SUSE-SU-2026:3818-1 Security update for docker

This update for docker rebuilds it against the current go security release...

SUSE-SU-2026:3817-1 Security update for buildah

This update for buildah rebuilds it against the current go security release...

SUSE-SU-2026:3816-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead t...

SUSE-SU-2026:3815-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

SUSE-SU-2026:3814-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409...

SUSE-SU-2026:3813-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues in releases prior to...

SUSE-SU-2026:3812-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues in releases prior to...

SUSE-SU-2026:3810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in...

SUSE-SU-2026:23335-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23286-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23334-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23285-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23332-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23333-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23331-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23283-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23282-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:23284-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

SUSE-SU-2026:3809-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2026-23204: net: add skbheaderpointercareful helper bsc1258340. - CVE-2026-52986: netfilter:...

SUSE-SU-2026:23280-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. - CVE-2026-46037: ipv4: icmp: validate reply type before using...

SUSE-SU-2026:23281-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. - CVE-2026-46037: ipv4: icmp: validate reply type before using...

SUSE-SU-2026:23329-1 Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. - CVE-2026-46037: ipv4: icmp: validate reply type before using...

SUSE-SU-2026:23330-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues. The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1269282. - CVE-2026-46037: ipv4: icmp: validate reply type before using...

SUSE-SU-2026:23328-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in cephxdecrypt bsc1272139. - CVE-2026-53224: sctp: validate embedded INIT chunk and address...

SUSE-SU-2026:23279-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues. The following security issues were fixed: - CVE-2026-52956: libceph: Fix potential out-of-bounds access in cephxdecrypt bsc1272139. - CVE-2026-53224: sctp: validate embedded INIT chunk and address...

SUSE-SU-2026:3808-1 Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

SUSE-SU-2026:3807-1 Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. - CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT...

SUSE-SU-2026:3806-1 Security update for qemu

This update for qemu fixes the following issue: - CVE-2026-3886: QEMU calcimagehostmem Integer Overflow Local Privilege Escalation Vulnerability bsc1268061. Changes for qemu: - Bug fixes: target/s390x: Make container ids in SysIB15x 1-based bsc1275490 target/s390x: move @deprecated-props to...

SUSE-SU-2026:3803-1 Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: - CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218...

SUSE-SU-2026:3801-1 Security update for git-lfs

This update for git-lfs fixes the following issue: - CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist bsc1252259. Changes for git-lfs: - update to 3.7.1...

SUSE-SU-2026:3800-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

SUSE-SU-2026:3799-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead t...

SUSE-SU-2026:3798-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-5773: wrong reuse of SMB connection bsc1262633. - CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. - CVE-2026-6276: stale custom cookie host...

SUSE-SU-2026:3797-1 Security update for sssd

This update for sssd fixes the following issue: - CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed bsc1273925...

SUSE-SU-2026:3796-1 Security update for librest

This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

SUSE-SU-2026:3795-1 Security update for librest

This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

SUSE-SU-2026:3794-1 Security update for postgresql16

This update for postgresql16 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

SUSE-SU-2026:3793-1 Security update for postgresql14

This update for postgresql14 fixes the following issues: - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. - CVE-2026-6470: failure to check type USAGE...

SUSE-SU-2026:3792-1 Security update for rmt-server

This update for rmt-server fixes the following issue: Update to version 3.1 bsc1274715. - CVE-2026-42256: net-imap: hostile server can perform a DoS on client authenticating a connection with SCRAM-SHA1 or SCRAM-SHA2 bsc1265369. Changes for rmt-server: - Version 3.1: Remove all errors and warning...

SUSE-SU-2026:3791-1 Security update for snpguest

This update for snpguest fixes the following issues - Update openssl to v0.10.81 - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270541. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in...

SUSE-SU-2026:23358-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...

SUSE-SU-2026:23347-1 Security update for sssd

This update for sssd fixes the following issues: - CVE-2026-68742: insufficient validation in the NSS responder can lead to an out-of-bounds read and a process crash when a crafted GETHOSTBYADDR request is sent to the NSS responder socket bsc1273922. - CVE-2026-68743: insufficient validation in t...

SUSE-SU-2026:3787-1 Security update for runc

This update for runc rebuilds it against the current go security release...

SUSE-SU-2026:3786-1 Security update for distribution

This update for distribution rebuilds it against the current go security release...

SUSE-SU-2026:3785-1 Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release...

SUSE-SU-2026:3784-1 Security update for buildah

This update for buildah rebuilds it against the current go security release...

SUSE-SU-2026:3783-1 Security update for containerd

This update for containerd rebuilds it against the current go security release...

SUSE-SU-2026:23321-1 Security update for rmt-server

This update for rmt-server fixes the following issues: Update to version 3.1 bsc1274715. Security issues fixed: - CVE-2026-26961: rack: greedy multipart boundary parsing can lead to parser differentials and WAF bypass bsc1261398. - CVE-2026-26962: rack: improper unfolding of folded multipart...

SUSE-SU-2026:23320-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...