Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

35,581 results · Feed

  • Critical max 9.6

    Security update for mcphost

    This update for mcphost fixes the following issues: - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation (bsc#1272488). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded l…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 30, 2026
  • Critical max 9.8

    Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 30, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 30, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 30, 2026
  • High max 8.8

    Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 30, 2026
  • Unscored

    Security update for libpng16

    This update for libpng16 fixes the following issues: Changes in libpng16: Version update to 1.6.58 [jsc#PED-16190] * see CHANGES for other upstream changes

    first Jul 29, 2026
  • High max 7.7

    Security update for openssh

    This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when `sftp server:/path .` is used with an attacker-controlled server (bsc#1271044). - CVE-2026-59996: scp: file placed in the pa…

    first Jul 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 28, 2026
  • High max 8.8

    Security update for samba

    This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672). - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths witho…

    first Jul 29, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate N…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tls_sw_cancel_work_tx() (bsc#1262404). - CVE-2026-31738: vxlan: validate …

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 28, 2026
  • Critical max 9.8

    Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-31738: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264060). - CVE-2026-43038: ipv6: icmp: cl…

    first Jul 28, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 28, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 28, 2026
  • High max 8.8

    Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

    This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role (bsc#1270060). - CVE-2026-53366: i…

    first Jul 28, 2026
  • Critical max 9.1

    Security update for python313, python3

    This update for python313, python3 fixes the following issues: Changes in python313: Update to 3.13.14: - Security - gh-151159: Bumps the OpenSSL version to 3.0.21 on Android. - gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor…

    first Jul 28, 2026
  • Medium max 5.1

    Security update for spice-vdagent

    This update for spice-vdagent fixes the following issues: - CVE-2026-57965: integer overflow in `udscs_write()` can lead to heap buffer overflow (bsc#1269553). - CVE-2026-57966: improper sanitization allows a compromised SPICE host to write arbitrary files to…

    first Aug 3, 2026
  • High max 8.8

    Security update for xen

    This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2…

    first Aug 3, 2026
  • Critical max 9.6

    Security update for google-cloud-sap-agent

    This update for google-cloud-sap-agent fixes the following issue: - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266604). Changes for google-cloud-sap-a…

    first Aug 3, 2026
  • High max 7.8

    Security update for rrdtool

    This update for rrdtool fixes the following issue: - CVE-2026-43958: stack buffer overflow in `rrdcached` `handle_request_create()` can lead to local privilege escalation via unbounded DS/RRA arguments (bsc#1267243).

    first Aug 3, 2026
  • Medium max 6.5

    Security update for libssh

    This update for libssh fixes the following issues: - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164). - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165). - CVE-2026-59845: denial of service…

    first Aug 3, 2026
  • Critical max 9.8

    Security update for perl-DBI

    This update for perl-DBI fixes the following issues: - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution (bsc#1271018). - CVE-2026-14740: one-byte out-of-bounds read when deleting an in…

    first Aug 3, 2026