Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). - CVE-2026-64561: KV…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). - CVE-2026-64423: ipv4: igmp: remove multic…

    first Sep 14, 2026
  • High max 8.7

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…

    first Sep 14, 2026
  • High max 8.7

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issues: Security issues fixed: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272128). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP f…

    first Sep 14, 2026
  • Unscored

    Security update for suseconnect-ng

    This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. (bsc#1268596) - Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC…

  • Unscored

    Security update for exiv2

    This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic (bsc#1277791). - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files (bsc#1277579). - CVE-2026-68547: Hea…

    first Sep 22, 2026
  • High max 7.9

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…

    first Sep 22, 2026
  • High max 8.7

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…

    first Sep 22, 2026
  • High max 8.2

    Security update for zstd-jni

    This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…

    first Sep 21, 2026
  • High max 7.5

    Security update for jsoup, re2j

    This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…

    first Sep 21, 2026
  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

    first Sep 21, 2026
  • Critical max 9.6

    Security update for alloy

    This update for alloy fixes the following issues: - CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs (bsc#1265542). - CVE-2026-33814: golang.org/x/net/http2: infinite…

    first Sep 21, 2026
  • Critical max 9.8

    Security update for distribution

    This update for distribution fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control…

    first Sep 21, 2026
  • Critical max 10.0
    SUSE-SU-2026:23863-1 91 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2026-6348 CVE-2026-…

    first Sep 21, 2026
  • High max 7.9

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices (bsc#1261606). - CVE-2026-53612: loca…

    first Sep 22, 2026
  • Unscored

    Security update for exiv2

    This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic (bsc#1277791). - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files (bsc#1277579). - CVE-2026-68547: Hea…

    first Sep 22, 2026
  • High max 8.7

    Security update for rabbitmq-server

    This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names (bsc#1266465). - CVE-2026-57212: The rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_r…

    first Sep 22, 2026
  • High max 8.2

    Security update for zstd-jni

    This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read (bsc#1279953). - CVE-2026-87824: denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect (bsc#127995…

    first Sep 21, 2026
  • High max 7.6

    Security update for libsoup

    This update for libsoup fixes the following issues: - CVE-2026-85197: heap use-after-free in HTTP/2 `client on_data_read()` via `GOAWAY` during body upload (bsc#1279238). - CVE-2026-85534: heap buffer overflow in `SoupSession` through `on_data_source_read_cal…

    first Sep 21, 2026
  • High max 7.5

    Security update for jsoup, re2j

    This update for jsoup, re2j fixes the following issue: - CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and…

    first Sep 21, 2026