SUSE-SU-2026:4938-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. - CVE-2026-72110: bpf,fork: wipe -bpfstorage before bailouts that access it bsc1277357....

SUSE-SU-2026:4937-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-39468: smb: client: fix deadlock in smb2findsmbtcon bsc1227103 bsc1280176. - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. -...

SUSE-SU-2026:4936-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send bsc1275510. - CVE-2026-72110: bpf,fork: wipe -bpfstorage before bailouts that access it bsc1277357. -...

SUSE-SU-2026:4935-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit bsc1264267. -...

SUSE-SU-2026:4934-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs bsc1257631. - CVE-2026-72041: espintcp: use skmsgfreepartial to fix partial send...

SUSE-SU-2026:24470-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch bsc1272195. - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. -...

SUSE-SU-2026:4933-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk bsc1277821. - CVE-2026-89542: SUNRPC: harden gsskrb5unwrapv2 against short tokens bsc1280387. -...

SUSE-SU-2026:4932-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

SUSE-SU-2026:4931-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

SUSE-SU-2026:4930-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

SUSE-SU-2026:4929-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

SUSE-SU-2026:4928-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR MFSA 2026-112, MFSA 2026-120, bsc1286385: - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptographic issue in the Security Block-lists,...

SUSE-SU-2026:4927-1 Security update for libapr1, libtcnative-1-0, tomcat

This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. - CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure bsc1286502. - CVE-2026-7404...

SUSE-SU-2026:24475-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers bsc1286994. - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing-related headers bsc1287058. -...

SUSE-SU-2026:24555-1 Security update for google-guest-agent

This update for google-guest-agent fixes the following issues: - CVE-2026-78659: golang.org/x/net/http2: HTTP/2 server memory exhaustion due to Trailer headers bsc1286994. - CVE-2026-78660: golang.org/x/net/http2: HTTP/2 transport accepts malformed framing-related headers bsc1287058. -...

SUSE-SU-2026:4926-1 Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: - CVE-2025-40929: integer overflow bsc1249331. - CVE-2026-9334: type confusion via duplicate object keys when dupkeysasarrayref is enabled bsc1267546. - CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filt...

SUSE-SU-2026:4923-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading bsc1274214. - CVE-2026-47262: Denial of Service DoS condition via a maliciously crafted image...

SUSE-SU-2026:24460-1 Security update for expat

This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in XMLParseBuffer bsc1284334. - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input bsc1282347. - CVE-2026-102633: denial of service via integer...

SUSE-SU-2026:24469-1 Security update for expat

This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in XMLParseBuffer bsc1284334. - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input bsc1282347. - CVE-2026-102633: denial of service via integer...

SUSE-SU-2026:24554-1 Security update for expat

This update for expat fixes the following issues: - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. - CVE-2026-24515: NULL dereference CWE-476 due to function XMLExternalEntityParserCreate failing to copy the encoding handler data...

SUSE-SU-2026:24468-1 Security update for ghostscript

This update for ghostscript fixes the following issues: - CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free bsc1284397. - CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data bsc1283917...

SUSE-SU-2026:24467-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-93599: rustls-webpki: panic in BorrowedCertRevocationList::fromder via empty BIT STRING in IssuingDistributionPoint bsc1282250. - CVE-2026-93600: rustls-webpki: name constraints for URI names were incorrectly accepted...

SUSE-SU-2026:24466-1 Security update for gvfs

This update for gvfs fixes the following issue: - CVE-2026-88924: gvfs-admin socket ownership race condition allows local users to change the ownership of root-owned files and achieve local privilege escalation bsc1280058...

SUSE-SU-2026:24473-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netn...

SUSE-SU-2026:4922-1 Security update for podman

This update for podman rebuilds it against the current go security release...

SUSE-SU-2026:4921-1 Security update for podman

This update for podman rebuilds it against the current go security release...

SUSE-SU-2026:4920-1 Security update for podman

This update for podman rebuilds it against the current go security release...

SUSE-SU-2026:24553-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull bsc1255531. - CVE-2026-43091: xfrm: Wait for RCU readers during policy netn...

SUSE-SU-2026:4919-1 Security update for python

This update for python fixes the following issue: - CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free bsc1283969...

SUSE-SU-2026:4918-1 Security update for suseconnect-ng

This update for suseconnect-ng rebuilds it against the current go security release...

SUSE-SU-2026:24464-1 Security update for ansible-core

This update for ansible-core fixes the following issues: - CVE-2026-89091: an attacker can get a victim to install a malicious collection to overwrite arbitrary files with the privileges of the user running ansible-galaxy, leading to code execution on the control node bsc1284847...

SUSE-SU-2026:24552-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. - CVE-2026-94284: Out-of-bounds read vulnerability in libX11's...

SUSE-SU-2026:24472-1 Security update for libX11

This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910...

SUSE-SU-2026:4915-1 Security update for rekor

This update for rekor rebuilds it against the current go security release...

SUSE-SU-2026:24461-1 Security update for bouncycastle

This update for bouncycastle fixes the following issues: Update to 1.86: - CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. - CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion bsc1284073. ...

SUSE-SU-2026:24462-1 Security update for cifs-utils

This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932...

SUSE-SU-2026:24435-1 Security update for cifs-utils

This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932...

SUSE-SU-2026:4913-1 Security update for gcc7

This update for gcc7 fixes the following issues: - CVE-2026-95619: libstdc++ integer overflow in new operator bsc1282500. - CVE-2026-102010: UAF due to improper pointer update when an application calls the eraseif function on a binary heap priority queue in libstdc++ bsc1283123...

SUSE-SU-2026:4912-1 Security update for kubernetes-old

This update for kubernetes-old rebuilds it against the current go security release...

SUSE-SU-2026:4911-1 Security update for runc

This update for runc rebuilds it against the current go security release...

SUSE-SU-2026:24431-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24455-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24458-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24434-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24457-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24433-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24456-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24432-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24430-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:24454-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...