SUSE-SU-2026:5130-1 Security update for python-certifi

This update for python-certifi fixes the following issues: - CVE-2024-39689: remove root certificates from GLOBALTRUST from the root store bsc1227519. - Removed eMudhra Intermediates due to compromise bsc1286261, bsc1287723. Changes for python-certifi: - Update to 2026.10.23...

SUSE-SU-2026:5127-1 Security update for flatpak

This update for flatpak fixes the following issues: - CVE-2026-34078: Arbitrary code execution via crafted symlinks in sandbox-expose options bsc1261769. - CVE-2026-34079: Arbitrary file deletion on host via improper cache file path validation bsc1261770. - CVE-2026-90616: missing symlink...

SUSE-SU-2026:5126-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA bsc1286261. Changes for mozilla-nss: - update to NSS 3.125.1 bsc1289144: bmo2088196 - backport nssckbi 2.92. bmo2082793 - Don't cache sessions when ECH was rejected. bmo2082792 - Keep DTLS handsha...

SUSE-SU-2026:5125-1 Security update for python-Brotli

This update for python-Brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution bsc1287779...

SUSE-SU-2026:5124-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image bsc1286378...

SUSE-SU-2026:5123-1 Security update for cpupower

This update for cpupower fixes the following issue: - CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open bsc1278335. Changes for cpupower: Release to latest kernel-source including these fixes: - intel-speed-select: Harden daemon pidfile open CVE-2026-80663 bsc1278335 ...

SUSE-SU-2026:5122-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...

SUSE-SU-2026:5121-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree bsc1252918. - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex...

SUSE-SU-2026:5120-1 Security update for perl-Text-CSV_XS

This update for perl-Text-CSVXS fixes the following issues: - CVE-2026-110752: unclamped RFC 7111 selector range pre-allocation in fragment can cause memory exhaustion via large index ranges bsc1286138. - CVE-2026-110754: unfreed field array memory leak on getline syntax errors can lead to proces...

SUSE-SU-2026:5119-1 Security update for helm

This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index validation and cause a process crash bsc1283642. - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption fr...

SUSE-SU-2026:5118-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19668: Resource Exhaustion via...

SUSE-SU-2026:5117-1 Security update for parted

This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image bsc1286017. - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize bsc1286018...

SUSE-SU-2026:5116-1 Security update for tomcat

This update for tomcat fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-74049: Jasper JSTL plug-in implementation omits page abort bsc1286555. - CVE-2026-80353: TOCTOU when creating unix domain sockets for the APR/Native...

SUSE-SU-2026:5111-1 Security update for cephfs

This update for cephfs fixes the following security issues: - CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in cephhandlecaps bsc1275472. - CVE-2026-43273: ceph: supply snapshot context in cephzeropartialobject bsc1264446. - CVE-2026-52961: ceph: fix BUGON in...

SUSE-SU-2026:5107-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686...

SUSE-SU-2026:5102-1 Security update for valkey

This update for valkey fixes the following issues: - Refresh patch for CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Valkey cluster publish message constructi...

SUSE-SU-2026:5101-1 Security update for aws-efs-utils

This update for aws-efs-utils fixes the following issues: Security issues fixed: - CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records bsc1272354. - CVE-2026-16318: s2n-tls: Denial of Service due to memory leak in QUIC transport parameters...

SUSE-SU-2026:5100-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...

SUSE-SU-2026:5099-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

SUSE-SU-2026:5098-1 Security update for xdg-desktop-portal

This update for xdg-desktop-portal fixes the following issues: - CVE-2026-40354: file deletion via symlink attack bsc1262045. - CVE-2026-55888: arbitrary file access due to SaveFiles files option path traversal bsc1287724. - CVE-2026-55889: drag-and-drop and copy-paste theft due to predictable...

SUSE-SU-2026:3509-1 Security update for php8

This update for php8 fixes the following issues: Update to version 8.3.33. Security issues fixed: - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. - CVE-2026-9672: security issues in libgd bsc1273078. -...

SUSE-SU-2026:5097-1 Security update for nvidia-open-driver-G07-signed

This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 bsc1286763. - Fix build against renamed -nvidia64kb flavor bsc1282794. - Fix build against Linux 7.3.0 RC bsc1278022. - Re-disabled CXL support for now again following NVIDIA's advice...

SUSE-SU-2026:5096-1 Security update for nvidia-open-driver-G07-signed

This update for nvidia-open-driver-G07-signed fixes the following issues: - Update non-CUDA variant to 595.112.07 bsc1286763. - Fix build against renamed -nvidia64kb flavor bsc1282794. - Fix build against Linux 7.3.0 RC bsc1278022. - Re-disabled CXL support for now again following NVIDIA's advice...

SUSE-SU-2026:5095-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2026-109964: heap buffer overwrite in PICT decoder on 32-bit systems bsc1285423...

SUSE-SU-2026:5094-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. - CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917...

SUSE-SU-2026:5093-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens bsc1283065. - CVE-2026-102270: an attacker can cause intensive CPU consumption bsc1283067...

SUSE-SU-2026:5092-1 Security update for valkey

This update for valkey fixes the following issues: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read. - Integer truncation in Valkey cluster publish message construction causes a heap...

SUSE-SU-2026:24550-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinf...

SUSE-SU-2026:5091-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3fscontextparseparam error path bsc1255222. - CVE-2026-31708: smb: client: fix OOB read in smb2ioctlqueryinfo QUERYINFO path...

SUSE-SU-2026:5090-1 Security update for parted

This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image bsc1286017. - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize bsc1286018...

SUSE-SU-2026:5089-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...

SUSE-SU-2026:5088-1 Security update for the Linux Kernel (Live Patch 87 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.328 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs bsc1280760. -...

SUSE-SU-2026:5087-1 Security update for xen

This update for xen fixes the following issues: Security issue fixed: - CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy bsc1288663. Non security issue fixed: - Xen: Missing upstream bug fixes bsc1027519...

SUSE-SU-2026:5086-1 Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment bsc1274712. - CVE-2026-74469: sctp: prevent peer transport count overflow...

SUSE-SU-2026:5085-1 Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. - CVE-2026-89544: SUNRPC: fix gssxdecoptionarray error path bugs bsc1280760. -...

SUSE-SU-2026:5084-1 Security update for the Linux Kernel (Live Patch 59 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.240 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. - CVE-2026-89551: SUNRPC: xdrbuftrim: clamp buf-len to avoid underflow...

SUSE-SU-2026:24604-1 Security update for google-cloud-sap-agent

This update for google-cloud-sap-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers bsc1286994. - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing-related headers bsc1287058. -...

SUSE-SU-2026:5082-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution bsc1286926. - RainerScript replace length wrap bsc1285036...

SUSE-SU-2026:5080-1 Security update for gvfs

This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation bsc1280058...

SUSE-SU-2026:5079-1 Security update for sssd

This update for sssd fixes the following issues: - CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free bsc1269807. - CVE-2026-68742: unvalidated address lengths in NSS responder packet parsing can cause a heap...

SUSE-SU-2026:5078-1 Security update for cups

This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure bsc1263116. - CVE-2026-105326: argument injection in mailto notifier allows unauthenticated remote code execution bsc1284274...

SUSE-SU-2026:5077-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

SUSE-SU-2026:5076-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

SUSE-SU-2026:5075-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed bsc1284043. - CVE-2026-42528: memory calculation bug in moddav allows an attacker with permission to creat...

SUSE-SU-2026:5074-1 Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release...

SUSE-SU-2026:5073-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-74049: Jasper JSTL plug-in implementation omits page abort bsc1286555. - CVE-2026-88041: Information disclosure via incomplete HTTP trailer cleanup...

SUSE-SU-2026:5071-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-11856: cross-origin Digest auth state leak bsc1268426. - CVE-2026-12064: proto-default skips SSH verification bsc1268427. - CVE-2026-19931: Negotiate ambient user...

SUSE-SU-2026:5069-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-9546: sending old referer bsc1268419. - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop bsc1268423. - CVE-2026-11564: Native CA trust persist bsc1268424....

SUSE-SU-2026:5068-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse bsc1268414. - CVE-2026-9546: sending old referer bsc1268419. - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop bsc1268423. - CVE-2026-11564: Native CA trust persist bsc1268424....

SUSE-SU-2026:5067-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non...