Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Unscored

    Security update for rootlesskit

    This update for rootlesskit rebuilds it against the current go security release.

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867). - CVE-2026-64600: xfs: …

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (b…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…

    first Aug 26, 2026
  • Unscored

    Security update for docker

    This update for docker rebuilds it against the current go security release.

    first Aug 26, 2026
  • Unscored

    Security update for buildah

    This update for buildah rebuilds it against the current go security release.

    first Aug 26, 2026
  • Critical max 9.6

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-n…

    first Aug 26, 2026
  • Critical max 9.6

    Security update for go1.25-openssl

    This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for curl

    This update for curl fixes the following issues: - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402). - CVE-2026-8458: wrong reuse for different services (bsc#1268407). - CVE-2026-8…

    first Aug 26, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 26, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 26, 2026
  • Critical max 10.0
    SUSE-SU-2026:3810-1 267 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: …

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616). - CVE-2026-23204: net: add skb_header_pointer_careful…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE-2026-…

    first Aug 26, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 26, 2026
  • Unscored

    Security update for qemu

    This update for qemu fixes the following issue: - CVE-2026-3886: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability (bsc#1268061). Changes for qemu: - Bug fixes: * target/s390x: Make container ids in SysIB_15x 1-based (bsc#12754…

    first Aug 26, 2026
  • High max 8.8

    Security update for LibVNCServer

    This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious (or man-in-the-middle) VNC server can force a connecting `libvncclient` to write attacker- controlled data past the end of its framebuffer (bsc#1276218).

    first Aug 25, 2026
  • High max 8.8

    Security update for pcp

    This update for pcp fixes the following issues: - CVE-2026-16524: command injection in `linux_sockets` PMDA via `network.persocket.filter` (bsc#1272922). - CVE-2026-16526: pmdaroot privilege escalation via `FD_CLOEXEC` fd inheritance and missing peer credenti…

    first Aug 24, 2026
  • High max 7.5

    Security update for dracut

    This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()` (bsc#1274432). Other upda…

    first Aug 24, 2026
  • Unscored

    Security update for libarchive

    This update for libarchive fixes the following issues: - Fix creation of temporary files in target directory (bsc#1254340) - Fix out-of-bounds buffer overrun when using p[H_LEVEL_OFFSET] (bsc#1254341) - Fix buffer overrun in archive_le32dec when reading trunc…

    first Aug 24, 2026
  • Medium max 6.5

    Security update for gstreamer-plugins-bad

    This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gst_av1_parser_parse_tile_list_obu() can cause parser desynchronization and an application crash (bsc#1268394).

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues. The following security issues were fixed: - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437). - CVE-2026-23161: mm/shmem, swap: fix rac…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched:…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134). - CVE-2026-23449: net/sched…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213). - CVE-2026-31629: nfc: llcp: add…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282). - CVE-2026-46037: ipv4: icmp:…

    first Aug 24, 2026
  • Critical max 9.1

    Security update for rsync

    This update for rsync fixes the following issues: - CVE-2026-53783: rrsync restricted-directory escape (validation-vs-exec race + unsafe option allowlist) (bsc#1269041). - CVE-2026-53784: Daemon module-root chdir escape under "use chroot = no" (bsc#1269042). …

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues. The following security issues were fixed: - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362). - CVE-2026-46242: eventpol…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139). - CVE-2026-53224: s…

    first Aug 24, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: Security issues fixed: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop de…

    first Aug 24, 2026
  • Critical max 9.6

    Security update for go1.26-openssl

    This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing d…

    first Aug 30, 2026