MGASA-2026-0385 Updated dovecot package fixes security vulnerabilities

submission-login: Panic when mailmaxuseripconnections is reached: Panic: epollctldel, 8 failed: Bad file descriptor. CVE-2026-33263 Dovecot IMAP LIST matchsub Exponential Backtracking — CPU Denial of Service. CVE-2026-33607 DoS by sending mail with bad header. CVE-2026-27852 dsync: Mail content c...

CVE-2026-44315

free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's NEF mounts the 3gpp-pfd-management API without inbound OAuth2/bearer-token authorization. A network attacker who can reach NEF on the SBI can create, read, and delete PFD-management transaction state with a...

SUSE-SU-2022:1680-1 Security update for curl

This update for curl fixes the following issues: - CVE-2022-27776: Fixed Auth/cookie leak on redirect bsc1198766 - CVE-2022-22576: Fixed OAUTH2 bearer bypass in connection re-use bsc1198614...

SUSE-SU-2022:1657-1 Security update for curl

This update for curl fixes the following issues: - CVE-2022-27776: Fixed auth/cookie leak on redirect bsc1198766 - CVE-2022-27775: Fixed bad local IPv6 connection reuse bsc1198723 - CVE-2022-22576: Fixed OAUTH2 bearer bypass in connection re-use bsc1198614...