An update that solves three vulnerabilities can now be installed.. # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:21646-1 Release Date: 2026-05-15T15:50:45Z Rating: important References: * bsc#1264013 * bsc#1264450 * bsc#1265209 Cross-References: * CVE-2025-54518 * CVE-2026-43500 * CVE-2026-46300 CVSS scores: * CVE-2025-54518 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-54518 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-43500 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46300 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46300 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves three vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: * CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (bsc#1264013). * CVE-2026-46300: net: skbuff: propagate shared-frag marker through pskb_copy() (bsc#1265209). * CVE-2026-43500: rxrpc: unshare DATA/RESPONSE packets when paged frags are present (bsc#1264450). The following non security issues were fixed: * config: s390x/ppc64le: disable unsupported CONFIG_AFS_FS and CONFIG_AF_RXRPC (bsc#1264450). * io-wq: check that the predecessor is hashed in io_wq_remove_pending() (git- fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-427=1 ## Package List: * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-rt-6.4.0-45.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-rt-debugsource-6.4.0-45.1 * kernel-rt-devel-6.4.0-45.1 * kernel-rt-devel-debuginfo-6.4.0-45.1 ## References: * https://www.suse.com/security/cve/CVE-2025-54518.html * https://www.suse.com/security/cve/CVE-2026-43500.html * https://www.suse.com/security/cve/CVE-2026-46300.html * https://bugzilla.suse.com/show_bug.cgi?id=1264013 * https://bugzilla.suse.com/show_bug.cgi?id=1264450 * https://bugzilla.suse.com/show_bug.cgi?id=1265209 . An important security advisory covering three kernel vulnerabilities in SUSE Linux Micro 6.0 and their resolutions.. Kernel Security Fixes,SUSE Linux Micro,Security Update. . Severity: Important. LinuxSecurity.com Team
An update that solves three vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2025:4262-1 Release Date: 2025-11-26T15:07:47Z Rating: important References: * bsc#1242882 * bsc#1248672 * bsc#1249537 Cross-References: * CVE-2025-23145 * CVE-2025-38500 * CVE-2025-38616 CVSS scores: * CVE-2025-23145 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-23145 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-23145 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38500 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38500 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38616 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: * CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). * CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). * CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patchSUSE-2025-4262=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-4262=1 ## Package List: * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_33-default-debuginfo-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-16-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_7-debugsource-16-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_33-default-debuginfo-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_33-default-16-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_7-debugsource-16-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-23145.html * https://www.suse.com/security/cve/CVE-2025-38500.html * https://www.suse.com/security/cve/CVE-2025-38616.html * https://bugzilla.suse.com/show_bug.cgi?id=1242882 * https://bugzilla.suse.com/show_bug.cgi?id=1248672 * https://bugzilla.suse.com/show_bug.cgi?id=1249537 . An update for openSUSE kernel resolves three important issues. Install the patch to strengthen system security.. openSUSE Kernel Patch, Important Security Update, Linux Kernel Issues. . Severity: Important. LinuxSecurity.com Team
An update that solves three vulnerabilities and has two fixes is now available. . SUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:0185-1 Rating: moderate References: #1173902 #1173994 #1177355 #1177613 #1178469 Cross-References: CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 Affected Products: SUSE Enterprise Storage 7 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for samba fixes the following issues: - Update to 4.13.3 + libcli: smb2: Never print length if smb2_signing_key_valid() fails for crypto blob; (bso#14210); + s3: modules: gluster. Fix the error I made in preventing talloc leaks from a function; (bso#14486); + s3: smbd: Don't overwrite contents of fsp-> aio_requests[0] with NULL via TALLOC_FREE(); (bso#14515); + s3: spoolss: Make parameters in call to user_ok_token() match all other uses; (bso#14568); + s3: smbd: Quiet log messages from usershares for an unknown share; (bso#14590); + samba process does not honor max log size; (bso#14248); + vfs_zfsacl: Add missing inherited flag on hidden "magic" everyone@ ACE; (bso#14587); + s3-libads: Pass timeout to open_socket_out in ms; (bso#13124); + s3-vfs_glusterfs: Always disable write-behind translator; (bso#14486); + smbclient: Fix recursive mget; (bso#14517); + clitar: Use do_list()'s recursion in clitar.c; (bso#14581); + manpages/vfs_glusterfs: Mention silent skipping of write-behind translator; (bso#14486); + vfs_shadow_copy2: Preserve all open flags assuming ROFS; (bso#14573); + interface: Fix if_index is not parsed correctly; (bso#14514); - Update to 4.13.2 + s3: modules:vfs_glusterfs: Fix leak of char **lines onto mem_ctx on return; (bso#14486); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); + smb.conf.5: Add clarification how configuration changes reflected by Samba; (bso#14538); + daemons: Report status to systemd even when running in foreground; (bso#14552); + DNS Resolver: Support both dnspython before and after 2.0.0; (bso#14553); + s3-vfs_glusterfs: Refuse connection when write-behind xlator is present; (bso#14486); + provision: Add support for BIND 9.16.x; (bso#14487); + ctdb-common: Avoid aliasing errors during code optimization; (bso#14537); + libndr: Avoid assigning duplicate versions to symbols; (bso#14541); + docs: Fix default value of spoolss:architecture; (bso#14522); + winbind: Fix a memleak; (bso#14388); + s4:dsdb:acl_read: Implement "List Object" mode feature; (bso#14531); + docs-xml/manpages: Add warning about write-behind translator for vfs_glusterfs; (bso#14486); + nsswitch/nsstest.c: Avoid nss function conflicts with glibc nss.h. + vfs_shadow_copy2: Avoid closing snapsdir twice; (bso#14530); + third_party: Update resolv_wrapper to version 1.1.7; (bso#14547); + examples:auth: Do not install example plugin; (bso#14550); + ctdb-recoverd: Drop unnecessary and broken code; (bso#14513); + RN: vfs_zfsacl: Only grant DELETE_CHILD if ACL tag is special; (bso#14471); - Adjust smbcacls '--propagate-inheritance' feature to align with upstream; (bsc#1178469). - Update to samba 4.13.1 + CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with easily crafted records; (bsc#1177613); (bso#14472); + CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994); (bso#14436); + CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify; (bsc#1173902); (bso#14434); - Adjust systemd tmpfiles.d configuration, use/run/samba instead of /var/run/samba; (bsc#1177355); Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2021-185=1 Package List: - SUSE Enterprise Storage 7 (aarch64 x86_64): ctdb-4.13.3+git.181.fc4672a5b81-3.3.1 ctdb-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-binding0-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc-binding0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc0-4.13.3+git.181.fc4672a5b81-3.3.1 libdcerpc0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-krb5pac0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-krb5pac0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-nbt0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-nbt0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-standard0-4.13.3+git.181.fc4672a5b81-3.3.1 libndr-standard0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libndr1-4.13.3+git.181.fc4672a5b81-3.3.1 libndr1-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi0-4.13.3+git.181.fc4672a5b81-3.3.1 libnetapi0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-credentials0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-credentials0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-errors0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-errors0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-hostconfig0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-hostconfig0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-passdb0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-passdb0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-util0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamba-util0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsamdb0-4.13.3+git.181.fc4672a5b81-3.3.1 libsamdb0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbclient0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbconf0-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbconf0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbldap2-4.13.3+git.181.fc4672a5b81-3.3.1 libsmbldap2-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libtevent-util0-4.13.3+git.181.fc4672a5b81-3.3.1 libtevent-util0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 libwbclient0-4.13.3+git.181.fc4672a5b81-3.3.1 libwbclient0-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-4.13.3+git.181.fc4672a5b81-3.3.1 samba-ceph-4.13.3+git.181.fc4672a5b81-3.3.1 samba-ceph-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-client-4.13.3+git.181.fc4672a5b81-3.3.1 samba-client-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-debugsource-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-python3-4.13.3+git.181.fc4672a5b81-3.3.1 samba-libs-python3-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 samba-winbind-4.13.3+git.181.fc4672a5b81-3.3.1 samba-winbind-debuginfo-4.13.3+git.181.fc4672a5b81-3.3.1 References: https://www.suse.com/security/cve/CVE-2020-14318.html https://www.suse.com/security/cve/CVE-2020-14323.html https://www.suse.com/security/cve/CVE-2020-14383.html https://bugzilla.suse.com/1173902 https://bugzilla.suse.com/1173994 https://bugzilla.suse.com/1177355 https://bugzilla.suse.com/1177613 https://bugzilla.suse.com/1178469 . SUSE has released a security update for Samba that resolves a trio of vulnerabilities, providing solutions categorized as having moderate severity for Enterprise Storage systems.. Samba Update, SUSE Security Patch, Software Vulnerability Fix. . LinuxSecurity.com Team
An update that fixes three vulnerabilities is now available. . openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:1929-1 Rating: important References: #1178630 #1178703 Cross-References: CVE-2020-16013 CVE-2020-16016 CVE-2020-16017 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for chromium fixes the following issues: Update to 86.0.4240.198 (boo#1178703) - CVE-2020-16013: Inappropriate implementation in V8 - CVE-2020-16017: Use after free in site isolation Update to 86.0.4240.193 (boo#1178630) - CVE-2020-16016: Inappropriate implementation in base. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-1929=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-1929=1 - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2020-1929=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-1929=1 Package List: - openSUSE Leap 15.2 (x86_64): chromedriver-86.0.4240.198-lp152.2.48.1 chromedriver-debuginfo-86.0.4240.198-lp152.2.48.1 chromium-86.0.4240.198-lp152.2.48.1 chromium-debuginfo-86.0.4240.198-lp152.2.48.1 - openSUSE Leap 15.1 (x86_64): chromedriver-86.0.4240.198-lp151.2.153.1 chromedriver-debuginfo-86.0.4240.198-lp151.2.153.1 chromium-86.0.4240.198-lp151.2.153.1 chromium-debuginfo-86.0.4240.198-lp151.2.153.1 - openSUSE Backports SLE-15-SP2 (aarch64 x86_64): chromedriver-86.0.4240.198-bp152.2.29.1 chromedriver-debuginfo-86.0.4240.198-bp152.2.29.1 chromium-86.0.4240.198-bp152.2.29.1 chromium-debuginfo-86.0.4240.198-bp152.2.29.1 - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-86.0.4240.198-bp151.3.122.1 chromium-86.0.4240.198-bp151.3.122.1 References: https://www.suse.com/security/cve/CVE-2020-16013.html https://www.suse.com/security/cve/CVE-2020-16016.html https://www.suse.com/security/cve/CVE-2020-16017.html https://bugzilla.suse.com/1178630 https://bugzilla.suse.com/1178703 _______________________________________________ openSUSE Security Announce mailing list --
Get the latest Linux and open source security news straight to your inbox.