SUSE-SU-2026:24130-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: - version update to 1.6.59: Fixed CVE-2026-46675 medium severity: Use-after-free of zlib input in...

SUSE-SU-2026:24129-1 Security update for gcc13

This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

SUSE-SU-2026:24116-1 Security update for gcc13

This update for gcc13 fixes the following issue: Update to GCC 13.5: - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

SUSE-SU-2026:4612-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. - CVE-2026-88815: numeric value incorrectly treated as strings in sqltypecastsvpv allows for process crash bsc1283055. -...

SUSE-SU-2026:4611-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - imdtls permitted-peer authorization bypass bsc1281628. Changes for rsyslog: - Upgrade to version 8.2608.0 bsc1257604...

SUSE-SU-2026:4610-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host bsc1280236. - CVE-2026-92162: path traversal via unvalidated arch parameter in DeployAppstream bsc128251...

SUSE-SU-2026:4608-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19666: Use-after-free in...

SUSE-SU-2026:24128-1 Security update for unbound

This update for unbound fixes the following issues: - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass window bsc1280404. - CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re-transmission...

SUSE-SU-2026:24127-1 Security update for virtiofsd

This update for virtiofsd fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257912. Changes for virtiofsd: Update the time crate bsc1257912, CVE-2026-25727 Add command line options for UID/GID translation...

SUSE-SU-2026:4606-1 Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infini...

SUSE-SU-2026:24126-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint bsc1283060. - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response bsc1283061. -...

SUSE-SU-2026:4605-1 Security update for fetchmail

This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055...

SUSE-SU-2026:4604-1 Security update for fetchmail

This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055...

SUSE-SU-2026:4603-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. - CVE-2026-6103: Archive entry injection via...

SUSE-SU-2026:4602-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. - CVE-2026-6103: Archive entry injection via...

SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana

This update for grafana, system-user-grafana fixes the following issues: - Update to version 12.4.10: Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials bsc1275934 CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver...

SUSE-SU-2026:4598-1 Security update for ghostscript

This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620...

SUSE-SU-2026:4597-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path bsc1280433. - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dnsncacheadd bsc1280435. - CVE-2026-80274: Validating resolver can abort whi...

SUSE-SU-2026:4595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderpars...

SUSE-SU-2026:4594-1 Security update for emacs

This update for emacs fixes the following issue: - CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE bsc1282390...

SUSE-SU-2026:4592-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing bsc1283767...

SUSE-SU-2026:4591-1 Security update for glibc

This update for glibc fixes the following issues: - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-6791: wordexp: unbounded alloca strndupa in parsetilde bsc1274723. - CVE-2026-8674: reachable assert in...

SUSE-SU-2026:4590-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

SUSE-SU-2026:4589-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications bsc1271152. - CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token...

SUSE-SU-2026:4588-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914...

SUSE-SU-2026:4587-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. - Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd...

SUSE-SU-2026:24121-1 Security update for python-tornado6

This update for python-tornado6 fixes the following issues: - CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725. - CVE-2026-91990: splitting of multipart da...

SUSE-SU-2026:4585-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: - Security issues: CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling bsc1266608 CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8...

SUSE-SU-2026:4584-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push was updated to version 5.2.5: - Removed token based authentication mechanism for packagepush bsc1230949 spacecmd was updated to version 5.2.10: - Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 -...

SUSE-SU-2026:4583-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: mgr-push: - Version 5.2.5-0 Remove token based authentication mechanism for packagepush bsc1230949 spacecmd: - Version 5.2.10-0 Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 - Version 5.2.9-0 Update...

SUSE-SU-2026:4582-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

SUSE-SU-2026:4581-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

SUSE-SU-2026:4580-1 Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: scap-security-guide was updated to version 0.1.79: - Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control...

SUSE-SU-2026:4571-1 Security update 5.2.1 for Multi-Linux Manager Server

This update fixes the following issues: Release Notes Highlights: - Added a note about the SUSE Registry IP address change. - Update to SUSE Multi-Linux Manager 5.2.1 Security fixes Ubuntu 26.04 LTS Support Confidential Computing Attestation for IBM Z Series New uyuni-tftpd Container Monitoring:...

SUSE-SU-2026:24119-1 Security update for libXi

This update for libXi fixes the following issues: - CVE-2026-93541: out-of-bounds read in XQueryDeviceState bsc1281605. - CVE-2026-93542: out-of-bounds read in XI2 class parsing via sizeclasses and copyclasses bsc1281606. - CVE-2026-93543: out-of-bounds read in XI2 class parser bsc1281608. -...

SUSE-SU-2026:24118-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. - CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser bsc1281657. -...

SUSE-SU-2026:24117-1 Security update for librsvg

This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities bsc1282612. Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for...

SUSE-SU-2026:4254-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsyn...

SUSE-SU-2026:4570-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension header...

SUSE-SU-2026:4568-1 Security update for rpcbind

This update for rpcbind fixes the following issues: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list formatting bsc1272340. - CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service bsc1282326...

SUSE-SU-2026:4567-1 Security update for fetchmail

This update for fetchmail fixes the following issue: - CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055...

SUSE-SU-2026:4566-1 Security update for libXtst

This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser bsc1281665...

SUSE-SU-2026:4565-1 Security update for libXtst

This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser bsc1281665...

SUSE-SU-2026:4561-1 Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension header...

SUSE-SU-2026:4560-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587...

SUSE-SU-2026:4559-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-fr...

SUSE-SU-2026:24115-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...

SUSE-SU-2026:24114-1 Security update for swtpm

This update for swtpm fixes the following issues: Security issue fixed: - CVE-2026-75900: Out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653. Changes for swtpm: Update to 0.10.2: Properly check for truncation following snprintf call - add upstream...

SUSE-SU-2026:4558-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...

SUSE-SU-2026:4557-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame bsc1271401. - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711:...