SUSE-SU-2026:5066-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: Denial of service via panic on malformed CRL BIT STRING bsc1282250. - CVE-2026-93600: rustls-webpki: URI name constraint bypass in X.509 certificates bsc1282250. - CVE-2026-93601: rustls-webpki: DN...

SUSE-SU-2026:5065-1 Security update for gvfs

This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation bsc1280058...

SUSE-SU-2026:5064-1 Security update for python-PyJWT

This update for python-PyJWT fixes the following issues: - CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint bsc1283060. - CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response bsc1283061. -...

SUSE-SU-2026:5063-1 Security update for libsoup

This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling bsc1283831...

SUSE-SU-2026:5062-1 Security update for libsoup

This update for libsoup fixes the following issue: - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling bsc1283831...

SUSE-SU-2026:5061-1 Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: - Upgrade to...

SUSE-SU-2026:5059-1 Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:5058-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. -...

SUSE-SU-2026:5055-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. -...

SUSE-SU-2026:5053-1 Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:5052-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

SUSE-SU-2026:5048-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

SUSE-SU-2026:5042-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issue: - CVE-2026-112307: arbitrary code execution via unescaped PHP output formatting bsc1286096...

SUSE-SU-2026:5039-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. - CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917...

SUSE-SU-2026:5038-1 Security update for python-Pillow

This update for python-Pillow fixes the following issues: - CVE-2026-96636: decompression-bomb protection bypass via multi-frame seek in MPO and DCX bsc1286802. - CVE-2026-96637: decompression bomb check bypass in SpiderImagePlugin.seek leads to unbounded allocation DoS bsc1286801. -...

SUSE-SU-2026:5037-1 Security update for nodejs24

This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent bsc1286565. - CVE-2026-105482: dns.resolve truncates names containing NUL char bsc1286561. - CVE-2026-105483: TLS...

SUSE-SU-2026:5036-1 Security update for nodejs22

This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent bsc1286565. - CVE-2026-105482: dns.resolve truncates names containing NUL char bsc1286561. - CVE-2026-106069: TLS certificate hostname bypass...

SUSE-SU-2026:5035-1 Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release...

SUSE-SU-2026:5034-1 Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

SUSE-SU-2026:5020-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter bsc1272874. -...

SUSE-SU-2026:5019-1 Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

SUSE-SU-2026:4637-2 Security update for gcc48

This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

SUSE-SU-2026:4637-1 Security update for gcc48

This update for gcc48 fixes the following issue: - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

SUSE-SU-2026:24537-1 Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24534-1 Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24535-1 Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24538-1 Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24536-1 Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-RU-2026:5018-1 Recommended update for openssl-3

This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSLALLOWCMSUNAUTHENTICATEDAEAD is defined and set to a non-zero value. bsc1281325...

SUSE-SU-2026:5017-1 Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j

This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation when processing knownhosts entries...

SUSE-SU-2026:24528-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24530-1 Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24526-1 Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24527-1 Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24533-1 Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968...

SUSE-SU-2026:24532-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24529-1 Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24531-1 Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-6396...

SUSE-SU-2026:24525-1 Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24523-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24522-1 Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: - CVE-2026-64053: block: don't overwrite bipvcnt in biointegritycopyuser bsc1272986. - CVE-2026-64217: netfs: Fix overrun check in netfsextractuseriter...

SUSE-SU-2026:24524-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...

SUSE-SU-2026:24521-1 Security update for the Linux Kernel RT (Live Patch 17 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.38.1 fixes various security issues: The following security issues were fixed: - CVE-2026-74469: sctp: prevent peer transport count overflow bsc1280693. - CVE-2026-80521: afunix: Unlink sccentry in unixdeledge bsc1282495. -...

SUSE-SU-2026:24520-1 Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.39.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686...

SUSE-SU-2026:24558-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Update CUDA and non-CUDA variant to 580.196.07 bsc1286887. - Added CVEs for security release 580.178.04 bsc1270255: CVE-2026-47587, CVE-2026-47567, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518,...

SUSE-SU-2026:24513-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: - Update CUDA and non-CUDA variant to 580.196.07 bsc1286887. - Added CVEs for security release 580.178.04 bsc1270255: CVE-2026-47587, CVE-2026-47567, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518,...

SUSE-SU-2026:24578-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6:...

SUSE-SU-2026:24512-1 Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6:...

SUSE-SU-2026:24511-1 Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. - CVE-2026-64217...

SUSE-SU-2026:24595-1 Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. - CVE-2026-64217...