Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

    first Oct 2, 2026
  • Critical max 10.0

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…

    first Oct 2, 2026
  • High max 7.5

    Security update for google-osconfig-agent

    This update for google-osconfig-agent fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for libtcnative-1-0, tomcat, tomcat10

    This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-202…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for libtcnative-1-0, tomcat11

    This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: - CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). - CVE-2026-86246:…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditi…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 6, 2026
  • Critical max 9.8

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): - CVE-2026-96869: Information disclosure in the Networking component. - CVE-2026-100756: Incorrect boundary conditi…

    first Oct 6, 2026
  • Critical max 9.1

    Security update for python312

    This update for python312 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). - CVE-2026-0864: improper handling of line-ending characters can lead to configuration…

  • Medium max 5.5

    Security update for openexr

    This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700).

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). - …

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes one security issue: The following security issue was fixed: - CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506).

  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). - CVE-2026-63888: scsi: target: iscsi: F…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

  • Critical max 9.6

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HT…

  • Critical max 9.6

    Security update for docker-stable

    This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HT…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). …

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…

    first Oct 5, 2026
  • Critical max 10.0

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63802: bl…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888:…

    first Oct 5, 2026
  • Critical max 9.8

    Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11

    This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). - CVE-202…

    first Sep 30, 2026
  • High max 7.5

    pi-coding-agent-1.0.2-1.1 on GA media

    These are all security issues fixed in the pi-coding-agent-1.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    nvidia-open-driver-G07-signed-check-595.104.02-2.1 on GA media

    These are all security issues fixed in the nvidia-open-driver-G07-signed-check-595.104.02-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.2

    iperf-3.22-1.1 on GA media

    These are all security issues fixed in the iperf-3.22-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.8

    grype-db-0.54.4-1.1 on GA media

    These are all security issues fixed in the grype-db-0.54.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Medium max 6.5

    golang-github-prometheus-alertmanager-0.34.1-2.1 on GA media

    These are all security issues fixed in the golang-github-prometheus-alertmanager-0.34.1-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.1

    golang-github-lusitaniae-apache_exporter-1.1.1-1.1 on GA media

    These are all security issues fixed in the golang-github-lusitaniae-apache_exporter-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 10.0

    distribution-registry-3.1.2-1.1 on GA media

    These are all security issues fixed in the distribution-registry-3.1.2-1.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.20-2.20.9-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.20-2.20.9-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.19-2.19.13-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.19-2.19.13-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.18-2.18.19-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.18-2.18.19-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • High max 7.8

    ansible-core-2.21.4-2.1 on GA media

    These are all security issues fixed in the ansible-core-2.21.4-2.1 package on the GA media of openSUSE Tumbleweed.

    first Oct 5, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). - CVE-2026-63888: scsi:…

    first Oct 2, 2026
  • Medium max 5.1

    Security update for wget

    This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962).

    first Oct 1, 2026