SUSE-SU-2015:1379-1 Security update for MozillaFirefox

This security update bsc940918 fixes the following issues: MFSA 2015-78: CVE-2015-4495, bmo1178058: Same origin violation Remove PlayPreview registration from PDF Viewer bmo1179262...

SUSE-SU-2015:1224-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP3 Teradata kernel was updated to fix the following bugs and security issues. The following security issues have been fixed: - Update patches.fixes/udp-fix-behavior-of-wrong-checksums.patch bsc936831, CVE-2015-5364, CVE-2015-5366. - Btrfs: make xattr replace operatio...

SUSE-SU-2015:1268-1 Security update for MozillaFirefox, mozilla-nspr, mozilla-nss

MozillaFirefox, mozilla-nspr and mozilla-nss were updated to fix 17 security issues. For more details please check the changelogs. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards bsc935979. - CVE-2015-2728: Type confusion in Index...

SUSE-SU-2015:1378-1 Security update for libwmf

libwmf was updated to fix four security issues. These security issues were fixed: - CVE-2015-4588: Heap-based buffer overflow in the DecodeImage function allowed remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted 'run-length count' in an image in ...

SUSE-SU-2015:1127-1 Security update for xorg-x11-server

The X Server was updated to fix 1 security issues and 4 bugs: Security issues: - CVE-2015-3418: Fixed a regression introduced by CVE-2014-8092 in PutImage that caused crashes when called with 0 height bnc928520. Bugs fixed: - Xephyr: Don't crash when no command line argument is specified The DDX...

SUSE-SU-2015:1179-1 Security update for libgcrypt

This update of libgcrypt fixes one security issue and brings various FIPS 140-2 related improvements. libgcrypt now uses ciphertext blinding for Elgamal decryption CVE-2014-3591 FIPS 140-2 related changes: The library performs its self-tests when the module is complete the -hmac file is also...

SUSE-SU-2015:1519-1 Security update for qemu

qemu was updated to fix two security issues and augments one non-security bug fix. The following vulnerabilities were fixed: CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape XSA-135 bsc932770 CVE-2015-4037: Avoid predictable directory name for smb config bsc9322...

SUSE-SU-2015:1019-1 Security update for patch

The GNU patch utility was updated to 2.7.5 to fix three security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-1196: directory traversal flaw when handling git-style patches. This could allow an attacker to overwrite arbitrary files by tricking the user into...

SUSE-SU-2015:0865-1 Security update for ntp

ntp was updated to fix two security related flaws as well as 'slew' mode handling for leap seconds. The following vulnerabilities were fixe: ntpd could accept unauthenticated packets with symmetric key crypto. CVE-2015-1798 ntpd authentication did not protect symmetric associations against DoS...

SUSE-SU-2015:0722-1 Security update for Adobe Flash Player

Adobe Flash Player was updated to 11.2.202.457 to fix several security issues that could lead to remote code execution. An exploit for CVE-2015-3043 was reported to exist in the wild. The following vulnerabilities were fixed: Memory corruption vulnerabilities that could lead to code execution...

SUSE-SU-2015:0751-1 Security update for mongodb

The MongoDB database did validate BSON incorrectly, which could have lead to remote attackers being able to crash the database before authentication. CVE-2015-1609 Security Issues: CVE-2015-1609...

SUSE-SU-2015:0657-1 Security update for wireshark

Wireshark was updated to 1.10.13 to fix bugs and security issues. The following security issues were fixed: The WCP dissector could crash. wnpa-sec-2015-07 CVE-2015-2188 bnc920696 The pcapng file parser could crash. wnpa-sec-2015-08 CVE-2015-2189 bnc920697 The TNEF dissector could go into an...

SUSE-SU-2015:0463-1 Security update for freetype2

The font rendering library freetype2 has been updated to fix various security issues. Security Issues: CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9660 CVE-2014-9661 CVE-2014-9662 CVE-2014-9667 CVE-2014-9666 CVE-2014-9665 CVE-2014-9664 CVE-2014-9663 CVE-2014-9659 CVE-2014-9668 CVE-2014-966...

SUSE-SU-2015:1086-4 Security update for IBM Java

java-170-ibm has been updated to version 1.7.0sr7.2 to fix 21 security issues. These security issues have been fixed: Unspecified vulnerability CVE-2014-3065. The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for...

SUSE-SU-2015:0259-1 Recommended update for ntp

This update for ntp provides the following fixes: Respect NTPDFORCESYNCONSTARTUP also for dynamic peers. bnc887957 Fix orphan mode. bnc883859...

SUSE-SU-2015:1185-1 Security update for openssl1

This OpenSSL update fixes the following issues: SRTP Memory Leak CVE-2014-3513 Session Ticket Memory Leak CVE-2014-3567 Build option no-ssl3 is incomplete CVE-2014-3568 Add support for TLSFALLBACKSCSV to mitigate CVE-2014-3566 POODLE Security Issues: CVE-2014-3513 CVE-2014-3567 CVE-2014-3566...

SUSE-SU-2015:0792-1 Recommended update for coreutils

This update for coreutils provides the following fixes and enhancements: cp1 could read from freed memory and could even make corrupt copies. This could happen with a very fragmented and sparse input file, on file systems supporting filemap extent scanning. bnc892862 Improve ls1 efficiency on lar...

SUSE-SU-2015:0736-1 Security update for Linux kernel

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: CVE-2014-1739: The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a...

SUSE-RU-2015:0410-1 Security update for openstack-dashboard

This update for openstack-dashboard fixes a cross-site scripting issue on the unorderedlist filter. bnc891815, CVE-2014-3594 Security Issues: CVE-2014-3475...

SUSE-RU-2015:0591-1 Recommended update for apache2-mod_nss

This update brings several improvements to apache2-modnss. More TLS 1.2 ciphers have been added, including AES-GCM and Camelia ciphers. These can be selected by their tags: o rsaaes128sha256 o rsaaes128gcmsha o rsaaes256sha256 o rsacamellia128sha o rsacamellia256sha o ecdhecdsaaes128gcmsha o...

SUSE-SU-2015:0901-1 Security update for libtasn1

libtasn1 has been updated to fix three security issues: asn1getbitder could have returned negative bit length CVE-2014-3468 Multiple boundary check issues could have allowed DoS CVE-2014-3467 Possible DoS by NULL pointer dereference in asn1readvaluetype CVE-2014-3469 Security Issues: CVE-2014-346...

SUSE-SU-2015:0392-1 Security update for IBM Java 6

IBM Java 6 SR15 has been released and fixes lots of bugs and security issues. More information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/ Security Issue references: CVE-2013-5458 CVE-2013-5456 CVE-2013-5457 CVE-2013-4041 CVE-2013-5375 CVE-2013-5372 CVE-2013-5843...

SUSE-SU-2015:0259-2 Recommended update for ntp

This collective update for the Network Time Protocol daemon ntp provides fixes for the following reports: 758253: ntp fails if a host has more than 1024 IP addresses 771480: sntp not able to sync against Windows ntp server...

SUSE-SU-2026:24056-1 Security update for nvidia-open-driver-G07-signed

This update for nvidia-open-driver-G07-signed fixes the following issues: - update non-CUDA variant to 595.104.02 bsc1283265 - fix build against Linux 7.3.0 RC bsc1278022 - re-disabled CXL support for now again following NVIDIA's advice bsc1280057 - update CUDA variant to 615.71.09 bsc1270255...

SUSE-SU-2026:22711-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

SUSE-SU-2026:4396-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one...

SUSE-SU-2026:4380-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

SUSE-SU-2026:4335-1 Security update for hplip

This update for hplip fixes the following issues: - CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. - CVE-2026-91098...

SUSE-SU-2026:23910-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

SUSE-SU-2026:4278-1 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads bsc1244528. - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:23602-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...

SUSE-SU-2026:4231-1 Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.73 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on devi...

SUSE-SU-2026:4213-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2026-63650: OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field bsc1275310. - CVE-2026-84732: Remote Denial of Service via...

SUSE-SU-2026:4180-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser bsc1274597. - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records bsc1274598. - CVE-2026-20339: integer overflow in the PESpin...

SUSE-SU-2026:4129-1 Security update for libzypp, zypper

This update for libzypp, zypper fixes the following issues: Security issue fixed: - invalidating legacy libzypp unsigned-repository cache state LIBZYPP-LEGACY-CACHE-01 bsc1274625. - hasCredentials requires both username AND password to be non-empty bsc1273242. - GPG Key hints in repoindex.xml...

SUSE-SU-2026:23695-1 Security update for libcupsfilters

This update for libcupsfilters fixes the following issues: - CVE-2026-64611: infinite-loop CPU-exhaustion DoS in cfIEEE1284NormalizeMakeModel on empty MDL field bsc1273145. - CVE-2026-64612: malformed PNG aborts CUPS image filter process bsc1273146...

SUSE-SU-2026:4087-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...

SUSE-SU-2026:23479-1 Security update for kernel-livepatch-MICRO-6-0_Update_29

This update for kernel-livepatch-MICRO-6-0Update29 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 29...

SUSE-SU-2026:4064-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

SUSE-SU-2026:4062-1 Security update for terraform-provider-null

This update for terraform-provider-null fixes the following issues: - CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1278269. - CVE-2026-84304: github.com/grpc/grpc-g...

SUSE-SU-2026:4047-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8926: password leak with netrc and user in URL bsc1268412. - CVE-2026-13608: flow in OpenLDAP SASL negotiation can...

SUSE-SU-2026:3998-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: Update to version jdk8u504 icedtea 3.40.1. - CVE-2026-60589: unauthenticated attacker with network access via multiple protocols can gain unauthorized read access to sensitive data bsc1275777. - CVE-2026-61308: unauthenticated attacker...

SUSE-SU-2026:3993-1 Security update for emacs

This update for emacs fixes the following issues: - code execution upon opening arbitrary file bsc1275941. - CVE-2026-77219: memory leak via the PBM/PPM/PGM image loader bsc1276264. - CVE-2026-79992: zero-click local command execution via TRAMP bsc1275927...

SUSE-SU-2026:23520-1 Security update for wget

This update for wget fixes the following issue: - CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE bsc1276962...

SUSE-SU-2026:3948-1 Security update for yast2-users

This update for yast2-users fixes the following issue: Update to version 4.6.7. - CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839...

SUSE-SU-2026:3945-1 Security update for yast2-users

This update for yast2-users fixes the following issue: Update to version 3.2.20. - CVE-2026-59680: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute bsc1272839...

SUSE-SU-2026:23564-1 Security update for librest

This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

SUSE-SU-2026:3855-1 Security update for python36

This update for python36 fixes the following issues: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF bytes bsc1261969. -...

SUSE-SU-2026:3818-1 Security update for docker

This update for docker rebuilds it against the current go security release...

SUSE-SU-2026:3714-1 Security update for Multi-Linux Manager Monitoring stack

This update fixes the following issues: prometheus-postgresexporter: - CVE-2022-21698: Replace github.com/prometheus/clientgolang with version 1.11.1 and prevent validation bypass and privilege escalation bsc1248699 golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass an...