Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,560 results · Feed

  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.28 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.109 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processin…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.219 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.87 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 24, 2026
  • Critical max 9.6

    Security update for grafana

    This update for grafana fixes the following issues: grafana updated from version 11.6.14+security04 to version 12.4.5: Security fixes: - CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters (bsc#1274217) - CVE-2026-33382: Limit t…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.172 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 24, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.127 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.170 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 45 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.179 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1269284). - CVE-2025-40204,CVE-2026-53224,CVE…

    first Aug 23, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.62 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.25 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.51 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.13 fixes various security issues: The following security issues were fixed: - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing …

    first Aug 22, 2026
  • High max 7.6

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…

    first Aug 21, 2026
  • High max 8.4

    Security update for gimp

    This update for gimp fixes the following issues: - CVE-2026-59088: GIMP: Denial of service via signed integer overflow in FLI file processing (bsc#1274837). - CVE-2026-59090: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (bsc#1274840).

    first Aug 21, 2026
  • High max 7.6

    Security update for 389-ds

    This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow (bsc#1268298). - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack ad…

    first Aug 21, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 21, 2026
  • High max 7.0

    Security update for util-linux

    This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in `libblkid` nested partition probing (bsc#1269583). - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices (bsc#1261606). - …

    first Aug 21, 2026
  • Critical max 10.0

    Security update for MozillaFirefox

    This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.14.0 ESR. - MFSA 2026-74 (bsc#1274867): - CVE-2026-74934: Site isolation issue in the Graphics: CanvasWebGL component. - CVE-2026-74935: Privilege escala…

    first Aug 21, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…

    first Aug 21, 2026
  • High max 8.6

    Security update for vim

    This update for vim fixes the following issues: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service (bsc#1275018). - CVE-2026-73071: use-after-free in JSON decoding can lead to process crash (bsc#1275017). - CVE-2026-730…

    first Aug 21, 2026
  • Critical max 9.1

    Security update for python311

    This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP clie…

    first Aug 18, 2026
  • Unscored

    Security update for suseconnect-ng

    This update for suseconnect-ng fixes the following issue: - Build against outdated `go1.24-openssl` (bsc#1268900). Changes for suseconnect-ng: - Update version to 1.23.0: - Use product identifier for product migrations (bsc#1268596). - Switch to using `go1.26…

    first Aug 18, 2026
  • Medium max 4.6

    Security update for patch

    This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation…

    first Aug 18, 2026
  • High max 7.5

    Security update for podman

    This update for podman fixes the following issues: - CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). - CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#…

    first Aug 17, 2026
  • Medium max 5.5

    Security update for rpm

    This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

    first Aug 17, 2026
  • Critical max 10.0
    SUSE-SU-2026:23194-1 647 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert "s…

    first Aug 18, 2026
  • Critical max 10.0
    SUSE-SU-2026:23193-1 648 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68818: scsi: Revert…

    first Aug 18, 2026
  • Medium max 5.5

    Security update for rpm

    This update for rpm fixes the following issue: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584).

    first Aug 18, 2026
  • Critical max 9.1

    Security update for python311

    This update for python311 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1502: HTTP clie…

    first Aug 18, 2026