SUSE-SU-2026:4151-1 Security update for perl-Mojolicious

This update for perl-Mojolicious fixes the following issue: - CVE-2026-15747: exposing a stable representation of the session CSRF token to a BREACH compression oracle bsc1271431...

SUSE-SU-2026:4150-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. - CVE-2026-64834: Infinite...

SUSE-SU-2026:4149-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2026-58049: incorrect validation in the RASC video decoder can lead to an out-of-bounds heap write and memory corruption bsc1269550. - CVE-2026-64833: Out-of-Bounds Read via S/PDIF Muxer spdifenc.c bsc1272755. - CVE-2026-64834: Infinite...

SUSE-SU-2026:4148-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...

SUSE-SU-2026:4147-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

SUSE-SU-2026:4146-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

SUSE-SU-2026:4145-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...

SUSE-SU-2026:4144-1 Security update for NetworkManager

This update for NetworkManager fixes the following issues: - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. - CVE-2026-19685: missing user ownership checks for 802.1X directory properties can allow WPA-Enterprise server certificate validation...

SUSE-SU-2026:4143-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

SUSE-SU-2026:4141-1 Security update for libvirt

This update for libvirt fixes the following issues: - CVE-2026-18917: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow bsc1275863. - CVE-2026-61477: newline injection in network XML DNS TXT/SRV fields allows dnsmasq config directive injection bsc1274576. -...

SUSE-SU-2026:4140-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: This update ships Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the Remote...

SUSE-SU-2026:4139-1 Security update for dovecot23

This update for dovecot23 fixes the following issues: - CVE-2024-23184: parsing of messages containing many address headers From, To, Cc, Bcc, etc. could be excessively CPU intensive bsc1229184. - CVE-2024-23185: large headers can cause resource exhaustion when parsing message bsc1229183. -...

SUSE-SU-2026:23687-1 Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...

SUSE-SU-2026:2834-2 Security update for clamav

This update for clamav fixes the following issues - CVE-2026-20213: PE file format parser could allow an unauthenticated, remote attacker to cause a denial of service bsc1270107. - CVE-2026-20214: FSG file format parser could allow an unauthenticated, remote attacker to cause a denial of service...

SUSE-SU-2026:23677-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...

SUSE-SU-2026:23678-1 Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...

SUSE-SU-2026:23685-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23684-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23676-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...

SUSE-SU-2026:23683-1 Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23679-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in us...

SUSE-SU-2026:23681-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23686-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23682-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23680-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23674-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on devi...

SUSE-SU-2026:23673-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23675-1 Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtablist...

SUSE-SU-2026:23672-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in u...

SUSE-SU-2026:23728-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

SUSE-SU-2026:23671-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

SUSE-SU-2026:23707-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...

SUSE-SU-2026:23706-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser bsc1274597. - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records bsc1274598. - CVE-2026-20339: integer overflow in the PESpin...

SUSE-SU-2026:23727-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser bsc1274597. - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records bsc1274598. - CVE-2026-20339: integer overflow in the PESpin...

SUSE-SU-2026:23705-1 Security update for acl, attr

This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...

SUSE-SU-2026:23726-1 Security update for acl, attr

This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...

SUSE-SU-2026:23670-1 Security update for acl, attr

This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...

SUSE-SU-2026:4129-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...

SUSE-SU-2026:4128-1 Security update for php7

This update for php7 fixes the following issue: - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. Other changes: - Allow removal of apache2-modphp7 even if the php7 module is not enabled bsc1205782, bsc1276531...

SUSE-SU-2026:4126-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. - CVE-2026-65637: Apache Tomcat: HTTP/2...

SUSE-SU-2026:4125-1 Security update for azure-storage-azcopy

This update for azure-storage-azcopy fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276733. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation...

SUSE-SU-2026:3835-1 Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

SUSE-SU-2026:23704-1 Security update for ansible-core

This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369...

SUSE-SU-2026:23724-1 Security update for ansible-core

This update for ansible-core fixes the following issues: - CVE-2026-16493: argument injection in ansible-galaxy collection install via git clone bsc1272369...

SUSE-SU-2026:4123-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

SUSE-SU-2026:4122-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

SUSE-SU-2026:23702-1 Security update for python-jwcrypto

This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens bsc1277639. - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification bsc1278707...

SUSE-SU-2026:23722-1 Security update for python-jwcrypto

This update for python-jwcrypto fixes the following issues: - CVE-2026-80179: denial of service via malformed JWE tokens bsc1277639. - CVE-2026-84185: general JSON JWS kid binding bypass during JWKSet verification bsc1278707...

SUSE-SU-2026:4120-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

SUSE-SU-2026:23548-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: This update for google-osconfig-agent fixes the following issues: - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272118. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP...