Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,526 results · Feed

  • Medium max 6.6

    Security update for parted

    This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).

  • Critical max 9.8

    Security update for cephfs

    This update for cephfs fixes the following security issues: - CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472). - CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446). …

  • High max 7.5

    Security update for helm

    This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-78669: golang.or…

  • Critical max 9.1

    Security update for tomcat

    This update for tomcat fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). - CVE-2026-74049: Jasper JSTL <c:redirect> plug-in implementation omits page abort (bsc#1286555). - CVE-2026-80353: TOC…

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).

    first Nov 4, 2026
  • Medium max 4.4

    xen-4.22.0_08-1.1 on GA media

    These are all security issues fixed in the xen-4.22.0_08-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 5.5

    libansilove-devel-1.4.4-1.1 on GA media

    These are all security issues fixed in the libansilove-devel-1.4.4-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • High max 7.5

    python313-markdown2-2.5.5-3.1 on GA media

    These are all security issues fixed in the python313-markdown2-2.5.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • High max 7.5

    pi-coding-agent-1.5.0-1.1 on GA media

    These are all security issues fixed in the pi-coding-agent-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • High max 7.8

    libsixel-bash-completion-1.10.5-3.1 on GA media

    These are all security issues fixed in the libsixel-bash-completion-1.10.5-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.1

    java-11-openjdk-11.0.33.0-1.1 on GA media

    These are all security issues fixed in the java-11-openjdk-11.0.33.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • High max 7.5

    ffmpeg-9-libavcodec-devel-9.0.2-5.1 on GA media

    These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.2-5.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • High max 7.5

    ffmpeg-8-8.1.3-4.1 on GA media

    These are all security issues fixed in the ffmpeg-8-8.1.3-4.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Medium max 6.8

    dnsmasq-2.93-3.1 on GA media

    These are all security issues fixed in the dnsmasq-2.93-3.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.1

    amazon-ssm-agent-3.3.5708.0-1.1 on GA media

    These are all security issues fixed in the amazon-ssm-agent-3.3.5708.0-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Low max 3.3

    ImageMagick-7.1.2.35-1.1 on GA media

    These are all security issues fixed in the ImageMagick-7.1.2.35-1.1 package on the GA media of openSUSE Tumbleweed.

    first Nov 4, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-63968: ipv6: fix possible infin…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on sub…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64053: block: don't overwrite bip_vcnt in bio_integrity_copy_user() (bsc#1272986). - CVE-2026-64217: netfs:…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1280693). - CVE-2026-80521: af_unix: Unlink scc_ent…

    first Nov 2, 2026
  • Critical max 9.2
    SUSE-SU-2026:24518-1 1 CVE 1 exploited

    Security update for brotli

    This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778).

    first Nov 1, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize (bsc#1269766). - CVE-2026-53381: virtiofs: fix UAF on su…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271837). - CVE-2026-63968: ipv6: fix possible infinite lo…

    first Nov 2, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285686).

    first Nov 2, 2026
  • Unscored

    Security update for fuse-overlayfs

    This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image (bsc#1286378).

    first Nov 2, 2026
  • Medium max 6.5

    Security update for nmap

    This update for nmap fixes the following issue: - CVE-2026-72712: crafted packet containing a zero-length TCP option causes the `Packet:parse_options()` function to allocate objects in an infinite loop and cause an OOM condition (bsc#1275288).

    first Nov 1, 2026
  • High max 7.1

    Security update for valkey

    This update for valkey fixes the following issues: - Refresh patch for CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Val…

    first Nov 4, 2026
  • Medium max 6.5

    Security update for aws-efs-utils

    This update for aws-efs-utils fixes the following issues: Security issues fixed: - CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records (bsc#1272354). - CVE-2026-16318: s2n-tls: Denial of Service due to me…

    first Nov 4, 2026