Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 9.5

    hawk2-2.7.2+git.1792148770.648dcddb-1.1 on GA media

    These are all security issues fixed in the hawk2-2.7.2+git.1792148770.648dcddb-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • High max 8.7

    coredns-1.14.7-3.1 on GA media

    These are all security issues fixed in the coredns-1.14.7-3.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • Critical max 9.6

    chromedriver-155.0.8059.39-1.1 on GA media

    These are all security issues fixed in the chromedriver-155.0.8059.39-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 16, 2026
  • Medium max 5.3

    Security update for glib2

    This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206).

    first Oct 16, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). - CVE-2026-68…

    first Oct 16, 2026
  • High max 8.9

    Security update for python-urllib3

    This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (b…

    first Oct 16, 2026
  • High max 8.6

    Security update for libsoup2

    This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of serv…

    first Oct 16, 2026
  • Medium max 6.2

    Security update for ImageMagick

    This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). - CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). - CVE-2026-86423: Denial of service vi…

    first Oct 16, 2026
  • Medium max 5.5

    libsndfile-devel-1.2.2-6.1 on GA media

    These are all security issues fixed in the libsndfile-devel-1.2.2-6.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 5.5

    libzbar-devel-0.23.95-2.1 on GA media

    These are all security issues fixed in the libzbar-devel-0.23.95-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    libpoppler-cpp3-26.10.0-1.1 on GA media

    These are all security issues fixed in the libpoppler-cpp3-26.10.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    openai-codex-0.162.1-2.1 on GA media

    These are all security issues fixed in the openai-codex-0.162.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • High max 8.1

    nginx-1.31.7-1.1 on GA media

    These are all security issues fixed in the nginx-1.31.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Medium max 6.5

    grok-build-1.0.45+git20260929.2bdd1d6-2.1 on GA media

    These are all security issues fixed in the grok-build-1.0.45+git20260929.2bdd1d6-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • High max 7.5

    azure-storage-azcopy-10.32.8-2.1 on GA media

    These are all security issues fixed in the azure-storage-azcopy-10.32.8-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • High max 8.2

    ImageMagick-7.1.2.33-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.33-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 15, 2026
  • Critical max 9.8
    SUSE-SU-2026:4667-1 110 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2025-39964: kernel: crypto: af_alg - Di…

    first Oct 14, 2026
  • Critical max 9.8
    SUSE-SU-2026:4666-1 86 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). - CVE-2024-56644: net/ipv6: release expire…

    first Oct 14, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - C…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026
  • High max 8.8

    Security update for qemu

    This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Man…

    first Oct 7, 2026
  • High max 7.5

    Security update for php8

    This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). - CVE…

    first Oct 7, 2026
  • High max 7.5

    Security update for bind

    This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432)…

    first Oct 7, 2026
  • Medium max 6.1

    Security update for swtpm

    This update for swtpm fixes the following issues: Security issue fixed: - CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for …

    first Oct 7, 2026
  • Medium max 5.1

    Security update for busybox

    This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1…

    first Oct 6, 2026
  • High max 7.5

    Security update for distribution

    This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762).

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 5, 2026