Security update for jsoup, re2j

This update for jsoup, re2j fixes the following issue: CVE-2026-75140: The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application bsc1275912...

Security update for cosign

This update for cosign fixes the following issues: CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input bsc1272117. CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library...

Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues: CVE-2026-59902: Netty: Memory Exhaustion in SctpMessageCompletionHandler bsc1275501. CVE-2026-59903: Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite bsc1275500. CVE-2026-62243: TLS...

Security update for python310

This update for python310 fixes the following issues: CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL...

Security update for terraform-provider-susepubliccloud

This update for terraform-provider-susepubliccloud fixes the following issues: CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279252. CVE-2026-84304:...

Security update for amazon-cloudwatch-agent

This update for amazon-cloudwatch-agent fixes the following issues: CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279334. CVE-2026-84304: google.golang.org/grpc: hea...

Security update for corosync

This update for corosync fixes the following issue: CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...

Security update for perl-DBI

This update for perl-DBI fixes the following issue: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64561: KVM: x86: Check for invalid/obsolete ro...

Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64561: KVM: x86: Check for invalid/obsolete...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote co...

Security update for wireshark

This update for wireshark fixes the following issues: Update to Wireshark 4.6.8: CVE-2026-19694: TTX Logger file parser crash bsc1275279. CVE-2026-19695: Gammu DCT3 trace file parser crash bsc1275280. CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows...

Security update for libheif

This update for libheif fixes the following issues: AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions bsc1281953. Caller-configured security limits not enforced for MINI-box parsing bsc1281952. Heap out-of-bounds read in libheif alpha compositing via mismatched...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided bsc1272575. CVE-2026-62363: heap buffer over-write in fx operation bsc1272582. CVE-2026-62946: integer overflow in JNX decoder causes heap buff...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for exiv2

This update for exiv2 fixes the following issues: CVE-2026-49275: out of bounds read in CrwMap::decodeBasic bsc1277791. CVE-2026-68546: heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files bsc1277579. CVE-2026-68547: heap out-of-bounds write in RemoteIo when reading fro...

Security update for gnome-shell

This update for gnome-shell fixes the following issue: CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issue: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

Security update for hplip

This update for hplip fixes the following issues: CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. CVE-2026-91098: hi...

Security update for redis

This update for redis fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

Security update for libsodium

This update for libsodium fixes the following issues: Update to 1.0.22 jscPED-16890: Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the cryptokemmlkem768 functions. X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for...

Security update for glib2

This update for glib2 fixes the following issue: CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

Security update for swtpm

This update for swtpm fixes the following issue: CVE-2026-75900: out-of-bounds read in SWTPMNVRAMCheckHeader due to sizeofpointer vs sizeofstruct mismatch bsc1275653. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for python-soupsieve

This update for python-soupsieve fixes the following issues: CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex REWSEND can lead to DoS bsc1281119. CVE-2026-86000: quadratic complexity when running the IDENTIFIER / VALUE selector sub-patterns can lead to a DoS...

Security update for hplip

This update for hplip fixes the following issues: CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. CVE-2026-91098: hi...

Security update for libtpms

This update for libtpms fixes the following issue: CVE-2026-85769: heap out-of-bounds read in TPM2 state unmarshalling via unchecked blockskipread blocksize bsc1279628. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for hplip

This update for hplip fixes the following issues: CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. CVE-2026-91098: hi...

Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64564: sctp: don't free the ASCONF's own transpor...

Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use bsc1270303. CVE-2026-64423: ipv4: igmp: remove multicast group from hash table ...

Security update for erlang27

This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...

Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use bsc1270303. CVE-2026-64423: ipv4: igmp: remove multicast group from hash table ...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

Security update for nodejs16

This update for nodejs16 fixes the following issues: CVE-2025-23085: memory leak when remote peer abruptly closes socket without sending GOAWAY notification bsc1236250. CVE-2025-23166: improper error handling in async cryptographic operations crashes process bsc1243218. CVE-2025-23167: llhttp:...

Security update for suseconnect-ng

This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

Security update for python-WebOb

This update for python-WebOb fixes the following issues: CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft bsc1275917. Patch Instructions: To install this SUSE upda...

Security update for gnome-shell

This update for gnome-shell fixes the following issue: CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read bsc1280619. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

Security update for poppler

This update for poppler fixes the following issues: CVE-2026-93313: JBIG2 stream processing can cause integer overflows bsc1282532. CVE-2026-93314: TrueType font processing can cause integer overflows bsc1282531. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...

Security update for glib2

This update for glib2 fixes the following issue: CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering bsc1272206. Changes for glib2: Fix segfault when monitoring hard links bsc1281419. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...

Security update for perl-DBI

This update for perl-DBI fixes the following issue: CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm attributes in DBD::DBM bsc1281704. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64561: KVM: x86: Check for invalid/obsolete...

Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.40 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. CVE-2026-70907: OpenJDK: Enhance TLS server bsc1275764. Changes for java-11-openjdk: Upgrade to upstream tag...

Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device...

Security update for hplip

This update for hplip fixes the following issues: CVE-2026-91097: high severity issue - multiple vulnerabilities enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions bsc1281303. CVE-2026-91098: hi...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-86420: denial of Service due to memory budget exhaustion bsc1279696. CVE-2026-86421: denial of Service via memory leak in MSL decoder bsc1279711. CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList meth...