Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,660 results · Feed

  • Medium max 6.8

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…

    first Feb 26, 2026
  • Medium max 6.5

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049) - CVE-2026-0965: Possible Denial of Service when parsing unexpected configuration files (bsc#1258045) - CVE-2026-0966: Buff…

    first Feb 26, 2026
  • High max 8.4

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-0861: inadequate size check in the memalign suite may result in an integer overflow (bsc#1256766). - CVE-2026-0915: uninitialized stack buffer used as DNS query name when net==0 in _nss_dns_getnetby…

    first Feb 26, 2026
  • Medium max 6.5

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2024-52615: Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (bsc#1233421) - CVE-2025-68468: Fixed DoS bug by removing incorrect assertion. (bsc#1256499) - CVE-2025-6…

    first Feb 26, 2026
  • High max 8.3

    Security update for libpng16

    This update for libpng16 fixes the following issues: - CVE-2025-28162: memory leaks when running `pngimage` (bsc#1257364). - CVE-2025-28164: memory leaks when running `pngimage` (bsc#1257365). - CVE-2026-22695: heap buffer over-read in png_image_finish_read (…

    first Feb 26, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) …

    first Feb 26, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20516-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20515-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-33.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20514-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20513-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20512-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20511-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • Unscored

    Security update for kernel-livepatch-MICRO-6-0_Update_16

    This update for kernel-livepatch-MICRO-6-0_Update_16 fixes the following issues: Initial livepatch for Update 16 of kernel default.

    first Feb 24, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-34.1 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don't call…

    first Feb 19, 2026
  • High max 8.1

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-32.1 fixes various security issues The following security issues were fixed: - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249480). - CVE-2025-40129: sunrpc: fix…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20504-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-31.1 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20503-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-30.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20502-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-29.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20501-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20500-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • High max 8.1
    SUSE-SU-2026:20499-1 5 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise kernel 6.4.0-24.1 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-timers:…

    first Feb 19, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-38321: smb: Log an error w…

    first Feb 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50253: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). - CVE-2023-53676:…

    first Feb 19, 2026
  • Unscored

    Security update for kernel-firmware

    This update for kernel-firmware fixes the following issues: - Update AMD ucode to 20251203 (bsc#1256483)

    first Feb 17, 2026
  • Medium max 6.9

    Security update for cockpit-podman

    This update for cockpit-podman fixes the following issues: - CVE-2025-13465: prototype pollution in the _.unset and _.omit functions can lead to deletion of methods from global prototypes (bsc#1257324).

    first Feb 17, 2026
  • High max 7.7

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2025-13601: Fixed integer overflow in in g_escape_uri_string() (bsc#1254297). - CVE-2025-14087: Fixed buffer underflow in GVariant parser leads to heap corruption (bsc#1254662). - CVE-2025-14512: Fixed i…

    first Feb 17, 2026
  • Medium max 5.3

    Security update for avahi

    This update for avahi fixes the following issues: - CVE-2024-52615: Fixed possible DNS response injection via the use of fixed source ports for wide-area DNS queries (bsc#1233421).

    first Feb 17, 2026
  • High max 8.2

    Security update for protobuf

    This update for protobuf fixes the following issues: - CVE-2026-0994: Fixed google.protobuf.Any recursion depth bypass in Python json_format.ParseDict (bsc#1257173).

    first Feb 17, 2026
  • High max 8.4

    Security update for gpg2

    This update for gpg2 fixes the following issues: - CVE-2026-24882: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396). - gpg.fail/filename: GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" F…

    first Feb 17, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issues: - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).

    first Feb 17, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in the …

    first Feb 17, 2026
  • Critical max 9.8

    Security update for libsodium

    This update for libsodium fixes the following issues: - CVE-2025-15444: Fixed cryptographic bypass via improper elliptic curve point validation (bsc#1256070). - CVE-2025-69277: Fixed incorrect validation of elliptic curve points in crypto_core_ed25519_is_vali…

    first Feb 17, 2026
  • High max 7.5

    Security update for google-guest-agent

    This update for google-guest-agent fixes the following issues: - CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236533).

    first Feb 17, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-38321: smb: Log an error w…

    first Feb 24, 2026
  • Unscored

    Security update for kernel-livepatch-MICRO-6-0_Update_16

    This update for kernel-livepatch-MICRO-6-0_Update_16 fixes the following issues: Initial livepatch for Update 16 of kernel default.

    first Feb 24, 2026
  • High max 7.5

    Security update for python-pyasn1

    This update for python-pyasn1 fixes the following issues: - CVE-2026-23490: Fixed malformed RELATIVE-OID with excessive continuation octets leading to Denial of Service (bsc#1256902).

    first Feb 17, 2026