SUSE-SU-2026:23907-1 Security update for libpcap

This update for libpcap fixes the following issues: - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory register and allows for OOB access bsc1279782. - CVE-2026-6244: libpcap BPF interpreter for the 'div k' and 'mod k...

SUSE-SU-2026:23910-1 Security update for cjose

This update for cjose fixes the following issues: - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap-based buffer overflow bsc1279844. - CVE-2026-53939: zero-filled content-encryption key generation in AES-CBC-HMAC JWE encryption within cjose ca...

SUSE-SU-2026:23906-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

SUSE-SU-2026:23891-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

SUSE-SU-2026:4315-1 Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on...

SUSE-SU-2026:4311-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete bsc1084891. - CVE-2020-18971: stack-based buffer overflow in src/base/PdfDictionary.cpp bsc1190178. - CVE-2021-30470: uncontrolled recursive call of funtions in...

SUSE-SU-2026:4310-1 Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: - CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device...

SUSE-SU-2026:4309-1 Security update for gimp

This update for gimp fixes the following issues: Security issues fixed: - CVE-2026-59088: denial of service via signed integer overflow in FLI file processing bsc1274837. - CVE-2026-59090: arbitrary code execution in PSD plugin due to unsigned underflow bsc1274840. - CVE-2026-66757: signed intege...

SUSE-SU-2026:4308-1 Security update for apptainer

This update for apptainer fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278666. - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278666. - CVE-2026-78662:...

SUSE-SU-2026:4302-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

SUSE-SU-2026:4296-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53613: Local Privilege Escalation via TOCTOU in mount8 —...

SUSE-SU-2026:4294-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

SUSE-SU-2026:4293-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

SUSE-SU-2026:4292-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

SUSE-SU-2026:4288-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898...

SUSE-SU-2026:4287-1 Security update for openssl-certs

This update for openssl-certs fixes the following issue: - Updated to 2.90 state bsc1279961: Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority +...

SUSE-SU-2026:4286-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...

SUSE-SU-2026:4285-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification bsc1280430. - CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver bsc1280432. - CVE-2026-19666: Use-after-free in...

SUSE-SU-2026:4284-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-neededheadroom bsc1242405 bsc1275784. - CVE-2024-57841: net: fix memory leak in tcpconnrequest bsc1235944...

SUSE-SU-2026:23902-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull...

SUSE-SU-2026:23887-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull...

SUSE-SU-2026:23897-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull...

SUSE-SU-2026:23901-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-86420: Denial of Service due to memory budget exhaustion bsc1279696. - CVE-2026-86421: Denial of Service via memory leak in MSL decoder bsc1279711. - CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetLis...

SUSE-SU-2026:23881-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. - CVE-2025-68358: btrfs: fix racy bitfield write in btrfsclearspaceinfofull...

SUSE-SU-2026:23880-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

SUSE-SU-2026:23879-1 Security update for swtpm

This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653...

SUSE-SU-2026:23878-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:23927-1 Security update for swtpm

This update for swtpm fixes the following issue: - CVE-2026-75900: Out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653...

SUSE-SU-2026:23928-1 Security update for glib2

This update for glib2 fixes the following issue: - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206...

SUSE-SU-2026:23926-1 Security update for libtpms

This update for libtpms fixes the following issue: - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:23886-1 Security update for libXrender

This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911...

SUSE-SU-2026:23900-1 Security update for libXrender

This update for libXrender fixes the following issue: - CVE-2026-88807: RenderQueryPictFormats Reply Heap-based Buffer Overflow bsc1280911...

SUSE-SU-2026:23885-1 Security update for libX11

This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910...

SUSE-SU-2026:23899-1 Security update for libX11

This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910...

SUSE-SU-2026:4283-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-45793: GitHub OAuth tokens failing regex validation can cause credential disclosure bsc1271504. - CVE-2026-59944: path traversal and link following issue can make files world readable and executable bsc1279898. - CVE-2026-59946:...

SUSE-SU-2026:4282-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against bsc1254894. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...

SUSE-SU-2026:4281-1 Security update for cups

This update for cups fixes the following issue: - CVE-2026-87875,GHSA-559w-7676-3xrq: heap out-of-bounds read in cupsUTF32ToUTF8 due to missing source-length bound can be reached via the SNMP supply-description parsing bsc1279945...

SUSE-SU-2026:4280-1 Security update for perl-Authen-SASL

This update for perl-Authen-SASL fixes the following issue: - CVE-2026-86219: replayed authentication responses accepted due to unverified nonce in serverstep bsc1279806...

SUSE-SU-2026:4279-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-53109: net: tunnels: annotate lockless accesses to dev-neededheadroom bsc1242405 bsc1275784. - CVE-2024-57841: net: fix memory leak in tcpconnrequest...

SUSE-SU-2026:4278-1 Security update for libtpms

This update for libtpms fixes the following issues: - CVE-2025-49133: inconsistent parameter handling can cause out-of-bounds reads bsc1244528. - CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628...

SUSE-SU-2026:4277-1 Security update for freeipmi

This update for freeipmi fixes the following issues: - CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client bsc1267605. - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based...

SUSE-SU-2026:23861-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

SUSE-SU-2026:23870-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

SUSE-SU-2026:23884-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU in the mount program when setting up loop devices bsc1261606. - CVE-2026-53612: local privilege escalation via TOCTOU in mount8...

SUSE-SU-2026:23860-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

SUSE-SU-2026:23871-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2026-49275: Out of bounds read in CrwMap::decodeBasic bsc1277791. - CVE-2026-68546: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. - CVE-2026-68547: Heap out-of-bounds write in RemoteIo when readi...

SUSE-SU-2026:23869-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths bsc1271318. - CVE-2026-57213:...

SUSE-SU-2026:23859-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths bsc1271318. - CVE-2026-57213:...

SUSE-SU-2026:23858-1 Security update for zstd-jni

This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read bsc1279953. - CVE-2026-87824: denial of Service DoS via out-of-bounds read in Zstd.trainFromBufferDirect bsc1279956. - CVE-2026-87825: use-after-free resulting...

SUSE-SU-2026:23868-1 Security update for zstd-jni

This update for zstd-jni fixes the following issues: - CVE-2026-87823: denial of Service or Information Disclosure via out-of-bounds read bsc1279953. - CVE-2026-87824: denial of Service DoS via out-of-bounds read in Zstd.trainFromBufferDirect bsc1279956. - CVE-2026-87825: use-after-free resulting...