Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 1,188 articles for you...
202
security advisorymoderatedenial of serviceopenSUSE Leap 15.6 libssh2_org Moderate Denial of Service 2026-3076-1
An update that solves one vulnerability can now be installed.. # Security update for libssh2_org Announcement ID: SUSE-SU-2026:3076-1 Release Date: 2026-07-16T13:04:25Z Rating: moderate References: * bsc#1268530 Cross-References: * CVE-2026-55199 CVSS scores: * CVE-2026-55199 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-55199 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-55199 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-55199 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libssh2_org fixes the following issue * CVE-2026-55199: pre-Authentication DoS via SSH_MSG_EXT_INFO Handler (bsc#1268530). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-3076=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3076=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3076=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-3076=1 ## Package List: * SUSE Linux Enterprise Serverfor SAP Applications 15 SP6 (ppc64le x86_64) * libssh2-devel-1.11.0-150600.20.3.1 * libssh2-1-1.11.0-150600.20.3.1 * libssh2_org-debugsource-1.11.0-150600.20.3.1 * libssh2-1-debuginfo-1.11.0-150600.20.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libssh2-1-32bit-1.11.0-150600.20.3.1 * libssh2-1-32bit-debuginfo-1.11.0-150600.20.3.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libssh2-devel-1.11.0-150600.20.3.1 * libssh2-1-1.11.0-150600.20.3.1 * libssh2_org-debugsource-1.11.0-150600.20.3.1 * libssh2-1-debuginfo-1.11.0-150600.20.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libssh2-1-64bit-1.11.0-150600.20.3.1 * libssh2-1-64bit-debuginfo-1.11.0-150600.20.3.1 * openSUSE Leap 15.6 (x86_64) * libssh2-1-32bit-1.11.0-150600.20.3.1 * libssh2-1-32bit-debuginfo-1.11.0-150600.20.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libssh2-1-32bit-1.11.0-150600.20.3.1 * libssh2-1-32bit-debuginfo-1.11.0-150600.20.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libssh2-devel-1.11.0-150600.20.3.1 * libssh2-1-1.11.0-150600.20.3.1 * libssh2_org-debugsource-1.11.0-150600.20.3.1 * libssh2-1-debuginfo-1.11.0-150600.20.3.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libssh2-devel-1.11.0-150600.20.3.1 * libssh2-1-1.11.0-150600.20.3.1 * libssh2_org-debugsource-1.11.0-150600.20.3.1 * libssh2-1-debuginfo-1.11.0-150600.20.3.1 * Basesystem Module 15-SP7 (x86_64) * libssh2-1-32bit-1.11.0-150600.20.3.1 * libssh2-1-32bit-debuginfo-1.11.0-150600.20.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-55199.html * https://bugzilla.suse.com/show_bug.cgi?id=1268530 . This update for libssh2_org addresses a DoS issue in openSUSE, with installation steps and advisory details.. openSUSE security update, libssh2_org advisory, moderate severity, patch installation, DoS vulnerability. . Severity: moderate. LinuxSecurity.comTeam
Jul 16, 2026
•moderate
OpenSUSE
202
security advisoryimportantOpenSUSEopenSUSE Leap 16.0 libjxl Important Heap Overflow Fix 2026-21100-1
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for libjxl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21100-1 Rating: important References: * bsc#1266460 Cross-References: * CVE-2025-70103 CVSS scores: * CVE-2025-70103 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-70103 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for libjxl fixes the following issue - CVE-2025-70103: heap buffer overflow when hen processing crafted pbm-images due to insufficient bounds checks (bsc#1266460). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-965=1 Package List: - openSUSE Leap 16.0: gdk-pixbuf-loader-jxl-0.11.2-160000.2.1 jxl-thumbnailer-0.11.2-160000.2.1 libjxl-devel-0.11.2-160000.2.1 libjxl-tools-0.11.2-160000.2.1 libjxl0_11-0.11.2-160000.2.1 libjxl0_11-x86-64-v3-0.11.2-160000.2.1 References: * https://www.suse.com/security/cve/CVE-2025-70103.html . Critical openSUSE security update for libjxl addresses a heap buffer overflow issue and includes patch instructions.. openSUSE security libjxl update patch. . Severity: Important. LinuxSecurity.com Team
Jun 30, 2026
•Important
OpenSUSE
100
security advisorySuSEremote code executionSUSE Apache2 Important Security Update 2026-22209-1 Addressing 11 Issues
An update that solves 11 vulnerabilities can now be installed.. # Security update for apache2 Announcement ID: SUSE-SU-2026:22209-1 Release Date: 2026-06-20T06:56:04Z Rating: important References: * bsc#1263935 * bsc#1263950 * bsc#1263951 * bsc#1263952 * bsc#1263953 * bsc#1263954 * bsc#1263955 * bsc#1263956 * bsc#1263957 * bsc#1264150 * bsc#1264163 Cross-References: * CVE-2026-23918 * CVE-2026-24072 * CVE-2026-28780 * CVE-2026-29168 * CVE-2026-29169 * CVE-2026-33006 * CVE-2026-33007 * CVE-2026-33523 * CVE-2026-33857 * CVE-2026-34032 * CVE-2026-34059 CVSS scores: * CVE-2026-23918 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23918 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23918 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-24072 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-24072 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-28780 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-28780 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-28780 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-29168 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-29168 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-29168 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-29169 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-29169 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-29169 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33006 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33006 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33006 ( NVD ): 4.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33007 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-33007 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-33007 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-33523 ( SUSE ): 9.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N * CVE-2026-33523 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-33523 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33857 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-33857 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-34032 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34032 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-34032 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-34059 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34059 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-34059 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for apache2 fixes the following issues * CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957). * CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935). * CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163). * CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150). * CVE-2026-29169: NULL pointer dereference in`mod_dav_lock` allows server crash via malicious requests (bsc#1263956). * CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955). * CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child processes (bsc#1263954). * CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953). * CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952). * CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null- termination check (bsc#1263951). * CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-980=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-980=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * apache2-event-debuginfo-2.4.66-160000.2.1 * apache2-worker-debugsource-2.4.66-160000.2.1 * apache2-event-debugsource-2.4.66-160000.2.1 * apache2-utils-debugsource-2.4.66-160000.2.1 * apache2-prefork-debuginfo-2.4.66-160000.2.1 * apache2-2.4.66-160000.2.1 * apache2-prefork-debugsource-2.4.66-160000.2.1 * apache2-debugsource-2.4.66-160000.2.1 * apache2-event-2.4.66-160000.2.1 * apache2-prefork-2.4.66-160000.2.1 * apache2-worker-2.4.66-160000.2.1 * apache2-devel-2.4.66-160000.2.1 * apache2-debuginfo-2.4.66-160000.2.1 * apache2-utils-debuginfo-2.4.66-160000.2.1 * apache2-worker-debuginfo-2.4.66-160000.2.1 * apache2-utils-2.4.66-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * apache2-manual-2.4.66-160000.2.1 *SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * apache2-event-debuginfo-2.4.66-160000.2.1 * apache2-worker-debugsource-2.4.66-160000.2.1 * apache2-event-debugsource-2.4.66-160000.2.1 * apache2-utils-debugsource-2.4.66-160000.2.1 * apache2-prefork-debuginfo-2.4.66-160000.2.1 * apache2-2.4.66-160000.2.1 * apache2-prefork-debugsource-2.4.66-160000.2.1 * apache2-debugsource-2.4.66-160000.2.1 * apache2-event-2.4.66-160000.2.1 * apache2-prefork-2.4.66-160000.2.1 * apache2-worker-2.4.66-160000.2.1 * apache2-devel-2.4.66-160000.2.1 * apache2-debuginfo-2.4.66-160000.2.1 * apache2-utils-debuginfo-2.4.66-160000.2.1 * apache2-worker-debuginfo-2.4.66-160000.2.1 * apache2-utils-2.4.66-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * apache2-manual-2.4.66-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23918.html * https://www.suse.com/security/cve/CVE-2026-24072.html * https://www.suse.com/security/cve/CVE-2026-28780.html * https://www.suse.com/security/cve/CVE-2026-29168.html * https://www.suse.com/security/cve/CVE-2026-29169.html * https://www.suse.com/security/cve/CVE-2026-33006.html * https://www.suse.com/security/cve/CVE-2026-33007.html * https://www.suse.com/security/cve/CVE-2026-33523.html * https://www.suse.com/security/cve/CVE-2026-33857.html * https://www.suse.com/security/cve/CVE-2026-34032.html * https://www.suse.com/security/cve/CVE-2026-34059.html * https://bugzilla.suse.com/show_bug.cgi?id=1263935 * https://bugzilla.suse.com/show_bug.cgi?id=1263950 * https://bugzilla.suse.com/show_bug.cgi?id=1263951 * https://bugzilla.suse.com/show_bug.cgi?id=1263952 * https://bugzilla.suse.com/show_bug.cgi?id=1263953 * https://bugzilla.suse.com/show_bug.cgi?id=1263954 * https://bugzilla.suse.com/show_bug.cgi?id=1263955 * https://bugzilla.suse.com/show_bug.cgi?id=1263956 * https://bugzilla.suse.com/show_bug.cgi?id=1263957 *https://bugzilla.suse.com/show_bug.cgi?id=1264150 * https://bugzilla.suse.com/show_bug.cgi?id=1264163 . SUSE update for apache2 addresses 11 issues, enhancing security with important fixes. Update recommended for users.. apache2 security update,suse important patch,linux apache vulnerabilities,suse advisory 2026. . Severity: Important. LinuxSecurity.com Team
Jun 23, 2026
•Important
SuSE
100
security advisoryimportantbusyboxSUSE 16.0 Busybox Important Heap Buffer Overflow Vuln 2026-22020-1
An update that solves one vulnerability can now be installed.. # Security update for busybox Announcement ID: SUSE-SU-2026:22020-1 Release Date: 2026-06-02T13:49:06Z Rating: important References: * bsc#1263989 Cross-References: * CVE-2026-29004 CVSS scores: * CVE-2026-29004 ( SUSE ): 7.2 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-29004 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-29004 ( NVD ): 7.2 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-29004 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for busybox fixes the following issue * CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client (bsc#1263989). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-876=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-876=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * busybox-static-1.37.0-160000.6.1 * busybox-1.37.0-160000.6.1 * busybox-debuginfo-1.37.0-160000.6.1 * busybox-static-debuginfo-1.37.0-160000.6.1 * busybox-debugsource-1.37.0-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.6.1 * busybox-warewulf3-1.37.0-160000.6.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * busybox-static-1.37.0-160000.6.1 * busybox-1.37.0-160000.6.1 * busybox-debuginfo-1.37.0-160000.6.1 * busybox-static-debuginfo-1.37.0-160000.6.1 * busybox-debugsource-1.37.0-160000.6.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.6.1 * busybox-warewulf3-1.37.0-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-29004.html * https://bugzilla.suse.com/show_bug.cgi?id=1263989 . SUSE releases important update for busybox addressing a heap buffer overflow issue, requires installation for security.. busybox security update, SUSE Linux patch, heap buffer overflow, patch instructions. . Severity: Important. LinuxSecurity.com Team
Jun 08, 2026
•Important
SuSE
202
security advisoryimportantinformation disclosureopenSUSE Leap 16.0 xorg-x11-server Important Security Alert 2026-20896-1
-------------------------------------------------------------. openSUSE security update: security update for xorg-x11-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20896-1 Rating: important References: * bsc#1266294 * bsc#1266295 * bsc#1266296 * bsc#1266297 * bsc#1266298 * bsc#1266299 * bsc#1266300 * bsc#1266301 * bsc#1266302 Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that has 9 bug fixes can now be installed. Description: This update for xorg-x11-server fixes the following issues: - CreateSaverWindow Use-After-Free Information Disclosure. (bsc#1266301) - DRI2 DRIGetBuffers/DRIGetBuffersWithFormat Out-Of-Bounds Write. (bsc#1266302) - Font Alias Stack-based Buffer Overflow. (bsc#1266294) - GLX ChangeDrawableAttributes Out-Of-Bounds Read/Write. (bsc#1266300) - XKB Key Types Stack-based Buffer Overflow. (bsc#1266296) - XKB SetMap Request Stack-based Buffer Overflow. (bsc#1266297) - XSYNC Use-After-Free in FreeCounter(). (bsc#1266298) - XSYNC Use-After-Free in miSyncDestroyFence(). (bsc#1266295) - XSYNC Use-After-Free in SyncChangeCounter(). (bsc#1266299) Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-882=1 Package List: - openSUSE Leap 16.0: xorg-x11-server-21.1.15-160000.5.1 xorg-x11-server-Xvfb-21.1.15-160000.5.1 xorg-x11-server-extra-21.1.15-160000.5.1 xorg-x11-server-sdk-21.1.15-160000.5.1 xorg-x11-server-source-21.1.15-160000.5.1 xorg-x11-server-wrapper-21.1.15-160000.5.1 . Significant security update for xorg-x11-server on openSUSE Leap 16.0 addressing multiple critical issues.. openSUSE security update,xorg-x11-server bug fixes,system patch instructions. . Severity: Important.LinuxSecurity.com Team
Jun 05, 2026
•Important
OpenSUSE
100
security advisorysecurity updateimportantopenSUSE Rootlesskit Important Security Update Vulnern 2026-2044-1
# Security update for rootlesskit Announcement ID: SUSE-SU-2026:2044-1 Release Date: 2026-05-22T05:54:39Z Rating: important References:. # Security update for rootlesskit Announcement ID: SUSE-SU-2026:2044-1 Release Date: 2026-05-22T05:54:39Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rootlesskit rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2044=1 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-2044=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2044=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2044=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * rootlesskit-1.1.1-150600.3.4.1 * rootlesskit-debuginfo-1.1.1-150600.3.4.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rootlesskit-1.1.1-150600.3.4.1 * rootlesskit-debuginfo-1.1.1-150600.3.4.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-1.1.1-150600.3.4.1 * rootlesskit-debuginfo-1.1.1-150600.3.4.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rootlesskit-1.1.1-150600.3.4.1 * rootlesskit-debuginfo-1.1.1-150600.3.4.1 .SUSE security advisory for rootlesskit addresses important update for openSUSE and other distributions. Learn more.. SUSE Security Advisory, rootlesskit update, openSUSE Patch, Linux Security, container security. . Severity: Important. LinuxSecurity.com Team
May 22, 2026
•Important
SuSE
100
security advisoryimportantOpenSUSEopenSUSE Leap Buildah Important Security Update SUSE-2026-2034-1
# Security update for buildah Announcement ID: SUSE-SU-2026:2034-1 Release Date: 2026-05-20T09:38:26Z Rating: important References:. # Security update for buildah Announcement ID: SUSE-SU-2026:2034-1 Release Date: 2026-05-20T09:38:26Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for buildah rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-2034=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2034=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2034=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2034=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2034=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * buildah-1.35.5-150400.3.63.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.63.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.63.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) *buildah-1.35.5-150400.3.63.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * buildah-1.35.5-150400.3.63.1 . Install important buildah update for openSUSE Leap and SUSE Linux for enhanced security and performance.. SUSE Linux, buildah, important security update. . Severity: Important. LinuxSecurity.com Team
May 20, 2026
•Important
SuSE
100
security advisorysoftware updateimportantopenSUSE Podman Vital Security Enhancement 2026-1931-1 Released
# Security update for podman Announcement ID: SUSE-SU-2026:1931-1 Release Date: 2026-05-18T07:30:59Z Rating: important References:. # Security update for podman Announcement ID: SUSE-SU-2026:1931-1 Release Date: 2026-05-18T07:30:59Z Rating: important References: Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-1931=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-1931=1 ## Package List: * openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * podman-debuginfo-4.9.5-150300.9.73.1 * podman-remote-4.9.5-150300.9.73.1 * podman-4.9.5-150300.9.73.1 * podman-remote-debuginfo-4.9.5-150300.9.73.1 * podmansh-4.9.5-150300.9.73.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.73.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-debuginfo-4.9.5-150300.9.73.1 * podman-4.9.5-150300.9.73.1 . podman security update for openSUSE Leap 15.3 and SUSE Enterprise Storage 7.1 addresses important vulnerabilities. Install now.. Podman Security Update, OpenSUSE Security, SUSE Enterprise Patch, Secure Container Management. . Severity: Important. LinuxSecurity.com Team
May 18, 2026
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!