Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,660 results · Feed

  • High max 7.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.42 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Mar 2, 2026
  • Medium max 6.7

    Security update for shim

    This update for shim fixes the following issues: shim is updated to version 16.1: - shim_start_image(): fix guid/handle pairing when uninstalling protocols - Fix uncompressed ipv6 netboot - fix test segfaults caused by uninitialized memory - SbatLevel_Variabl…

    first Mar 2, 2026
  • High max 8.8

    Security update for mozilla-nss

    This update for mozilla-nss fixes the following issues: update to NSS 3.112.3: * CVE-2026-2781: Avoid integer overflow in platform-independent ghash (bsc#1258568)

    first Mar 2, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-afte…

    first Mar 1, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-after…

    first Mar 1, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.94 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-after…

    first Mar 1, 2026
  • High max 7.8

    Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.150 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2023-54142: gtp: Fix use-afte…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.290 fixes one security issue The following security issue was fixed: - CVE-2022-50717: nvmet-tcp: add bounds check on Transfer Tag (bsc#1255845).

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • High max 8.5

    Security update for valkey

    This update for valkey fixes the following issues: Update to version 8.0.7. Security issues fixed: - CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts (bsc#1258746). - CVE-2026-21863: denial of service vi…

    first Feb 27, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.266 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2022-50700: wifi: ath10k: Delay the unmapping of the buffer (bsc#1255577). - CVE-2022-50717: nvmet-tcp: add bounds c…

    first Feb 27, 2026
  • Unscored

    Security update for gpg2

    This update for gpg2 fixes the following issues: Security fix: - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data (bsc#1256389)

    first Feb 27, 2026
  • Medium max 6.3

    Security update for python311

    This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2025-12781: inadequate parameter check can cause data int…

    first Feb 27, 2026
  • High max 8.8

    Security update for MozillaThunderbird

    This update for MozillaThunderbird fixes the following issues: - Update to Thunderbird 140.7.2 - CVE-2026-2447: Fixed a heap buffer overflow in libvpx. (bsc#1258231)

    first Feb 27, 2026
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…

    first Feb 27, 2026
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…

    first Feb 27, 2026
  • High max 7.8
    SUSE-SU-2026:0688-1 2 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2021-0920: net: split out functions related to registering inflight socket files (bsc#1193731). - CVE-2025-38177: sch_hfsc: make…

    first Feb 27, 2026
  • Critical max 9.1

    Security update for go1

    This update for go1 fixes the following issues: Update to version 1.24.13 (jsc#SLE-18320, bsc#1236217). Security issues fixed: - CVE-2025-61732: cmd/cgo: discrepancy between Go and C/C++ comment parsing allows for C code smuggling (bsc#1257692). - CVE-2025-68…

    first Feb 27, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2026-2044: lack of proper initialization of memory can allow remote attackers to execute arbitrary code (bsc#1258532). - CVE-2026-2045: check offset in the colormap is valid before using it (bsc#1258533).…

    first Feb 27, 2026
  • High max 8.7

    Security update for freerdp2

    This update for freerdp2 fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can le…

    first Feb 27, 2026
  • High max 7.5

    Security update for glibc

    This update for glibc fixes the following issues: - CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr (bsc#1256822, BZ #33802) - CVE-2025-15281: posix: Reset wordexp_t fields with WRDE_REUSE (bsc#1257005, BZ #33814) - CVE-2025-8058: posix: Fix doubl…

    first Feb 27, 2026
  • High max 7.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes one security issue The following security issue was fixed: - CVE-2025-38129: page_pool: fix use-after-free in page_pool_recycle_in_ring (bsc#1258139).

    first Feb 27, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…

    first Feb 26, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…

    first Feb 26, 2026
  • Unscored

    Security update for redis7

    This update for redis7 fixes the following issue: - a user can manipulate data read by a connection by injecting sequences into a Redis error reply (bsc#1258706).

    first Feb 26, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto (bsc#1255400). - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption (bsc#1256484).

    first Feb 26, 2026
  • High max 7.2

    Security update for ucode-intel

    This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) i…

    first Feb 26, 2026
  • Medium max 5.3

    Security update for docker

    This update for docker fixes the following issues: - CVE-2025-58181: Fixed a bug in crypto/ssh where invalidated number of mechanisms can cause unbounded memory consumption. (bsc#1253904)

    first Feb 26, 2026
  • High max 7.5

    Security update for frr

    This update for frr fixes the following issues: - CVE-2025-61099: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252838) - CVE-2025-61100: Fixed a NULL pointer dereference, which may lead to a DoS vulnerability. (bsc#1252829) -…

    first Feb 26, 2026
  • Medium max 6.0

    Security update for python3

    This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie…

    first Feb 26, 2026
  • Medium max 6.0

    Security update for python

    This update for python fixes the following issues: - CVE-2025-6075: Fixed performance degradation when using os.path.expandvars() (bsc#1252974). - CVE-2026-0672: Fixed a HTTP header injection via user-controlled cookie values and parameters when using http.co…

    first Feb 26, 2026
  • Medium max 6.9

    Security update for erlang

    This update for erlang fixes the following issues: - CVE-2025-48039:Fixed an excessive use of system resources. (bsc#1249469) - CVE-2025-48038:Fixed an excessive use of system resources. (bsc#1249470) - CVE-2025-48040:Fixed an excessive resource consumption. …

    first Feb 26, 2026
  • High max 7.5

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2025-30204: Fixed a vulnerability in jwt-go which allowed excessive memory allocation during header parsing. (bsc#1240513)

    first Feb 26, 2026
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: out…

    first Feb 26, 2026
  • High max 7.5

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2025-32049: denial of Service attack to websocket server (bsc#1240751). - CVE-2026-2369: buffer overread due to integer underflow when handling zero-length resources (bsc#1258120). - CVE-2026-2443: ou…

    first Feb 26, 2026
  • High max 7.7

    Security update for freerdp

    This update for freerdp fixes the following issues: - CVE-2026-22855: heap-buffer-overflow in smartcard_unpack_set_attrib_call (bsc#1256721). - CVE-2026-22857: heap-use-after-free in irp_thread_func (bsc#1256723). - CVE-2026-23533: improper validation can lea…

    first Feb 26, 2026
  • Medium max 6.2

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…

    first Feb 24, 2026
  • Medium max 6.2

    Security update for libxml2

    This update for libxml2 fixes the following issues: - CVE-2026-0990: Fixed a call stack overflow leading to application crash due to infinite recursion in `xmlCatalogXMLResolveURI`. (bsc#1256807, bsc#1256811) - CVE-2026-0992: Fixed an excessive resource consu…

    first Feb 24, 2026