SUSE-SU-2026:4858-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

SUSE-SU-2026:4853-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. - CVE-2026-6103: Archive entry injection via...

SUSE-SU-2026:4852-1 Security update for php8

This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE bsc1286027...

SUSE-SU-2026:4847-1 Security update for ca-certificates-mozilla

This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state bsc1286261 Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1...

SUSE-SU-2026:4845-1 Security update for tiff

This update for tiff fixes the following issue: - CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough bsc1280164...

SUSE-SU-2026:4844-1 Security update for php8

This update for php8 fixes the following issue: Update to php 8.3.36: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE bsc1286027...

SUSE-SU-2026:4843-1 Security update for php8

This update for php8 fixes the following issue: - CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE bsc1286027...

SUSE-SU-2026:4837-1 Security update for buildah

This update for buildah rebuilds it against the current go security release...

SUSE-SU-2026:4836-1 Security update for cyrus-sasl

This update for cyrus-sasl fixes the following issue: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5 clients bsc1284687...

SUSE-SU-2026:4835-1 Security update for xwayland

This update for xwayland fixes the following issues: - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present Extension Use-After-Free bsc1281218. - CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free bsc1281220. - CVE-2026-93517: GLX...

SUSE-SU-2026:4834-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary...

SUSE-SU-2026:4832-1 Security update for python-hpack

This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime bsc1283035...

SUSE-SU-2026:4776-1 Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. - CVE-2026-68158: libceph: Fix multiplication overflow in...

SUSE-SU-2026:4773-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message bsc1282575. - CVE-2026-88831: httpd silently fails open when IP...

SUSE-SU-2026:4772-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19666: Use-after-free in...

SUSE-SU-2026:4768-1 Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4765-1 Security update for python-WebOb

This update for python-WebOb fixes the following issues: - CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft bsc1275917...

SUSE-SU-2026:4764-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap buffer overflow in ntfscheckrestartarea bsc1281759. - Heap buffer overflow in ntfseacheckwsldev bsc1281760. - Heap...

SUSE-SU-2026:4763-1 Security update for libXpm

This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path bsc1281669...

SUSE-SU-2026:4762-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in August 2026 release bsc1274774...

SUSE-SU-2026:4761-1 Security update for libXpm

This update for libXpm fixes the following issue: - CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path bsc1281669...

SUSE-SU-2026:4760-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message bsc1282575. - CVE-2026-88831: httpd silently fails open when IP...

SUSE-SU-2026:4749-1 Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4754-1 Security update for python3

This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation...

SUSE-SU-2026:4753-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-93586: use-after-free in the ImagesToBlob method can lead to a process crash bsc1281912. - CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop bsc1284662. -...

SUSE-SU-2026:4750-1 Security update for rekor

This update for rekor rebuilds it against the current go security release...

SUSE-SU-2026:3547-2 Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. bsc1268596 - Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. - Fix flag parsing so tha...

SUSE-SU-2026:4748-1 Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4747-1 Security update for podman

This update for podman rebuilds it against the current go security release...

SUSE-SU-2026:4744-1 Security update for python3, python3-base, python3-doc

This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffe...

SUSE-SU-2026:4743-1 Security update for python36

This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. - CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429. -...

SUSE-SU-2026:4740-1 Security update for kubernetes

This update for kubernetes rebuilds it against the current go security release...

SUSE-SU-2026:4739-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...

SUSE-SU-2026:4738-1 Security update for python

This update for python fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure bsc1280459...

SUSE-SU-2026:4736-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 MFSA 2026-110, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update component. - CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions,...

SUSE-SU-2026:4735-1 Security update for alsa

This update for alsa fixes the following issues: - CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in src/topology/ctl.c allows for integer overflow that can cause sensitive data leak and application crashes bsc1282564. - CVE-2026-96675: failure to validate...

SUSE-SU-2026:4734-1 Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4733-1 Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4619-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

SUSE-SU-2026:4732-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. - CVE-2026-10270...

SUSE-SU-2026:4730-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4725-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRY...

SUSE-SU-2026:4718-1 Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4715-1 Security update for buildah

This update for buildah rebuilds it against the current go security release...

SUSE-SU-2026:4714-1 Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4710-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

SUSE-SU-2026:4708-1 Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: - CVE-2026-63887: scsi: target: iscsi: Bound iscsiencodetextoutput appends to rspbuf bsc1272386. - CVE-2026-68158: libceph: Fix multiplication overflow in...

SUSE-SU-2026:4706-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer...

SUSE-SU-2026:4704-1 Security update for python-urllib3

This update for python-urllib3 fixes the following issues: - CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override bsc1283908. - CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding bsc1283909. - CVE-2026-97689: denial of...

SUSE-SU-2026:4703-1 Security update for libsoup2

This update for libsoup2 fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol...