Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

Security update for libX11

This update for libX11 fixes the following issues: CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM...

Security update for libX11

This update for libX11 fixes the following issues: CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser bsc1281653. CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2026-78807: missing validation in driver-based PMKSA selection within wpasupplicant can allow local security bypasses bsc1280914. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for kubevirt-1.6

This update for kubevirt-1.6 fixes the following issues: Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr-helper. Only...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

Security update for swtpm

This update for swtpm fixes the following issue: CVE-2026-75900: out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs bsc1276722. CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 153.2: fixed: Deleting an Exchange account retained the outgoing server settings fixed: Thunderbird upgrade disabled Settings menu for versions before macOS 13 fixed: Windows jump list menu no longer functioned...

Security update for alloy

This update for alloy fixes the following issues: CVE-2026-1229: github.com/cloudflare/circl: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs bsc1265542. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

Security update for corosync

This update for corosync fixes the following issues: CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

Security update for perl-Protocol-HTTP2

This update for perl-Protocol-HTTP2 fixes the following issue: CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629. Patch Instructions: To install this SUSE update use the SUSE...

Security update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nspr, mozilla-nss, rust-cbindgen fixes the following issues: Changes in MozillaFirefox: Firefox Extended Support Release 153.2.0 ESR Fixed: Various security fixes. MFSA 2026-85 bsc1278001: CVE-2026-75874: Sandbox escape in the...

Security update for libsoup

This update for libsoup fixes the following issue: CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation bsc1272196. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for python-pip

This update for python-pip fixes the following issue: Fixed patch for CVE-2026-1703 to work with python2 where os.path.commonpath doesn't exists bsc1257599 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for python-tornado6

This update for python-tornado6 fixes the following issue CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection bsc1277725. Patch Instructions: To install this SUSE update...

Security update for postgresql15

This update for postgresql15 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for postgresql17

This update for postgresql17 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for openexr

This update for openexr fixes the following issues: CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes bsc1276849. CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode write...

Security update for postgresql18

This update for postgresql18 fixes the following issues: CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. CVE-2026-6469: ALTER TABLE ALTER TYPE resets extended statistics ownership bsc1275044. CVE-2026-6470: failure to check type USAGE privilege...

Security update for apr-util

This update for apr-util fixes the following issues: CVE-2022-25147: buffer overflow possible with specially crafted input bsc1207866. CVE-2025-49506: leaking content via side channel timing attack bsc1274237. CVE-2026-32327: XML stack recursion crash bsc1274235. CVE-2026-34191: SQL Injection via...

Security update for bzip2

This update for bzip2 fixes the following issue: CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...

Security update for texlive

This update for texlive fixes the following issue: CVE-2026-63729: heap use-after-free in the SyncTeX parser can lead to application crash or arbitrary code execution when malformed .synctex or .synctex.gz files are processedbsc1272432. Patch Instructions: To install this SUSE update use the SUSE...

Security update for libgcrypt

This update for libgcrypt fixes the following issue: CVE-2026-41989: crafted ECDH ciphertext can lead denial of service bsc1262684. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issues: CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. CVE-2026-59893: quadratic complexity when processing...

Security update for busybox

This update for busybox fixes the following issues: CVE-2023-42366: heap buffer overflow in the nexttoken function of editors/awk.c bsc1217586. CVE-2026-38752: stack buffer overflow in the evaluate function of editors/awk.c bsc1271544. CVE-2026-38753: use-after-free in the awksub function of...

Security update for python36-pip

This update for python36-pip fixes the following issue: CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows files to be installed to arbitrary locations on disk bsc1273090. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for LibVNCServer

This update for LibVNCServer fixes the following issue: CVE-2026-50538: a malicious or man-in-the-middle VNC server can force a connecting libvncclient to write attacker- controlled data past the end of its framebuffer bsc1276218. Patch Instructions: To install this SUSE update use the SUSE...

Security update for git-lfs

This update for git-lfs fixes the following issue: CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist bsc1252259. Changes for git-lfs: update to 3.7.1 Patch Instructions: To insta...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

Security update for rootlesskit

This update for rootlesskit rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux...

Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.205 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length...

Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1269284. CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk...

Security update for vim

This update for vim fixes the following issues: CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. CVE-2026-73071: use-after-free in JSON decoding can lead to process crash bsc1275017. CVE-2026-73072: heap buffer overflow when loading a spell file...

Security update for texlive

This update for texlive fixes the following issues: CVE-2023-46048: NULL pointer dereference in texk/web2c/pdftexdir/writet1.c bsc1222126. CVE-2023-46051: NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c bsc1222127. CVE-2026-63729: use-after-free in synctexparser.c in TeX Live...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-46052: ceph: only dadd...

Security update for libarchive

This update for libarchive fixes the following issues: creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. file descriptor leak in the mtree parser cleanup path could le...

Security update for libpng16

This update for libpng16 fixes the following issues: Changes for libpng16: version update to 1.6.58 jscPED-16190. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed fo...

Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security fixes: CVE-2024-4367,CVE-2026-39872,CVE-2026-43663,CVE-2026-43676,CVE-2026-43699,CVE-2026-43701, CVE-2026-43705,CVE-2026-43707,CVE-2026-43712,CVE-2026-43713,CVE-2026-43715,CVE-2026-43716,...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues CVE-2026-42616: heap buffer overflow in cat in cat.c bsc1271102. CVE-2026-42617: heap buffer overflow in ntfsirtoib in index.c bsc1271103. CVE-2026-42618: heap buffer overflow in ntfsdecompress in compress.c bsc1271104. CVE-2026-46569:...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue CVE-2026-61870: Memory leak in VIFF encoder when allocation fails bsc1271293. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run...

Security update for dnsmasq

This update for dnsmasq fixes the following issues CVE-2026-12725: heap buffer overflow in logquery when logging unsupported DS/DNSKEY replies bsc1268764. CVE-2026-12969: out-of-bounds read in findsoa due to missing extrabytes validation bsc1268882. Changes for dnsmasq: Update to 2.93: Fix a...

Security update for python-sqlparse

This update for python-sqlparse fixes the following issue Fixed an issue where formatting list of tuples leads to denial of service bsc1268597. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...