Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,660 results · Feed

  • High max 8.1
    SUSE-SU-2026:0515-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 13, 2026
  • Medium max 6.8

    Security update for cargo-auditable

    This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …

    first Feb 13, 2026
  • Medium max 6.1

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2025-14104: Fixed heap buffer overread in setpwnam() when processing 256-byte usernames (bsc#1254666). - lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682).

    first Feb 13, 2026
  • Medium max 6.3

    Security update for curl

    This update for curl fixes the following issues: - CVE-2025-14017: Fixed broken TLS options for threaded LDAPS (bsc#1256105). - CVE-2025-14524: bearer token leak on cross-protocol redirect (bsc#1255731). - CVE-2025-14819: libssh global knownhost override (bsc…

    first Feb 13, 2026
  • Medium max 6.8

    Security update for cargo-auditable

    This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …

    first Feb 13, 2026
  • Medium max 6.8

    Security update for cargo-auditable

    This update for cargo-auditable fixes the following issues: Update to version 0.7.2~0. Security issues fixed: - CVE-2026-25727: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257906). Other updates and bugfixes: …

    first Feb 13, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…

    first Feb 13, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962). - CVE-2026-23952: pr…

    first Feb 13, 2026
  • High max 8.4

    Security update for glibc-livepatches

    This update for glibc-livepatches fixes the following issues: - CVE-2026-0861: Fixed that inadequate size check in the memalign suite may result in an integer overflow (bsc#1256913)

    first Feb 13, 2026
  • High max 7.5

    Security update for openssl1

    This update for openssl1 fixes the following issues: - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-6…

    first Feb 13, 2026
  • High max 8.6

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2026-1761: Check length of bytes read in soup_filter_input_stream_read_until to avoid a stack-based buffer overflow (bsc#1257598). - CVE-2026-0716: improper bounds handling may allow out-of-bounds rea…

    first Feb 13, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2023-54142: gtp: Fix use-af…

    first Feb 13, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix …

    first Feb 13, 2026
  • High max 8.8

    Security update for curl

    This update for curl fixes the following issues: - CVE-2023-27534: Regression fix for SFTP path ~ resolving discrepancy (bsc#1219273)

    first Feb 13, 2026
  • High max 8.1

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2025-40129: sunrpc: fix null pointer dereference on zero-length checksum (bsc#1253473). - CVE-2025-40186: tcp: Don…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0489-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). -…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0487-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-t…

    first Feb 13, 2026
  • Critical max 9.1

    Security update for xrdp

    This update for xrdp fixes the following issues: - CVE-2025-68670: Fix a potential overflow when processing user domain information. (bsc#1257362)

    first Feb 12, 2026
  • High max 7.5

    Security update for python-azure-core

    This update for python-azure-core fixes the following issues: - CVE-2026-21226: Fixed deserialization of untrusted data which may allow an authorized attacker to execute code over a network. (bsc#1257703)

    first Feb 12, 2026
  • High max 8.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2025-38129: page_pool: fix inc…

    first Feb 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255594). - CVE-2023-54142: gtp: Fix use-after…

    first Feb 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses …

    first Feb 12, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842). - CVE-2025-40259: scsi: sg: Do not sleep in atomic cont…

    first Feb 12, 2026
  • Medium max 6.8

    Security update for rust-keylime

    This update for rust-keylime fixes the following issues: Update to version 0.2.8+116. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257908). Other updates and bugfi…

    first Feb 12, 2026
  • Medium max 4.3

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2025-4476: null pointer dereference may lead to denial of service (bsc#1243422).

    first Feb 12, 2026
  • High max 7.1

    Security update for python-wheel

    This update for python-wheel fixes the following issues: - CVE-2026-24049: Fixed absent path sanitization can cause arbitrary file permission modification (bsc#1257100).

    first Feb 11, 2026
  • Low max 3.7

    Security update for glib2

    This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalc…

    first Feb 11, 2026
  • Unscored

    Security update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda

    This update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cuda fixes the following issues: Changes in nvidia-open-driver-G06-signed: - updated CUDA variant to version 580.126.09 - update non-CUDA variant to version 580.126.09 (b…

    first Feb 11, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-54013: interconnect: Fix locking for runpm vs reclaim (bsc#1256280). - CVE-2025-39880: libceph: fix invalid accesses to cep…

    first Feb 11, 2026
  • Medium max 6.5

    Security update for qemu

    This update for qemu fixes the following issues: - CVE-2026-0665: Added PIRQ bounds check in xen_physdev_map_pirq to avoid an out-of-bounds heap. (bsc#1256484) Other fixes: - Fixed that QEMU migration fails if a qemu-vdagent channel is present in the VM (bsc#…

    first Feb 11, 2026
  • Low max 2.9

    Security update for uriparser

    This update for uriparser fixes the following issues: - CVE-2025-67899: large input containing many commas can cause unbounded recursion and stack consumption (bsc#1255000).

    first Feb 11, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3_1 fixes the following issues: - CVE-2025-66471: excessive resource consumption via decompression of highly compressed data in Streaming API (bsc#1254867). - CVE-2025-66418: resource exhaustion via unbounded number of links in th…

    first Feb 11, 2026
  • High max 7.5

    Security update for java-1_8_0-openjdk

    This update for java-1_8_0-openjdk fixes the following issues: - CVE-2026-21925: Fixed a vulnerability in the Oracle Java SE component RMI. (bsc#1257034) - CVE-2026-21932: Fixed a vulnerability in the Oracle Java SE component AWT and JavaFX. (bsc#1257036) - C…

    first Feb 11, 2026
  • High max 7.5

    Security update for python-Django

    This update for python-Django fixes the following issues: - CVE-2025-14550: Fixed potential denial-of-service via repeated headers when using ASGI(bsc#1257403) - CVE-2026-1312: Fixed potential SQL injection via QuerySet.order_by and FilteredRelation (bsc#1257…

    first Feb 11, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2026-0797: Fixed a heap-based buffer overflow in the parsing of ICO files. (bsc#1257549)

    first Feb 11, 2026
  • High max 7.5

    Security update for apptainer

    This update for apptainer fixes the following issues: Security fixes: - CVE-2024-45310: Fixed runc being tricked into creating empty files/directories on host (bsc#1257432) - CVE-2025-65105: Fixed security bypass due to disabling security options (bsc#1255462…

    first Feb 11, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…

    first Feb 11, 2026
  • High max 8.1

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-22770: improper pointer initialization can cause denial of service (bsc#1256969). - CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976). - CVE-2026-23876: m…

    first Feb 11, 2026
  • High max 7.5

    Security update for nodejs20

    This update for nodejs20 fixes the following issues: - Update to 20.20.0: - CVE-2026-22036: Updated undici to 6.23.0 (bsc#1256848) - CVE-2025-59465: Add TLSSocket default error handler (bsc#1256573) - CVE-2025-55132: Disable futimes when permission model is e…

    first Feb 11, 2026
  • High max 8.4

    Security update for gpg2

    This update for gpg2 fixes the following issues: Security fixes: - CVE-2026-24882: Fixed stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys (bsc#1257396) - Fixed GnuPG accepting Path Separators and Path Traversals in Literal Data 'F…

    first Feb 11, 2026