Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - CVE-…

    first Oct 7, 2026
  • Medium max 5.3

    Security update for fetchmail

    This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055).

    first Oct 7, 2026
  • High max 7.1

    Security update for libXtst

    This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).

    first Oct 7, 2026
  • High max 8.2

    Security update for openssl-3-livepatches

    This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587).

    first Oct 7, 2026
  • High max 7.1

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). - Fixed incomplete RADIUS Message-Authenticator attribute val…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - CVE-…

  • Critical max 9.6

    Security update 5.2.1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GP…

  • Critical max 9.6

    Security update 5.2.1 for Multi-Linux Manager Client Tools

    This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GP…

  • Critical max 9.6

    Security update 5.2.1 for Multi-Linux Manager Server

    This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 * Security fixes * Ubuntu 26.04 LTS Support * Confidential Computing Attestation for IBM Z S…

  • High max 7.5

    Security update for rpcbind

    This update for rpcbind fixes the following issues: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340). - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated…

    first Oct 7, 2026
  • High max 7.1

    Security update for libXtst

    This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665).

    first Oct 7, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - CVE-…

    first Oct 7, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 7, 2026
  • High max 7.5

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy sw…

    first Oct 7, 2026
  • High max 8.8

    Security update for python-fsspec

    This update for python-fsspec fixes the following issues: Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in `ReferenceFileSystem` (bsc#1284173)

    first Oct 6, 2026
  • Critical max 9.6

    Security update for golang-github-prometheus-alertmanager

    This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.57.0 (bsc#1266615) -…

    first Oct 6, 2026
  • High max 7.8

    Security update for gimp

    This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-96546: one-byte out-of-bounds heap read in the uncompressed DDS loader (bsc#1282601) - CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#12825…

    first Oct 6, 2026
  • Critical max 9.6

    Security update for prometheus-blackbox_exporter

    This update for prometheus-blackbox_exporter fixes the following issues: Changes in prometheus-blackbox_exporter: - CVE-2026-84304: Fix heap memory exhaustion (OOM) via HTTP/2 DATA frame fragmentation in gRPC-Go by bumping it to version 1.83.1 (bsc#1279126) -…

    first Oct 6, 2026
  • High max 7.1

    Security update for wpa_supplicant

    This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).

    first Oct 5, 2026
  • Unscored

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20261001T202415 2026-10-01T20:24:15Z (jsc#PED-11136): * GO-2024-2584 GHSA-86h5-xcpx-cfqc * GO-2026-5544 GHSA-pjv4-3c63-699f * GO-2026-6480 GHSA-2g8v-grq3-hq2g * GO-2026-6481 …

    first Oct 5, 2026
  • High max 8.7

    velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media

    These are all security issues fixed in the velociraptor-0.76.7.0.git145.b60ef1146-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Critical max 9.2

    python315-3.15.0~rc3-1.1 on GA media

    These are all security issues fixed in the python315-3.15.0~rc3-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • High max 7.1

    podman-6.1.2-1.1 on GA media

    These are all security issues fixed in the podman-6.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • High max 8.8

    pgvector-devel-0.8.7-1.1 on GA media

    These are all security issues fixed in the pgvector-devel-0.8.7-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Medium max 5.4

    perl-Net-Whois-Raw-2.99044-1.1 on GA media

    These are all security issues fixed in the perl-Net-Whois-Raw-2.99044-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Medium max 5.3

    perl-Net-OAuth-0.330.0-2.1 on GA media

    These are all security issues fixed in the perl-Net-OAuth-0.330.0-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Critical max 9.1

    ffmpeg-4-4.4.8-6.1 on GA media

    These are all security issues fixed in the ffmpeg-4-4.4.8-6.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Critical max 9.6

    chromedriver-154.0.8037.97-1.1 on GA media

    These are all security issues fixed in the chromedriver-154.0.8037.97-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 6, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: blk…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - C…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026