Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 bsc1275791. Changes for webkit2gtk3: Update to...

Security update for microcode_ctl

This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20260812 release bsc1274785 Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. Intel CPU Microcode was updated to the 20260811 release bsc1274785 Security...

SUSE-SU-2026:4019-1 Security update for microcode_ctl

This update for microcodectl fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...

SUSE-SU-2026:4016-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

SUSE-SU-2026:4013-1 Security update for postgresql17

This update for postgresql17 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

SUSE-SU-2026:4007-1 Security update for file-roller

This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parseprogressline for 7z and RAR handlers bsc1276442...

SUSE-SU-2026:4006-1 Security update for java-21-openjdk

This update for java-21-openjdk fixes the following issues: Security issues fixed: - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. - CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Non security issue fixed: ...

Security update for openexr

This update for openexr fixes the following issues: CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation bsc1276850. CVE-2026-61555: crashing occurs when...

Security update for openexr

This update for openexr fixes the following issues: CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes bsc1276849. CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode write...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: CVE-2026-28984,CVE-2026-43804,CVE-2026-64713,CVE-2026-64719,CVE-2026-64728, CVE-2026-64730,CVE-2026-64757,CVE-2026-64783,CVE-2026-64787: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 bsc1275791. Changes for webkit2gtk3: Update to...

Security update for libidn

This update for libidn fixes the following issue: CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed f...

SUSE-SU-2026:4000-1 Security update for libidn

This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70906: OpenJDK: Improve font loading bsc1275763. CVE-2026-70907: OpenJDK: Enhance TLS server bsc127576...

Security update for emacs

This update for emacs fixes the following issues: code execution upon opening arbitrary file bsc1275941. CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927. Patch Instructions: To install this SUSE updat...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE CVE-2026-84383

libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF item graph using nested iden and auxl references can make HeifPixelImage::transferchannelfromimageas append duplicate Alpha planes with different bit depths to mstorage...

SUSE CVE-2026-84384

libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and unci image data can cause decompressbrotli and doinflate to grow accumulated output without an effective size limit or MemoryHandle accounting. The brotli path has no outpu...

SUSE CVE-2026-84444

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITHUNCOMPRESSEDCODEC is enabled, heifcontextaddimagetile accepts an independently constructed tile whose component-plane dimensions do not match the tile geometry established by the prototype image...

SUSE CVE-2026-84446

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence timing and edit-list data can make Track::initsampletimingtable compute a logical mnumoutputsamples value that exceeds the uint32t counters used by TrackVisual::decodenextimagesample and...

SUSE CVE-2026-84447

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and iden reference graphs can repeatedly decode the same base image because processedids is copied per branch and ImageItem::decodeimage has no shared operation budget. This vulnerability is fix...