscored

    Security update for kubernetes

    This update for kubernetes rebuilds it against the current go security release.

    first Oct 24, 2026
  • Critical max 9.9

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-46028: crypto: algif_aead - s…

    first Oct 24, 2026
  • High max 8.4

    libvips-devel-8.18.7-1.1 on GA media

    These are all security issues fixed in the libvips-devel-8.18.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 24, 2026
  • High max 8.3

    python313-wyoming-1.10.2-1.1 on GA media

    These are all security issues fixed in the python313-wyoming-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 24, 2026
  • Medium max 6.8

    okteto-3.24.1-1.1 on GA media

    These are all security issues fixed in the okteto-3.24.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 24, 2026