From sle-container-updates at lists.suse.com Sun Nov 1 08:08:26 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:08:26 +0100 (CET) Subject: SUSE-IU-2026:8428-1: Security update of suse/sle-micro/base-5.5 Message-ID: <20261101080826.8ECECFCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8428-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.333 , suse/sle-micro/base-5.5:latest Image Release : 5.8.333 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - libcurl4-8.14.1-150400.5.98.1 updated - curl-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:11:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:11:18 +0100 (CET) Subject: SUSE-IU-2026:8429-1: Security update of suse/sle-micro/kvm-5.5 Message-ID: <20261101081118.CE949FCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/kvm-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8429-1 Image Tags : suse/sle-micro/kvm-5.5:2.0.4 , suse/sle-micro/kvm-5.5:2.0.4-3.5.640 , suse/sle-micro/kvm-5.5:latest Image Release : 3.5.640 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/kvm-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - libcurl4-8.14.1-150400.5.98.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.333 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:15:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:15:01 +0100 (CET) Subject: SUSE-IU-2026:8430-1: Security update of suse/sle-micro/rt-5.5 Message-ID: <20261101081501.03624FCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/rt-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8430-1 Image Tags : suse/sle-micro/rt-5.5:2.0.4 , suse/sle-micro/rt-5.5:2.0.4-4.5.769 , suse/sle-micro/rt-5.5:latest Image Release : 4.5.769 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/rt-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - libcurl4-8.14.1-150400.5.98.1 updated - container:suse-sle-micro-5.5-latest-2.0.4-5.8.147 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:18:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:18:04 +0100 (CET) Subject: SUSE-IU-2026:8431-1: Security update of suse/sle-micro/5.5 Message-ID: <20261101081804.C3D53FCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8431-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.147 , suse/sle-micro/5.5:latest Image Release : 5.8.147 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - libcurl4-8.14.1-150400.5.98.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.333 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:24:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:24:27 +0100 (CET) Subject: SUSE-CU-2026:13453-1: Security update of elemental/base-os-kernel-default Message-ID: <20261101082427.C1AE2FB94@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-default ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13453-1 Container Tags : elemental/base-os-kernel-default:16.0 , elemental/base-os-kernel-default:16.0-4.52 Container Release : 4.52 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container elemental/base-os-kernel-default was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - container:elemental-base-os-common-16.0-4.29-16.0-4.29-4.29 added - container:elemental-base-os-common-16.0-4.28-16.0-4.28-4.28 removed From sle-container-updates at lists.suse.com Sun Nov 1 08:26:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:26:00 +0100 (CET) Subject: SUSE-CU-2026:13457-1: Security update of elemental/base-os-kernel-rt Message-ID: <20261101082600.4A55BFB94@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-rt ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13457-1 Container Tags : elemental/base-os-kernel-rt:16.0 , elemental/base-os-kernel-rt:16.0-4.51 Container Release : 4.51 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container elemental/base-os-kernel-rt was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - container:elemental-base-os-common-16.0-4.29-16.0-4.29-4.29 added - container:elemental-base-os-common-16.0-4.28-16.0-4.28-4.28 removed From sle-container-updates at lists.suse.com Sun Nov 1 08:27:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:27:01 +0100 (CET) Subject: SUSE-CU-2026:13458-1: Recommended update of elemental/elemental Message-ID: <20261101082701.5C431FB94@maintenance.suse.de> SUSE Container Update Advisory: elemental/elemental ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13458-1 Container Tags : elemental/elemental:3.0 , elemental/elemental:3.0.4-4.21 Container Release : 4.21 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container elemental/elemental was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2007 Released: Fri Oct 30 14:05:26 2026 Summary: Recommended update for suse-build-key Type: recommended Severity: moderate References: This update for suse-build-key fixes the following issues: Changes in suse-build-key: - Correct comment on suse sle15 4k build key - Avoid using touch without requiring touch as postinstall script The following package changes have been done: - suse-build-key-12.0-160000.4.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:27:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:27:02 +0100 (CET) Subject: SUSE-CU-2026:13459-1: Security update of elemental/elemental Message-ID: <20261101082702.B35D3FB94@maintenance.suse.de> SUSE Container Update Advisory: elemental/elemental ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13459-1 Container Tags : elemental/elemental:3.0 , elemental/elemental:3.0.4-4.22 Container Release : 4.22 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container elemental/elemental was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:27:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:27:49 +0100 (CET) Subject: SUSE-CU-2026:13460-1: Recommended update of elemental/elemental-lifecycle-manager Message-ID: <20261101082749.2DA44FB94@maintenance.suse.de> SUSE Container Update Advisory: elemental/elemental-lifecycle-manager ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13460-1 Container Tags : elemental/elemental-lifecycle-manager:0 , elemental/elemental-lifecycle-manager:0.1.1 , elemental/elemental-lifecycle-manager:0.1.2-5.18 , elemental/elemental-lifecycle-manager:latest Container Release : 5.18 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container elemental/elemental-lifecycle-manager was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2007 Released: Fri Oct 30 14:05:26 2026 Summary: Recommended update for suse-build-key Type: recommended Severity: moderate References: This update for suse-build-key fixes the following issues: Changes in suse-build-key: - Correct comment on suse sle15 4k build key - Avoid using touch without requiring touch as postinstall script The following package changes have been done: - suse-build-key-12.0-160000.4.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:38:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:38:53 +0100 (CET) Subject: SUSE-CU-2026:13465-1: Security update of suse/sle-micro/5.3/toolbox Message-ID: <20261101083853.AD069FB94@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.3/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13465-1 Container Tags : suse/sle-micro/5.3/toolbox:16.3 , suse/sle-micro/5.3/toolbox:16.3-6.11.305 , suse/sle-micro/5.3/toolbox:latest Container Release : 6.11.305 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:44:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:44:01 +0100 (CET) Subject: SUSE-CU-2026:13466-1: Security update of suse/sle-micro-rancher/5.4 Message-ID: <20261101084401.7D729FB94@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13466-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.211 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.211 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:47:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:47:17 +0100 (CET) Subject: SUSE-CU-2026:13467-1: Security update of suse/sle-micro/5.4/toolbox Message-ID: <20261101084717.6FAFAFB94@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13467-1 Container Tags : suse/sle-micro/5.4/toolbox:16.3 , suse/sle-micro/5.4/toolbox:16.3-5.19.306 , suse/sle-micro/5.4/toolbox:latest Container Release : 5.19.306 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 08:50:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 09:50:01 +0100 (CET) Subject: SUSE-CU-2026:13468-1: Security update of suse/sle-micro/5.5/toolbox Message-ID: <20261101085001.AB6BAFB94@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.5/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13468-1 Container Tags : suse/sle-micro/5.5/toolbox:16.3 , suse/sle-micro/5.5/toolbox:16.3-3.12.219 , suse/sle-micro/5.5/toolbox:latest Container Release : 3.12.219 Severity : important Type : security References : 1268414 1268426 1277477 1277478 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/sle-micro/5.5/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 09:19:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 10:19:24 +0100 (CET) Subject: SUSE-IU-2026:8436-1: Security update of suse/sl-micro/6.2/base-os-container Message-ID: <20261101091924.CDE16FCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8436-1 Image Tags : suse/sl-micro/6.2/base-os-container:2.3.2 , suse/sl-micro/6.2/base-os-container:2.3.2-9.10 , suse/sl-micro/6.2/base-os-container:latest Image Release : 9.10 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 09:50:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 10:50:57 +0100 (CET) Subject: SUSE-CU-2026:13474-1: Security update of suse/ltss/sle15.4/sle15 Message-ID: <20261101095057.0269DFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.4/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13474-1 Container Tags : suse/ltss/sle15.4/bci-base:15.4 , suse/ltss/sle15.4/bci-base:15.4-6.57 , suse/ltss/sle15.4/sle15:15.4 , suse/ltss/sle15.4/sle15:15.4-6.57 , suse/ltss/sle15.4/sle15:latest Container Release : 6.57 Severity : important Type : security References : 1262633 1263440 1264971 1268412 1268414 1268426 1277476 1277477 1277478 1277479 1277480 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-13608 CVE-2026-18924 CVE-2026-19931 CVE-2026-5773 CVE-2026-7168 CVE-2026-80229 CVE-2026-80230 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8926 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/ltss/sle15.4/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3958-1 Released: Thu Sep 3 15:31:59 2026 Summary: Security update for curl Type: security Severity: moderate References: 1262633,1263440,1264971,1268412,1277476,1277479,1277480,CVE-2026-13608,CVE-2026-5773,CVE-2026-7168,CVE-2026-80229,CVE-2026-80230,CVE-2026-8926 This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated connections to succeed (bsc#1277480). Changes for curl: - Call http_size() first to prioritize Transfer-Encoding: chunked over a zero Content-Length empty body check (bsc#1264971) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 09:52:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 10:52:23 +0100 (CET) Subject: SUSE-CU-2026:13475-1: Security update of suse/ltss/sle15.5/sle15 Message-ID: <20261101095223.5A0FFFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13475-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.83 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.83 , suse/ltss/sle15.5/sle15:latest Container Release : 8.83 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 09:52:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 10:52:24 +0100 (CET) Subject: SUSE-CU-2026:13476-1: Security update of suse/ltss/sle15.5/sle15 Message-ID: <20261101095224.82D00FD12@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13476-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.84 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.84 , suse/ltss/sle15.5/sle15:latest Container Release : 8.84 Severity : important Type : security References : 1262633 1263440 1264971 1268412 1268414 1268426 1277476 1277477 1277478 1277479 1277480 1277482 1278173 1285008 1285010 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285026 1285030 1285031 CVE-2026-107929 CVE-2026-11856 CVE-2026-13608 CVE-2026-18924 CVE-2026-19931 CVE-2026-5773 CVE-2026-7168 CVE-2026-80229 CVE-2026-80230 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86414 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8926 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94266 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3958-1 Released: Thu Sep 3 15:31:59 2026 Summary: Security update for curl Type: security Severity: moderate References: 1262633,1263440,1264971,1268412,1277476,1277479,1277480,CVE-2026-13608,CVE-2026-5773,CVE-2026-7168,CVE-2026-80229,CVE-2026-80230,CVE-2026-8926 This update for curl fixes the following issues: - CVE-2026-5773: wrong reuse of SMB connection (bsc#1262633). - CVE-2026-7168: cross-proxy Digest auth state leak (bsc#1263440). - CVE-2026-8926: password leak with netrc and user in URL (bsc#1268412). - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass (bsc#1277476). - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free (bsc#1277479). - CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated connections to succeed (bsc#1277480). Changes for curl: - Call http_size() first to prioritize Transfer-Encoding: chunked over a zero Content-Length empty body check (bsc#1264971) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4954-1 Released: Fri Oct 30 17:18:59 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268426,1277477,1277478,1277482,1278173,1285008,1285010,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285026,1285030,1285031,CVE-2026-107929,CVE-2026-11856,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86414,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94266 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). The following package changes have been done: - curl-8.14.1-150400.5.98.1 updated - libcurl4-8.14.1-150400.5.98.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:00:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:00:18 +0100 (CET) Subject: SUSE-CU-2026:13478-1: Security update of bci/bci-sle15-kernel-module-devel Message-ID: <20261101100018.B345CFD21@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle15-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13478-1 Container Tags : bci/bci-sle15-kernel-module-devel:15.7 , bci/bci-sle15-kernel-module-devel:15.7-61.41 , bci/bci-sle15-kernel-module-devel:latest Container Release : 61.41 Severity : important Type : security References : 1215199 1255531 1264267 1264295 1264614 1264622 1264851 1265000 1266694 1266730 1266757 1268315 1269561 1272178 1273040 1273116 1273290 1273599 1273751 1273764 1273865 1274039 1274256 1274653 1275510 1275518 1275564 1275644 1275785 1275786 1275964 1276562 1276791 1276836 1276873 1276951 1277174 1277260 1277310 1277602 1277603 1277614 1277691 1277742 1277747 1277804 1277821 1277889 1277894 1277931 1278232 1279706 1280179 1280251 1280259 1280477 1280743 1280966 1281144 1281162 1281280 1281525 1281726 1281771 1281819 1281865 1281979 1281991 1282742 1282755 1282761 1282762 1282768 1282770 1282784 1282808 1282932 1283037 1283142 1283144 1283736 1283795 1283823 1283835 1283851 1283894 1283936 1283945 1283946 1283963 1283979 1284288 1284289 1284291 1284295 1284408 1284415 1284424 1284429 1284462 1284518 1284559 1284581 1284606 1284647 1284649 1284655 1284713 1284746 1284790 1284791 1285684 1285880 1285989 CVE-2025-68358 CVE-2026-43091 CVE-2026-43132 CVE-2026-43184 CVE-2026-43283 CVE-2026-43299 CVE-2026-43457 CVE-2026-45865 CVE-2026-45930 CVE-2026-46034 CVE-2026-53108 CVE-2026-63830 CVE-2026-63983 CVE-2026-64012 CVE-2026-64070 CVE-2026-64116 CVE-2026-64280 CVE-2026-64422 CVE-2026-64424 CVE-2026-64428 CVE-2026-64461 CVE-2026-68233 CVE-2026-68241 CVE-2026-68242 CVE-2026-68323 CVE-2026-72015 CVE-2026-72040 CVE-2026-72041 CVE-2026-72081 CVE-2026-72172 CVE-2026-72212 CVE-2026-72213 CVE-2026-72236 CVE-2026-72301 CVE-2026-72305 CVE-2026-72319 CVE-2026-72493 CVE-2026-74312 CVE-2026-74379 CVE-2026-74544 CVE-2026-74578 CVE-2026-74583 CVE-2026-74587 CVE-2026-74611 CVE-2026-74614 CVE-2026-74653 CVE-2026-74723 CVE-2026-80579 CVE-2026-80893 CVE-2026-80977 CVE-2026-89528 CVE-2026-89669 CVE-2026-89685 CVE-2026-89706 CVE-2026-89778 CVE-2026-89811 CVE-2026-89987 CVE-2026-90011 CVE-2026-90101 CVE-2026-90283 CVE-2026-90289 CVE-2026-90315 CVE-2026-90430 CVE-2026-92488 CVE-2026-93134 CVE-2026-93222 CVE-2026-93252 CVE-2026-93787 CVE-2026-93800 CVE-2026-93806 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-97415 CVE-2026-97416 CVE-2026-97491 CVE-2026-97555 CVE-2026-97564 CVE-2026-97571 CVE-2026-97574 CVE-2026-97595 CVE-2026-97945 CVE-2026-98010 CVE-2026-98015 CVE-2026-98016 CVE-2026-98077 CVE-2026-98089 CVE-2026-98130 CVE-2026-98173 CVE-2026-98216 CVE-2026-98248 CVE-2026-98252 CVE-2026-98253 CVE-2026-98260 CVE-2026-98269 CVE-2026-98273 CVE-2026-98323 CVE-2026-98347 CVE-2026-98352 CVE-2026-98354 CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360 CVE-2026-98365 CVE-2026-98366 CVE-2026-98367 CVE-2026-99999 ----------------------------------------------------------------- The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4935-1 Released: Thu Oct 29 11:37:05 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1255531,1264267,1264295,1264614,1264622,1264851,1265000,1266694,1266730,1266757,1268315,1269561,1272178,1273040,1273116,1273290,1273599,1273751,1273764,1273865,1274039,1274256,1274653,1275510,1275518,1275564,1275644,1275785,1275786,1275964,1276562,1276791,1276836,1276873,1276951,1277174,1277260,1277310,1277602,1277603,1277614,1277691,1277742,1277747,1277804,1277821,1277889,1277894,1277931,1278232,1279706,1280179,1280251,1280259,1280477,1280743,1280966,1281144,1281162,1281280,1281525,1281726,1281771,1281819,1281865,1281979,1281991,1282742,1282755,1282761,1282762,1282768,1282770,1282784,1282808,1282932,1283037,1283142,1283144,1283736,1283795,1283823,1283835,1283851,1283894,1283936,1283945,1283946,1283963,1283979,1284288,1284289,1284291,1284295,1284408,1284415,1284424,1284429,1284462,1284518,1284559,1284581,1284606,1284647,1284649,1284655,1284713,1284746,1284790,1284791,1285684,1285880,1285989,CVE-2025-68358,CVE-2026-43091,CVE-2026-43132,CVE-2026-43184,CVE-2026-4328 3,CVE-2026-43299,CVE-2026-43457,CVE-2026-45865,CVE-2026-45930,CVE-2026-46034,CVE-2026-53108,CVE-2026-63830,CVE-2026-63983,CVE-2026-64012,CVE-2026-64070,CVE-2026-64116,CVE-2026-64280,CVE-2026-64422,CVE-2026-64424,CVE-2026-64428,CVE-2026-64461,CVE-2026-68233,CVE-2026-68241,CVE-2026-68242,CVE-2026-68323,CVE-2026-72015,CVE-2026-72040,CVE-2026-72041,CVE-2026-72081,CVE-2026-72172,CVE-2026-72212,CVE-2026-72213,CVE-2026-72236,CVE-2026-72301,CVE-2026-72305,CVE-2026-72319,CVE-2026-72493,CVE-2026-74312,CVE-2026-74379,CVE-2026-74544,CVE-2026-74578,CVE-2026-74583,CVE-2026-74587,CVE-2026-74611,CVE-2026-74614,CVE-2026-74653,CVE-2026-74723,CVE-2026-80579,CVE-2026-80893,CVE-2026-80977,CVE-2026-89528,CVE-2026-89669,CVE-2026-89685,CVE-2026-89706,CVE-2026-89778,CVE-2026-89811,CVE-2026-89987,CVE-2026-90011,CVE-2026-90101,CVE-2026-90283,CVE-2026-90289,CVE-2026-90315,CVE-2026-90430,CVE-2026-92488,CVE-2026-93134,CVE-2026-93222,CVE-2026-93252,CVE-2026-93787,CVE-2026-93800,CVE-2026-93806,CVE-2026-93820,CVE-2 026-93821,CVE-2026-93822,CVE-2026-97415,CVE-2026-97416,CVE-2026-97491,CVE-2026-97555,CVE-2026-97564,CVE-2026-97571,CVE-2026-97574,CVE-2026-97595,CVE-2026-97945,CVE-2026-98010,CVE-2026-98015,CVE-2026-98016,CVE-2026-98077,CVE-2026-98089,CVE-2026-98130,CVE-2026-98173,CVE-2026-98216,CVE-2026-98248,CVE-2026-98252,CVE-2026-98253,CVE-2026-98260,CVE-2026-98269,CVE-2026-98273,CVE-2026-98323,CVE-2026-98347,CVE-2026-98352,CVE-2026-98354,CVE-2026-98357,CVE-2026-98358,CVE-2026-98359,CVE-2026-98360,CVE-2026-98365,CVE-2026-98366,CVE-2026-98367,CVE-2026-99999 The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). - CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). - CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). - CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). - CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). - CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). - CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). - CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). - CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). - CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). - CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). - CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). - CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). - CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). - CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). - CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). - CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). - CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). - CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). - CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). - CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). - CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). - CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). - CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). - CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). - CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). - CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). - CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). - CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). - CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). - CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). - CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). - CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). - CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). - CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). - CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). - CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). - CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). - CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). - CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283945). - CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795). - CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). - CVE-2026-97945: replace with mainline version and update References (bsc#1283144). - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). - CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). - CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). - CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). - CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). - CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). - ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes). - ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes). - ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes). - ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). - ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). - ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). - ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes). - ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). - ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). - Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). - Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes). - Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes). - Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). - Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). - Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). - Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes). - Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). - crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes). - Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes). - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). - drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes). - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git-fixes). - drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). - drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). - drm/aspeed: Balance the display clock enable on teardown (git-fixes). - drm/dp: don't mark the AUX backlight enabled when enabling failed (git-fixes). - drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). - drm/gud: don't keep a connector without a CRTC as connector_state (git-fixes). - drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). - drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). - drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). - drm/imagination: Size page table preallocation by device address (git-fixes). - drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). - drm/vc4: Free the BO cache size list on teardown (git-fixes). - drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). - gpio: exar: initialize the ID before registering its cleanup (git-fixes). - gpio: xilinx: fix runtime PM leak on request error path (git-fixes). - IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). - KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). - KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). - KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). - KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes). - KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). - KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git-fixes). - KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git-fixes). - memstick: core: wait for request completion before freeing card (git-fixes). - memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). - mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). - mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). - mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). - mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes). - net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). - net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes). - netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). - PCI: hv: Probe vPCI buses asynchronously (git-fixes). - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). - pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes). - power: supply: Fix maintenance charge table kernel-doc (git-fixes). - power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). - powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). - powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). - printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). - pseries/plpks: clear SED key data after use (bsc#1215199). - pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). - pseries/plpks: clear signed update authentication buffer (bsc#1215199). - pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). - pseries/plpks: make narrowing conversions explicit (bsc#1215199). - pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). - regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880). - serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git-fixes). - tools/hv: fix typo 'retrive' in comment (git-fixes). - tools: gpio: fix building from the top level with O= (git-fixes). - vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). - wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). - wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes). - wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). - xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). The following package changes have been done: - kernel-macros-6.4.0-150700.53.87.3 updated - kernel-devel-6.4.0-150700.53.87.3 updated - kernel-default-devel-6.4.0-150700.53.87.3 updated - kernel-syms-6.4.0-150700.53.87.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:12:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:12:19 +0100 (CET) Subject: SUSE-CU-2026:13449-1: Recommended update of suse/sles/16.0/libguestfs-tools Message-ID: <20261101101219.6DF33FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13449-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.9 , suse/sles/16.0/libguestfs-tools:1.9.1 , suse/sles/16.0/libguestfs-tools:1.9.1-2.23 Container Release : 2.23 Severity : moderate Type : recommended References : 1284436 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1961 Released: Fri Oct 23 10:24:43 2026 Summary: Recommended update for ovmf Type: recommended Severity: moderate References: 1284436 This update for ovmf fixes the following issues: Changes in ovmf: - Fix: libvirt / OVMF: firmware auto-selection selects AMD SEV firmware on an Intel host, when just asking for SMM off (bsc#1284436): * Lower the priority of CoCo OVMF descriptors: + Rename 50-ovmf-x86_64-sev.json to 61-ovmf-x86_64-sev.json + Rename 50-ovmf-x86_64-sev-snp.json to 61-ovmf-x86_64-sev-snp.json + Rename 60-ovmf-x86_64-tdx.json to 61-ovmf-x86_64-tdx.json ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated - qemu-ovmf-x86_64-202502-160000.9.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:13:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:13:05 +0100 (CET) Subject: SUSE-CU-2026:13480-1: Recommended update of suse/sles/16.0/pr-helper Message-ID: <20261101101305.15499FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/pr-helper ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13480-1 Container Tags : suse/sles/16.0/pr-helper:1.9 , suse/sles/16.0/pr-helper:1.9.1 , suse/sles/16.0/pr-helper:1.9.1-2.23 Container Release : 2.23 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container suse/sles/16.0/pr-helper was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:13:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:13:31 +0100 (CET) Subject: SUSE-CU-2026:13481-1: Recommended update of suse/sles/16.0/sidecar-shim Message-ID: <20261101101331.EBE36FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/sidecar-shim ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13481-1 Container Tags : suse/sles/16.0/sidecar-shim:1.9 , suse/sles/16.0/sidecar-shim:1.9.1 , suse/sles/16.0/sidecar-shim:1.9.1-2.23 Container Release : 2.23 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container suse/sles/16.0/sidecar-shim was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:19:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:19:57 +0100 (CET) Subject: SUSE-CU-2026:13485-1: Security update of bci/bci-sle16-kernel-module-devel Message-ID: <20261101101957.4D750FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle16-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13485-1 Container Tags : bci/bci-sle16-kernel-module-devel:16.0 , bci/bci-sle16-kernel-module-devel:16.0-32.22 Container Release : 32.22 Severity : important Type : security References : 1215199 1234634 1264042 1267430 1268315 1269561 1272178 1272509 1272898 1272901 1272952 1272955 1272956 1273599 1273751 1273764 1273865 1274039 1274080 1274256 1274653 1275510 1275564 1275644 1275785 1275786 1275964 1276330 1276791 1276836 1276873 1276907 1276951 1277103 1277174 1277260 1277338 1277357 1277599 1277602 1277603 1277614 1277663 1277665 1277691 1277695 1277747 1277804 1277821 1277889 1277890 1277894 1277931 1278033 1278232 1279706 1280229 1280259 1280496 1280552 1280743 1280769 1280770 1280950 1280966 1281042 1281144 1281162 1281280 1281726 1281771 1281819 1282005 1282274 1282615 1282742 1282768 1282769 1282770 1282784 1282869 1282932 1283037 1283142 1283144 1283153 1283158 1283454 1283812 1283823 1283835 1283850 1283851 1283853 1283855 1283856 1283858 1283859 1283862 1283873 1283877 1283894 1283936 1283946 1283963 1283979 1284064 1284288 1284289 1284291 1284295 1284298 1284310 1284312 1284408 1284412 1284415 1284419 1284422 1284424 1284462 1284559 1284581 1284605 1284606 1284647 1284649 1284655 1284713 1284746 1284790 1284791 1285684 1285685 1285989 1286261 1286385 CVE-2026-113470 CVE-2026-31731 CVE-2026-46028 CVE-2026-53108 CVE-2026-63830 CVE-2026-64012 CVE-2026-64058 CVE-2026-64060 CVE-2026-64062 CVE-2026-64063 CVE-2026-64064 CVE-2026-64068 CVE-2026-64116 CVE-2026-64280 CVE-2026-64424 CVE-2026-64428 CVE-2026-64435 CVE-2026-64461 CVE-2026-68233 CVE-2026-68241 CVE-2026-68242 CVE-2026-68323 CVE-2026-72015 CVE-2026-72040 CVE-2026-72041 CVE-2026-72081 CVE-2026-72110 CVE-2026-72172 CVE-2026-72174 CVE-2026-72212 CVE-2026-72213 CVE-2026-72236 CVE-2026-72250 CVE-2026-72253 CVE-2026-72305 CVE-2026-72319 CVE-2026-72355 CVE-2026-72405 CVE-2026-72493 CVE-2026-74306 CVE-2026-74312 CVE-2026-74368 CVE-2026-74379 CVE-2026-74544 CVE-2026-74578 CVE-2026-74583 CVE-2026-74587 CVE-2026-74611 CVE-2026-74614 CVE-2026-74624 CVE-2026-74715 CVE-2026-80572 CVE-2026-80579 CVE-2026-80893 CVE-2026-80977 CVE-2026-89528 CVE-2026-89558 CVE-2026-89593 CVE-2026-89631 CVE-2026-89636 CVE-2026-89640 CVE-2026-89754 CVE-2026-89755 CVE-2026-89778 CVE-2026-89811 CVE-2026-89987 CVE-2026-90011 CVE-2026-90283 CVE-2026-90289 CVE-2026-93066 CVE-2026-93134 CVE-2026-93222 CVE-2026-93252 CVE-2026-93785 CVE-2026-93787 CVE-2026-93798 CVE-2026-93806 CVE-2026-97415 CVE-2026-97416 CVE-2026-97491 CVE-2026-97533 CVE-2026-97554 CVE-2026-97555 CVE-2026-97556 CVE-2026-97558 CVE-2026-97559 CVE-2026-97561 CVE-2026-97562 CVE-2026-97563 CVE-2026-97564 CVE-2026-97942 CVE-2026-97943 CVE-2026-97945 CVE-2026-98010 CVE-2026-98015 CVE-2026-98016 CVE-2026-98041 CVE-2026-98077 CVE-2026-98089 CVE-2026-98125 CVE-2026-98126 CVE-2026-98127 CVE-2026-98130 CVE-2026-98167 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98173 CVE-2026-98174 CVE-2026-98175 CVE-2026-98216 CVE-2026-98252 CVE-2026-98253 CVE-2026-98260 CVE-2026-98261 CVE-2026-98269 CVE-2026-98273 CVE-2026-98323 CVE-2026-98347 CVE-2026-98352 CVE-2026-98354 CVE-2026-98357 CVE-2026-98358 CVE-2026-98359 CVE-2026-98360 CVE-2026-98365 CVE-2026-98366 CVE-2026-98367 CVE-2026-98432 CVE-2026-99999 ----------------------------------------------------------------- The container bci/bci-sle16-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1963 Released: Fri Oct 23 12:37:30 2026 Summary: Security update for mozilla-nss, MozillaFirefox Type: security Severity: important References: 1286261,1286385,CVE-2026-113470 This update for mozilla-nss, MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385): - CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component (bsc#1286261). ----------------------------------------------------------------- Advisory ID: 1973 Released: Sat Oct 24 12:42:33 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1234634,1264042,1267430,1268315,1269561,1272178,1272509,1272898,1272901,1272952,1272955,1272956,1273599,1273751,1273764,1273865,1274039,1274080,1274256,1274653,1275510,1275564,1275644,1275785,1275786,1275964,1276330,1276791,1276836,1276873,1276907,1276951,1277103,1277174,1277260,1277338,1277357,1277599,1277602,1277603,1277614,1277663,1277665,1277691,1277695,1277747,1277804,1277821,1277889,1277890,1277894,1277931,1278033,1278232,1279706,1280229,1280259,1280496,1280552,1280743,1280769,1280770,1280950,1280966,1281042,1281144,1281162,1281280,1281726,1281771,1281819,1282005,1282274,1282615,1282742,1282768,1282769,1282770,1282784,1282869,1282932,1283037,1283142,1283144,1283153,1283158,1283454,1283812,1283823,1283835,1283850,1283851,1283853,1283855,1283856,1283858,1283859,1283862,1283873,1283877,1283894,1283936,1283946,1283963,1283979,1284064,1284288,1284289,1284291,1284295,1284298,1284310,1284312,1284408,1284412,1284415,1284419,1284422,1284424,1284462,1284559,1284581,1 284605,1284606,1284647,1284649,1284655,1284713,1284746,1284790,1284791,1285684,1285685,1285989,CVE-2026-31731,CVE-2026-46028,CVE-2026-53108,CVE-2026-63830,CVE-2026-64012,CVE-2026-64058,CVE-2026-64060,CVE-2026-64062,CVE-2026-64063,CVE-2026-64064,CVE-2026-64068,CVE-2026-64116,CVE-2026-64280,CVE-2026-64424,CVE-2026-64428,CVE-2026-64435,CVE-2026-64461,CVE-2026-68233,CVE-2026-68241,CVE-2026-68242,CVE-2026-68323,CVE-2026-72015,CVE-2026-72040,CVE-2026-72041,CVE-2026-72081,CVE-2026-72110,CVE-2026-72172,CVE-2026-72174,CVE-2026-72212,CVE-2026-72213,CVE-2026-72236,CVE-2026-72250,CVE-2026-72253,CVE-2026-72305,CVE-2026-72319,CVE-2026-72355,CVE-2026-72405,CVE-2026-72493,CVE-2026-74306,CVE-2026-74312,CVE-2026-74368,CVE-2026-74379,CVE-2026-74544,CVE-2026-74578,CVE-2026-74583,CVE-2026-74587,CVE-2026-74611,CVE-2026-74614,CVE-2026-74624,CVE-2026-74715,CVE-2026-80572,CVE-2026-80579,CVE-2026-80893,CVE-2026-80977,CVE-2026-89528,CVE-2026-89558,CVE-2026-89593,CVE-2026-89631,CVE-2026-89636,CVE-2026-89640,CV E-2026-89754,CVE-2026-89755,CVE-2026-89778,CVE-2026-89811,CVE-2026-89987,CVE-2026-90011,CVE-2026-90283,CVE-2026-90289,CVE-2026-93066,CVE-2026-93134,CVE-2026-93222,CVE-2026-93252,CVE-2026-93785,CVE-2026-93787,CVE-2026-93798,CVE-2026-93806,CVE-2026-97415,CVE-2026-97416,CVE-2026-97491,CVE-2026-97533,CVE-2026-97554,CVE-2026-97555,CVE-2026-97556,CVE-2026-97558,CVE-2026-97559,CVE-2026-97561,CVE-2026-97562,CVE-2026-97563,CVE-2026-97564,CVE-2026-97942,CVE-2026-97943,CVE-2026-97945,CVE-2026-98010,CVE-2026-98015,CVE-2026-98016,CVE-2026-98041,CVE-2026-98077,CVE-2026-98089,CVE-2026-98125,CVE-2026-98126,CVE-2026-98127,CVE-2026-98130,CVE-2026-98167,CVE-2026-98169,CVE-2026-98170,CVE-2026-98171,CVE-2026-98173,CVE-2026-98174,CVE-2026-98175,CVE-2026-98216,CVE-2026-98252,CVE-2026-98253,CVE-2026-98260,CVE-2026-98261,CVE-2026-98269,CVE-2026-98273,CVE-2026-98323,CVE-2026-98347,CVE-2026-98352,CVE-2026-98354,CVE-2026-98357,CVE-2026-98358,CVE-2026-98359,CVE-2026-98360,CVE-2026-98365,CVE-2026-98366,CVE-2026- 98367,CVE-2026-98432,CVE-2026-99999 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). - CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). - CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). - CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). - CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). - CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). - CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). - CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). - CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). - CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). - CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). - CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). - CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). - CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). - CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). - CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). - CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). - CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). - CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). - CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). - CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). - CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). - CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). - CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). - CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). - CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). - CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). - CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). - CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). - CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). - CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). - CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894). - CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). - CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). - CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). - CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). - CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). - CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). - CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). - CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). - CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). - CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). - CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). - CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). - CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). - CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). - CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). - CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). - CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). - CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). - CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). - CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). - CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). - CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). - CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). - CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). - CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). - CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). - CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). - CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). - CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). - CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). - CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). - CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). - CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). - CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). - CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). - CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). - CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). - CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). - CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). - CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). - CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). - CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). - CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). - CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). - CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). - CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). - CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). - CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). - CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). - CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). - CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). - CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). - CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). - CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). - CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). - CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). - CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). - CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). - CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). - CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). - CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). - CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). - CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). - CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). - CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). - CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). - CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). - CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). - CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). - CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). - CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). - CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). - CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). - CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). - CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). - CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: - ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git-fixes). - arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). - arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). - arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. - arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. - arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. - arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). - ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). - ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). - ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git-fixes). - ASoC: Intel: avs: Reset the stream unless it is already prepared (git-fixes). - ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). - ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). - ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). - ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git-fixes). - ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). - ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). - ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). - ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). - Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). - Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). - Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git-fixes). - Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git-fixes). - Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). - Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). - Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). - Bluetooth: MGMT: Fix status of pending commands flushed on power off (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git-fixes). - Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). - Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git-fixes). - crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). - Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). - Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes). - Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). - Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). - drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git-fixes). - drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git-fixes). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). - drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). - drm/aspeed: Balance the display clock enable on teardown (git-fixes). - drm/dp: don't mark the AUX backlight enabled when enabling failed (git-fixes). - drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). - drm/gud: don't keep a connector without a CRTC as connector_state (git-fixes). - drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). - drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). - drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). - drm/imagination: Size page table preallocation by device address (git-fixes). - drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). - drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). - drm/vc4: Free the BO cache size list on teardown (git-fixes). - drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). - drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). - gpio: exar: initialize the ID before registering its cleanup (git-fixes). - gpio: xilinx: fix runtime PM leak on request error path (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). - iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). - iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: bu27034: simplify using guard(mutex) (stable-fixes). - iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). - iio: light: rohm-bu27034: Fix error return (git-fixes). - iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). - Input: ati_remote2 - fix type confusion in device attribute handlers (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git-fixes). - KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). - KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). - KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). - KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). - KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git-fixes). - KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). - memstick: core: wait for request completion before freeing card (git-fixes). - memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). - mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). - mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). - mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). - mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). - net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes). - net: usb: ax88179_178a: fix rx frame length for non-last packets (git-fixes). - net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). - PCI: hv: Probe vPCI buses asynchronously (git-fixes). - PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). - pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). - pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). - pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). - power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git-fixes). - power: supply: Fix maintenance charge table kernel-doc (git-fixes). - power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). - powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). - powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). - printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). - pseries/plpks: clear SED key data after use (bsc#1215199). - pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). - pseries/plpks: clear signed update authentication buffer (bsc#1215199). - pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). - pseries/plpks: make narrowing conversions explicit (bsc#1215199). - pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). - regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git-fixes). - regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git-fixes). - sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - sched/fair: Revert 6d71a9c61604 ('sched/fair: Fix EEVDF entity placement bug causing scheduling lag') (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). - smb: client: harden DFS cache against invalid target hints (git-fixes). - smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes). - smb: common: change the data type of num_aces to le16 (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - tools/hv: fix typo 'retrive' in comment (git-fixes). - tools: gpio: fix building from the top level with O= (git-fixes). - tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). - usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - wifi: ath9k: reject short WMI command responses (git-fixes). - wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: atk9k: Revert 'wifi: ath9k: reject short WMI command responses' (stable-fixes). - wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: keep fallback association elements alive (git-fixes). - wifi: mac80211: keep paired old chanctx alive (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mt76: mt792x: pick the SAR table layout from the table itself (git-fixes). - wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). - wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). - wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). - wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). - wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). - x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). - x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). - x86/bugs: Remove dead code which might prevent from building (git-fixes). - x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). - x86/bugs: Simplify SSB cmdline parsing (git-fixes). - x86/bugs: Use early_param() for spectre_v2 (git-fixes). - x86/bugs: Use early_param() for spectre_v2_user (git-fixes). - x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes). - x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). The following package changes have been done: - kernel-macros-6.12.0-160000.40.1 updated - libfreebl3-3.125-160000.3.1 updated - kernel-devel-6.12.0-160000.40.1 updated - mozilla-nss-certs-3.125-160000.3.1 updated - mozilla-nss-3.125-160000.3.1 updated - libsoftokn3-3.125-160000.3.1 updated - mozilla-nss-tools-3.125-160000.3.1 updated - kernel-default-devel-6.12.0-160000.40.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:21:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:21:10 +0100 (CET) Subject: SUSE-CU-2026:13486-1: Recommended update of suse/sles/16.0/toolbox Message-ID: <20261101102110.598CAFCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13486-1 Container Tags : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.146 , suse/sles/16.0/toolbox:latest Container Release : 1.146 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2007 Released: Fri Oct 30 14:05:26 2026 Summary: Recommended update for suse-build-key Type: recommended Severity: moderate References: This update for suse-build-key fixes the following issues: Changes in suse-build-key: - Correct comment on suse sle15 4k build key - Avoid using touch without requiring touch as postinstall script The following package changes have been done: - suse-build-key-12.0-160000.4.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:30:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:30:23 +0100 (CET) Subject: SUSE-CU-2026:13562-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103023.3356DFCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13562-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.10 , third-party/amd/amdgpu-driver:sles-16.0-31.10-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.10 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:30:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:30:53 +0100 (CET) Subject: SUSE-CU-2026:13563-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103053.5CA6FFCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13563-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.20 , third-party/amd/amdgpu-driver:sles-16.0-31.20-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.20 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:31:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:31:22 +0100 (CET) Subject: SUSE-CU-2026:13564-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103122.A0E33FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13564-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.30 , third-party/amd/amdgpu-driver:sles-16.0-31.30-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.30 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:31:38 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:31:38 +0100 (CET) Subject: SUSE-CU-2026:13565-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103138.B9589FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13565-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.40.1 , third-party/amd/amdgpu-driver:sles-16.0-31.40.1-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.40.1 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:31:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:31:49 +0100 (CET) Subject: SUSE-CU-2026:13566-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103149.D070BFCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13566-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.50 , third-party/amd/amdgpu-driver:sles-16.0-31.50-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.50 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:31:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:31:58 +0100 (CET) Subject: SUSE-CU-2026:13567-1: Recommended update of third-party/amd/amdgpu-driver Message-ID: <20261101103158.15F17FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/amd/amdgpu-driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13567-1 Container Tags : third-party/amd/amdgpu-driver:sles-16.0-31.60 , third-party/amd/amdgpu-driver:sles-16.0-31.60-15.10 , third-party/amd/amdgpu-driver:sles-16.0-6.12.0-160000.5-default-31.60 Container Release : 15.10 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/amd/amdgpu-driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:32:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:32:31 +0100 (CET) Subject: SUSE-CU-2026:13568-1: Recommended update of third-party/nvidia/driver Message-ID: <20261101103231.26310FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13568-1 Container Tags : third-party/nvidia/driver:595-6.12.0-160000.29-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.30-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.32-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.33-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.34-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.35-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.36-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:595-sles16.0 , third-party/nvidia/driver:595-sles16.0-51.6 Container Release : 51.6 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:33:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:33:02 +0100 (CET) Subject: SUSE-CU-2026:13570-1: Recommended update of third-party/nvidia/driver Message-ID: <20261101103302.6DA10FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13570-1 Container Tags : third-party/nvidia/driver:610-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:610-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:610-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:610-sles16.0 , third-party/nvidia/driver:610-sles16.0-51.6 Container Release : 51.6 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Sun Nov 1 10:33:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sun, 1 Nov 2026 11:33:16 +0100 (CET) Subject: SUSE-CU-2026:13572-1: Recommended update of third-party/nvidia/driver Message-ID: <20261101103316.2D0B7FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13572-1 Container Tags : third-party/nvidia/driver:615-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:615-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:615-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:615-sles16.0 , third-party/nvidia/driver:615-sles16.0-51.6 Container Release : 51.6 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1964 Released: Fri Oct 23 11:30:18 2026 Summary: Recommended update for crypto-policies Type: recommended Severity: moderate References: This update for crypto-policies fixes the following issues: Changes in crypto-policies: - Remove dependency on `python3-base`, all Python scripts are now dependent on the primary Python interpreter directly without `/usr/bin/python3` mediation. - Makes Makefile independent on the exact version of the Python interpreter. The following package changes have been done: - crypto-policies-20250714.cd6043a-160000.3.1 updated From sle-container-updates at lists.suse.com Mon Nov 2 08:13:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Mon, 2 Nov 2026 09:13:05 +0100 (CET) Subject: SUSE-IU-2026:8456-1: Security update of suse/sl-micro/6.2/baremetal-os-container Message-ID: <20261102081305.95B3EFCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8456-1 Image Tags : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.14 , suse/sl-micro/6.2/baremetal-os-container:latest Image Release : 9.14 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-b094738309aa80ca3453bcc53be9b2bdde023a33252d13e9727c0813e04355bf-0 updated From sle-container-updates at lists.suse.com Mon Nov 2 08:36:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Mon, 2 Nov 2026 09:36:54 +0100 (CET) Subject: SUSE-IU-2026:8460-1: Security update of suse/sl-micro/6.2/kvm-os-container Message-ID: <20261102083654.0841BFCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8460-1 Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.2 , suse/sl-micro/6.2/kvm-os-container:2.3.2-9.16 , suse/sl-micro/6.2/kvm-os-container:latest Image Release : 9.16 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-b094738309aa80ca3453bcc53be9b2bdde023a33252d13e9727c0813e04355bf-0 updated From sle-container-updates at lists.suse.com Mon Nov 2 08:49:06 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Mon, 2 Nov 2026 09:49:06 +0100 (CET) Subject: SUSE-IU-2026:8463-1: Security update of suse/sl-micro/6.2/rt-os-container Message-ID: <20261102084906.0C60BFCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/rt-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8463-1 Image Tags : suse/sl-micro/6.2/rt-os-container:2.3.2 , suse/sl-micro/6.2/rt-os-container:2.3.2-8.16 , suse/sl-micro/6.2/rt-os-container:latest Image Release : 8.16 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sl-micro/6.2/rt-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - container:suse-sl-micro-6.2-baremetal-os-container-latest-67a1b55565084fa0ba339b45abd8ef4acddfdaf1a3b90f479b1db96f48bb1d92-0 updated From sle-container-updates at lists.suse.com Mon Nov 2 09:12:33 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Mon, 2 Nov 2026 10:12:33 +0100 (CET) Subject: SUSE-CU-2026:13583-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261102091233.DC4F5FCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13583-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.201 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.201 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 08:09:25 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 09:09:25 +0100 (CET) Subject: SUSE-IU-2026:8467-1: Recommended update of suse/sle-micro/base-5.5 Message-ID: <20261103080925.BB4AFFCE7@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8467-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.334 , suse/sle-micro/base-5.5:latest Image Release : 5.8.334 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5043-1 Released: Mon Nov 2 18:30:06 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150500.6.20.1 updated - libsolv-tools-0.7.40-150500.6.20.1 updated - libzypp-17.38.16-150500.6.80.1 updated - zypper-1.14.101-150500.6.51.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 09:11:46 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 10:11:46 +0100 (CET) Subject: SUSE-CU-2026:13613-1: Recommended update of suse/sle-micro/5.3/toolbox Message-ID: <20261103091146.7F6C1FCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.3/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13613-1 Container Tags : suse/sle-micro/5.3/toolbox:16.3 , suse/sle-micro/5.3/toolbox:16.3-6.11.307 , suse/sle-micro/5.3/toolbox:latest Container Release : 6.11.307 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/sle-micro/5.3/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5041-1 Released: Mon Nov 2 18:28:29 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150400.3.49.1 updated - libsolv-tools-0.7.40-150400.3.49.1 updated - libzypp-17.38.16-150400.3.164.1 updated - zypper-1.14.101-150400.3.110.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 09:18:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 10:18:19 +0100 (CET) Subject: SUSE-CU-2026:13614-1: Recommended update of suse/sle-micro-rancher/5.4 Message-ID: <20261103091819.79993FCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13614-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.213 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.213 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5041-1 Released: Mon Nov 2 18:28:29 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150400.3.49.1 updated - libsolv-tools-0.7.40-150400.3.49.1 updated - libzypp-17.38.16-150400.3.164.1 updated - zypper-1.14.101-150400.3.110.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 09:22:13 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 10:22:13 +0100 (CET) Subject: SUSE-CU-2026:13615-1: Recommended update of suse/sle-micro/5.4/toolbox Message-ID: <20261103092213.6D7DFFCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13615-1 Container Tags : suse/sle-micro/5.4/toolbox:16.3 , suse/sle-micro/5.4/toolbox:16.3-5.19.308 , suse/sle-micro/5.4/toolbox:latest Container Release : 5.19.308 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5041-1 Released: Mon Nov 2 18:28:29 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150400.3.49.1 updated - libsolv-tools-0.7.40-150400.3.49.1 updated - libzypp-17.38.16-150400.3.164.1 updated - zypper-1.14.101-150400.3.110.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 09:25:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 10:25:30 +0100 (CET) Subject: SUSE-CU-2026:13616-1: Recommended update of suse/sle-micro/5.5/toolbox Message-ID: <20261103092530.5EE3CFCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.5/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13616-1 Container Tags : suse/sle-micro/5.5/toolbox:16.3 , suse/sle-micro/5.5/toolbox:16.3-3.12.221 , suse/sle-micro/5.5/toolbox:latest Container Release : 3.12.221 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/sle-micro/5.5/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5043-1 Released: Mon Nov 2 18:30:06 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150500.6.20.1 updated - libsolv-tools-0.7.40-150500.6.20.1 updated - libzypp-17.38.16-150500.6.80.1 updated - zypper-1.14.101-150500.6.51.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 09:30:52 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 10:30:52 +0100 (CET) Subject: SUSE-IU-2026:8471-1: Security update of suse/sl-micro/6.2/baremetal-os-container Message-ID: <20261103093052.730BAFCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8471-1 Image Tags : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.15 , suse/sl-micro/6.2/baremetal-os-container:latest Image Release : 9.15 Severity : important Type : security References : 1286378 CVE-2026-77478 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2011 Released: Mon Nov 2 09:37:20 2026 Summary: Security update for fuse-overlayfs Type: security Severity: important References: 1286378,CVE-2026-77478 This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image (bsc#1286378). The following package changes have been done: - fuse-overlayfs-1.15-160000.4.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:14:06 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:14:06 +0100 (CET) Subject: SUSE-CU-2026:13618-1: Recommended update of suse/ltss/sle15.4/sle15 Message-ID: <20261103101406.E7E00FCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.4/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13618-1 Container Tags : suse/ltss/sle15.4/bci-base:15.4 , suse/ltss/sle15.4/bci-base:15.4-6.58 , suse/ltss/sle15.4/sle15:15.4 , suse/ltss/sle15.4/sle15:15.4-6.58 , suse/ltss/sle15.4/sle15:latest Container Release : 6.58 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/ltss/sle15.4/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5041-1 Released: Mon Nov 2 18:28:29 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150400.3.49.1 updated - libsolv-tools-0.7.40-150400.3.49.1 updated - libzypp-17.38.16-150400.3.164.1 updated - zypper-1.14.101-150400.3.110.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:15:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:15:55 +0100 (CET) Subject: SUSE-CU-2026:13619-1: Recommended update of suse/ltss/sle15.5/sle15 Message-ID: <20261103101555.65F8AFCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13619-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.85 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.85 , suse/ltss/sle15.5/sle15:latest Container Release : 8.85 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5043-1 Released: Mon Nov 2 18:30:06 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150500.6.20.1 updated - libsolv-tools-0.7.40-150500.6.20.1 updated - libzypp-17.38.16-150500.6.80.1 updated - zypper-1.14.101-150500.6.51.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:20:36 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:20:36 +0100 (CET) Subject: SUSE-CU-2026:13621-1: Recommended update of suse/ltss/sle15.6/sle15 Message-ID: <20261103102036.E01DBFCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13621-1 Container Tags : suse/ltss/sle15.6/bci-base:15.6 , suse/ltss/sle15.6/bci-base:15.6-5.107 , suse/ltss/sle15.6/bci-base:latest , suse/ltss/sle15.6/sle15:15.6 , suse/ltss/sle15.6/sle15:15.6-5.107 , suse/ltss/sle15.6/sle15:latest Container Release : 5.107 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/ltss/sle15.6/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5044-1 Released: Mon Nov 2 18:31:11 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150600.8.27.1 updated - libzypp-17.38.16-150600.3.98.1 updated - zypper-1.14.101-150600.10.61.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:21:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:21:02 +0100 (CET) Subject: SUSE-CU-2026:13622-1: Recommended update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261103102102.EBA08FCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13622-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.203 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.203 Severity : moderate Type : recommended References : 1279541 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5045-1 Released: Mon Nov 2 18:31:58 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. The following package changes have been done: - libsolv-tools-base-0.7.40-150700.11.13.1 updated - libzypp-17.38.16-150700.6.19.1 updated - zypper-1.14.101-150700.13.12.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:23:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:23:11 +0100 (CET) Subject: SUSE-CU-2026:13623-1: Security update of bci/nodejs Message-ID: <20261103102311.28EC9FCBE@maintenance.suse.de> SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13623-1 Container Tags : bci/node:22 , bci/node:22-sles15 , bci/node:22.23.4 , bci/node:22.23.4-24.72 , bci/nodejs:22 , bci/nodejs:22-sles15 , bci/nodejs:22.23.4 , bci/nodejs:22.23.4-24.72 Container Release : 24.72 Severity : important Type : security References : 1286261 1286561 1286563 1286564 1286565 1286566 1286567 1286570 CVE-2026-105481 CVE-2026-105482 CVE-2026-106069 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5036-1 Released: Mon Nov 2 17:21:07 2026 Summary: Security update for nodejs22 Type: security Severity: important References: 1286261,1286561,1286563,1286564,1286565,1286566,1286567,1286570,CVE-2026-105481,CVE-2026-105482,CVE-2026-106069,CVE-2026-106072,CVE-2026-106073,CVE-2026-106074,CVE-2026-111497 This update for nodejs22 fixes the following issues: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-2026-106069: TLS certificate hostname bypass when the host loosely resolves to an IP address (bsc#1286563). - CVE-2026-106072: Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpoints (bsc#1286566). - CVE-2026-106073: Permission Model bypass with fs.realpathSync (bsc#1286570). - CVE-2026-106074: crypto.randomUUID() and randomInt() entropy caches are saved into user-land startup snapshots and SEAs, so every process repeats the same values (bsc#1286567). - CVE-2026-111497: Node.js Brotli decoder out-of-bounds write permits remote code execution (bsc#1286564). Changes for nodejs22: - Update to 22.23.4: - deps: update c-ares to 1.34.9 - deps: update timezone to 2026e - deps: upgrade openssl sources to openssl-3.5.9 - deps: update sqlite to 3.53.4 - deps: update undici to 6.29.1 - Update to 22.23.3: - deps: update corepack to 0.36.0 - deps: upgrade npm to 10.9.9 - deps: update icu to 78.3 - deps: update Undici to 6.28.1 - node-api: support SharedArrayBuffer in napi_create_typedarray - node-api: add napi_create_external_sharedarraybuffer The following package changes have been done: - nodejs22-22.23.4-150700.3.21.1 updated - npm22-22.23.4-150700.3.21.1 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:25:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:25:22 +0100 (CET) Subject: SUSE-CU-2026:13624-1: Security update of bci/openjdk-devel Message-ID: <20261103102522.E4016FCBE@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13624-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-sles15 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-21.89 Container Release : 21.89 Severity : important Type : security References : 1279889 CVE-2026-86231 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5017-1 Released: Mon Nov 2 10:50:49 2026 Summary: Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j Type: security Severity: important References: 1279889,CVE-2026-86231 This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation when processing `known_hosts` entries (bsc#1279889). Changes for apache-commons-codec: - Updated to version 1.22.0. Changes for apache-commons-io: - Updated to version 2.22.0. Changes for apache-commons-logging: - Updated to version 1.4.0. Changes for jsch: - Updated to version 2.28.7. Changes for maven-file-management: - Updated to version 3.2.0. Changes for opentest4j: - Updated to version 1.3.0. The following package changes have been done: - apache-commons-codec-1.22.0-150200.3.12.1 updated - apache-commons-io-2.22.0-150200.3.18.1 updated - apache-commons-logging-1.4.0-150200.11.12.1 updated - container:bci-openjdk-17-15.7.17-20.77 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:27:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:27:27 +0100 (CET) Subject: SUSE-CU-2026:13625-1: Security update of bci/openjdk-devel Message-ID: <20261103102727.E92ABFCBE@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13625-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21-sles15 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-25.89 Container Release : 25.89 Severity : important Type : security References : 1279889 CVE-2026-86231 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5017-1 Released: Mon Nov 2 10:50:49 2026 Summary: Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j Type: security Severity: important References: 1279889,CVE-2026-86231 This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation when processing `known_hosts` entries (bsc#1279889). Changes for apache-commons-codec: - Updated to version 1.22.0. Changes for apache-commons-io: - Updated to version 2.22.0. Changes for apache-commons-logging: - Updated to version 1.4.0. Changes for jsch: - Updated to version 2.28.7. Changes for maven-file-management: - Updated to version 3.2.0. Changes for opentest4j: - Updated to version 1.3.0. The following package changes have been done: - apache-commons-codec-1.22.0-150200.3.12.1 updated - apache-commons-io-2.22.0-150200.3.18.1 updated - apache-commons-logging-1.4.0-150200.11.12.1 updated - container:bci-openjdk-21-15.7.21-24.76 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:28:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:28:48 +0100 (CET) Subject: SUSE-CU-2026:13626-1: Security update of bci/openjdk-devel Message-ID: <20261103102848.80F64FCBE@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13626-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25-sles15 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-9.90 , bci/openjdk-devel:latest Container Release : 9.90 Severity : important Type : security References : 1279889 CVE-2026-86231 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5017-1 Released: Mon Nov 2 10:50:49 2026 Summary: Security update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j Type: security Severity: important References: 1279889,CVE-2026-86231 This update for apache-commons-codec, apache-commons-io, apache-commons-logging, avalon-framework, avalon-logkit, glassfish-jsp, jsch, maven-file-management, opentest4j fixes the following issue: - CVE-2026-86231: improper check for certificate revocation when processing `known_hosts` entries (bsc#1279889). Changes for apache-commons-codec: - Updated to version 1.22.0. Changes for apache-commons-io: - Updated to version 2.22.0. Changes for apache-commons-logging: - Updated to version 1.4.0. Changes for jsch: - Updated to version 2.28.7. Changes for maven-file-management: - Updated to version 3.2.0. Changes for opentest4j: - Updated to version 1.3.0. The following package changes have been done: - apache-commons-codec-1.22.0-150200.3.12.1 updated - apache-commons-io-2.22.0-150200.3.18.1 updated - apache-commons-logging-1.4.0-150200.11.12.1 updated - container:bci-openjdk-25-15.7.25-9.76 updated From sle-container-updates at lists.suse.com Tue Nov 3 10:30:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 3 Nov 2026 11:30:48 +0100 (CET) Subject: SUSE-CU-2026:13627-1: Security update of bci/php-apache Message-ID: <20261103103048.C4D5AFCBE@maintenance.suse.de> SUSE Container Update Advisory: bci/php-apache ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13627-1 Container Tags : bci/php-apache:8 , bci/php-apache:8-sles15 , bci/php-apache:8.3.36 , bci/php-apache:8.3.36-30.1 , bci/php-apache:latest Container Release : 30.1 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container bci/php-apache was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlienc1-1.0.7-150200.3.8.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 08:10:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 09:10:56 +0100 (CET) Subject: SUSE-CU-2026:13629-1: Security update of private-registry/1.2/harbor-trivy-adapter Message-ID: <20261104081056.E4C45FCE7@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13629-1 Container Tags : private-registry/1.2/harbor-trivy-adapter:1.2.2 , private-registry/1.2/harbor-trivy-adapter:1.2.2-1.149 , private-registry/1.2/harbor-trivy-adapter:latest Container Release : 1.149 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container private-registry/1.2/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 08:13:36 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 09:13:36 +0100 (CET) Subject: SUSE-CU-2026:13630-1: Security update of private-registry/harbor-trivy-adapter Message-ID: <20261104081336.8EA4DFCE7@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13630-1 Container Tags : private-registry/harbor-trivy-adapter:1.1.4 , private-registry/harbor-trivy-adapter:1.1.4-2.174 , private-registry/harbor-trivy-adapter:latest Container Release : 2.174 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 08:14:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 09:14:32 +0100 (CET) Subject: SUSE-CU-2026:13631-1: Security update of private-registry/harbor-trivy-adapter Message-ID: <20261104081432.D3A92FCE7@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13631-1 Container Tags : private-registry/harbor-trivy-adapter:0.35.1 , private-registry/harbor-trivy-adapter:0.35.1-1.112 , private-registry/harbor-trivy-adapter:latest Container Release : 1.112 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:06:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:06:01 +0100 (CET) Subject: SUSE-CU-2026:13638-1: Security update of suse/ltss/sle15.6/sle15 Message-ID: <20261104090601.9A31AFCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13638-1 Container Tags : suse/ltss/sle15.6/bci-base:15.6 , suse/ltss/sle15.6/bci-base:15.6-5.108 , suse/ltss/sle15.6/bci-base:latest , suse/ltss/sle15.6/sle15:15.6 , suse/ltss/sle15.6/sle15:15.6-5.108 , suse/ltss/sle15.6/sle15:latest Container Release : 5.108 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/ltss/sle15.6/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5069-1 Released: Tue Nov 3 09:13:32 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - curl-8.22.0-150600.4.58.1 updated - libcurl4-8.22.0-150600.4.58.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:06:20 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:06:20 +0100 (CET) Subject: SUSE-CU-2026:13639-1: Security update of bci/golang Message-ID: <20261104090620.D03ADFCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13639-1 Container Tags : bci/golang:1.25 , bci/golang:1.25-sles15 , bci/golang:1.25.14 , bci/golang:1.25.14-3.74.3 , bci/golang:oldoldstable Container Release : 74.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:07:52 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:07:52 +0100 (CET) Subject: SUSE-CU-2026:13640-1: Security update of bci/golang Message-ID: <20261104090752.43FC9FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13640-1 Container Tags : bci/golang:1.26 , bci/golang:1.26-sles15 , bci/golang:1.26.10 , bci/golang:1.26.10-2.75.3 , bci/golang:oldstable Container Release : 75.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:09:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:09:30 +0100 (CET) Subject: SUSE-CU-2026:13641-1: Security update of bci/golang Message-ID: <20261104090930.8C48AFCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13641-1 Container Tags : bci/golang:1.25-openssl , bci/golang:1.25-sles15-openssl , bci/golang:1.25.14-openssl , bci/golang:1.25.14-openssl-92.3 , bci/golang:oldstable-openssl Container Release : 92.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:11:07 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:11:07 +0100 (CET) Subject: SUSE-CU-2026:13642-1: Security update of bci/golang Message-ID: <20261104091107.0D4A1FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13642-1 Container Tags : bci/golang:1.27 , bci/golang:1.27-sles15 , bci/golang:1.27.3 , bci/golang:1.27.3-1.75.3 , bci/golang:latest , bci/golang:stable Container Release : 75.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:12:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:12:48 +0100 (CET) Subject: SUSE-CU-2026:13643-1: Security update of bci/golang Message-ID: <20261104091248.C2C91FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13643-1 Container Tags : bci/golang:1.26-openssl , bci/golang:1.26-sles15-openssl , bci/golang:1.26.10-openssl , bci/golang:1.26.10-openssl-92.3 , bci/golang:latest , bci/golang:stable-openssl Container Release : 92.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:14:13 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:14:13 +0100 (CET) Subject: SUSE-CU-2026:13644-1: Security update of suse/kea Message-ID: <20261104091413.9BCE7FCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/kea ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13644-1 Container Tags : suse/kea:2.6 , suse/kea:2.6-80.24 Container Release : 80.24 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/kea was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:16:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:16:15 +0100 (CET) Subject: SUSE-CU-2026:13645-1: Security update of suse/kiosk/firefox-esr Message-ID: <20261104091615.E3FECFCE7@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13645-1 Container Tags : suse/kiosk/firefox-esr:153.5 , suse/kiosk/firefox-esr:153.5-75.63 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest Container Release : 75.63 Severity : important Type : security References : 1263116 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1284274 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287778 1287781 CVE-2026-105326 CVE-2026-107929 CVE-2026-111497 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-41079 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5078-1 Released: Tue Nov 3 09:21:20 2026 Summary: Security update for cups Type: security Severity: important References: 1263116,1284274,CVE-2026-105326,CVE-2026-41079 This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticated remote code execution (bsc#1284274). The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libcurl4-8.22.0-150700.7.33.1 updated - cups-config-2.2.7-150000.3.101.2 updated - libcups2-2.2.7-150000.3.101.2 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:17:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:17:49 +0100 (CET) Subject: SUSE-CU-2026:13646-1: Security update of bci/nodejs Message-ID: <20261104091749.5C41FFCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13646-1 Container Tags : bci/node:22 , bci/node:22-sles15 , bci/node:22.23.4 , bci/node:22.23.4-24.73 , bci/nodejs:22 , bci/nodejs:22-sles15 , bci/nodejs:22.23.4 , bci/nodejs:22.23.4-24.73 Container Release : 24.73 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:20:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:20:09 +0100 (CET) Subject: SUSE-CU-2026:13647-1: Security update of bci/openjdk Message-ID: <20261104092009.8166CFCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13647-1 Container Tags : bci/openjdk:17 , bci/openjdk:17-sles15 , bci/openjdk:17.0.20.1 , bci/openjdk:17.0.20.1-20.78 Container Release : 20.78 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:22:43 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:22:43 +0100 (CET) Subject: SUSE-CU-2026:13648-1: Security update of bci/openjdk Message-ID: <20261104092243.7D983FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13648-1 Container Tags : bci/openjdk:21 , bci/openjdk:21-sles15 , bci/openjdk:21.0.12.1 , bci/openjdk:21.0.12.1-24.77 Container Release : 24.77 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:24:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:24:18 +0100 (CET) Subject: SUSE-CU-2026:13649-1: Security update of bci/openjdk Message-ID: <20261104092418.53751FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13649-1 Container Tags : bci/openjdk:25 , bci/openjdk:25-sles15 , bci/openjdk:25.0.4.1 , bci/openjdk:25.0.4.1-9.77 , bci/openjdk:latest Container Release : 9.77 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:26:36 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:26:36 +0100 (CET) Subject: SUSE-CU-2026:13650-1: Security update of bci/php-apache Message-ID: <20261104092636.34461FCE7@maintenance.suse.de> SUSE Container Update Advisory: bci/php-apache ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13650-1 Container Tags : bci/php-apache:8 , bci/php-apache:8-sles15 , bci/php-apache:8.3.36 , bci/php-apache:8.3.36-30.2 , bci/php-apache:latest Container Release : 30.2 Severity : important Type : security References : 1284043 1284044 1284045 1284046 1284047 1284048 1284049 1284050 1284051 1284053 1284054 1284055 1284056 1284057 1284058 1284059 1284060 1284061 CVE-2026-42356 CVE-2026-42528 CVE-2026-46729 CVE-2026-47360 CVE-2026-48005 CVE-2026-56153 CVE-2026-56154 CVE-2026-57941 CVE-2026-58415 CVE-2026-59797 CVE-2026-63045 CVE-2026-63292 CVE-2026-63686 CVE-2026-63718 CVE-2026-73636 CVE-2026-73637 CVE-2026-79768 CVE-2026-93546 ----------------------------------------------------------------- The container bci/php-apache was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5077-1 Released: Tue Nov 3 09:19:57 2026 Summary: Security update for apache2 Type: security Severity: important References: 1284043,1284044,1284045,1284046,1284047,1284048,1284049,1284050,1284051,1284053,1284054,1284055,1284056,1284057,1284058,1284059,1284060,1284061,CVE-2026-42356,CVE-2026-42528,CVE-2026-46729,CVE-2026-47360,CVE-2026-48005,CVE-2026-56153,CVE-2026-56154,CVE-2026-57941,CVE-2026-58415,CVE-2026-59797,CVE-2026-63045,CVE-2026-63292,CVE-2026-63686,CVE-2026-63718,CVE-2026-73636,CVE-2026-73637,CVE-2026-79768,CVE-2026-93546 This update for apache2 fixes the following issues: - CVE-2026-42356: deployment of wrong handler allows target of internal redirects from CGI programs to also be treated as CGI and executed (bsc#1284043). - CVE-2026-42528: memory calculation bug in `mod_dav` allows an attacker with permission to create WebDAV locks to crash server child processes (bsc#1284044). - CVE-2026-46729: NULL pointer dereference in `mod_heartmonitor` over unicast listener (bsc#1284045). - CVE-2026-47360: session cookie passed to a backend server when `SessionCookieRemove` changes across internal redirects (bsc#1284046). - CVE-2026-48005: missing authentication checks in `mod_auth_digest` allows an unauthenticated remote client to cause a DoS via forged `Authorization` headers when Digest authentication is enabled with `AuthDigestNcCheck` (bsc#1284047). - CVE-2026-56153: out-of-bounds write in `mod_charset_lite` (bsc#1284048). - CVE-2026-56154: use-after-free in `mod_rewrite` when using lookahead `(%{LA-U:HTTP:...})` (bsc#1284049). - CVE-2026-57941: use-after-free in `mod_http2` via shared `session->bbtmp` re-entrancy (bsc#1284050). - CVE-2026-58415: internal state files accessible to external parties in `mod_dav_fs` allows a remote client to read WebDAV dead properties of resources it cannot author via a GET request for the .DAV state directory (bsc#1284051). - CVE-2026-59797: improper privilege management in `mod_ssl` when using `SSLRequire` and file-related expressions (bsc#1284059). - CVE-2026-63045: improper validation of FTP PASV reply address in `mod_proxy_ftp` allows an untrusted FTP server to cause a proxy to open a data connection to an arbitrary third-party host (bsc#1284060). - CVE-2026-63292: stack-based buffer overflow in `mod_vhost_alias` allows a remote client to cause a DoS or potentially execute arbitrary code via an HTTP request with a specially crafted `Host` header (bsc#1284061). - CVE-2026-63686: NULL pointer dereference in `mod_xml2enc` allows an untrusted backend server to cause a denial of service via a crafted proxied response (bsc#1284058). - CVE-2026-63718: inconsistent interpretation of HTTP requests in `mod_proxy_uwsgi` allows for response smuggling via a crafted uwsgi response with `Transfer-Encoding` (bsc#1284057). - CVE-2026-73636: authentication bypass by capture-replay in `mod_auth_digest` allows a MiTM attacker to replay captured digest authentication credentials via crafted requests (bsc#1284056). - CVE-2026-73637: use-after-free in `mod_auth_digest` allows an unauthenticated remote client to cause authentication state corruption via concurrent Digest authentication requests (bsc#1284055). - CVE-2026-79768: path equivalence issue in the `mod_userdir` module when configured with absolute non-wildcard `UserDir` directive (bsc#1284054). - CVE-2026-93546: integer overflow in `mod_dav_fs` allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database (bsc#1284053). The following package changes have been done: - apache2-prefork-2.4.66-150700.4.26.1 updated - apache2-2.4.66-150700.4.26.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:28:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:28:21 +0100 (CET) Subject: SUSE-CU-2026:13651-1: Security update of suse/postgres Message-ID: <20261104092821.B07A8FCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13651-1 Container Tags : suse/postgres:16-contrib , suse/postgres:16.15 , suse/postgres:16.15-contrib , suse/postgres:16.15-contrib-93.59 Container Release : 93.59 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:29:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:29:19 +0100 (CET) Subject: SUSE-CU-2026:13652-1: Security update of suse/postgres Message-ID: <20261104092919.B7760FCBE@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13652-1 Container Tags : suse/postgres:16 , suse/postgres:16.15 , suse/postgres:16.15 , suse/postgres:16.15-93.59 Container Release : 93.59 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:31:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:31:00 +0100 (CET) Subject: SUSE-CU-2026:13653-1: Security update of suse/postgres Message-ID: <20261104093100.7A4B1FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13653-1 Container Tags : suse/postgres:17-contrib , suse/postgres:17.11 , suse/postgres:17.11-contrib , suse/postgres:17.11-contrib-83.58 Container Release : 83.58 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:31:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:31:54 +0100 (CET) Subject: SUSE-CU-2026:13654-1: Security update of suse/postgres Message-ID: <20261104093154.75515FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13654-1 Container Tags : suse/postgres:17 , suse/postgres:17.11 , suse/postgres:17.11 , suse/postgres:17.11-83.58 Container Release : 83.58 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:32:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:32:57 +0100 (CET) Subject: SUSE-CU-2026:13655-1: Security update of suse/postgres Message-ID: <20261104093257.9531BFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13655-1 Container Tags : suse/postgres:18-contrib , suse/postgres:18.6 , suse/postgres:18.6-contrib , suse/postgres:18.6-contrib-74.17 , suse/postgres:latest Container Release : 74.17 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:33:38 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:33:38 +0100 (CET) Subject: SUSE-CU-2026:13656-1: Security update of suse/postgres Message-ID: <20261104093338.332FCFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13656-1 Container Tags : suse/postgres:18 , suse/postgres:18.6 , suse/postgres:18.6 , suse/postgres:18.6-74.17 , suse/postgres:latest Container Release : 74.17 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:35:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:35:22 +0100 (CET) Subject: SUSE-CU-2026:13657-1: Security update of bci/python Message-ID: <20261104093522.1A551FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13657-1 Container Tags : bci/python:3 , bci/python:3.11 , bci/python:3.11.17 , bci/python:3.11.17-85.76 Container Release : 85.76 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:36:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:36:59 +0100 (CET) Subject: SUSE-CU-2026:13658-1: Security update of bci/python Message-ID: <20261104093659.6ED76FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13658-1 Container Tags : bci/python:3 , bci/python:3.13 , bci/python:3.13-sles15 , bci/python:3.13.16 , bci/python:3.13.16-88.72 , bci/python:latest Container Release : 88.72 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:38:39 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:38:39 +0100 (CET) Subject: SUSE-CU-2026:13659-1: Security update of bci/python Message-ID: <20261104093839.D601BFCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13659-1 Container Tags : bci/python:3 , bci/python:3.6 , bci/python:3.6.15 , bci/python:3.6.15-84.70 Container Release : 84.70 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:40:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:40:08 +0100 (CET) Subject: SUSE-CU-2026:13660-1: Security update of suse/rmt-server Message-ID: <20261104094008.1063BFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/rmt-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13660-1 Container Tags : suse/rmt-server:3 , suse/rmt-server:3.2 , suse/rmt-server:3.2-74.2 , suse/rmt-server:latest Container Release : 74.2 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/rmt-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:41:50 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:41:50 +0100 (CET) Subject: SUSE-CU-2026:13661-1: Security update of bci/ruby Message-ID: <20261104094150.533A6FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/ruby ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13661-1 Container Tags : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-28.23 , bci/ruby:2.5-sles15 Container Release : 28.23 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/ruby was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:45:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:45:04 +0100 (CET) Subject: SUSE-CU-2026:13663-1: Security update of suse/samba-server Message-ID: <20261104094504.158DFFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13663-1 Container Tags : suse/samba-server:4.21 , suse/samba-server:4.21 , suse/samba-server:4.21-76.50 , suse/samba-server:latest Container Release : 76.50 Severity : important Type : security References : 1263116 1284274 CVE-2026-105326 CVE-2026-41079 ----------------------------------------------------------------- The container suse/samba-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5078-1 Released: Tue Nov 3 09:21:20 2026 Summary: Security update for cups Type: security Severity: important References: 1263116,1284274,CVE-2026-105326,CVE-2026-41079 This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticated remote code execution (bsc#1284274). The following package changes have been done: - cups-config-2.2.7-150000.3.101.2 updated - libcups2-2.2.7-150000.3.101.2 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:47:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:47:18 +0100 (CET) Subject: SUSE-CU-2026:13664-1: Security update of bci/spack Message-ID: <20261104094718.95C38FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/spack ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13664-1 Container Tags : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.82 , bci/spack:latest Container Release : 25.82 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/spack was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated - libcurl-devel-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:47:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:47:45 +0100 (CET) Subject: SUSE-CU-2026:13665-1: Security update of suse/kiosk/tigervnc-x11vnc Message-ID: <20261104094745.BF7EEFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/tigervnc-x11vnc ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13665-1 Container Tags : suse/kiosk/tigervnc-x11vnc:1 , suse/kiosk/tigervnc-x11vnc:1.14 , suse/kiosk/tigervnc-x11vnc:1.14-64.1 Container Release : 64.1 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/kiosk/tigervnc-x11vnc was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:48:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:48:53 +0100 (CET) Subject: SUSE-CU-2026:13666-1: Security update of suse/kiosk/xorg-client Message-ID: <20261104094853.D1B85FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13666-1 Container Tags : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-81.23 , suse/kiosk/xorg-client:latest Container Release : 81.23 Severity : important Type : security References : 1263116 1284274 1287778 CVE-2026-105326 CVE-2026-111497 CVE-2026-41079 ----------------------------------------------------------------- The container suse/kiosk/xorg-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5078-1 Released: Tue Nov 3 09:21:20 2026 Summary: Security update for cups Type: security Severity: important References: 1263116,1284274,CVE-2026-105326,CVE-2026-41079 This update for cups fixes the following issues: - CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). - CVE-2026-105326: argument injection in `mailto` notifier allows unauthenticated remote code execution (bsc#1284274). The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - cups-config-2.2.7-150000.3.101.2 updated - libcups2-2.2.7-150000.3.101.2 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:43:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:43:32 +0100 (CET) Subject: SUSE-CU-2026:13662-1: Security update of bci/ruby Message-ID: <20261104094332.ED26AFCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/ruby ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13662-1 Container Tags : bci/ruby:3 , bci/ruby:3.4 , bci/ruby:3.4-27.23 , bci/ruby:3.4-sles15 , bci/ruby:latest Container Release : 27.23 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1277477 1277478 1277482 1278173 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287781 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/ruby was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) The following package changes have been done: - libcurl4-8.22.0-150700.7.33.1 updated - curl-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:55:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:55:53 +0100 (CET) Subject: SUSE-CU-2026:13667-1: Security update of bci/bci-init Message-ID: <20261104095553.4AC97FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-init ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13667-1 Container Tags : bci/bci-init:16.0 , bci/bci-init:16.0-13.37 Container Release : 13.37 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container bci/bci-init was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:59:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:59:04 +0100 (CET) Subject: SUSE-CU-2026:13672-1: Security update of suse/sles/16.0/virt-handler Message-ID: <20261104095904.B1D08FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-handler ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13672-1 Container Tags : suse/sles/16.0/virt-handler:1.8 , suse/sles/16.0/virt-handler:1.8.4 , suse/sles/16.0/virt-handler:1.8.4-11.22 Container Release : 11.22 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/virt-handler was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 09:59:51 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 10:59:51 +0100 (CET) Subject: SUSE-CU-2026:13673-1: Security update of suse/sles/16.0/virt-launcher Message-ID: <20261104095951.0B2AAFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-launcher ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13673-1 Container Tags : suse/sles/16.0/virt-launcher:1.8 , suse/sles/16.0/virt-launcher:1.8.4 , suse/sles/16.0/virt-launcher:1.8.4-11.22 Container Release : 11.22 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/virt-launcher was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:00:25 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:00:25 +0100 (CET) Subject: SUSE-CU-2026:13674-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261104100025.3D835FD21@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13674-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.8 , suse/sles/16.0/libguestfs-tools:1.8.4 , suse/sles/16.0/libguestfs-tools:1.8.4-11.22 Container Release : 11.22 Severity : important Type : security References : 1271446 1271447 1271448 1271449 1272195 1272196 1273156 1275115 1282347 1283299 1283300 1283301 1283302 1283303 1283304 1283493 1283831 1284334 CVE-2026-102555 CVE-2026-102556 CVE-2026-102557 CVE-2026-102558 CVE-2026-102559 CVE-2026-102560 CVE-2026-102633 CVE-2026-103399 CVE-2026-12547 CVE-2026-12548 CVE-2026-15711 CVE-2026-15712 CVE-2026-15713 CVE-2026-15714 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-66339 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated ----------------------------------------------------------------- Advisory ID: 2000 Released: Thu Oct 29 11:23:31 2026 Summary: Security update for libsoup Type: security Severity: important References: 1271446,1271447,1271448,1271449,1272195,1272196,1273156,1283299,1283300,1283301,1283302,1283303,1283304,1283831,CVE-2026-102555,CVE-2026-102556,CVE-2026-102557,CVE-2026-102558,CVE-2026-102559,CVE-2026-102560,CVE-2026-103399,CVE-2026-12547,CVE-2026-12548,CVE-2026-15711,CVE-2026-15712,CVE-2026-15713,CVE-2026-15714,CVE-2026-66339 This update for libsoup fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). - CVE-2026-66339: proxy credentials leak to destination server via `Proxy-Authorization` header in CONNECT tunnels (bsc#1273156). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). - CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). - CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). - CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). - CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). - CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated - libsoup-3_0-0-3.6.6-160000.5.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:02:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:02:17 +0100 (CET) Subject: SUSE-CU-2026:13677-1: Security update of suse/sles/16.0/sidecar-shim Message-ID: <20261104100217.2E61CFD12@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/sidecar-shim ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13677-1 Container Tags : suse/sles/16.0/sidecar-shim:1.8 , suse/sles/16.0/sidecar-shim:1.8.4 , suse/sles/16.0/sidecar-shim:1.8.4-11.22 Container Release : 11.22 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/sidecar-shim was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:04:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:04:48 +0100 (CET) Subject: SUSE-CU-2026:13683-1: Security update of suse/sles/16.0/virt-handler Message-ID: <20261104100448.2426CFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-handler ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13683-1 Container Tags : suse/sles/16.0/virt-handler:1.9 , suse/sles/16.0/virt-handler:1.9.1 , suse/sles/16.0/virt-handler:1.9.1-2.24 Container Release : 2.24 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/virt-handler was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:05:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:05:18 +0100 (CET) Subject: SUSE-CU-2026:13684-1: Security update of suse/sles/16.0/virt-launcher Message-ID: <20261104100518.4C749FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-launcher ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13684-1 Container Tags : suse/sles/16.0/virt-launcher:1.9 , suse/sles/16.0/virt-launcher:1.9.1 , suse/sles/16.0/virt-launcher:1.9.1-2.24 Container Release : 2.24 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/virt-launcher was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:05:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:05:45 +0100 (CET) Subject: SUSE-CU-2026:13685-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261104100545.F3F16FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13685-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.9 , suse/sles/16.0/libguestfs-tools:1.9.1 , suse/sles/16.0/libguestfs-tools:1.9.1-2.24 Container Release : 2.24 Severity : important Type : security References : 1271446 1271447 1271448 1271449 1272195 1272196 1273156 1275115 1282347 1283299 1283300 1283301 1283302 1283303 1283304 1283493 1283831 1284334 CVE-2026-102555 CVE-2026-102556 CVE-2026-102557 CVE-2026-102558 CVE-2026-102559 CVE-2026-102560 CVE-2026-102633 CVE-2026-103399 CVE-2026-12547 CVE-2026-12548 CVE-2026-15711 CVE-2026-15712 CVE-2026-15713 CVE-2026-15714 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-66339 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated ----------------------------------------------------------------- Advisory ID: 2000 Released: Thu Oct 29 11:23:31 2026 Summary: Security update for libsoup Type: security Severity: important References: 1271446,1271447,1271448,1271449,1272195,1272196,1273156,1283299,1283300,1283301,1283302,1283303,1283304,1283831,CVE-2026-102555,CVE-2026-102556,CVE-2026-102557,CVE-2026-102558,CVE-2026-102559,CVE-2026-102560,CVE-2026-103399,CVE-2026-12547,CVE-2026-12548,CVE-2026-15711,CVE-2026-15712,CVE-2026-15713,CVE-2026-15714,CVE-2026-66339 This update for libsoup fixes the following issues: - CVE-2026-12547: Header 'Proxy-Authorization' leads to credentials being send to different proxy after proxy switch (bsc#1272195). - CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). - CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). - CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). - CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). - CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). - CVE-2026-66339: proxy credentials leak to destination server via `Proxy-Authorization` header in CONNECT tunnels (bsc#1273156). - CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). - CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). - CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). - CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). - CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). - CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). - CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated - libsoup-3_0-0-3.6.6-160000.5.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:06:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:06:59 +0100 (CET) Subject: SUSE-CU-2026:13688-1: Security update of suse/sles/16.0/sidecar-shim Message-ID: <20261104100659.4743DFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/sidecar-shim ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13688-1 Container Tags : suse/sles/16.0/sidecar-shim:1.9 , suse/sles/16.0/sidecar-shim:1.9.1 , suse/sles/16.0/sidecar-shim:1.9.1-2.24 Container Release : 2.24 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container suse/sles/16.0/sidecar-shim was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:13:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:13:05 +0100 (CET) Subject: SUSE-CU-2026:13690-1: Security update of bci/bci-sle16-kernel-module-devel Message-ID: <20261104101305.DB769FCEF@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle16-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13690-1 Container Tags : bci/bci-sle16-kernel-module-devel:16.0 , bci/bci-sle16-kernel-module-devel:16.0-32.23 Container Release : 32.23 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container bci/bci-sle16-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:18:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:18:48 +0100 (CET) Subject: SUSE-CU-2026:13692-1: Security update of third-party/nvidia/driver Message-ID: <20261104101848.95F76FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13692-1 Container Tags : third-party/nvidia/driver:595-6.12.0-160000.29-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.30-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.32-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.33-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.34-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.35-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.36-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:595-6.12.0-160000.40-default-sles16.0 , third-party/nvidia/driver:595-sles16.0 , third-party/nvidia/driver:595-sles16.0-52.2 Container Release : 52.2 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:19:25 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:19:25 +0100 (CET) Subject: SUSE-CU-2026:13693-1: Security update of third-party/nvidia/driver Message-ID: <20261104101925.AF62CFCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13693-1 Container Tags : third-party/nvidia/driver:610-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:610-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:610-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:610-6.12.0-160000.40-default-sles16.0 , third-party/nvidia/driver:610-sles16.0 , third-party/nvidia/driver:610-sles16.0-52.2 Container Release : 52.2 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 10:19:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 11:19:40 +0100 (CET) Subject: SUSE-CU-2026:13694-1: Security update of third-party/nvidia/driver Message-ID: <20261104101940.33C94FCBE@maintenance.suse.de> SUSE Container Update Advisory: third-party/nvidia/driver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13694-1 Container Tags : third-party/nvidia/driver:615-6.12.0-160000.37-default-sles16.0 , third-party/nvidia/driver:615-6.12.0-160000.38-default-sles16.0 , third-party/nvidia/driver:615-6.12.0-160000.39-default-sles16.0 , third-party/nvidia/driver:615-6.12.0-160000.40-default-sles16.0 , third-party/nvidia/driver:615-sles16.0 , third-party/nvidia/driver:615-sles16.0-52.2 Container Release : 52.2 Severity : important Type : security References : 1275115 1282347 1283493 1284334 CVE-2026-102633 CVE-2026-32776 CVE-2026-32777 CVE-2026-32778 CVE-2026-56403 CVE-2026-56404 CVE-2026-56405 CVE-2026-77214 CVE-2026-93990 ----------------------------------------------------------------- The container third-party/nvidia/driver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1996 Released: Tue Oct 27 17:06:39 2026 Summary: Security update for expat Type: security Severity: important References: 1275115,1282347,1283493,1284334,CVE-2026-102633,CVE-2026-32776,CVE-2026-32777,CVE-2026-32778,CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-77214,CVE-2026-93990 This update for expat fixes the following issues: - CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). - CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). - CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated The following package changes have been done: - libexpat1-2.8.5-160000.1.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:07:06 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:07:06 +0100 (CET) Subject: SUSE-CU-2026:13695-1: Security update of elemental/base-os-kernel-default Message-ID: <20261105080706.6CC3AFD2D@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-default ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13695-1 Container Tags : elemental/base-os-kernel-default:16.0 , elemental/base-os-kernel-default:16.0-4.55 Container Release : 4.55 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container elemental/base-os-kernel-default was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated - container:elemental-base-os-common-16.0-4.31-16.0-4.31-4.31 added - container:elemental-base-os-common-16.0-4.30-16.0-4.30-4.30 removed From sle-container-updates at lists.suse.com Thu Nov 5 08:08:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:08:27 +0100 (CET) Subject: SUSE-CU-2026:13697-1: Security update of elemental/base-os-kernel-rt Message-ID: <20261105080827.BF0F6FD2D@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-rt ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13697-1 Container Tags : elemental/base-os-kernel-rt:16.0 , elemental/base-os-kernel-rt:16.0-4.54 Container Release : 4.54 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container elemental/base-os-kernel-rt was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated - container:elemental-base-os-common-16.0-4.31-16.0-4.31-4.31 added - container:elemental-base-os-common-16.0-4.30-16.0-4.30-4.30 removed From sle-container-updates at lists.suse.com Thu Nov 5 08:09:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:09:22 +0100 (CET) Subject: SUSE-CU-2026:13698-1: Security update of elemental/elemental Message-ID: <20261105080922.02022FD18@maintenance.suse.de> SUSE Container Update Advisory: elemental/elemental ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13698-1 Container Tags : elemental/elemental:3.0 , elemental/elemental:3.0.4-4.23 Container Release : 4.23 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container elemental/elemental was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:10:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:10:02 +0100 (CET) Subject: SUSE-CU-2026:13699-1: Security update of elemental/elemental-lifecycle-manager Message-ID: <20261105081002.1EC9BFD18@maintenance.suse.de> SUSE Container Update Advisory: elemental/elemental-lifecycle-manager ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13699-1 Container Tags : elemental/elemental-lifecycle-manager:0 , elemental/elemental-lifecycle-manager:0.1.1 , elemental/elemental-lifecycle-manager:0.1.2-5.19 , elemental/elemental-lifecycle-manager:latest Container Release : 5.19 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container elemental/elemental-lifecycle-manager was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:33:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:33:55 +0100 (CET) Subject: SUSE-IU-2026:8491-1: Security update of suse/sl-micro/6.2/baremetal-os-container Message-ID: <20261105083355.3D060FCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8491-1 Image Tags : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.17 , suse/sl-micro/6.2/baremetal-os-container:latest Image Release : 9.17 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-c6920a01fa5409ae060e58f65294d5fbc9a3a6c1da5e4f0ed58f634a511248e2-0 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:40:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:40:54 +0100 (CET) Subject: SUSE-IU-2026:8492-1: Security update of suse/sl-micro/6.2/baremetal-iso-image Message-ID: <20261105084054.2783CFCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-iso-image ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8492-1 Image Tags : suse/sl-micro/6.2/baremetal-iso-image:2.3.2 , suse/sl-micro/6.2/baremetal-iso-image:2.3.2-9.18 , suse/sl-micro/6.2/baremetal-iso-image:latest Image Release : 9.18 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-iso-image was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:45:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:45:40 +0100 (CET) Subject: SUSE-IU-2026:8497-1: Security update of suse/sl-micro/6.2/base-os-container Message-ID: <20261105084540.B9259FCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8497-1 Image Tags : suse/sl-micro/6.2/base-os-container:2.3.2 , suse/sl-micro/6.2/base-os-container:2.3.2-9.11 , suse/sl-micro/6.2/base-os-container:latest Image Release : 9.11 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:52:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:52:05 +0100 (CET) Subject: SUSE-IU-2026:8498-1: Security update of suse/sl-micro/6.2/base-iso-image Message-ID: <20261105085205.2347DFCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-iso-image ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8498-1 Image Tags : suse/sl-micro/6.2/base-iso-image:2.3.2 , suse/sl-micro/6.2/base-iso-image:2.3.2-9.11 , suse/sl-micro/6.2/base-iso-image:latest Image Release : 9.11 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-iso-image was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 08:56:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 09:56:01 +0100 (CET) Subject: SUSE-IU-2026:8502-1: Security update of suse/sl-micro/6.2/kvm-os-container Message-ID: <20261105085601.AB652FCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8502-1 Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.2 , suse/sl-micro/6.2/kvm-os-container:2.3.2-9.18 , suse/sl-micro/6.2/kvm-os-container:latest Image Release : 9.18 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-c6920a01fa5409ae060e58f65294d5fbc9a3a6c1da5e4f0ed58f634a511248e2-0 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:01:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:01:59 +0100 (CET) Subject: SUSE-IU-2026:8503-1: Security update of suse/sl-micro/6.2/kvm-iso-image Message-ID: <20261105090159.76D52FCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-iso-image ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8503-1 Image Tags : suse/sl-micro/6.2/kvm-iso-image:2.3.2 , suse/sl-micro/6.2/kvm-iso-image:2.3.2-9.18 , suse/sl-micro/6.2/kvm-iso-image:latest Image Release : 9.18 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/kvm-iso-image was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:07:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:07:41 +0100 (CET) Subject: SUSE-IU-2026:8510-1: Security update of suse/sl-micro/6.2/rt-os-container Message-ID: <20261105090741.E7B50FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/rt-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8510-1 Image Tags : suse/sl-micro/6.2/rt-os-container:2.3.2 , suse/sl-micro/6.2/rt-os-container:2.3.2-8.20 , suse/sl-micro/6.2/rt-os-container:latest Image Release : 8.20 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/rt-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated - container:suse-sl-micro-6.2-baremetal-os-container-latest-8a6eba38cf3ba2c79010cba98e14f5e8d8db2ece9d8780b3d20e3084c63c2502-0 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:15:51 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:15:51 +0100 (CET) Subject: SUSE-IU-2026:8511-1: Security update of suse/sl-micro/6.2/rt-iso-image Message-ID: <20261105091551.97D08FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/rt-iso-image ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8511-1 Image Tags : suse/sl-micro/6.2/rt-iso-image:2.3.2 , suse/sl-micro/6.2/rt-iso-image:2.3.2-8.16 , suse/sl-micro/6.2/rt-iso-image:latest Image Release : 8.16 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sl-micro/6.2/rt-iso-image was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:22:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:22:01 +0100 (CET) Subject: SUSE-CU-2026:13719-1: Security update of bci/openjdk-devel Message-ID: <20261105092201.5DF25FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13719-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-sles15 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-21.91 Container Release : 21.91 Severity : important Type : security References : 1284985 CVE-2026-102554 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:3145-1 Released: Tue Jul 21 10:38:13 2026 Summary: Recommended update for log4j Type: recommended Severity: important References: This update for log4j fixes the following issues: log4j was updated and includes fixes and improvements from versions 2.21.0 through 2.26.0: - Bugs fixed: - Fixed crashes when logging errors with stack traces modified by other threads - Fixed FATAL-level log messages being silently discarded - Fixed memory leaks in several components - Fixed log file headers not being written correctly when files are recreated - Fixed log file rotation failures - Fixed configuration file loading from HTTP sources - Fixed date and time formatting issues in logs - Fixed problems when multiple threads modify logger settings simultaneously - Fixed MongoDB appender connection issues - New Features Added: - Support for ZStandard compression for log files - Support for LMAX Disruptor 4.x (high-performance logging) - Better support for GraalVM environments - Java 8 users now get sub-millisecond precision timestamps - Features Removed: - JMX GUI tool (moved to separate release) - Flume Appender (moved to separate release) - Kubernetes lookup feature (users should migrate to io.fabric8:kubernetes-log4j) - JAnsi library support (Windows 10+ has built-in color support) - Important Changes: - JMX monitoring is now DISABLED by default (set log4j2.disableJmx=false to enable) - Default log format has changed - Configuration scripts now require explicit names - Deprecations (features to be removed in the future): - MongoDB4 module (use standard MongoDB module instead) - EventLogger class - Some builder methods (replaced with setter methods) New Runtime Dependencies: - jackson-dataformat-xml - stax2-api - woodstox-core New and Updated Build Dependencies: - aalto-xml (updated from version 1.3.3 to 1.4.0) - jakarta-annotations (new) - jakarta-messaging (new) - jspecify (new) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5061-1 Released: Tue Nov 3 08:28:55 2026 Summary: Security update for guava, j2objc-annotations Type: security Severity: important References: 1284985,CVE-2026-102554 This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes for guava: - Upgrade to version 33.7.2 Changes for j2objc-annotations: - Update to version 3.0.0 The following package changes have been done: - j2objc-annotations-3.0.0-150200.5.8.1 updated - jspecify-1.0.0-150200.5.5.1 added - guava-33.7.2-150200.3.20.1 updated - container:bci-openjdk-17-15.7.17-20.78 updated - checker-qual-3.22.0-150200.5.7.2 removed - jsr-305-3.0.2-150200.3.7.5 removed From sle-container-updates at lists.suse.com Thu Nov 5 09:23:37 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:23:37 +0100 (CET) Subject: SUSE-CU-2026:13720-1: Security update of bci/openjdk-devel Message-ID: <20261105092337.455BDFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13720-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21-sles15 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-25.91 Container Release : 25.91 Severity : important Type : security References : 1284985 CVE-2026-102554 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:3145-1 Released: Tue Jul 21 10:38:13 2026 Summary: Recommended update for log4j Type: recommended Severity: important References: This update for log4j fixes the following issues: log4j was updated and includes fixes and improvements from versions 2.21.0 through 2.26.0: - Bugs fixed: - Fixed crashes when logging errors with stack traces modified by other threads - Fixed FATAL-level log messages being silently discarded - Fixed memory leaks in several components - Fixed log file headers not being written correctly when files are recreated - Fixed log file rotation failures - Fixed configuration file loading from HTTP sources - Fixed date and time formatting issues in logs - Fixed problems when multiple threads modify logger settings simultaneously - Fixed MongoDB appender connection issues - New Features Added: - Support for ZStandard compression for log files - Support for LMAX Disruptor 4.x (high-performance logging) - Better support for GraalVM environments - Java 8 users now get sub-millisecond precision timestamps - Features Removed: - JMX GUI tool (moved to separate release) - Flume Appender (moved to separate release) - Kubernetes lookup feature (users should migrate to io.fabric8:kubernetes-log4j) - JAnsi library support (Windows 10+ has built-in color support) - Important Changes: - JMX monitoring is now DISABLED by default (set log4j2.disableJmx=false to enable) - Default log format has changed - Configuration scripts now require explicit names - Deprecations (features to be removed in the future): - MongoDB4 module (use standard MongoDB module instead) - EventLogger class - Some builder methods (replaced with setter methods) New Runtime Dependencies: - jackson-dataformat-xml - stax2-api - woodstox-core New and Updated Build Dependencies: - aalto-xml (updated from version 1.3.3 to 1.4.0) - jakarta-annotations (new) - jakarta-messaging (new) - jspecify (new) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5061-1 Released: Tue Nov 3 08:28:55 2026 Summary: Security update for guava, j2objc-annotations Type: security Severity: important References: 1284985,CVE-2026-102554 This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes for guava: - Upgrade to version 33.7.2 Changes for j2objc-annotations: - Update to version 3.0.0 The following package changes have been done: - j2objc-annotations-3.0.0-150200.5.8.1 updated - jspecify-1.0.0-150200.5.5.1 added - guava-33.7.2-150200.3.20.1 updated - container:bci-openjdk-21-15.7.21-24.77 updated - checker-qual-3.22.0-150200.5.7.2 removed - jsr-305-3.0.2-150200.3.7.5 removed From sle-container-updates at lists.suse.com Thu Nov 5 09:24:43 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:24:43 +0100 (CET) Subject: SUSE-CU-2026:13721-1: Security update of bci/openjdk-devel Message-ID: <20261105092443.A9A01FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13721-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25-sles15 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-9.92 , bci/openjdk-devel:latest Container Release : 9.92 Severity : important Type : security References : 1284985 CVE-2026-102554 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:3145-1 Released: Tue Jul 21 10:38:13 2026 Summary: Recommended update for log4j Type: recommended Severity: important References: This update for log4j fixes the following issues: log4j was updated and includes fixes and improvements from versions 2.21.0 through 2.26.0: - Bugs fixed: - Fixed crashes when logging errors with stack traces modified by other threads - Fixed FATAL-level log messages being silently discarded - Fixed memory leaks in several components - Fixed log file headers not being written correctly when files are recreated - Fixed log file rotation failures - Fixed configuration file loading from HTTP sources - Fixed date and time formatting issues in logs - Fixed problems when multiple threads modify logger settings simultaneously - Fixed MongoDB appender connection issues - New Features Added: - Support for ZStandard compression for log files - Support for LMAX Disruptor 4.x (high-performance logging) - Better support for GraalVM environments - Java 8 users now get sub-millisecond precision timestamps - Features Removed: - JMX GUI tool (moved to separate release) - Flume Appender (moved to separate release) - Kubernetes lookup feature (users should migrate to io.fabric8:kubernetes-log4j) - JAnsi library support (Windows 10+ has built-in color support) - Important Changes: - JMX monitoring is now DISABLED by default (set log4j2.disableJmx=false to enable) - Default log format has changed - Configuration scripts now require explicit names - Deprecations (features to be removed in the future): - MongoDB4 module (use standard MongoDB module instead) - EventLogger class - Some builder methods (replaced with setter methods) New Runtime Dependencies: - jackson-dataformat-xml - stax2-api - woodstox-core New and Updated Build Dependencies: - aalto-xml (updated from version 1.3.3 to 1.4.0) - jakarta-annotations (new) - jakarta-messaging (new) - jspecify (new) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5061-1 Released: Tue Nov 3 08:28:55 2026 Summary: Security update for guava, j2objc-annotations Type: security Severity: important References: 1284985,CVE-2026-102554 This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes for guava: - Upgrade to version 33.7.2 Changes for j2objc-annotations: - Update to version 3.0.0 The following package changes have been done: - j2objc-annotations-3.0.0-150200.5.8.1 updated - jspecify-1.0.0-150200.5.5.1 added - guava-33.7.2-150200.3.20.1 updated - container:bci-openjdk-25-15.7.25-9.77 updated - checker-qual-3.22.0-150200.5.7.2 removed - jsr-305-3.0.2-150200.3.7.5 removed From sle-container-updates at lists.suse.com Wed Nov 4 08:21:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 09:21:00 +0100 (CET) Subject: SUSE-IU-2026:8485-1: Security update of suse/sl-micro/6.1/base-os-container Message-ID: <20261104082100.6CFD0FCE7@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8485-1 Image Tags : suse/sl-micro/6.1/base-os-container:2.2.1 , suse/sl-micro/6.1/base-os-container:2.2.1-5.212 , suse/sl-micro/6.1/base-os-container:latest Image Release : 5.212 Severity : important Type : security References : 1215199 1232383 1233187 1233565 1244337 1246086 1248354 1250656 1255222 1256632 1257737 1258184 1264022 1264024 1264267 1264985 1267203 1267238 1267373 1267681 1267720 1269264 1269364 1269532 1269655 1269798 1271349 1272261 1272296 1273292 1273557 1273803 1273805 1273809 1273839 1273880 1273970 1273999 1274080 1274082 1274261 1274292 1274550 1274902 1274949 1275524 1275568 1275575 1275671 1275672 1275678 1275683 1275689 1275692 1275810 1275811 1275813 1275939 1275944 1275947 1275951 1275957 1275958 1275959 1276271 1276280 1276321 1276343 1276363 1276382 1276384 1276387 1276393 1276444 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276925 1276933 1276934 1276935 1276940 1276949 1276956 1277044 1277046 1277053 1277067 1277069 1277071 1277072 1277075 1277080 1277082 1277089 1277091 1277094 1277103 1277113 1277121 1277133 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277264 1277280 1277282 1277307 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277336 1277337 1277338 1277339 1277343 1277344 1277345 1277355 1277356 1277357 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277461 1277467 1277472 1277487 1277488 1277497 1277520 1277522 1277529 1277530 1277533 1277538 1277540 1277541 1277542 1277543 1277546 1277554 1277560 1277566 1277576 1277578 1277593 1277599 1277607 1277609 1277610 1277612 1277621 1277623 1277637 1277645 1277657 1277663 1277665 1277677 1277682 1277690 1277730 1277741 1277744 1277746 1277754 1277770 1277771 1277772 1277835 1277836 1277839 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277890 1277893 1277903 1277934 1278028 1278030 1278033 1278041 1278050 1278057 1278101 1278123 1278132 1278139 1278153 1278160 1278181 1278194 1278200 1278201 1278202 1278207 1278212 1278214 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278319 1278320 1278323 1278325 1278326 1278334 1278337 1278343 1278377 1278393 1278400 1278412 1278415 1278429 1278430 1278431 1278704 1278711 1279455 1279464 1279467 1279468 1279471 1279477 1279483 1279485 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279520 1279533 1279564 1279592 1279594 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279777 1279795 1279798 1279802 1279805 1279808 1279809 1279812 1279814 1279815 1279816 1279825 1279920 1279921 1279971 1280141 1280142 1280156 1280157 1280158 1280162 1280172 1280178 1280185 1280215 1280221 1280230 1280234 1280244 1280246 1280247 1280251 1280253 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280315 1280316 1280319 1280345 1280378 1280395 1280397 1280398 1280399 1280400 1280402 1280408 1280410 1280415 1280416 1280421 1280423 1280425 1280428 1280429 1280431 1280434 1280463 1280472 1280476 1280477 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280520 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280570 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280834 1280918 1280948 1280960 1280970 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280992 1280996 1281001 1281003 1281005 1281008 1281011 1281018 1281022 1281027 1281029 1281030 1281034 1281052 1281056 1281058 1281065 1281130 1281138 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281275 1281277 1281281 1281292 1281299 1281300 1281311 1281315 1281320 1281332 1281333 1281334 1281337 1281346 1281352 1281353 1281357 1281360 1281361 1281363 1281368 1281382 1281384 1281391 1281392 1281394 1281395 1281396 1281402 1281418 1281422 1281429 1281488 1281490 1281495 1281500 1281504 1281509 1281510 1281535 1281538 1281547 1281549 1281551 1281563 1281568 1281577 1281579 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281650 1281672 1281676 1281677 1281688 1281691 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281724 1281735 1281736 1281753 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281804 1281813 1281824 1281828 1281850 1281851 1281853 1281858 1281868 1281870 1281877 1281886 1281887 1281890 1281891 1281895 1281897 1281900 1281903 1281916 1281930 1281932 1281968 1281969 1281985 1281987 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282114 1282116 1282117 1282122 1282128 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282167 1282174 1282178 1282189 1282192 1282196 1282262 1282276 1282289 1282296 1282298 1282302 1282304 1282325 1282327 1282328 1282677 1282684 1282686 1282690 1282691 1282695 1282697 1282729 1282737 1282744 1282753 1282754 1282759 1282763 1282764 1282769 1282772 1282773 1282775 1282776 1282778 1282805 1282814 1282867 1282870 1282879 1282885 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282920 1282924 1282925 1282926 1282927 1282935 1282955 1282957 1282962 1282963 1282974 1282984 1283004 1283016 1283017 1283018 1283036 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283087 1283113 1283114 1283122 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283229 1283231 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283416 1283418 1283429 1283445 1283453 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283502 1283511 1283585 1283662 1283668 1283741 1283746 1283752 1283754 1283782 1283793 1283810 1283812 1283821 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283846 1283850 1283853 1283855 1283856 1283858 1283859 1283862 1283863 1283869 1283871 1283873 1283877 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283941 1283958 1283960 1283967 1284024 1284031 1284064 1284150 1284243 1284292 1284293 1284296 1284298 1284302 1284304 1284305 1284310 1284312 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284419 1284422 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284509 1284512 1284513 1284514 1284515 1284517 1284537 1284540 1284541 1284542 1284543 1284544 1284545 1284553 1284554 1284555 1284557 1284563 1284568 1284577 1284578 1284579 1284584 1284595 1284601 1284602 1284605 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284635 1284636 1284637 1284638 1284640 1284641 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285624 1285648 1285668 1285685 1285914 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286009 1286012 1286013 1286019 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286158 1286160 1286161 1286171 1286190 1286204 1286205 1286207 1286215 1286217 1286224 1286233 1286234 1286237 1286240 1286257 1286259 1286267 1286342 1286346 1286390 1286391 1286394 1286417 1286421 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286469 1286514 1286529 1286625 1286654 1286669 1286671 1286672 1286689 1286692 1286704 1286707 1286713 1286720 1286735 1286741 1286742 1286756 1286757 1286772 1286775 1286778 1286782 1286785 1286787 1286819 1286820 1286821 1286822 1286823 1286824 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286872 1286874 1286877 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287364 1287592 1287594 1287597 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287737 1287749 1287757 1287765 1287773 1287774 1287966 1287984 1287985 1287995 1288001 1288002 1288005 1288007 1288014 1288061 1288088 1288125 1288127 1288246 1288248 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288694 1288752 CVE-2024-49974 CVE-2024-50241 CVE-2024-53073 CVE-2025-38237 CVE-2025-38576 CVE-2025-68219 CVE-2025-71073 CVE-2026-100071 CVE-2026-100078 CVE-2026-100079 CVE-2026-23059 CVE-2026-23112 CVE-2026-31708 CVE-2026-31709 CVE-2026-43350 CVE-2026-45944 CVE-2026-46091 CVE-2026-46135 CVE-2026-46139 CVE-2026-46155 CVE-2026-52989 CVE-2026-53059 CVE-2026-53090 CVE-2026-53179 CVE-2026-63809 CVE-2026-64240 CVE-2026-64324 CVE-2026-64370 CVE-2026-64380 CVE-2026-64413 CVE-2026-64434 CVE-2026-64435 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-64525 CVE-2026-64534 CVE-2026-64535 CVE-2026-68186 CVE-2026-68388 CVE-2026-68447 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72065 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72105 CVE-2026-72110 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72126 CVE-2026-72127 CVE-2026-72133 CVE-2026-72140 CVE-2026-72142 CVE-2026-72148 CVE-2026-72149 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72234 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72250 CVE-2026-72253 CVE-2026-72257 CVE-2026-72261 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72300 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72391 CVE-2026-72396 CVE-2026-72400 CVE-2026-72405 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72464 CVE-2026-72465 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74368 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74445 CVE-2026-74446 CVE-2026-74448 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74501 CVE-2026-74502 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74519 CVE-2026-74531 CVE-2026-74532 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74552 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74613 CVE-2026-74620 CVE-2026-74624 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74654 CVE-2026-74655 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74691 CVE-2026-74715 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80539 CVE-2026-80541 CVE-2026-80559 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80572 CVE-2026-80573 CVE-2026-80574 CVE-2026-80578 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80597 CVE-2026-80599 CVE-2026-80600 CVE-2026-80601 CVE-2026-80602 CVE-2026-80605 CVE-2026-80609 CVE-2026-80618 CVE-2026-80622 CVE-2026-80635 CVE-2026-80637 CVE-2026-80649 CVE-2026-80652 CVE-2026-80659 CVE-2026-80660 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80684 CVE-2026-80692 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80717 CVE-2026-80728 CVE-2026-80743 CVE-2026-80752 CVE-2026-80754 CVE-2026-80755 CVE-2026-80757 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80772 CVE-2026-80781 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80855 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80907 CVE-2026-80908 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80937 CVE-2026-80938 CVE-2026-80941 CVE-2026-80944 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81017 CVE-2026-89438 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89461 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89598 CVE-2026-89599 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89637 CVE-2026-89642 CVE-2026-89649 CVE-2026-89654 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657 CVE-2026-89669 CVE-2026-89684 CVE-2026-89706 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89736 CVE-2026-89739 CVE-2026-89741 CVE-2026-89742 CVE-2026-89744 CVE-2026-89751 CVE-2026-89761 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89901 CVE-2026-89927 CVE-2026-89932 CVE-2026-89933 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89993 CVE-2026-89999 CVE-2026-90000 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90025 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90114 CVE-2026-90126 CVE-2026-90128 CVE-2026-90138 CVE-2026-90148 CVE-2026-90194 CVE-2026-90196 CVE-2026-90207 CVE-2026-90214 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90253 CVE-2026-90254 CVE-2026-90257 CVE-2026-90281 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90297 CVE-2026-90298 CVE-2026-90316 CVE-2026-90319 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90378 CVE-2026-90382 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93092 CVE-2026-93114 CVE-2026-93115 CVE-2026-93118 CVE-2026-93120 CVE-2026-93122 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93206 CVE-2026-93210 CVE-2026-93213 CVE-2026-93214 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93798 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93814 CVE-2026-93817 CVE-2026-93819 CVE-2026-93823 CVE-2026-93825 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97554 CVE-2026-97556 CVE-2026-97558 CVE-2026-97559 CVE-2026-97561 CVE-2026-97562 CVE-2026-97563 CVE-2026-97565 CVE-2026-97575 CVE-2026-97576 CVE-2026-97581 CVE-2026-97582 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97930 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97969 CVE-2026-97970 CVE-2026-97977 CVE-2026-97991 CVE-2026-97993 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98031 CVE-2026-98041 CVE-2026-98044 CVE-2026-98055 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98072 CVE-2026-98074 CVE-2026-98078 CVE-2026-98085 CVE-2026-98092 CVE-2026-98095 CVE-2026-98108 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98124 CVE-2026-98125 CVE-2026-98126 CVE-2026-98127 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98167 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98175 CVE-2026-98181 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98212 CVE-2026-98213 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98261 CVE-2026-98263 CVE-2026-98264 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98328 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98374 CVE-2026-98386 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98432 CVE-2026-98455 CVE-2026-98457 CVE-2026-98460 CVE-2026-98461 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98519 CVE-2026-98521 CVE-2026-98527 CVE-2026-98529 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98660 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98679 CVE-2026-98687 CVE-2026-98694 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98703 CVE-2026-98705 CVE-2026-98706 CVE-2026-98710 CVE-2026-98711 CVE-2026-98717 CVE-2026-98718 CVE-2026-98721 CVE-2026-98732 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98744 CVE-2026-98748 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98830 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98847 CVE-2026-98848 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98884 CVE-2026-98886 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98940 CVE-2026-98956 CVE-2026-98970 CVE-2026-98971 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99015 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99095 CVE-2026-99100 CVE-2026-99131 CVE-2026-99150 ----------------------------------------------------------------- The container suse/sl-micro/6.1/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: kernel-759 Released: Tue Nov 3 20:25:57 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1232383,1233187,1233565,1244337,1246086,1248354,1250656,1255222,1256632,1257737,1258184,1264022,1264024,1264267,1264985,1267203,1267238,1267373,1267681,1267720,1269264,1269364,1269532,1269655,1269798,1271349,1272261,1272296,1273292,1273557,1273803,1273805,1273809,1273839,1273880,1273970,1273999,1274080,1274082,1274261,1274292,1274550,1274902,1274949,1275524,1275568,1275575,1275671,1275672,1275678,1275683,1275689,1275692,1275810,1275811,1275813,1275939,1275944,1275947,1275951,1275957,1275958,1275959,1276271,1276280,1276321,1276343,1276363,1276382,1276384,1276387,1276393,1276444,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1276778,1276779,1276798,1276844,1276925,1276933,1276934,1276935,1276940,1276949,1276956,1277044,1277046,1277053,1277067,1277069,1277071,1277072,1277075,1277080,1277082,1277089,1277091,1277094,1277103,1 277113,1277121,1277133,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277264,1277280,1277282,1277307,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277336,1277337,1277338,1277339,1277343,1277344,1277345,1277355,1277356,1277357,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277461,1277467,1277472,1277487,1277488,1277497,1277520,1277522,1277529,1277530,1277533,1277538,1277540,1277541,1277542,1277543,1277546,1277554,1277560,1277566,1277576,1277578,1277593,1277599,1277607,1277609,1277610,1277612,1277621,1277623,1277637,1277645,1277657,1277663,1277665,1277677,1277682,1277690,1277730,1277741,1277744,1277746,1277754,1277770,1277771,1277772,1277835,1277836,1277839,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277890,1277893,1277903,1277934,1278028,1278030,1278033,1278041,127805 0,1278057,1278101,1278123,1278132,1278139,1278153,1278160,1278181,1278194,1278200,1278201,1278202,1278207,1278212,1278214,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278319,1278320,1278323,1278325,1278326,1278334,1278337,1278343,1278377,1278393,1278400,1278412,1278415,1278429,1278430,1278431,1278704,1278711,1279455,1279464,1279467,1279468,1279471,1279477,1279483,1279485,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279520,1279533,1279564,1279592,1279594,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279777,1279795,1279798,1279802,1279805,1279808,1279809,1279812,1279814,1279815,1279816,1279825,1279920,1279921,1279971,1280141,1280142,1280156,1280157,1280158,1280162,1280172,1280178,1280185,1280215,1280221,1280230,1280234,1280244,1280246,1280247,1280251,1280253,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280315,1280316,1280319,1280345,1280378,1280395,1280397,1280398,1280399,1280400,1280402,1280408,128 0410,1280415,1280416,1280421,1280423,1280425,1280428,1280429,1280431,1280434,1280463,1280472,1280476,1280477,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280520,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280570,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280834,1280918,1280948,1280960,1280970,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280992,1280996,1281001,1281003,1281005,1281008,1281011,1281018,1281022,1281027,1281029,1281030,1281034,1281052,1281056,1281058,1281065,1281130,1281138,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281257,1281260,1281265,1281269,1281270,1281271,1281272,1281275,1281277,1281281,1281292,1281299,1281300,1281311,1281315,1281320,1281332,1281333,1281334, 1281337,1281346,1281352,1281353,1281357,1281360,1281361,1281363,1281368,1281382,1281384,1281391,1281392,1281394,1281395,1281396,1281402,1281418,1281422,1281429,1281488,1281490,1281495,1281500,1281504,1281509,1281510,1281535,1281538,1281547,1281549,1281551,1281563,1281568,1281577,1281579,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281650,1281672,1281676,1281677,1281688,1281691,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281724,1281735,1281736,1281753,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281804,1281813,1281824,1281828,1281850,1281851,1281853,1281858,1281868,1281870,1281877,1281886,1281887,1281890,1281891,1281895,1281897,1281900,1281903,1281916,1281930,1281932,1281968,1281969,1281985,1281987,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282114,1282116,1282117,1282122,12821 28,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282167,1282174,1282178,1282189,1282192,1282196,1282262,1282276,1282289,1282296,1282298,1282302,1282304,1282325,1282327,1282328,1282677,1282684,1282686,1282690,1282691,1282695,1282697,1282729,1282737,1282744,1282753,1282754,1282759,1282763,1282764,1282769,1282772,1282773,1282775,1282776,1282778,1282805,1282814,1282867,1282870,1282879,1282885,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282920,1282924,1282925,1282926,1282927,1282935,1282955,1282957,1282962,1282963,1282974,1282984,1283004,1283016,1283017,1283018,1283036,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283087,1283113,1283114,1283122,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283229,1283231,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,12 83335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283416,1283418,1283429,1283445,1283453,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283502,1283511,1283585,1283662,1283668,1283741,1283746,1283752,1283754,1283782,1283793,1283810,1283812,1283821,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283846,1283850,1283853,1283855,1283856,1283858,1283859,1283862,1283863,1283869,1283871,1283873,1283877,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283941,1283958,1283960,1283967,1284024,1284031,1284064,1284150,1284243,1284292,1284293,1284296,1284298,1284302,1284304,1284305,1284310,1284312,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284419,1284422,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284509,1284512,1284513,1284514,1284515,1284517,1284537,1284540,1284541,1284542,1284543,1284544,1284545,1284553,1284554,1284555,1284557,1284563,1284568,1284577,1284578,1284579,1284584,1284595 ,1284601,1284602,1284605,1284609,1284615,1284616,1284620,1284621,1284623,1284626,1284630,1284631,1284635,1284636,1284637,1284638,1284640,1284641,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285624,1285648,1285668,1285685,1285914,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286009,1286012,1286013,1286019,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286158,1286160,1286161,1286171,1286190,1286204,1286205,1286207,1286215,1286217,1286224,1286233,1286234,1286237,1286240,1286257,1286259,1286267,1286342,1286346,1286390,1286391,1286394,1286417,1286421,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286469,1286514,1286529,1286625,1286654,1286669,1286671,1286672,1286689,1286692,1286704,1286707,1286713,1286720,1286735,1286741,1286742,1286756,1286757,1286772,1286775,1286778,1286782,1286785,1286787,1286819,1286820,1286821,1286822,1286823,1286824,1286841,1286 843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286872,1286874,1286877,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287364,1287592,1287594,1287597,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287737,1287749,1287757,1287765,1287773,1287774,1287966,1287984,1287985,1287995,1288001,1288002,1288005,1288007,1288014,1288061,1288088,1288125,1288127,1288246,1288248,1288521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288694,1288752,CVE-2024-49974,CVE-2024-50241,CVE-2024-53073,CVE-2025-38237,CVE-2025-38576,CVE-2025-68219,CVE-2025-71073,CVE-2026-100071,CVE-2026-100078,CVE-2026-100079,CVE-2026-23059,CVE-2026-23112,CVE-2026-31708,CVE-2026-31709,CVE-2026-43350,CVE-2026-45944,CVE-2026-46091,CVE-2026-46135,CVE-2026-46139,CVE-2026-46155,CVE-2026-52989,CVE-2026-53059,CVE-2026-53090,CVE-2026-53179,CVE-2026-63809,CVE-2026-64240,CVE-2026-64324,CVE-2026-64370,CVE-2026-6 4380,CVE-2026-64413,CVE-2026-64434,CVE-2026-64435,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-64525,CVE-2026-64534,CVE-2026-64535,CVE-2026-68186,CVE-2026-68388,CVE-2026-68447,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72065,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72105,CVE-2026-72110,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72126,CVE-2026-72127,CVE-2026-72133,CVE-2026-72140,CVE-2026-72142,CVE-2026-72148,CVE-2026-72149,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72234,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72250,CVE-2026-72253,CV E-2026-72257,CVE-2026-72261,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72300,CVE-2026-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72391,CVE-2026-72396,CVE-2026-72400,CVE-2026-72405,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72464,CVE-2026-72465,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74368,CVE-2026-74380,CVE-2026-74381,CVE-2026- 74387,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74445,CVE-2026-74446,CVE-2026-74448,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74501,CVE-2026-74502,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74519,CVE-2026-74531,CVE-2026-74532,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74552,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74613,CVE-2026-74620,CVE-2026-74624,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74654,CVE-2026-74655,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74691,CVE-2026-74715,C VE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80539,CVE-2026-80541,CVE-2026-80559,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80572,CVE-2026-80573,CVE-2026-80574,CVE-2026-80578,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80597,CVE-2026-80599,CVE-2026-80600,CVE-2026-80601,CVE-2026-80602,CVE-2026-80605,CVE-2026-80609,CVE-2026-80618,CVE-2026-80622,CVE-2026-80635,CVE-2026-80637,CVE-2026-80649,CVE-2026-80652,CVE-2026-80659,CVE-2026-80660,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80684,CVE-2026-80692,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80717,CVE-2026-80728,CVE-2026-80743,CVE-2026-80752,CVE-2026-80754,CVE-2026-80755,CVE-2026-80757,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80772,CVE-2026-80781,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026 -80797,CVE-2026-80798,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80819,CVE-2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80855,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80907,CVE-2026-80908,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80937,CVE-2026-80938,CVE-2026-80941,CVE-2026-80944,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81017,CVE-2026-89438,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444, CVE-2026-89461,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89598,CVE-2026-89599,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89637,CVE-2026-89642,CVE-2026-89649,CVE-2026-89654,CVE-2026-89655,CVE-2026-89656,CVE-2026-89657,CVE-2026-89669,CVE-2026-89684,CVE-2026-89706,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89736,CVE-2026-89739,CVE-2026-89741,CVE-2026-89742,CVE-2026-89744,CVE-2026-89751,CVE-2026-89761,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89800,CVE-2026-89801,CVE-202 6-89802,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89901,CVE-2026-89927,CVE-2026-89932,CVE-2026-89933,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979 ,CVE-2026-89980,CVE-2026-89982,CVE-2026-89993,CVE-2026-89999,CVE-2026-90000,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90025,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CVE-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90114,CVE-2026-90126,CVE-2026-90128,CVE-2026-90138,CVE-2026-90148,CVE-2026-90194,CVE-2026-90196,CVE-2026-90207,CVE-2026-90214,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90253,CVE-2026-90254,CVE-2026-90257,CVE-2026-90281,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90287,CVE-2026-90297,CVE-2026-90298,CVE-2026-90316,CVE-2026-90319,CVE-2026-90334,CVE-2026-90335,CVE-20 26-90336,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026-90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90378,CVE-2026-90382,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93092,CVE-2026-93114,CVE-2026-93115,CVE-2026-93118,CVE-2026-93120,CVE-2026-93122,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-9314 1,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93206,CVE-2026-93210,CVE-2026-93213,CVE-2026-93214,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93798,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93814,CVE-2026-93817,CVE-2026-93819,CVE-2026-93823,CVE-2026-93825,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97429,CVE-2 026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97495,CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97554,CVE-2026-97556,CVE-2026-97558,CVE-2026-97559,CVE-2026-97561,CVE-2026-97562,CVE-2026-97563,CVE-2026-97565,CVE-2026-97575,CVE-2026-97576,CVE-2026-97581,CVE-2026-97582,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-979 00,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97930,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97969,CVE-2026-97970,CVE-2026-97977,CVE-2026-97991,CVE-2026-97993,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98031,CVE-2026-98041,CVE-2026-98044,CVE-2026-98055,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98072,CVE-2026-98074,CVE-2026-98078,CVE-2026-98085,CVE-2026-98092,CVE-2026-98095,CVE-2026-98108,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98124,CVE-2026-98125,CVE-2026-98126,CVE-2026-98127,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98167,CVE-2026-98169,CVE-2026-98170,CVE-2026-98171,CVE-2026-98175,CVE-2026-98181,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE- 2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98212,CVE-2026-98213,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98261,CVE-2026-98263,CVE-2026-98264,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98328,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-2026-98374,CVE-2026-98386,CVE-2026-98404,CVE-2026-98 406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98432,CVE-2026-98455,CVE-2026-98457,CVE-2026-98460,CVE-2026-98461,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98519,CVE-2026-98521,CVE-2026-98527,CVE-2026-98529,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98602,CVE-2026-98605,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98660,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98679,CVE-2026-98687,CVE-2026-98694,CVE -2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98703,CVE-2026-98705,CVE-2026-98706,CVE-2026-98710,CVE-2026-98711,CVE-2026-98717,CVE-2026-98718,CVE-2026-98721,CVE-2026-98732,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98744,CVE-2026-98748,CVE-2026-98754,CVE-2026-98755,CVE-2026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98830,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98847,CVE-2026-98848,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98884,CVE-2026-98886,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98896,CVE-2026-9 8898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98940,CVE-2026-98956,CVE-2026-98970,CVE-2026-98971,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99015,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99095,CVE-2026-99100,CVE-2026-99131,CVE-2026-99150 The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89642: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (bsc#1280970). - CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434). - CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415). - CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). - CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). - CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). - CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). - CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). - CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). - CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). - CVE-2026-97565: smb: client: reject short READ responses in CIFSSMBRead() (bsc#1283793). - CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98072: net/rds: use wq_has_sleeper() in release_in_xmit() (bsc#1283846). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98124: smb/client: invalidate fscache for fallocate range operations (bsc#1283821). - CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). - CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). - CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). - CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). - CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). - CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). - CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: TAD: Rearrange RT data validation checking (stable-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Fix the Kore controller key map (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - checkpatch: skip CamelCase cache for --no-tree without root (git-fixes). - cifs: Pass unbyteswapped eof value into SMB2_set_eof() (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: bestcomm: set bcom_eng to NULL on probe failure (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Add reserved item tag for main items (stable-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hid-steam: Make client_opened a counter (stable-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: rate-limit hid_warn to prevent log flooding (stable-fixes). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: core: add accessors 'masklength' (stable-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: light: ltrf216a: Return floating point values (stable-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: lkkbd - disable pending work before freeing device (stable-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - lib/decompress_bunzip2: fix off-by-one in run-length bounds check (git-fixes). - lib: decompress_bunzip2: fix integer overflow in run-length decoding (git-fixes). - lib: validate in-memory LZ4 chunk length (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: Disable multicore support (stable-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - mm, vmscan: flush tlb before large folio is freed (bsc#1250656). - mm: introduce num_pages_contiguous() (bsc#1284243). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: fix use-after-free on remove (git-fixes). - power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Reinstate 'resource: avoid unnecessary lookups in find_next_iomem_res()' (bsc#1284243). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337). - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - selftests/alsa: Do not take another control's event as our own (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (git-fixes). - smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes). - smb: common: change the data type of num_aces to le16 (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: clean up redundant & parentheses (stable-fixes). - Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes). - staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - tty: add break_wait kernel-doc (git-fixes). - tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes). - tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes). - usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes). - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes). - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes). - usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243). - vfio/type1: conditional rescheduling while pinning (bsc#1284243). - vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243). - vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243). - vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes). - wifi: ath12k: fix the fetching of combined rssi (git-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes). - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes). - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-default-6.4.0-159998.55.1 updated From sle-container-updates at lists.suse.com Wed Nov 4 08:24:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 4 Nov 2026 09:24:19 +0100 (CET) Subject: SUSE-IU-2026:8486-1: Security update of suse/sl-micro/6.1/kvm-os-container Message-ID: <20261104082419.6B7C1FCBE@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8486-1 Image Tags : suse/sl-micro/6.1/kvm-os-container:2.2.1 , suse/sl-micro/6.1/kvm-os-container:2.2.1-5.213 , suse/sl-micro/6.1/kvm-os-container:latest Image Release : 5.213 Severity : important Type : security References : 1215199 1232383 1233187 1233565 1244337 1246086 1248354 1250656 1255222 1256632 1257737 1258184 1264022 1264024 1264267 1264985 1267203 1267238 1267373 1267681 1267720 1269264 1269364 1269532 1269655 1269798 1271349 1272261 1272296 1273292 1273557 1273803 1273805 1273809 1273839 1273880 1273970 1273999 1274080 1274082 1274261 1274292 1274550 1274902 1274949 1275524 1275568 1275575 1275671 1275672 1275678 1275683 1275689 1275692 1275810 1275811 1275813 1275939 1275944 1275947 1275951 1275957 1275958 1275959 1276271 1276280 1276321 1276343 1276363 1276382 1276384 1276387 1276393 1276444 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276925 1276933 1276934 1276935 1276940 1276949 1276956 1277044 1277046 1277053 1277067 1277069 1277071 1277072 1277075 1277080 1277082 1277089 1277091 1277094 1277103 1277113 1277121 1277133 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277264 1277280 1277282 1277307 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277336 1277337 1277338 1277339 1277343 1277344 1277345 1277355 1277356 1277357 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277461 1277467 1277472 1277487 1277488 1277497 1277520 1277522 1277529 1277530 1277533 1277538 1277540 1277541 1277542 1277543 1277546 1277554 1277560 1277566 1277576 1277578 1277593 1277599 1277607 1277609 1277610 1277612 1277621 1277623 1277637 1277645 1277657 1277663 1277665 1277677 1277682 1277690 1277730 1277741 1277744 1277746 1277754 1277770 1277771 1277772 1277835 1277836 1277839 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277890 1277893 1277903 1277934 1278028 1278030 1278033 1278041 1278050 1278057 1278101 1278123 1278132 1278139 1278153 1278160 1278181 1278194 1278200 1278201 1278202 1278207 1278212 1278214 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278319 1278320 1278323 1278325 1278326 1278334 1278337 1278343 1278377 1278393 1278400 1278412 1278415 1278429 1278430 1278431 1278704 1278711 1279455 1279464 1279467 1279468 1279471 1279477 1279483 1279485 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279520 1279533 1279564 1279592 1279594 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279777 1279795 1279798 1279802 1279805 1279808 1279809 1279812 1279814 1279815 1279816 1279825 1279920 1279921 1279971 1280141 1280142 1280156 1280157 1280158 1280162 1280172 1280178 1280185 1280215 1280221 1280230 1280234 1280244 1280246 1280247 1280251 1280253 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280315 1280316 1280319 1280345 1280378 1280395 1280397 1280398 1280399 1280400 1280402 1280408 1280410 1280415 1280416 1280421 1280423 1280425 1280428 1280429 1280431 1280434 1280463 1280472 1280476 1280477 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280520 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280570 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280834 1280918 1280948 1280960 1280970 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280992 1280996 1281001 1281003 1281005 1281008 1281011 1281018 1281022 1281027 1281029 1281030 1281034 1281052 1281056 1281058 1281065 1281130 1281138 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281275 1281277 1281281 1281292 1281299 1281300 1281311 1281315 1281320 1281332 1281333 1281334 1281337 1281346 1281352 1281353 1281357 1281360 1281361 1281363 1281368 1281382 1281384 1281391 1281392 1281394 1281395 1281396 1281402 1281418 1281422 1281429 1281488 1281490 1281495 1281500 1281504 1281509 1281510 1281535 1281538 1281547 1281549 1281551 1281563 1281568 1281577 1281579 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281650 1281672 1281676 1281677 1281688 1281691 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281724 1281735 1281736 1281753 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281804 1281813 1281824 1281828 1281850 1281851 1281853 1281858 1281868 1281870 1281877 1281886 1281887 1281890 1281891 1281895 1281897 1281900 1281903 1281916 1281930 1281932 1281968 1281969 1281985 1281987 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282114 1282116 1282117 1282122 1282128 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282167 1282174 1282178 1282189 1282192 1282196 1282262 1282276 1282289 1282296 1282298 1282302 1282304 1282325 1282327 1282328 1282677 1282684 1282686 1282690 1282691 1282695 1282697 1282729 1282737 1282744 1282753 1282754 1282759 1282763 1282764 1282769 1282772 1282773 1282775 1282776 1282778 1282805 1282814 1282867 1282870 1282879 1282885 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282920 1282924 1282925 1282926 1282927 1282935 1282955 1282957 1282962 1282963 1282974 1282984 1283004 1283016 1283017 1283018 1283036 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283087 1283113 1283114 1283122 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283229 1283231 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283416 1283418 1283429 1283445 1283453 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283502 1283511 1283585 1283662 1283668 1283741 1283746 1283752 1283754 1283782 1283793 1283810 1283812 1283821 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283846 1283850 1283853 1283855 1283856 1283858 1283859 1283862 1283863 1283869 1283871 1283873 1283877 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283941 1283958 1283960 1283967 1284024 1284031 1284064 1284150 1284243 1284292 1284293 1284296 1284298 1284302 1284304 1284305 1284310 1284312 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284419 1284422 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284509 1284512 1284513 1284514 1284515 1284517 1284537 1284540 1284541 1284542 1284543 1284544 1284545 1284553 1284554 1284555 1284557 1284563 1284568 1284577 1284578 1284579 1284584 1284595 1284601 1284602 1284605 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284635 1284636 1284637 1284638 1284640 1284641 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285624 1285648 1285668 1285685 1285914 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286009 1286012 1286013 1286019 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286158 1286160 1286161 1286171 1286190 1286204 1286205 1286207 1286215 1286217 1286224 1286233 1286234 1286237 1286240 1286257 1286259 1286267 1286342 1286346 1286390 1286391 1286394 1286417 1286421 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286469 1286514 1286529 1286625 1286654 1286669 1286671 1286672 1286689 1286692 1286704 1286707 1286713 1286720 1286735 1286741 1286742 1286756 1286757 1286772 1286775 1286778 1286782 1286785 1286787 1286819 1286820 1286821 1286822 1286823 1286824 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286872 1286874 1286877 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287364 1287592 1287594 1287597 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287737 1287749 1287757 1287765 1287773 1287774 1287966 1287984 1287985 1287995 1288001 1288002 1288005 1288007 1288014 1288061 1288088 1288125 1288127 1288246 1288248 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288694 1288752 CVE-2024-49974 CVE-2024-50241 CVE-2024-53073 CVE-2025-38237 CVE-2025-38576 CVE-2025-68219 CVE-2025-71073 CVE-2026-100071 CVE-2026-100078 CVE-2026-100079 CVE-2026-23059 CVE-2026-23112 CVE-2026-31708 CVE-2026-31709 CVE-2026-43350 CVE-2026-45944 CVE-2026-46091 CVE-2026-46135 CVE-2026-46139 CVE-2026-46155 CVE-2026-52989 CVE-2026-53059 CVE-2026-53090 CVE-2026-53179 CVE-2026-63809 CVE-2026-64240 CVE-2026-64324 CVE-2026-64370 CVE-2026-64380 CVE-2026-64413 CVE-2026-64434 CVE-2026-64435 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-64525 CVE-2026-64534 CVE-2026-64535 CVE-2026-68186 CVE-2026-68388 CVE-2026-68447 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72065 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72105 CVE-2026-72110 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72126 CVE-2026-72127 CVE-2026-72133 CVE-2026-72140 CVE-2026-72142 CVE-2026-72148 CVE-2026-72149 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72234 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72250 CVE-2026-72253 CVE-2026-72257 CVE-2026-72261 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72300 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72391 CVE-2026-72396 CVE-2026-72400 CVE-2026-72405 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72464 CVE-2026-72465 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74368 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74445 CVE-2026-74446 CVE-2026-74448 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74501 CVE-2026-74502 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74519 CVE-2026-74531 CVE-2026-74532 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74552 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74613 CVE-2026-74620 CVE-2026-74624 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74654 CVE-2026-74655 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74691 CVE-2026-74715 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80539 CVE-2026-80541 CVE-2026-80559 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80572 CVE-2026-80573 CVE-2026-80574 CVE-2026-80578 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80597 CVE-2026-80599 CVE-2026-80600 CVE-2026-80601 CVE-2026-80602 CVE-2026-80605 CVE-2026-80609 CVE-2026-80618 CVE-2026-80622 CVE-2026-80635 CVE-2026-80637 CVE-2026-80649 CVE-2026-80652 CVE-2026-80659 CVE-2026-80660 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80684 CVE-2026-80692 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80717 CVE-2026-80728 CVE-2026-80743 CVE-2026-80752 CVE-2026-80754 CVE-2026-80755 CVE-2026-80757 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80772 CVE-2026-80781 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80855 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80907 CVE-2026-80908 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80937 CVE-2026-80938 CVE-2026-80941 CVE-2026-80944 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81017 CVE-2026-89438 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89461 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89598 CVE-2026-89599 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89637 CVE-2026-89642 CVE-2026-89649 CVE-2026-89654 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657 CVE-2026-89669 CVE-2026-89684 CVE-2026-89706 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89736 CVE-2026-89739 CVE-2026-89741 CVE-2026-89742 CVE-2026-89744 CVE-2026-89751 CVE-2026-89761 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89901 CVE-2026-89927 CVE-2026-89932 CVE-2026-89933 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89993 CVE-2026-89999 CVE-2026-90000 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90025 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90114 CVE-2026-90126 CVE-2026-90128 CVE-2026-90138 CVE-2026-90148 CVE-2026-90194 CVE-2026-90196 CVE-2026-90207 CVE-2026-90214 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90253 CVE-2026-90254 CVE-2026-90257 CVE-2026-90281 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90297 CVE-2026-90298 CVE-2026-90316 CVE-2026-90319 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90378 CVE-2026-90382 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93092 CVE-2026-93114 CVE-2026-93115 CVE-2026-93118 CVE-2026-93120 CVE-2026-93122 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93206 CVE-2026-93210 CVE-2026-93213 CVE-2026-93214 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93798 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93814 CVE-2026-93817 CVE-2026-93819 CVE-2026-93823 CVE-2026-93825 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97554 CVE-2026-97556 CVE-2026-97558 CVE-2026-97559 CVE-2026-97561 CVE-2026-97562 CVE-2026-97563 CVE-2026-97565 CVE-2026-97575 CVE-2026-97576 CVE-2026-97581 CVE-2026-97582 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97930 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97969 CVE-2026-97970 CVE-2026-97977 CVE-2026-97991 CVE-2026-97993 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98031 CVE-2026-98041 CVE-2026-98044 CVE-2026-98055 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98072 CVE-2026-98074 CVE-2026-98078 CVE-2026-98085 CVE-2026-98092 CVE-2026-98095 CVE-2026-98108 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98124 CVE-2026-98125 CVE-2026-98126 CVE-2026-98127 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98167 CVE-2026-98169 CVE-2026-98170 CVE-2026-98171 CVE-2026-98175 CVE-2026-98181 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98212 CVE-2026-98213 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98261 CVE-2026-98263 CVE-2026-98264 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98328 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98374 CVE-2026-98386 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98432 CVE-2026-98455 CVE-2026-98457 CVE-2026-98460 CVE-2026-98461 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98519 CVE-2026-98521 CVE-2026-98527 CVE-2026-98529 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98660 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98679 CVE-2026-98687 CVE-2026-98694 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98703 CVE-2026-98705 CVE-2026-98706 CVE-2026-98710 CVE-2026-98711 CVE-2026-98717 CVE-2026-98718 CVE-2026-98721 CVE-2026-98732 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98744 CVE-2026-98748 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98830 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98847 CVE-2026-98848 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98884 CVE-2026-98886 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98940 CVE-2026-98956 CVE-2026-98970 CVE-2026-98971 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99015 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99095 CVE-2026-99100 CVE-2026-99131 CVE-2026-99150 ----------------------------------------------------------------- The container suse/sl-micro/6.1/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: kernel-759 Released: Tue Nov 3 20:25:57 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1232383,1233187,1233565,1244337,1246086,1248354,1250656,1255222,1256632,1257737,1258184,1264022,1264024,1264267,1264985,1267203,1267238,1267373,1267681,1267720,1269264,1269364,1269532,1269655,1269798,1271349,1272261,1272296,1273292,1273557,1273803,1273805,1273809,1273839,1273880,1273970,1273999,1274080,1274082,1274261,1274292,1274550,1274902,1274949,1275524,1275568,1275575,1275671,1275672,1275678,1275683,1275689,1275692,1275810,1275811,1275813,1275939,1275944,1275947,1275951,1275957,1275958,1275959,1276271,1276280,1276321,1276343,1276363,1276382,1276384,1276387,1276393,1276444,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1276778,1276779,1276798,1276844,1276925,1276933,1276934,1276935,1276940,1276949,1276956,1277044,1277046,1277053,1277067,1277069,1277071,1277072,1277075,1277080,1277082,1277089,1277091,1277094,1277103,1 277113,1277121,1277133,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277264,1277280,1277282,1277307,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277336,1277337,1277338,1277339,1277343,1277344,1277345,1277355,1277356,1277357,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277461,1277467,1277472,1277487,1277488,1277497,1277520,1277522,1277529,1277530,1277533,1277538,1277540,1277541,1277542,1277543,1277546,1277554,1277560,1277566,1277576,1277578,1277593,1277599,1277607,1277609,1277610,1277612,1277621,1277623,1277637,1277645,1277657,1277663,1277665,1277677,1277682,1277690,1277730,1277741,1277744,1277746,1277754,1277770,1277771,1277772,1277835,1277836,1277839,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277890,1277893,1277903,1277934,1278028,1278030,1278033,1278041,127805 0,1278057,1278101,1278123,1278132,1278139,1278153,1278160,1278181,1278194,1278200,1278201,1278202,1278207,1278212,1278214,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278319,1278320,1278323,1278325,1278326,1278334,1278337,1278343,1278377,1278393,1278400,1278412,1278415,1278429,1278430,1278431,1278704,1278711,1279455,1279464,1279467,1279468,1279471,1279477,1279483,1279485,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279520,1279533,1279564,1279592,1279594,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279777,1279795,1279798,1279802,1279805,1279808,1279809,1279812,1279814,1279815,1279816,1279825,1279920,1279921,1279971,1280141,1280142,1280156,1280157,1280158,1280162,1280172,1280178,1280185,1280215,1280221,1280230,1280234,1280244,1280246,1280247,1280251,1280253,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280315,1280316,1280319,1280345,1280378,1280395,1280397,1280398,1280399,1280400,1280402,1280408,128 0410,1280415,1280416,1280421,1280423,1280425,1280428,1280429,1280431,1280434,1280463,1280472,1280476,1280477,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280520,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280570,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280834,1280918,1280948,1280960,1280970,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280992,1280996,1281001,1281003,1281005,1281008,1281011,1281018,1281022,1281027,1281029,1281030,1281034,1281052,1281056,1281058,1281065,1281130,1281138,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281257,1281260,1281265,1281269,1281270,1281271,1281272,1281275,1281277,1281281,1281292,1281299,1281300,1281311,1281315,1281320,1281332,1281333,1281334, 1281337,1281346,1281352,1281353,1281357,1281360,1281361,1281363,1281368,1281382,1281384,1281391,1281392,1281394,1281395,1281396,1281402,1281418,1281422,1281429,1281488,1281490,1281495,1281500,1281504,1281509,1281510,1281535,1281538,1281547,1281549,1281551,1281563,1281568,1281577,1281579,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281650,1281672,1281676,1281677,1281688,1281691,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281724,1281735,1281736,1281753,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281804,1281813,1281824,1281828,1281850,1281851,1281853,1281858,1281868,1281870,1281877,1281886,1281887,1281890,1281891,1281895,1281897,1281900,1281903,1281916,1281930,1281932,1281968,1281969,1281985,1281987,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282114,1282116,1282117,1282122,12821 28,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282167,1282174,1282178,1282189,1282192,1282196,1282262,1282276,1282289,1282296,1282298,1282302,1282304,1282325,1282327,1282328,1282677,1282684,1282686,1282690,1282691,1282695,1282697,1282729,1282737,1282744,1282753,1282754,1282759,1282763,1282764,1282769,1282772,1282773,1282775,1282776,1282778,1282805,1282814,1282867,1282870,1282879,1282885,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282920,1282924,1282925,1282926,1282927,1282935,1282955,1282957,1282962,1282963,1282974,1282984,1283004,1283016,1283017,1283018,1283036,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283087,1283113,1283114,1283122,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283229,1283231,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,12 83335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283416,1283418,1283429,1283445,1283453,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283502,1283511,1283585,1283662,1283668,1283741,1283746,1283752,1283754,1283782,1283793,1283810,1283812,1283821,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283846,1283850,1283853,1283855,1283856,1283858,1283859,1283862,1283863,1283869,1283871,1283873,1283877,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283941,1283958,1283960,1283967,1284024,1284031,1284064,1284150,1284243,1284292,1284293,1284296,1284298,1284302,1284304,1284305,1284310,1284312,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284419,1284422,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284509,1284512,1284513,1284514,1284515,1284517,1284537,1284540,1284541,1284542,1284543,1284544,1284545,1284553,1284554,1284555,1284557,1284563,1284568,1284577,1284578,1284579,1284584,1284595 ,1284601,1284602,1284605,1284609,1284615,1284616,1284620,1284621,1284623,1284626,1284630,1284631,1284635,1284636,1284637,1284638,1284640,1284641,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285624,1285648,1285668,1285685,1285914,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286009,1286012,1286013,1286019,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286158,1286160,1286161,1286171,1286190,1286204,1286205,1286207,1286215,1286217,1286224,1286233,1286234,1286237,1286240,1286257,1286259,1286267,1286342,1286346,1286390,1286391,1286394,1286417,1286421,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286469,1286514,1286529,1286625,1286654,1286669,1286671,1286672,1286689,1286692,1286704,1286707,1286713,1286720,1286735,1286741,1286742,1286756,1286757,1286772,1286775,1286778,1286782,1286785,1286787,1286819,1286820,1286821,1286822,1286823,1286824,1286841,1286 843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286872,1286874,1286877,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287364,1287592,1287594,1287597,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287737,1287749,1287757,1287765,1287773,1287774,1287966,1287984,1287985,1287995,1288001,1288002,1288005,1288007,1288014,1288061,1288088,1288125,1288127,1288246,1288248,1288521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288694,1288752,CVE-2024-49974,CVE-2024-50241,CVE-2024-53073,CVE-2025-38237,CVE-2025-38576,CVE-2025-68219,CVE-2025-71073,CVE-2026-100071,CVE-2026-100078,CVE-2026-100079,CVE-2026-23059,CVE-2026-23112,CVE-2026-31708,CVE-2026-31709,CVE-2026-43350,CVE-2026-45944,CVE-2026-46091,CVE-2026-46135,CVE-2026-46139,CVE-2026-46155,CVE-2026-52989,CVE-2026-53059,CVE-2026-53090,CVE-2026-53179,CVE-2026-63809,CVE-2026-64240,CVE-2026-64324,CVE-2026-64370,CVE-2026-6 4380,CVE-2026-64413,CVE-2026-64434,CVE-2026-64435,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-64525,CVE-2026-64534,CVE-2026-64535,CVE-2026-68186,CVE-2026-68388,CVE-2026-68447,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72065,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72105,CVE-2026-72110,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72126,CVE-2026-72127,CVE-2026-72133,CVE-2026-72140,CVE-2026-72142,CVE-2026-72148,CVE-2026-72149,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72234,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72250,CVE-2026-72253,CV E-2026-72257,CVE-2026-72261,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72300,CVE-2026-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72391,CVE-2026-72396,CVE-2026-72400,CVE-2026-72405,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72464,CVE-2026-72465,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74368,CVE-2026-74380,CVE-2026-74381,CVE-2026- 74387,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74445,CVE-2026-74446,CVE-2026-74448,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74501,CVE-2026-74502,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74519,CVE-2026-74531,CVE-2026-74532,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74552,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74613,CVE-2026-74620,CVE-2026-74624,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74654,CVE-2026-74655,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74691,CVE-2026-74715,C VE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80539,CVE-2026-80541,CVE-2026-80559,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80572,CVE-2026-80573,CVE-2026-80574,CVE-2026-80578,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80597,CVE-2026-80599,CVE-2026-80600,CVE-2026-80601,CVE-2026-80602,CVE-2026-80605,CVE-2026-80609,CVE-2026-80618,CVE-2026-80622,CVE-2026-80635,CVE-2026-80637,CVE-2026-80649,CVE-2026-80652,CVE-2026-80659,CVE-2026-80660,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80684,CVE-2026-80692,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80717,CVE-2026-80728,CVE-2026-80743,CVE-2026-80752,CVE-2026-80754,CVE-2026-80755,CVE-2026-80757,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80772,CVE-2026-80781,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026 -80797,CVE-2026-80798,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80819,CVE-2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80855,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80907,CVE-2026-80908,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80937,CVE-2026-80938,CVE-2026-80941,CVE-2026-80944,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81017,CVE-2026-89438,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444, CVE-2026-89461,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89598,CVE-2026-89599,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89637,CVE-2026-89642,CVE-2026-89649,CVE-2026-89654,CVE-2026-89655,CVE-2026-89656,CVE-2026-89657,CVE-2026-89669,CVE-2026-89684,CVE-2026-89706,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89736,CVE-2026-89739,CVE-2026-89741,CVE-2026-89742,CVE-2026-89744,CVE-2026-89751,CVE-2026-89761,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89800,CVE-2026-89801,CVE-202 6-89802,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89901,CVE-2026-89927,CVE-2026-89932,CVE-2026-89933,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979 ,CVE-2026-89980,CVE-2026-89982,CVE-2026-89993,CVE-2026-89999,CVE-2026-90000,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90025,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CVE-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90114,CVE-2026-90126,CVE-2026-90128,CVE-2026-90138,CVE-2026-90148,CVE-2026-90194,CVE-2026-90196,CVE-2026-90207,CVE-2026-90214,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90253,CVE-2026-90254,CVE-2026-90257,CVE-2026-90281,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90287,CVE-2026-90297,CVE-2026-90298,CVE-2026-90316,CVE-2026-90319,CVE-2026-90334,CVE-2026-90335,CVE-20 26-90336,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026-90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90378,CVE-2026-90382,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93092,CVE-2026-93114,CVE-2026-93115,CVE-2026-93118,CVE-2026-93120,CVE-2026-93122,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-9314 1,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93206,CVE-2026-93210,CVE-2026-93213,CVE-2026-93214,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93798,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93814,CVE-2026-93817,CVE-2026-93819,CVE-2026-93823,CVE-2026-93825,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97429,CVE-2 026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97495,CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97554,CVE-2026-97556,CVE-2026-97558,CVE-2026-97559,CVE-2026-97561,CVE-2026-97562,CVE-2026-97563,CVE-2026-97565,CVE-2026-97575,CVE-2026-97576,CVE-2026-97581,CVE-2026-97582,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-979 00,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97930,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97969,CVE-2026-97970,CVE-2026-97977,CVE-2026-97991,CVE-2026-97993,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98031,CVE-2026-98041,CVE-2026-98044,CVE-2026-98055,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98072,CVE-2026-98074,CVE-2026-98078,CVE-2026-98085,CVE-2026-98092,CVE-2026-98095,CVE-2026-98108,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98124,CVE-2026-98125,CVE-2026-98126,CVE-2026-98127,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98167,CVE-2026-98169,CVE-2026-98170,CVE-2026-98171,CVE-2026-98175,CVE-2026-98181,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE- 2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98212,CVE-2026-98213,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98261,CVE-2026-98263,CVE-2026-98264,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98328,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-2026-98374,CVE-2026-98386,CVE-2026-98404,CVE-2026-98 406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98432,CVE-2026-98455,CVE-2026-98457,CVE-2026-98460,CVE-2026-98461,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98519,CVE-2026-98521,CVE-2026-98527,CVE-2026-98529,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98602,CVE-2026-98605,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98660,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98679,CVE-2026-98687,CVE-2026-98694,CVE -2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98703,CVE-2026-98705,CVE-2026-98706,CVE-2026-98710,CVE-2026-98711,CVE-2026-98717,CVE-2026-98718,CVE-2026-98721,CVE-2026-98732,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98744,CVE-2026-98748,CVE-2026-98754,CVE-2026-98755,CVE-2026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98830,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98847,CVE-2026-98848,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98884,CVE-2026-98886,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98896,CVE-2026-9 8898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98940,CVE-2026-98956,CVE-2026-98970,CVE-2026-98971,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99015,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99095,CVE-2026-99100,CVE-2026-99131,CVE-2026-99150 The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72127: netdev-genl: report NAPI thread PID in the caller's pid namespace (bsc#1277542). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89642: cifs: call pagecache_isize_extended() in cifs_setsize() when extending (bsc#1280970). - CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434). - CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415). - CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). - CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). - CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). - CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). - CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). - CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). - CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). - CVE-2026-97565: smb: client: reject short READ responses in CIFSSMBRead() (bsc#1283793). - CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98072: net/rds: use wq_has_sleeper() in release_in_xmit() (bsc#1283846). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98124: smb/client: invalidate fscache for fallocate range operations (bsc#1283821). - CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). - CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). - CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). - CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). - CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). - CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). - CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: TAD: Rearrange RT data validation checking (stable-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Fix the Kore controller key map (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - checkpatch: skip CamelCase cache for --no-tree without root (git-fixes). - cifs: Pass unbyteswapped eof value into SMB2_set_eof() (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: bestcomm: set bcom_eng to NULL on probe failure (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Add reserved item tag for main items (stable-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hid-steam: Make client_opened a counter (stable-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: rate-limit hid_warn to prevent log flooding (stable-fixes). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: core: add accessors 'masklength' (stable-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: light: ltrf216a: Return floating point values (stable-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: lkkbd - disable pending work before freeing device (stable-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - lib/decompress_bunzip2: fix off-by-one in run-length bounds check (git-fixes). - lib: decompress_bunzip2: fix integer overflow in run-length decoding (git-fixes). - lib: validate in-memory LZ4 chunk length (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: Disable multicore support (stable-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - mm, vmscan: flush tlb before large folio is freed (bsc#1250656). - mm: introduce num_pages_contiguous() (bsc#1284243). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: fix use-after-free on remove (git-fixes). - power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Reinstate 'resource: avoid unnecessary lookups in find_next_iomem_res()' (bsc#1284243). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337). - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - selftests/alsa: Do not take another control's event as our own (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (git-fixes). - smb: client: use kzalloc to zero-initialize security descriptor buffer (git-fixes). - smb: common: change the data type of num_aces to le16 (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: clean up redundant & parentheses (stable-fixes). - Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes). - staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - tty: add break_wait kernel-doc (git-fixes). - tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes). - tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes). - usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes). - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes). - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes). - usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243). - vfio/type1: conditional rescheduling while pinning (bsc#1284243). - vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243). - vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243). - vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes). - wifi: ath12k: fix the fetching of combined rssi (git-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes). - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes). - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-default-base-6.4.0-159998.55.1.159998.21.42 updated - container:SL-Micro-base-container-2.2.1-5.212 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:20:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:20:22 +0100 (CET) Subject: SUSE-CU-2026:13718-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261105092022.1B0C6FD18@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13718-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.205 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.205 Severity : important Type : security References : 1215199 1232383 1233187 1233565 1246086 1248354 1250656 1255222 1256632 1257737 1258184 1264022 1264024 1264267 1264985 1267203 1267238 1267373 1267720 1267882 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1269182 1269264 1269364 1269532 1269655 1269798 1271349 1272261 1272296 1273292 1273557 1273803 1273805 1273809 1273839 1273880 1273999 1274080 1274257 1274261 1274292 1274550 1274902 1274949 1275521 1275524 1275575 1275671 1275672 1275678 1275683 1275689 1275692 1275810 1275811 1275813 1275939 1275944 1275947 1275951 1275955 1275957 1275958 1275959 1276245 1276271 1276275 1276280 1276321 1276343 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276774 1276776 1276778 1276779 1276798 1276844 1276925 1276933 1276934 1276935 1276940 1276949 1276956 1277044 1277046 1277053 1277067 1277069 1277071 1277072 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277103 1277113 1277121 1277130 1277133 1277135 1277142 1277157 1277158 1277161 1277163 1277166 1277167 1277168 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277264 1277280 1277282 1277307 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277333 1277336 1277337 1277338 1277339 1277343 1277344 1277345 1277355 1277356 1277357 1277362 1277364 1277365 1277383 1277387 1277389 1277451 1277456 1277457 1277461 1277467 1277472 1277477 1277478 1277482 1277487 1277488 1277497 1277520 1277522 1277529 1277530 1277533 1277538 1277540 1277541 1277543 1277546 1277554 1277560 1277566 1277576 1277578 1277593 1277599 1277607 1277609 1277610 1277612 1277621 1277623 1277637 1277645 1277657 1277663 1277665 1277675 1277677 1277682 1277690 1277730 1277732 1277741 1277744 1277746 1277754 1277770 1277771 1277772 1277785 1277819 1277835 1277836 1277839 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277890 1277893 1277903 1277934 1278028 1278033 1278041 1278050 1278057 1278074 1278081 1278101 1278117 1278123 1278132 1278139 1278153 1278160 1278172 1278173 1278181 1278194 1278198 1278200 1278201 1278207 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278320 1278323 1278325 1278326 1278334 1278337 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278415 1278429 1278430 1278431 1278704 1278711 1279420 1279455 1279460 1279464 1279467 1279468 1279471 1279477 1279483 1279485 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279520 1279533 1279564 1279592 1279594 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279795 1279798 1279802 1279805 1279808 1279809 1279812 1279814 1279815 1279816 1279823 1279825 1279920 1279921 1279971 1280141 1280142 1280156 1280157 1280158 1280162 1280172 1280178 1280185 1280215 1280221 1280230 1280234 1280244 1280246 1280247 1280251 1280253 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280330 1280331 1280332 1280345 1280346 1280378 1280395 1280397 1280398 1280399 1280400 1280402 1280408 1280410 1280415 1280416 1280421 1280423 1280425 1280428 1280429 1280431 1280434 1280463 1280472 1280476 1280477 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280520 1280539 1280545 1280559 1280560 1280563 1280569 1280570 1280571 1280573 1280581 1280713 1280735 1280745 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280834 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280992 1280996 1281001 1281003 1281005 1281006 1281008 1281011 1281018 1281022 1281027 1281029 1281030 1281034 1281052 1281056 1281058 1281065 1281080 1281130 1281138 1281145 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281311 1281315 1281320 1281332 1281333 1281334 1281337 1281342 1281346 1281352 1281353 1281357 1281360 1281361 1281363 1281368 1281382 1281384 1281391 1281392 1281394 1281395 1281396 1281402 1281418 1281422 1281429 1281488 1281495 1281500 1281504 1281528 1281532 1281536 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281672 1281676 1281677 1281688 1281691 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281723 1281724 1281735 1281736 1281753 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281804 1281813 1281824 1281828 1281850 1281851 1281853 1281858 1281868 1281870 1281877 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281900 1281903 1281916 1281930 1281932 1281968 1281969 1281985 1281987 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282114 1282116 1282117 1282122 1282128 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282169 1282174 1282178 1282189 1282192 1282196 1282262 1282276 1282289 1282296 1282298 1282302 1282304 1282325 1282327 1282328 1282684 1282686 1282690 1282691 1282695 1282697 1282729 1282735 1282737 1282741 1282744 1282753 1282754 1282759 1282763 1282764 1282769 1282772 1282773 1282775 1282776 1282805 1282814 1282867 1282879 1282885 1282886 1282887 1282893 1282898 1282911 1282914 1282915 1282920 1282924 1282925 1282926 1282927 1282935 1282955 1282957 1282958 1282971 1282974 1282993 1283004 1283016 1283017 1283018 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283087 1283114 1283122 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283173 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283343 1283349 1283360 1283364 1283416 1283429 1283445 1283453 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283502 1283504 1283508 1283511 1283513 1283585 1283737 1283741 1283746 1283752 1283754 1283780 1283781 1283785 1283830 1283833 1283834 1283837 1283838 1283844 1283845 1283869 1283878 1283884 1283887 1283920 1283928 1283958 1284024 1284031 1284064 1284243 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284349 1284350 1284358 1284363 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284509 1284512 1284513 1284514 1284515 1284517 1284537 1284540 1284541 1284542 1284543 1284544 1284545 1284553 1284554 1284555 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284600 1284601 1284602 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285624 1285645 1285647 1285648 1285668 1285685 1285914 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286009 1286012 1286013 1286019 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286186 1286190 1286204 1286205 1286207 1286208 1286215 1286217 1286224 1286234 1286237 1286240 1286257 1286259 1286267 1286342 1286346 1286390 1286391 1286394 1286417 1286421 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286469 1286514 1286529 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286744 1286756 1286757 1286772 1286775 1286778 1286782 1286785 1286787 1286819 1286820 1286821 1286822 1286823 1286824 1286826 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287364 1287592 1287594 1287597 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287737 1287749 1287757 1287765 1287773 1287774 1287781 1287966 1287981 1287984 1287985 1287995 1288001 1288002 1288005 1288007 1288014 1288061 1288088 1288125 1288126 1288127 1288226 1288406 1288513 CVE-2023-7356 CVE-2024-49974 CVE-2024-50241 CVE-2024-53073 CVE-2025-38237 CVE-2025-38576 CVE-2025-68219 CVE-2025-71073 CVE-2026-100078 CVE-2026-100079 CVE-2026-107929 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-23059 CVE-2026-23112 CVE-2026-31708 CVE-2026-31709 CVE-2026-43350 CVE-2026-45944 CVE-2026-46091 CVE-2026-46135 CVE-2026-46155 CVE-2026-52968 CVE-2026-52989 CVE-2026-53059 CVE-2026-53090 CVE-2026-53179 CVE-2026-63809 CVE-2026-64240 CVE-2026-64370 CVE-2026-64380 CVE-2026-64430 CVE-2026-64434 CVE-2026-64435 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-64525 CVE-2026-64534 CVE-2026-64535 CVE-2026-68186 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68460 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72105 CVE-2026-72110 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72126 CVE-2026-72133 CVE-2026-72140 CVE-2026-72142 CVE-2026-72148 CVE-2026-72149 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72234 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72250 CVE-2026-72253 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72261 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72286 CVE-2026-72290 CVE-2026-72300 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72396 CVE-2026-72405 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72452 CVE-2026-72464 CVE-2026-72465 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74368 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74472 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74501 CVE-2026-74502 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74514 CVE-2026-74519 CVE-2026-74531 CVE-2026-74532 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74552 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74613 CVE-2026-74620 CVE-2026-74624 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74654 CVE-2026-74655 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74691 CVE-2026-74715 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80255 CVE-2026-80539 CVE-2026-80541 CVE-2026-80542 CVE-2026-80559 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80572 CVE-2026-80573 CVE-2026-80574 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80597 CVE-2026-80599 CVE-2026-80600 CVE-2026-80601 CVE-2026-80602 CVE-2026-80605 CVE-2026-80609 CVE-2026-80618 CVE-2026-80622 CVE-2026-80635 CVE-2026-80637 CVE-2026-80649 CVE-2026-80652 CVE-2026-80659 CVE-2026-80660 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80684 CVE-2026-80692 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80717 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80755 CVE-2026-80757 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80772 CVE-2026-80781 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80855 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80891 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80937 CVE-2026-80938 CVE-2026-80941 CVE-2026-80944 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80978 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89461 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89598 CVE-2026-89599 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89637 CVE-2026-89649 CVE-2026-89654 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657 CVE-2026-89669 CVE-2026-89684 CVE-2026-89706 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89736 CVE-2026-89739 CVE-2026-89741 CVE-2026-89742 CVE-2026-89744 CVE-2026-89751 CVE-2026-89761 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89901 CVE-2026-89927 CVE-2026-89932 CVE-2026-89933 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89999 CVE-2026-90000 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90025 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90082 CVE-2026-90087 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90148 CVE-2026-90194 CVE-2026-90196 CVE-2026-90207 CVE-2026-90214 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90245 CVE-2026-90251 CVE-2026-90253 CVE-2026-90254 CVE-2026-90257 CVE-2026-90281 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90297 CVE-2026-90298 CVE-2026-90316 CVE-2026-90319 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90378 CVE-2026-90382 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90435 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-92476 CVE-2026-92482 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93092 CVE-2026-93101 CVE-2026-93114 CVE-2026-93115 CVE-2026-93117 CVE-2026-93118 CVE-2026-93120 CVE-2026-93122 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93228 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93262 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93798 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93814 CVE-2026-93817 CVE-2026-93819 CVE-2026-93823 CVE-2026-93825 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 CVE-2026-97407 CVE-2026-97408 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97581 CVE-2026-97582 CVE-2026-97593 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97604 CVE-2026-97605 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97917 CVE-2026-97926 CVE-2026-97930 CVE-2026-97948 CVE-2026-97955 CVE-2026-97969 CVE-2026-97970 CVE-2026-97976 CVE-2026-97977 CVE-2026-98006 CVE-2026-98025 CVE-2026-98041 CVE-2026-98044 CVE-2026-98054 CVE-2026-98055 CVE-2026-98066 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98155 CVE-2026-98159 CVE-2026-98160 CVE-2026-98181 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98249 CVE-2026-98263 CVE-2026-98264 CVE-2026-98270 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98374 CVE-2026-98386 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98432 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98632 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98660 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98679 CVE-2026-98687 CVE-2026-98694 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98703 CVE-2026-98705 CVE-2026-98706 CVE-2026-98710 CVE-2026-98711 CVE-2026-98717 CVE-2026-98721 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98748 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98830 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98847 CVE-2026-98848 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98884 CVE-2026-98886 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99022 CVE-2026-99034 CVE-2026-99039 CVE-2026-99061 CVE-2026-99094 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5091-1 Released: Tue Nov 3 17:27:14 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1232383,1233187,1233565,1246086,1248354,1250656,1255222,1256632,1257737,1258184,1264022,1264024,1264267,1264985,1267203,1267238,1267373,1267720,1267882,1269182,1269264,1269364,1269532,1269655,1269798,1271349,1272261,1272296,1273292,1273557,1273803,1273805,1273809,1273839,1273880,1273999,1274080,1274257,1274261,1274292,1274550,1274902,1274949,1275521,1275524,1275575,1275671,1275672,1275678,1275683,1275689,1275692,1275810,1275811,1275813,1275939,1275944,1275947,1275951,1275955,1275957,1275958,1275959,1276245,1276271,1276275,1276280,1276321,1276343,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276774,1276776,1276778,1276779,1276798,1276844,1276925,1276933,1276934,1276935,1276940,1276949,1276956,1277044,1277046,1277053,1277067,1277069,1277071,1277072,1277075,1277079,1277080,1 277082,1277084,1277089,1277091,1277094,1277103,1277113,1277121,1277130,1277133,1277135,1277142,1277157,1277158,1277161,1277163,1277166,1277167,1277168,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277264,1277280,1277282,1277307,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277333,1277336,1277337,1277338,1277339,1277343,1277344,1277345,1277355,1277356,1277357,1277362,1277364,1277365,1277383,1277387,1277389,1277451,1277456,1277457,1277461,1277467,1277472,1277487,1277488,1277497,1277520,1277522,1277529,1277530,1277533,1277538,1277540,1277541,1277543,1277546,1277554,1277560,1277566,1277576,1277578,1277593,1277599,1277607,1277609,1277610,1277612,1277621,1277623,1277637,1277645,1277657,1277663,1277665,1277675,1277677,1277682,1277690,1277730,1277732,1277741,1277744,1277746,1277754,1277770,1277771,1277772,1277785,1277819,127783 5,1277836,1277839,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277890,1277893,1277903,1277934,1278028,1278033,1278041,1278050,1278057,1278074,1278081,1278101,1278117,1278123,1278132,1278139,1278153,1278160,1278172,1278181,1278194,1278198,1278200,1278201,1278207,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278320,1278323,1278325,1278326,1278334,1278337,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278415,1278429,1278430,1278431,1278704,1278711,1279420,1279455,1279460,1279464,1279467,1279468,1279471,1279477,1279483,1279485,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279520,1279533,1279564,1279592,1279594,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279795,1279798,1279802,1279805,1279808,1279809,1279812,1279814,1279815,1279816,1279823,1279825,1279920,1279921,1279971,1280141,1280142,1280156,1280157,1280158,1280162,1280172,1280178,128 0185,1280215,1280221,1280230,1280234,1280244,1280246,1280247,1280251,1280253,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280330,1280331,1280332,1280345,1280346,1280378,1280395,1280397,1280398,1280399,1280400,1280402,1280408,1280410,1280415,1280416,1280421,1280423,1280425,1280428,1280429,1280431,1280434,1280463,1280472,1280476,1280477,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280520,1280539,1280545,1280559,1280560,1280563,1280569,1280570,1280571,1280573,1280581,1280713,1280735,1280745,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280834,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280992,1280996,1281001,1281003,1281005,1281006,1281008,1281011,1281018,1281022,1281027,1281029,1281030,1281034,1281052,1281056,1281058,1281065,1281080,1281130,1281138,1281145,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281179,1281180,1281181,1281183,1281184, 1281185,1281189,1281190,1281191,1281194,1281204,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,1281271,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281311,1281315,1281320,1281332,1281333,1281334,1281337,1281342,1281346,1281352,1281353,1281357,1281360,1281361,1281363,1281368,1281382,1281384,1281391,1281392,1281394,1281395,1281396,1281402,1281418,1281422,1281429,1281488,1281495,1281500,1281504,1281528,1281532,1281536,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281672,1281676,1281677,1281688,1281691,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281723,1281724,1281735,1281736,1281753,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281804,1281813,1281824,1281828,1281850,1281851,1281853,1281858,1281868,1281870,1281877,1281883,1281886,1281887,1281890,1281891,1281895,12818 97,1281900,1281903,1281916,1281930,1281932,1281968,1281969,1281985,1281987,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282114,1282116,1282117,1282122,1282128,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282169,1282174,1282178,1282189,1282192,1282196,1282262,1282276,1282289,1282296,1282298,1282302,1282304,1282325,1282327,1282328,1282684,1282686,1282690,1282691,1282695,1282697,1282729,1282735,1282737,1282741,1282744,1282753,1282754,1282759,1282763,1282764,1282769,1282772,1282773,1282775,1282776,1282805,1282814,1282867,1282879,1282885,1282886,1282887,1282893,1282898,1282911,1282914,1282915,1282920,1282924,1282925,1282926,1282927,1282935,1282955,1282957,1282958,1282971,1282974,1282993,1283004,1283016,1283017,1283018,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,12 83087,1283114,1283122,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283173,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283343,1283349,1283360,1283364,1283416,1283429,1283445,1283453,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283502,1283504,1283508,1283511,1283513,1283585,1283737,1283741,1283746,1283752,1283754,1283780,1283781,1283785,1283830,1283833,1283834,1283837,1283838,1283844,1283845,1283869,1283878,1283884,1283887,1283920,1283928,1283958,1284024,1284031,1284064,1284243,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284349,1284350,1284358,1284363,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284509,1284512,1284513,1284514,1284515,1284517,1284537,1284540,1284541,1284542,1284543,1284544,1284545 ,1284553,1284554,1284555,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284600,1284601,1284602,1284609,1284615,1284616,1284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285624,1285645,1285647,1285648,1285668,1285685,1285914,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286009,1286012,1286013,1286019,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286186,1286190,1286204,1286205,1286207,1286208,1286215,1286217,1286224,1286234,1286237,1286240,1286257,1286259,1286267,1286342,1286346,1286390,1286391,1286394,1286417,1286421,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286469,1286514,1286529,1286625,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286 689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286744,1286756,1286757,1286772,1286775,1286778,1286782,1286785,1286787,1286819,1286820,1286821,1286822,1286823,1286824,1286826,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287364,1287592,1287594,1287597,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287737,1287749,1287757,1287765,1287773,1287774,1287966,1287981,1287984,1287985,1287995,1288001,1288002,1288005,1288007,1288014,1288061,1288088,1288125,1288126,1288127,1288226,1288406,1288513,CVE-2023-7356,CVE-2024-49974,CVE-2024-50241,CVE-2024-53073,CVE-2025-38237,CVE-2025-38576,CVE-2025-68219,CVE-2025-71073,CVE-2026-100078,CVE-2026-100079,CVE-2026-23059,CVE-2026-23112,CVE-2026-31708,CVE-2026-31709,CVE-2026-43350,CVE-2026-45944,CVE-2026-46091,C VE-2026-46135,CVE-2026-46155,CVE-2026-52968,CVE-2026-52989,CVE-2026-53059,CVE-2026-53090,CVE-2026-53179,CVE-2026-63809,CVE-2026-64240,CVE-2026-64370,CVE-2026-64380,CVE-2026-64430,CVE-2026-64434,CVE-2026-64435,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-64525,CVE-2026-64534,CVE-2026-64535,CVE-2026-68186,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68460,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72105,CVE-2026-72110,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72126,CVE-2026-72133,CVE-2026-72140,CVE-2026-72142,CVE-2026-72148,CVE-2026-72149,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026 -72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72234,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72250,CVE-2026-72253,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72261,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72286,CVE-2026-72290,CVE-2026-72300,CVE-2026-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72396,CVE-2026-72405,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72452,CVE-2026-72464,CVE-2026-72465,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486, CVE-2026-72489,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-74368,CVE-2026-74380,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74472,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74501,CVE-2026-74502,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74514,CVE-2026-74519,CVE-2026-74531,CVE-2026-74532,CVE-202 6-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74552,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74613,CVE-2026-74620,CVE-2026-74624,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74654,CVE-2026-74655,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74691,CVE-2026-74715,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80539,CVE-2026-80541,CVE-2026-80542,CVE-2026-80559,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80572,CVE-2026-80573,CVE-2026-80574,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80597,CVE-2026-80599,CVE-2026-80600,CVE-2026-80601,CVE-2026-80602,CVE-2026-80605,CVE-2026-80609,CVE-2026-80618,CVE-2026-80622,CVE-2026-80635,CVE-2026-80637,CVE-2026-80649 ,CVE-2026-80652,CVE-2026-80659,CVE-2026-80660,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80684,CVE-2026-80692,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80717,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80755,CVE-2026-80757,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80772,CVE-2026-80781,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE-2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80855,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80891,CVE-20 26-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80937,CVE-2026-80938,CVE-2026-80941,CVE-2026-80944,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80978,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89461,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89560,CVE-2026-89562,CVE-2026-8958 3,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89598,CVE-2026-89599,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89637,CVE-2026-89649,CVE-2026-89654,CVE-2026-89655,CVE-2026-89656,CVE-2026-89657,CVE-2026-89669,CVE-2026-89684,CVE-2026-89706,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89736,CVE-2026-89739,CVE-2026-89741,CVE-2026-89742,CVE-2026-89744,CVE-2026-89751,CVE-2026-89761,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2 026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89901,CVE-2026-89927,CVE-2026-89932,CVE-2026-89933,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89999,CVE-2026-90000,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90025,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-900 35,CVE-2026-90042,CVE-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90082,CVE-2026-90087,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90148,CVE-2026-90194,CVE-2026-90196,CVE-2026-90207,CVE-2026-90214,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90245,CVE-2026-90251,CVE-2026-90253,CVE-2026-90254,CVE-2026-90257,CVE-2026-90281,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90287,CVE-2026-90297,CVE-2026-90298,CVE-2026-90316,CVE-2026-90319,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026-90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90378,CVE-2026-90382,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE- 2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93092,CVE-2026-93101,CVE-2026-93114,CVE-2026-93115,CVE-2026-93117,CVE-2026-93118,CVE-2026-93120,CVE-2026-93122,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93 190,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93228,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93262,CVE-2026-93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93798,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93814,CVE-2026-93817,CVE-2026-93819,CVE-2026-93823,CVE-2026-93825,CVE-2026-97407,CVE-2026-97408,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE -2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495,CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97581,CVE-2026-97582,CVE-2026-97593,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97604,CVE-2026-97605,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97917,CVE-2026-97926,CVE-2026-97930,CVE-2026-97948,CVE-2026-97955,CVE-2026-97969,CVE-2026-97970,CVE-2026-97976,CVE-2026-97977,CVE-2026-98006,CVE-2026-98025,CVE-2026-98041,CVE-2026-98044,CVE-2026-98054,CVE-2026-98055,CVE-2026-98066,CVE-2026-98085,CVE-2026-9 8086,CVE-2026-98092,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98155,CVE-2026-98159,CVE-2026-98160,CVE-2026-98181,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98249,CVE-2026-98263,CVE-2026-98264,CVE-2026-98270,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CV E-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-2026-98374,CVE-2026-98386,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98432,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026- 98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-98605,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98632,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98660,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98679,CVE-2026-98687,CVE-2026-98694,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98703,CVE-2026-98705,CVE-2026-98706,CVE-2026-98710,CVE-2026-98711,CVE-2026-98717,CVE-2026-98721,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98748,CVE-2026-98754,CVE-2026-98755,CVE-2026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,C VE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98830,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98847,CVE-2026-98848,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98884,CVE-2026-98886,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98940,CVE-2026-98949,CVE-2026-98956,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99022,CVE-2026-99034,CVE-2026-99039,CVE-2026-99061,CVE-2026-99094 The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434). - CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415). - CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337). - CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). - CVE-2026-97926: ufs: validate cylinder group metadata before caching it (bsc#1283887). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: TAD: Rearrange RT data validation checking (stable-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Fix the Kore controller key map (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Add reserved item tag for main items (stable-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hid-steam: Make client_opened a counter (stable-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: rate-limit hid_warn to prevent log flooding (stable-fixes). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hostfs: fix dev_t handling (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: core: add accessors 'masklength' (stable-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: light: ltrf216a: Return floating point values (stable-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: lkkbd - disable pending work before freeing device (stable-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - landlock: Always allow signals between threads of the same process (git-fixes). - landlock: Fix cosmetic change (git-fixes). - landlock: Fix non-TCP sockets restriction (git-fixes). - landlock: Fix TCP handling of short AF_UNSPEC addresses (git-fixes). - landlock: Fix unmarked concurrent access to socket family (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: Disable multicore support (stable-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - mm, vmscan: flush tlb before large folio is freed (bsc#1250656). - mm: introduce num_pages_contiguous() (bsc#1284243). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: fix use-after-free on remove (git-fixes). - power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Reinstate 'resource: avoid unnecessary lookups in find_next_iomem_res()' (bsc#1284243). - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests/landlock: Add a new test for setuid() (git-fixes). - selftests/landlock: Fix build with non-default pthread linking (git-fixes). - selftests/landlock: Fix screwed up pointers in the scoped_signal_test (git-fixes). - selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available (git-fixes). - selftests/landlock: Split signal_scoping_threads tests (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: clean up redundant & parentheses (stable-fixes). - Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes). - staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - tty: add break_wait kernel-doc (git-fixes). - tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes). - tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes). - um: hostfs: avoid issues on inode number reuse by host (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes). - usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes). - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes). - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes). - usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243). - vfio/type1: conditional rescheduling while pinning (bsc#1284243). - vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243). - vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243). - vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes). - wifi: ath12k: fix the fetching of combined rssi (git-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes). - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes). - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - curl-8.22.0-150700.7.33.1 updated - kernel-default-6.4.0-150700.53.90.1 updated - libcurl4-8.22.0-150700.7.33.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:29:26 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:29:26 +0100 (CET) Subject: SUSE-CU-2026:13722-1: Security update of bci/bci-sle15-kernel-module-devel Message-ID: <20261105092926.B9E9EFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle15-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13722-1 Container Tags : bci/bci-sle15-kernel-module-devel:15.7 , bci/bci-sle15-kernel-module-devel:15.7-61.43 , bci/bci-sle15-kernel-module-devel:latest Container Release : 61.43 Severity : important Type : security References : 1215199 1232383 1233187 1233565 1246086 1248354 1250656 1255222 1256632 1257737 1258184 1264022 1264024 1264267 1264985 1267203 1267238 1267373 1267720 1267882 1269182 1269264 1269364 1269532 1269655 1269798 1271349 1272261 1272296 1273292 1273557 1273803 1273805 1273809 1273839 1273880 1273999 1274080 1274257 1274261 1274292 1274550 1274902 1274949 1275521 1275524 1275575 1275671 1275672 1275678 1275683 1275689 1275692 1275810 1275811 1275813 1275939 1275944 1275947 1275951 1275955 1275957 1275958 1275959 1276245 1276271 1276275 1276280 1276321 1276343 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276774 1276776 1276778 1276779 1276798 1276844 1276925 1276933 1276934 1276935 1276940 1276949 1276956 1277044 1277046 1277053 1277067 1277069 1277071 1277072 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277103 1277113 1277121 1277130 1277133 1277135 1277142 1277157 1277158 1277161 1277163 1277166 1277167 1277168 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277264 1277280 1277282 1277307 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277333 1277336 1277337 1277338 1277339 1277343 1277344 1277345 1277355 1277356 1277357 1277362 1277364 1277365 1277383 1277387 1277389 1277451 1277456 1277457 1277461 1277467 1277472 1277487 1277488 1277497 1277520 1277522 1277529 1277530 1277533 1277538 1277540 1277541 1277543 1277546 1277554 1277560 1277566 1277576 1277578 1277593 1277599 1277607 1277609 1277610 1277612 1277621 1277623 1277637 1277645 1277657 1277663 1277665 1277675 1277677 1277682 1277690 1277730 1277732 1277741 1277744 1277746 1277754 1277770 1277771 1277772 1277785 1277819 1277835 1277836 1277839 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277890 1277893 1277903 1277934 1278028 1278033 1278041 1278050 1278057 1278074 1278081 1278101 1278117 1278123 1278132 1278139 1278153 1278160 1278172 1278181 1278194 1278198 1278200 1278201 1278207 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278320 1278323 1278325 1278326 1278334 1278337 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278415 1278429 1278430 1278431 1278704 1278711 1279420 1279455 1279460 1279464 1279467 1279468 1279471 1279477 1279483 1279485 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279520 1279533 1279564 1279592 1279594 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279795 1279798 1279802 1279805 1279808 1279809 1279812 1279814 1279815 1279816 1279823 1279825 1279920 1279921 1279971 1280141 1280142 1280156 1280157 1280158 1280162 1280172 1280178 1280185 1280215 1280221 1280230 1280234 1280244 1280246 1280247 1280251 1280253 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280330 1280331 1280332 1280345 1280346 1280378 1280395 1280397 1280398 1280399 1280400 1280402 1280408 1280410 1280415 1280416 1280421 1280423 1280425 1280428 1280429 1280431 1280434 1280463 1280472 1280476 1280477 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280520 1280539 1280545 1280559 1280560 1280563 1280569 1280570 1280571 1280573 1280581 1280713 1280735 1280745 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280834 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280992 1280996 1281001 1281003 1281005 1281006 1281008 1281011 1281018 1281022 1281027 1281029 1281030 1281034 1281052 1281056 1281058 1281065 1281080 1281130 1281138 1281145 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281311 1281315 1281320 1281332 1281333 1281334 1281337 1281342 1281346 1281352 1281353 1281357 1281360 1281361 1281363 1281368 1281382 1281384 1281391 1281392 1281394 1281395 1281396 1281402 1281418 1281422 1281429 1281488 1281495 1281500 1281504 1281528 1281532 1281536 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281672 1281676 1281677 1281688 1281691 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281723 1281724 1281735 1281736 1281753 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281804 1281813 1281824 1281828 1281850 1281851 1281853 1281858 1281868 1281870 1281877 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281900 1281903 1281916 1281930 1281932 1281968 1281969 1281985 1281987 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282114 1282116 1282117 1282122 1282128 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282169 1282174 1282178 1282189 1282192 1282196 1282262 1282276 1282289 1282296 1282298 1282302 1282304 1282325 1282327 1282328 1282684 1282686 1282690 1282691 1282695 1282697 1282729 1282735 1282737 1282741 1282744 1282753 1282754 1282759 1282763 1282764 1282769 1282772 1282773 1282775 1282776 1282805 1282814 1282867 1282879 1282885 1282886 1282887 1282893 1282898 1282911 1282914 1282915 1282920 1282924 1282925 1282926 1282927 1282935 1282955 1282957 1282958 1282971 1282974 1282993 1283004 1283016 1283017 1283018 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283087 1283114 1283122 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283173 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283343 1283349 1283360 1283364 1283416 1283429 1283445 1283453 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283502 1283504 1283508 1283511 1283513 1283585 1283737 1283741 1283746 1283752 1283754 1283780 1283781 1283785 1283830 1283833 1283834 1283837 1283838 1283844 1283845 1283869 1283878 1283884 1283887 1283920 1283928 1283958 1284024 1284031 1284064 1284243 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284349 1284350 1284358 1284363 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284509 1284512 1284513 1284514 1284515 1284517 1284537 1284540 1284541 1284542 1284543 1284544 1284545 1284553 1284554 1284555 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284600 1284601 1284602 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285624 1285645 1285647 1285648 1285668 1285685 1285914 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286009 1286012 1286013 1286019 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286186 1286190 1286204 1286205 1286207 1286208 1286215 1286217 1286224 1286234 1286237 1286240 1286257 1286259 1286267 1286342 1286346 1286390 1286391 1286394 1286417 1286421 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286469 1286514 1286529 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286744 1286756 1286757 1286772 1286775 1286778 1286782 1286785 1286787 1286819 1286820 1286821 1286822 1286823 1286824 1286826 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287364 1287592 1287594 1287597 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287737 1287749 1287757 1287765 1287773 1287774 1287966 1287981 1287984 1287985 1287995 1288001 1288002 1288005 1288007 1288014 1288061 1288088 1288125 1288126 1288127 1288226 1288406 1288513 CVE-2023-7356 CVE-2024-49974 CVE-2024-50241 CVE-2024-53073 CVE-2025-38237 CVE-2025-38576 CVE-2025-68219 CVE-2025-71073 CVE-2026-100078 CVE-2026-100079 CVE-2026-23059 CVE-2026-23112 CVE-2026-31708 CVE-2026-31709 CVE-2026-43350 CVE-2026-45944 CVE-2026-46091 CVE-2026-46135 CVE-2026-46155 CVE-2026-52968 CVE-2026-52989 CVE-2026-53059 CVE-2026-53090 CVE-2026-53179 CVE-2026-63809 CVE-2026-64240 CVE-2026-64370 CVE-2026-64380 CVE-2026-64430 CVE-2026-64434 CVE-2026-64435 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-64525 CVE-2026-64534 CVE-2026-64535 CVE-2026-68186 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68460 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72105 CVE-2026-72110 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72126 CVE-2026-72133 CVE-2026-72140 CVE-2026-72142 CVE-2026-72148 CVE-2026-72149 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72234 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72250 CVE-2026-72253 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72261 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72286 CVE-2026-72290 CVE-2026-72300 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72396 CVE-2026-72405 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72452 CVE-2026-72464 CVE-2026-72465 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74368 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74472 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74501 CVE-2026-74502 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74514 CVE-2026-74519 CVE-2026-74531 CVE-2026-74532 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74552 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74613 CVE-2026-74620 CVE-2026-74624 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74654 CVE-2026-74655 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74691 CVE-2026-74715 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80539 CVE-2026-80541 CVE-2026-80542 CVE-2026-80559 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80572 CVE-2026-80573 CVE-2026-80574 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80597 CVE-2026-80599 CVE-2026-80600 CVE-2026-80601 CVE-2026-80602 CVE-2026-80605 CVE-2026-80609 CVE-2026-80618 CVE-2026-80622 CVE-2026-80635 CVE-2026-80637 CVE-2026-80649 CVE-2026-80652 CVE-2026-80659 CVE-2026-80660 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80684 CVE-2026-80692 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80717 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80755 CVE-2026-80757 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80772 CVE-2026-80781 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80855 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80891 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80937 CVE-2026-80938 CVE-2026-80941 CVE-2026-80944 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80978 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89461 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89598 CVE-2026-89599 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89637 CVE-2026-89649 CVE-2026-89654 CVE-2026-89655 CVE-2026-89656 CVE-2026-89657 CVE-2026-89669 CVE-2026-89684 CVE-2026-89706 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89736 CVE-2026-89739 CVE-2026-89741 CVE-2026-89742 CVE-2026-89744 CVE-2026-89751 CVE-2026-89761 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89901 CVE-2026-89927 CVE-2026-89932 CVE-2026-89933 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89999 CVE-2026-90000 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90025 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90082 CVE-2026-90087 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90148 CVE-2026-90194 CVE-2026-90196 CVE-2026-90207 CVE-2026-90214 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90245 CVE-2026-90251 CVE-2026-90253 CVE-2026-90254 CVE-2026-90257 CVE-2026-90281 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90287 CVE-2026-90297 CVE-2026-90298 CVE-2026-90316 CVE-2026-90319 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90378 CVE-2026-90382 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93092 CVE-2026-93101 CVE-2026-93114 CVE-2026-93115 CVE-2026-93117 CVE-2026-93118 CVE-2026-93120 CVE-2026-93122 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93228 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93262 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93798 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93814 CVE-2026-93817 CVE-2026-93819 CVE-2026-93823 CVE-2026-93825 CVE-2026-97407 CVE-2026-97408 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97581 CVE-2026-97582 CVE-2026-97593 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97604 CVE-2026-97605 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97917 CVE-2026-97926 CVE-2026-97930 CVE-2026-97948 CVE-2026-97955 CVE-2026-97969 CVE-2026-97970 CVE-2026-97976 CVE-2026-97977 CVE-2026-98006 CVE-2026-98025 CVE-2026-98041 CVE-2026-98044 CVE-2026-98054 CVE-2026-98055 CVE-2026-98066 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98155 CVE-2026-98159 CVE-2026-98160 CVE-2026-98181 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98249 CVE-2026-98263 CVE-2026-98264 CVE-2026-98270 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98374 CVE-2026-98386 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98432 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98632 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98660 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98679 CVE-2026-98687 CVE-2026-98694 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98703 CVE-2026-98705 CVE-2026-98706 CVE-2026-98710 CVE-2026-98711 CVE-2026-98717 CVE-2026-98721 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98748 CVE-2026-98754 CVE-2026-98755 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98830 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98847 CVE-2026-98848 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98884 CVE-2026-98886 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99022 CVE-2026-99034 CVE-2026-99039 CVE-2026-99061 CVE-2026-99094 ----------------------------------------------------------------- The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5091-1 Released: Tue Nov 3 17:27:14 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1232383,1233187,1233565,1246086,1248354,1250656,1255222,1256632,1257737,1258184,1264022,1264024,1264267,1264985,1267203,1267238,1267373,1267720,1267882,1269182,1269264,1269364,1269532,1269655,1269798,1271349,1272261,1272296,1273292,1273557,1273803,1273805,1273809,1273839,1273880,1273999,1274080,1274257,1274261,1274292,1274550,1274902,1274949,1275521,1275524,1275575,1275671,1275672,1275678,1275683,1275689,1275692,1275810,1275811,1275813,1275939,1275944,1275947,1275951,1275955,1275957,1275958,1275959,1276245,1276271,1276275,1276280,1276321,1276343,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276774,1276776,1276778,1276779,1276798,1276844,1276925,1276933,1276934,1276935,1276940,1276949,1276956,1277044,1277046,1277053,1277067,1277069,1277071,1277072,1277075,1277079,1277080,1 277082,1277084,1277089,1277091,1277094,1277103,1277113,1277121,1277130,1277133,1277135,1277142,1277157,1277158,1277161,1277163,1277166,1277167,1277168,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277264,1277280,1277282,1277307,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277333,1277336,1277337,1277338,1277339,1277343,1277344,1277345,1277355,1277356,1277357,1277362,1277364,1277365,1277383,1277387,1277389,1277451,1277456,1277457,1277461,1277467,1277472,1277487,1277488,1277497,1277520,1277522,1277529,1277530,1277533,1277538,1277540,1277541,1277543,1277546,1277554,1277560,1277566,1277576,1277578,1277593,1277599,1277607,1277609,1277610,1277612,1277621,1277623,1277637,1277645,1277657,1277663,1277665,1277675,1277677,1277682,1277690,1277730,1277732,1277741,1277744,1277746,1277754,1277770,1277771,1277772,1277785,1277819,127783 5,1277836,1277839,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277890,1277893,1277903,1277934,1278028,1278033,1278041,1278050,1278057,1278074,1278081,1278101,1278117,1278123,1278132,1278139,1278153,1278160,1278172,1278181,1278194,1278198,1278200,1278201,1278207,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278320,1278323,1278325,1278326,1278334,1278337,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278415,1278429,1278430,1278431,1278704,1278711,1279420,1279455,1279460,1279464,1279467,1279468,1279471,1279477,1279483,1279485,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279520,1279533,1279564,1279592,1279594,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279795,1279798,1279802,1279805,1279808,1279809,1279812,1279814,1279815,1279816,1279823,1279825,1279920,1279921,1279971,1280141,1280142,1280156,1280157,1280158,1280162,1280172,1280178,128 0185,1280215,1280221,1280230,1280234,1280244,1280246,1280247,1280251,1280253,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280330,1280331,1280332,1280345,1280346,1280378,1280395,1280397,1280398,1280399,1280400,1280402,1280408,1280410,1280415,1280416,1280421,1280423,1280425,1280428,1280429,1280431,1280434,1280463,1280472,1280476,1280477,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280520,1280539,1280545,1280559,1280560,1280563,1280569,1280570,1280571,1280573,1280581,1280713,1280735,1280745,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280834,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280992,1280996,1281001,1281003,1281005,1281006,1281008,1281011,1281018,1281022,1281027,1281029,1281030,1281034,1281052,1281056,1281058,1281065,1281080,1281130,1281138,1281145,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281179,1281180,1281181,1281183,1281184, 1281185,1281189,1281190,1281191,1281194,1281204,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,1281271,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281311,1281315,1281320,1281332,1281333,1281334,1281337,1281342,1281346,1281352,1281353,1281357,1281360,1281361,1281363,1281368,1281382,1281384,1281391,1281392,1281394,1281395,1281396,1281402,1281418,1281422,1281429,1281488,1281495,1281500,1281504,1281528,1281532,1281536,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281672,1281676,1281677,1281688,1281691,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281723,1281724,1281735,1281736,1281753,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281804,1281813,1281824,1281828,1281850,1281851,1281853,1281858,1281868,1281870,1281877,1281883,1281886,1281887,1281890,1281891,1281895,12818 97,1281900,1281903,1281916,1281930,1281932,1281968,1281969,1281985,1281987,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282114,1282116,1282117,1282122,1282128,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282169,1282174,1282178,1282189,1282192,1282196,1282262,1282276,1282289,1282296,1282298,1282302,1282304,1282325,1282327,1282328,1282684,1282686,1282690,1282691,1282695,1282697,1282729,1282735,1282737,1282741,1282744,1282753,1282754,1282759,1282763,1282764,1282769,1282772,1282773,1282775,1282776,1282805,1282814,1282867,1282879,1282885,1282886,1282887,1282893,1282898,1282911,1282914,1282915,1282920,1282924,1282925,1282926,1282927,1282935,1282955,1282957,1282958,1282971,1282974,1282993,1283004,1283016,1283017,1283018,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,12 83087,1283114,1283122,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283173,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283343,1283349,1283360,1283364,1283416,1283429,1283445,1283453,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283502,1283504,1283508,1283511,1283513,1283585,1283737,1283741,1283746,1283752,1283754,1283780,1283781,1283785,1283830,1283833,1283834,1283837,1283838,1283844,1283845,1283869,1283878,1283884,1283887,1283920,1283928,1283958,1284024,1284031,1284064,1284243,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284349,1284350,1284358,1284363,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284509,1284512,1284513,1284514,1284515,1284517,1284537,1284540,1284541,1284542,1284543,1284544,1284545 ,1284553,1284554,1284555,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284600,1284601,1284602,1284609,1284615,1284616,1284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285624,1285645,1285647,1285648,1285668,1285685,1285914,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286009,1286012,1286013,1286019,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286186,1286190,1286204,1286205,1286207,1286208,1286215,1286217,1286224,1286234,1286237,1286240,1286257,1286259,1286267,1286342,1286346,1286390,1286391,1286394,1286417,1286421,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286469,1286514,1286529,1286625,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286 689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286744,1286756,1286757,1286772,1286775,1286778,1286782,1286785,1286787,1286819,1286820,1286821,1286822,1286823,1286824,1286826,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287364,1287592,1287594,1287597,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287737,1287749,1287757,1287765,1287773,1287774,1287966,1287981,1287984,1287985,1287995,1288001,1288002,1288005,1288007,1288014,1288061,1288088,1288125,1288126,1288127,1288226,1288406,1288513,CVE-2023-7356,CVE-2024-49974,CVE-2024-50241,CVE-2024-53073,CVE-2025-38237,CVE-2025-38576,CVE-2025-68219,CVE-2025-71073,CVE-2026-100078,CVE-2026-100079,CVE-2026-23059,CVE-2026-23112,CVE-2026-31708,CVE-2026-31709,CVE-2026-43350,CVE-2026-45944,CVE-2026-46091,C VE-2026-46135,CVE-2026-46155,CVE-2026-52968,CVE-2026-52989,CVE-2026-53059,CVE-2026-53090,CVE-2026-53179,CVE-2026-63809,CVE-2026-64240,CVE-2026-64370,CVE-2026-64380,CVE-2026-64430,CVE-2026-64434,CVE-2026-64435,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-64525,CVE-2026-64534,CVE-2026-64535,CVE-2026-68186,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68460,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72105,CVE-2026-72110,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72126,CVE-2026-72133,CVE-2026-72140,CVE-2026-72142,CVE-2026-72148,CVE-2026-72149,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026 -72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72234,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72250,CVE-2026-72253,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72261,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72286,CVE-2026-72290,CVE-2026-72300,CVE-2026-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72396,CVE-2026-72405,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72452,CVE-2026-72464,CVE-2026-72465,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486, CVE-2026-72489,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-74368,CVE-2026-74380,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74472,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74501,CVE-2026-74502,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74514,CVE-2026-74519,CVE-2026-74531,CVE-2026-74532,CVE-202 6-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74552,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74613,CVE-2026-74620,CVE-2026-74624,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74654,CVE-2026-74655,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74691,CVE-2026-74715,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80539,CVE-2026-80541,CVE-2026-80542,CVE-2026-80559,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80572,CVE-2026-80573,CVE-2026-80574,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80597,CVE-2026-80599,CVE-2026-80600,CVE-2026-80601,CVE-2026-80602,CVE-2026-80605,CVE-2026-80609,CVE-2026-80618,CVE-2026-80622,CVE-2026-80635,CVE-2026-80637,CVE-2026-80649 ,CVE-2026-80652,CVE-2026-80659,CVE-2026-80660,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80684,CVE-2026-80692,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80717,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80755,CVE-2026-80757,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80772,CVE-2026-80781,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE-2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80855,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80891,CVE-20 26-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80937,CVE-2026-80938,CVE-2026-80941,CVE-2026-80944,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80978,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89461,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89560,CVE-2026-89562,CVE-2026-8958 3,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89598,CVE-2026-89599,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89637,CVE-2026-89649,CVE-2026-89654,CVE-2026-89655,CVE-2026-89656,CVE-2026-89657,CVE-2026-89669,CVE-2026-89684,CVE-2026-89706,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89736,CVE-2026-89739,CVE-2026-89741,CVE-2026-89742,CVE-2026-89744,CVE-2026-89751,CVE-2026-89761,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2 026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89901,CVE-2026-89927,CVE-2026-89932,CVE-2026-89933,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89999,CVE-2026-90000,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90025,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-900 35,CVE-2026-90042,CVE-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90082,CVE-2026-90087,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90148,CVE-2026-90194,CVE-2026-90196,CVE-2026-90207,CVE-2026-90214,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90245,CVE-2026-90251,CVE-2026-90253,CVE-2026-90254,CVE-2026-90257,CVE-2026-90281,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90287,CVE-2026-90297,CVE-2026-90298,CVE-2026-90316,CVE-2026-90319,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026-90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90378,CVE-2026-90382,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE- 2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93092,CVE-2026-93101,CVE-2026-93114,CVE-2026-93115,CVE-2026-93117,CVE-2026-93118,CVE-2026-93120,CVE-2026-93122,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93 190,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93228,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93262,CVE-2026-93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93798,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93814,CVE-2026-93817,CVE-2026-93819,CVE-2026-93823,CVE-2026-93825,CVE-2026-97407,CVE-2026-97408,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE -2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495,CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97581,CVE-2026-97582,CVE-2026-97593,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97604,CVE-2026-97605,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97917,CVE-2026-97926,CVE-2026-97930,CVE-2026-97948,CVE-2026-97955,CVE-2026-97969,CVE-2026-97970,CVE-2026-97976,CVE-2026-97977,CVE-2026-98006,CVE-2026-98025,CVE-2026-98041,CVE-2026-98044,CVE-2026-98054,CVE-2026-98055,CVE-2026-98066,CVE-2026-98085,CVE-2026-9 8086,CVE-2026-98092,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98155,CVE-2026-98159,CVE-2026-98160,CVE-2026-98181,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98249,CVE-2026-98263,CVE-2026-98264,CVE-2026-98270,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CV E-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-2026-98374,CVE-2026-98386,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98432,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026- 98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-98605,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98632,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98660,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98679,CVE-2026-98687,CVE-2026-98694,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98703,CVE-2026-98705,CVE-2026-98706,CVE-2026-98710,CVE-2026-98711,CVE-2026-98717,CVE-2026-98721,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98748,CVE-2026-98754,CVE-2026-98755,CVE-2026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,C VE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98830,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98847,CVE-2026-98848,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98884,CVE-2026-98886,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98940,CVE-2026-98949,CVE-2026-98956,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99022,CVE-2026-99034,CVE-2026-99039,CVE-2026-99061,CVE-2026-99094 The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68219: cifs: fix memory leak in smb3_fs_context_parse_param error path (bsc#1255222). - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64380: smb: client: harden POSIX SID length parsing (bsc#1273557). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68460: f2fs: fix potential deadlock in f2fs_balance_fs() (bsc#1276774). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). - CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). - CVE-2026-74472: ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() (bsc#1277785). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). - CVE-2026-74715: net: netfilter: Make ct zone opts configurable for bpf ct helpers (bsc#1277890). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80755: selinux: reject a permission value exceeding the class permission count (bsc#1278415). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89649: ceph: bound xattr value length in __build_xattrs() (bsc#1280434). - CVE-2026-89654: ceph: fix UAF in check_new_map() on session freed during unlock (bsc#1280415). - CVE-2026-89655: ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock (bsc#1280398). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-93054: uio: Fix stale info pointer in failed registration path (bsc#1282276). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-97575: media: v4l2-ctrls: validate AV1 tile counts (bsc#1283337). - CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). - CVE-2026-97926: ufs: validate cylinder group metadata before caching it (bsc#1283887). - CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98264: ALSA: virtio: reset device before deleting virtqueues (bsc#1284363). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: TAD: Rearrange RT data validation checking (stable-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Fix the Kore controller key map (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). - Bluetooth: btintel: validate DDC record lengths (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: btqcomsmd: Convert to platform remove callback returning void (stable-fixes). - Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git-fixes). - Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). - Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git-fixes). - Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). - Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: Use kcalloc() instead of kzalloc() (stable-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: make Mac FB workaround generic (stable-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). - drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - HID: alps: unregister DualPoint Stick input device on remove (git-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Add reserved item tag for main items (stable-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). - HID: hid-steam: Make client_opened a counter (stable-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). - HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: rate-limit hid_warn to prevent log flooding (stable-fixes). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hostfs: fix dev_t handling (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: at91: release DMA channels when probe defers (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: xiic: don't clobber msg->len to signal block-read completion (git-fixes). - i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: aspeed: propagate reset deassert errors (git-fixes). - iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: core: add accessors 'masklength' (stable-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: light: ltrf216a: Return floating point values (stable-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable-fixes). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). - Input: lkkbd - disable pending work before freeing device (stable-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - Input: xpad - add support for Corsair Novablade Pro (stable-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - landlock: Always allow signals between threads of the same process (git-fixes). - landlock: Fix cosmetic change (git-fixes). - landlock: Fix non-TCP sockets restriction (git-fixes). - landlock: Fix TCP handling of short AF_UNSPEC addresses (git-fixes). - landlock: Fix unmarked concurrent access to socket family (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: Disable multicore support (stable-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - mm, vmscan: flush tlb before large folio is freed (bsc#1250656). - mm: introduce num_pages_contiguous() (bsc#1284243). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - power: supply: charger-manager: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: Convert to platform remove callback returning void (stable-fixes). - power: supply: lp8788-charger: fix use-after-free on remove (git-fixes). - power: supply: lp8788: Use devm_power_supply_register() helper (stable-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git-fixes). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Reinstate 'resource: avoid unnecessary lookups in find_next_iomem_res()' (bsc#1284243). - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - rtc: ac100: Assign .num before accessing .hws (git-fixes). - rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). - rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git-fixes). - rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests/landlock: Add a new test for setuid() (git-fixes). - selftests/landlock: Fix build with non-default pthread linking (git-fixes). - selftests/landlock: Fix screwed up pointers in the scoped_signal_test (git-fixes). - selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available (git-fixes). - selftests/landlock: Split signal_scoping_threads tests (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: clean up redundant & parentheses (stable-fixes). - Staging: rtl8723bs: Delete dead code from update_current_network() (stable-fixes). - staging: rtl8723bs: fix buffer over-read in rtw_update_protection (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - Staging: rtl8723bs: Remove dead code from _rtw_free_network() (stable-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - tty: add break_wait kernel-doc (git-fixes). - tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup (stable-fixes). - tty: vcc: zero-initialize control packet in vcc_send_ctl() (stable-fixes). - um: hostfs: avoid issues on inode number reuse by host (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() (stable-fixes). - usb: dwc3: clear forceRM when issuing EndTransfer (git-fixes). - usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition (git-fixes). - usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior (stable-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - usb: gadget: f_midi: Annotate struct f_midi with __counted_by (stable-fixes). - usb: gadget: f_midi: initialize work in f_midi_alloc() (git-fixes). - USB: gadget: ffs: fix mm lifetime handling (stable-fixes). - usb: gadget: functionfs: Factorize wait-for-endpoint code (stable-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - usb: ohci-spear: disable controller wakeup on removal (git-fixes). - usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). - USB: serial: option: add Compal EXC-T1 support (stable-fixes). - USB: serial: option: add Compal EXM-G1x support (stable-fixes). - USB: serial: option: add Quectel EG060W (stable-fixes). - USB: serial: option: add Quectel RG660QB (stable-fixes). - USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - vfio/type1: batch vfio_find_vpfn() in function vfio_unpin_pages_remote() (bsc#1284243). - vfio/type1: conditional rescheduling while pinning (bsc#1284243). - vfio/type1: introduce a new member has_rsvd for struct vfio_dma (bsc#1284243). - vfio/type1: optimize vfio_pin_pages_remote() (bsc#1284243). - vfio/type1: optimize vfio_unpin_pages_remote() (bsc#1284243). - vt: skip screen update for DEC alignment test on backgroup consoles (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info (stable-fixes). - wifi: ath12k: fix the fetching of combined rssi (git-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). - wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: cw1200: fix TX padding OOB read leaking heap data to device (git-fixes). - wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp* (stable-fixes). - wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). - wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable-fixes). - wifi: mac80211: Add multicast to unicast support for 802.3 path (stable-fixes). - wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drain PS delivery work during station teardown (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: handle empty FILS association request payload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). - wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: release mesh path quota on failed additions (git-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: allocate vif wcid in the same range as stations (stable-fixes). - wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear (git-fixes). - wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface() (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: set correct background radar capability (stable-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: debugfs: support multiple adapters debugging (stable-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - wifi: wfx: validate MIB read length before copying to caller (git-fixes). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-macros-6.4.0-150700.53.90.1 updated - kernel-devel-6.4.0-150700.53.90.1 updated - kernel-default-devel-6.4.0-150700.53.90.1 updated - kernel-syms-6.4.0-150700.53.90.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:47:20 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:47:20 +0100 (CET) Subject: SUSE-CU-2026:13723-1: Security update of suse/sles/16.0/toolbox Message-ID: <20261105094720.64754FD8B@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13723-1 Container Tags : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.147 , suse/sles/16.0/toolbox:latest Container Release : 1.147 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:56:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:56:30 +0100 (CET) Subject: SUSE-CU-2026:13735-1: Recommended update of trento/mcp-server-trento Message-ID: <20261105095630.CF182FD2D@maintenance.suse.de> SUSE Container Update Advisory: trento/mcp-server-trento ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13735-1 Container Tags : trento/mcp-server-trento:1.2.0 , trento/mcp-server-trento:1.2.0-build1.15.1 , trento/mcp-server-trento:latest Container Release : 1.15.1 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container trento/mcp-server-trento was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5109-1 Released: Thu Nov 5 08:19:41 2026 Summary: Recommended update for Trento Type: recommended Severity: moderate References: This update for Trento fixes the following issues: Trento was updated to version 3.2.0: - Component Versions: * Trento Web UI and Image: 3.2.0 * Trento Agent: 3.2.0 * Trento Wanda: 2.2.0 * Trento Checks: 1.4.0 * Trento Helm Charts: 3.2.0 * Trento MCP Server: 1.2.0 * Trento Ansible Deployment: 1.1.0 * Supportutils Plugin: 3.2.0 - Health and Monitoring Improvements: * Added visual indicators to detect and highlight unresponsive or stale clusters, hosts, SAP systems, and databases when connection is lost. * Cluster health evaluations now consider STONITH Block Device (SBD) status. * Simplified instance indicators to reflect operational status more clearly. - User Interface and Usability: * Persistent view filters: Saved search filters across activity logs, packages, clusters, databases, and checks catalogs so user preferences are retained during navigation. * Added a 'Test Email' button in the alerting settings to verify email notification configurations directly from the web interface. * Fixed date filter behavior in the activity log when using Firefox. - AI Assistant Enhancements: * Improved chat interaction controls, including the ability to stop answers in progress, retry prompts, copy responses, and view scrollable tables. * Enhanced AI model selection and session stability. - Platform and Deployment: * Added compatibility for Pacemaker 3.0.2 high-availability cluster management. * Improved support for IBM Power (ppc64le) architectures and AWS environments. * Automated SUSEConnect module registration and added pre-deployment network port collision checks in Ansible playbooks. * Updated underlying container base images and dependencies. - Detailed Release Notes: * Trento Web: https://github.com/trento-project/web/releases/tag/3.2.0 * Trento Agent: https://github.com/trento-project/agent/releases/tag/3.2.0 * Trento Checks: https://github.com/trento-project/checks/releases/tag/1.4.0 * Trento Wanda: https://github.com/trento-project/wanda/releases/tag/2.2.0 * Trento Helm Charts: https://github.com/trento-project/helm-charts/releases/tag/3.2.0 * Trento MCP Server: https://github.com/trento-project/mcp-server/releases/tag/1.2.0 * Trento Ansible: https://github.com/trento-project/ansible/releases/tag/1.1.0 The following package changes have been done: - mcp-server-trento-1.2.0-150300.1.15.3 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:57:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:57:32 +0100 (CET) Subject: SUSE-CU-2026:13737-1: Recommended update of trento/trento-wanda Message-ID: <20261105095732.C77B6FD2D@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-wanda ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13737-1 Container Tags : trento/trento-wanda:2.2.0 , trento/trento-wanda:2.2.0-build1.40.1 , trento/trento-wanda:latest Container Release : 1.40.1 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container trento/trento-wanda was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5109-1 Released: Thu Nov 5 08:19:41 2026 Summary: Recommended update for Trento Type: recommended Severity: moderate References: This update for Trento fixes the following issues: Trento was updated to version 3.2.0: - Component Versions: * Trento Web UI and Image: 3.2.0 * Trento Agent: 3.2.0 * Trento Wanda: 2.2.0 * Trento Checks: 1.4.0 * Trento Helm Charts: 3.2.0 * Trento MCP Server: 1.2.0 * Trento Ansible Deployment: 1.1.0 * Supportutils Plugin: 3.2.0 - Health and Monitoring Improvements: * Added visual indicators to detect and highlight unresponsive or stale clusters, hosts, SAP systems, and databases when connection is lost. * Cluster health evaluations now consider STONITH Block Device (SBD) status. * Simplified instance indicators to reflect operational status more clearly. - User Interface and Usability: * Persistent view filters: Saved search filters across activity logs, packages, clusters, databases, and checks catalogs so user preferences are retained during navigation. * Added a 'Test Email' button in the alerting settings to verify email notification configurations directly from the web interface. * Fixed date filter behavior in the activity log when using Firefox. - AI Assistant Enhancements: * Improved chat interaction controls, including the ability to stop answers in progress, retry prompts, copy responses, and view scrollable tables. * Enhanced AI model selection and session stability. - Platform and Deployment: * Added compatibility for Pacemaker 3.0.2 high-availability cluster management. * Improved support for IBM Power (ppc64le) architectures and AWS environments. * Automated SUSEConnect module registration and added pre-deployment network port collision checks in Ansible playbooks. * Updated underlying container base images and dependencies. - Detailed Release Notes: * Trento Web: https://github.com/trento-project/web/releases/tag/3.2.0 * Trento Agent: https://github.com/trento-project/agent/releases/tag/3.2.0 * Trento Checks: https://github.com/trento-project/checks/releases/tag/1.4.0 * Trento Wanda: https://github.com/trento-project/wanda/releases/tag/2.2.0 * Trento Helm Charts: https://github.com/trento-project/helm-charts/releases/tag/3.2.0 * Trento MCP Server: https://github.com/trento-project/mcp-server/releases/tag/1.2.0 * Trento Ansible: https://github.com/trento-project/ansible/releases/tag/1.1.0 The following package changes have been done: - trento-checks-1.4.0-150300.1.21.3 updated - trento-wanda-2.2.0-150300.1.23.4 updated From sle-container-updates at lists.suse.com Thu Nov 5 09:58:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 5 Nov 2026 10:58:18 +0100 (CET) Subject: SUSE-CU-2026:13738-1: Recommended update of trento/trento-web Message-ID: <20261105095818.F0C0BFD2D@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-web ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13738-1 Container Tags : trento/trento-web:3.2 , trento/trento-web:3.2.0 , trento/trento-web:3.2.0-build4.67.1 , trento/trento-web:latest Container Release : 4.67.1 Severity : moderate Type : recommended References : ----------------------------------------------------------------- The container trento/trento-web was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5109-1 Released: Thu Nov 5 08:19:41 2026 Summary: Recommended update for Trento Type: recommended Severity: moderate References: This update for Trento fixes the following issues: Trento was updated to version 3.2.0: - Component Versions: * Trento Web UI and Image: 3.2.0 * Trento Agent: 3.2.0 * Trento Wanda: 2.2.0 * Trento Checks: 1.4.0 * Trento Helm Charts: 3.2.0 * Trento MCP Server: 1.2.0 * Trento Ansible Deployment: 1.1.0 * Supportutils Plugin: 3.2.0 - Health and Monitoring Improvements: * Added visual indicators to detect and highlight unresponsive or stale clusters, hosts, SAP systems, and databases when connection is lost. * Cluster health evaluations now consider STONITH Block Device (SBD) status. * Simplified instance indicators to reflect operational status more clearly. - User Interface and Usability: * Persistent view filters: Saved search filters across activity logs, packages, clusters, databases, and checks catalogs so user preferences are retained during navigation. * Added a 'Test Email' button in the alerting settings to verify email notification configurations directly from the web interface. * Fixed date filter behavior in the activity log when using Firefox. - AI Assistant Enhancements: * Improved chat interaction controls, including the ability to stop answers in progress, retry prompts, copy responses, and view scrollable tables. * Enhanced AI model selection and session stability. - Platform and Deployment: * Added compatibility for Pacemaker 3.0.2 high-availability cluster management. * Improved support for IBM Power (ppc64le) architectures and AWS environments. * Automated SUSEConnect module registration and added pre-deployment network port collision checks in Ansible playbooks. * Updated underlying container base images and dependencies. - Detailed Release Notes: * Trento Web: https://github.com/trento-project/web/releases/tag/3.2.0 * Trento Agent: https://github.com/trento-project/agent/releases/tag/3.2.0 * Trento Checks: https://github.com/trento-project/checks/releases/tag/1.4.0 * Trento Wanda: https://github.com/trento-project/wanda/releases/tag/2.2.0 * Trento Helm Charts: https://github.com/trento-project/helm-charts/releases/tag/3.2.0 * Trento MCP Server: https://github.com/trento-project/mcp-server/releases/tag/1.2.0 * Trento Ansible: https://github.com/trento-project/ansible/releases/tag/1.1.0 The following package changes have been done: - trento-web-3.2.0-150300.1.34.2 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:08:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:08:30 +0100 (CET) Subject: SUSE-IU-2026:8546-1: Recommended update of suse/sle-micro/base-5.5 Message-ID: <20261106080830.96875FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8546-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.335 , suse/sle-micro/base-5.5:latest Image Release : 5.8.335 Severity : important Type : recommended References : 1210382 1254336 1259096 1269084 1270036 1278729 1285863 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5112-1 Released: Thu Nov 5 09:10:33 2026 Summary: Recommended update for shim Type: recommended Severity: important References: 1210382,1254336,1259096,1269084,1270036,1278729,1285863 This update for shim fixes the following issues: Support a nx-shim (jsc#PED-13361 jsc#PED-15978): This marks data sections as 'non executable' during the UEFI boot process. shim-install: separate the logic of grabbing OS_ID When the GRUB_DISTRIBUTOR can be grab by /etc/default/grub. The logic of grabbing OS_ID from os-release will be ignored. For example: SL-Micro 6.1 has GRUB_DISTRIBUTOR='SL Micro' in /etc/default/grub. We always need OS_ID for subsequent processing logic. So this patch separate the logic of grabbing OS_ID. (bsc#1285863#c14) shim-install: refactory the logic of update_boot for fixing two issues Refactory the logic of update_boot for updating EFI default boot path in shim-install and fixed two issues: - The fallback efi NOT be copied to the default efi boot path for SLE (bsc#1285863) - The encrypted SL-Micro uses 'removable=yes' for TPM key unsealing. But the original logic did NOT copy MokManager to EFI default boot path. (bsc#1285863#11) - Add Requires tags for checking the grub2 sbat generation at RPM level, so we make sure we are not blocking the grub2 during boot. (bsc#1278729) - Use nx shim as the default shim binary for SLES 16.1 and newer in older versions the non-nx shim is default. The nx shim can still be selected. - shim-install: Do not update fallback on sl-micro when the fallback is not in efi default boot path The SL-Micro SelfInstall image direct unpackage the raw image to the hard drive on target machine. The kiwi produced the raw image by 'shim-install --removable' command. So the raw image does NOT include fallback.efi in the EFI default boot path (aka. the removable boot path, EFI/boot/). Looks that SL-Micro does NOT care the fallback function of SUSE boot entry is lost. Normally, with or without fallback.efi should NOT case problem when booting. Also, the distro (SL-Micro in this case) does NOT care fallback function. But some issue machine's firmware can ONLY boot with the removable boot path (aka. the default boot path, /EFI/boot/bootx64.efi). And issue firmware always modified boot order or even removed SUSE boot entry. It causes that the fallback.efi always be triggered in every booting. The outward symptom is an endless cycle of rebooting and showing the fallback prompt box. The above situation NOT be found before we fix bsc#1254336. In bsc#1254336, the shim-install did NOT update the files in removable boot path. e.g. /EFI/boot/bootx64.efi or /EFI/boot/fallback.efi. So we will NOT update fallback.efi on SL-Micro when shim-install did NOT see fallback in the removable boot path (EFI/boot/fallback.efi). No fallback.efi in the removable boot path means that the target system is installed by wiki raw image. (bsc#1270036) - Update shim-install to limit the scope of the 'removable' SL-Micro to the image booting with TPM2 unsealing (bsc#1210382) - shim-install: Add ca_string for SL Micro to update fallback loader (bsc#1254336) - Update change log for shim-install add ca_string for SL Micro to update fallback loader (bsc#1254336) - Modified the pretrans Lua script to work around the broken DB issue caused by buggy firmware when Secure Boot is disabled. (bsc#1259096) - shim-install: Improve the detection of SL Micro (bsc#1269084) The following package changes have been done: - shim-16.1-150300.4.42.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:08:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:08:31 +0100 (CET) Subject: SUSE-IU-2026:8547-1: Security update of suse/sle-micro/base-5.5 Message-ID: <20261106080831.AAEF6FD8B@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8547-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.336 , suse/sle-micro/base-5.5:latest Image Release : 5.8.336 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5117-1 Released: Thu Nov 5 12:58:15 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted0-3.2-150300.21.6.1 updated - parted-3.2-150300.21.6.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:11:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:11:21 +0100 (CET) Subject: SUSE-IU-2026:8549-1: Security update of suse/sle-micro/kvm-5.5 Message-ID: <20261106081121.1FBFCFD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/kvm-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8549-1 Image Tags : suse/sle-micro/kvm-5.5:2.0.4 , suse/sle-micro/kvm-5.5:2.0.4-3.5.646 , suse/sle-micro/kvm-5.5:latest Image Release : 3.5.646 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sle-micro/kvm-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5117-1 Released: Thu Nov 5 12:58:15 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted0-3.2-150300.21.6.1 updated - parted-3.2-150300.21.6.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.336 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:15:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:15:10 +0100 (CET) Subject: SUSE-IU-2026:8551-1: Security update of suse/sle-micro/rt-5.5 Message-ID: <20261106081510.12FC9FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/rt-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8551-1 Image Tags : suse/sle-micro/rt-5.5:2.0.4 , suse/sle-micro/rt-5.5:2.0.4-4.5.774 , suse/sle-micro/rt-5.5:latest Image Release : 4.5.774 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sle-micro/rt-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5117-1 Released: Thu Nov 5 12:58:15 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted0-3.2-150300.21.6.1 updated - parted-3.2-150300.21.6.1 updated - container:suse-sle-micro-5.5-latest-2.0.4-5.8.151 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:18:25 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:18:25 +0100 (CET) Subject: SUSE-IU-2026:8554-1: Security update of suse/sle-micro/5.5 Message-ID: <20261106081825.E05D1FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8554-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.151 , suse/sle-micro/5.5:latest Image Release : 5.8.151 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5117-1 Released: Thu Nov 5 12:58:15 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted0-3.2-150300.21.6.1 updated - parted-3.2-150300.21.6.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.336 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:18:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:18:27 +0100 (CET) Subject: SUSE-IU-2026:8555-1: Security update of suse/sle-micro/5.5 Message-ID: <20261106081827.04AA9FD18@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8555-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.152 , suse/sle-micro/5.5:latest Image Release : 5.8.152 Severity : important Type : security References : 1286378 CVE-2026-77478 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5124-1 Released: Thu Nov 5 19:13:40 2026 Summary: Security update for fuse-overlayfs Type: security Severity: important References: 1286378,CVE-2026-77478 This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image (bsc#1286378). The following package changes have been done: - fuse-overlayfs-1.1.2-150100.3.17.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:33:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:33:04 +0100 (CET) Subject: SUSE-CU-2026:13744-1: Recommended update of suse/sle-micro-rancher/5.4 Message-ID: <20261106083304.119D4FCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13744-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.214 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.214 Severity : important Type : recommended References : 1210382 1254336 1259096 1269084 1270036 1278729 1285863 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5112-1 Released: Thu Nov 5 09:10:33 2026 Summary: Recommended update for shim Type: recommended Severity: important References: 1210382,1254336,1259096,1269084,1270036,1278729,1285863 This update for shim fixes the following issues: Support a nx-shim (jsc#PED-13361 jsc#PED-15978): This marks data sections as 'non executable' during the UEFI boot process. shim-install: separate the logic of grabbing OS_ID When the GRUB_DISTRIBUTOR can be grab by /etc/default/grub. The logic of grabbing OS_ID from os-release will be ignored. For example: SL-Micro 6.1 has GRUB_DISTRIBUTOR='SL Micro' in /etc/default/grub. We always need OS_ID for subsequent processing logic. So this patch separate the logic of grabbing OS_ID. (bsc#1285863#c14) shim-install: refactory the logic of update_boot for fixing two issues Refactory the logic of update_boot for updating EFI default boot path in shim-install and fixed two issues: - The fallback efi NOT be copied to the default efi boot path for SLE (bsc#1285863) - The encrypted SL-Micro uses 'removable=yes' for TPM key unsealing. But the original logic did NOT copy MokManager to EFI default boot path. (bsc#1285863#11) - Add Requires tags for checking the grub2 sbat generation at RPM level, so we make sure we are not blocking the grub2 during boot. (bsc#1278729) - Use nx shim as the default shim binary for SLES 16.1 and newer in older versions the non-nx shim is default. The nx shim can still be selected. - shim-install: Do not update fallback on sl-micro when the fallback is not in efi default boot path The SL-Micro SelfInstall image direct unpackage the raw image to the hard drive on target machine. The kiwi produced the raw image by 'shim-install --removable' command. So the raw image does NOT include fallback.efi in the EFI default boot path (aka. the removable boot path, EFI/boot/). Looks that SL-Micro does NOT care the fallback function of SUSE boot entry is lost. Normally, with or without fallback.efi should NOT case problem when booting. Also, the distro (SL-Micro in this case) does NOT care fallback function. But some issue machine's firmware can ONLY boot with the removable boot path (aka. the default boot path, /EFI/boot/bootx64.efi). And issue firmware always modified boot order or even removed SUSE boot entry. It causes that the fallback.efi always be triggered in every booting. The outward symptom is an endless cycle of rebooting and showing the fallback prompt box. The above situation NOT be found before we fix bsc#1254336. In bsc#1254336, the shim-install did NOT update the files in removable boot path. e.g. /EFI/boot/bootx64.efi or /EFI/boot/fallback.efi. So we will NOT update fallback.efi on SL-Micro when shim-install did NOT see fallback in the removable boot path (EFI/boot/fallback.efi). No fallback.efi in the removable boot path means that the target system is installed by wiki raw image. (bsc#1270036) - Update shim-install to limit the scope of the 'removable' SL-Micro to the image booting with TPM2 unsealing (bsc#1210382) - shim-install: Add ca_string for SL Micro to update fallback loader (bsc#1254336) - Update change log for shim-install add ca_string for SL Micro to update fallback loader (bsc#1254336) - Modified the pretrans Lua script to work around the broken DB issue caused by buggy firmware when Secure Boot is disabled. (bsc#1259096) - shim-install: Improve the detection of SL Micro (bsc#1269084) The following package changes have been done: - shim-16.1-150300.4.42.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 08:33:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 09:33:05 +0100 (CET) Subject: SUSE-CU-2026:13745-1: Security update of suse/sle-micro-rancher/5.4 Message-ID: <20261106083305.89C1DFCEF@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13745-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.215 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.215 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5117-1 Released: Thu Nov 5 12:58:15 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted0-3.2-150300.21.6.1 updated - parted-3.2-150300.21.6.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 09:15:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 10:15:16 +0100 (CET) Subject: SUSE-CU-2026:13746-1: Recommended update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261106091516.2A820FD18@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13746-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.206 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.206 Severity : important Type : recommended References : 1210382 1254336 1259096 1269084 1270036 1278729 1285863 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5112-1 Released: Thu Nov 5 09:10:33 2026 Summary: Recommended update for shim Type: recommended Severity: important References: 1210382,1254336,1259096,1269084,1270036,1278729,1285863 This update for shim fixes the following issues: Support a nx-shim (jsc#PED-13361 jsc#PED-15978): This marks data sections as 'non executable' during the UEFI boot process. shim-install: separate the logic of grabbing OS_ID When the GRUB_DISTRIBUTOR can be grab by /etc/default/grub. The logic of grabbing OS_ID from os-release will be ignored. For example: SL-Micro 6.1 has GRUB_DISTRIBUTOR='SL Micro' in /etc/default/grub. We always need OS_ID for subsequent processing logic. So this patch separate the logic of grabbing OS_ID. (bsc#1285863#c14) shim-install: refactory the logic of update_boot for fixing two issues Refactory the logic of update_boot for updating EFI default boot path in shim-install and fixed two issues: - The fallback efi NOT be copied to the default efi boot path for SLE (bsc#1285863) - The encrypted SL-Micro uses 'removable=yes' for TPM key unsealing. But the original logic did NOT copy MokManager to EFI default boot path. (bsc#1285863#11) - Add Requires tags for checking the grub2 sbat generation at RPM level, so we make sure we are not blocking the grub2 during boot. (bsc#1278729) - Use nx shim as the default shim binary for SLES 16.1 and newer in older versions the non-nx shim is default. The nx shim can still be selected. - shim-install: Do not update fallback on sl-micro when the fallback is not in efi default boot path The SL-Micro SelfInstall image direct unpackage the raw image to the hard drive on target machine. The kiwi produced the raw image by 'shim-install --removable' command. So the raw image does NOT include fallback.efi in the EFI default boot path (aka. the removable boot path, EFI/boot/). Looks that SL-Micro does NOT care the fallback function of SUSE boot entry is lost. Normally, with or without fallback.efi should NOT case problem when booting. Also, the distro (SL-Micro in this case) does NOT care fallback function. But some issue machine's firmware can ONLY boot with the removable boot path (aka. the default boot path, /EFI/boot/bootx64.efi). And issue firmware always modified boot order or even removed SUSE boot entry. It causes that the fallback.efi always be triggered in every booting. The outward symptom is an endless cycle of rebooting and showing the fallback prompt box. The above situation NOT be found before we fix bsc#1254336. In bsc#1254336, the shim-install did NOT update the files in removable boot path. e.g. /EFI/boot/bootx64.efi or /EFI/boot/fallback.efi. So we will NOT update fallback.efi on SL-Micro when shim-install did NOT see fallback in the removable boot path (EFI/boot/fallback.efi). No fallback.efi in the removable boot path means that the target system is installed by wiki raw image. (bsc#1270036) - Update shim-install to limit the scope of the 'removable' SL-Micro to the image booting with TPM2 unsealing (bsc#1210382) - shim-install: Add ca_string for SL Micro to update fallback loader (bsc#1254336) - Update change log for shim-install add ca_string for SL Micro to update fallback loader (bsc#1254336) - Modified the pretrans Lua script to work around the broken DB issue caused by buggy firmware when Secure Boot is disabled. (bsc#1259096) - shim-install: Improve the detection of SL Micro (bsc#1269084) The following package changes have been done: - shim-16.1-150300.4.42.1 updated From sle-container-updates at lists.suse.com Fri Nov 6 09:16:07 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 10:16:07 +0100 (CET) Subject: SUSE-CU-2026:13747-1: Security update of suse/kubectl Message-ID: <20261106091607.14B9EFD18@maintenance.suse.de> SUSE Container Update Advisory: suse/kubectl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13747-1 Container Tags : suse/kubectl:1.35 , suse/kubectl:1.35.8 , suse/kubectl:1.35.8-2.61.29 , suse/kubectl:oldstable Container Release : 61.29 Severity : important Type : security References : 1281112 1281468 1281469 1283642 1285273 CVE-2026-63209 CVE-2026-78669 CVE-2026-81871 CVE-2026-81872 CVE-2026-85732 ----------------------------------------------------------------- The container suse/kubectl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5119-1 Released: Thu Nov 5 13:03:09 2026 Summary: Security update for helm Type: security Severity: important References: 1281112,1281468,1281469,1283642,1285273,CVE-2026-63209,CVE-2026-78669,CVE-2026-81871,CVE-2026-81872,CVE-2026-85732 This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285273). - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). Changes for helm: - Update to version 3.22.1 The following package changes have been done: - helm-3.22.1-150000.1.104.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Fri Nov 6 09:16:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 6 Nov 2026 10:16:58 +0100 (CET) Subject: SUSE-CU-2026:13748-1: Security update of suse/kubectl Message-ID: <20261106091658.D9B1CFD18@maintenance.suse.de> SUSE Container Update Advisory: suse/kubectl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13748-1 Container Tags : suse/kubectl:1.37 , suse/kubectl:1.37.0 , suse/kubectl:1.37.0-1.61.29 , suse/kubectl:latest , suse/kubectl:stable Container Release : 61.29 Severity : important Type : security References : 1281112 1281468 1281469 1283642 1285273 CVE-2026-63209 CVE-2026-78669 CVE-2026-81871 CVE-2026-81872 CVE-2026-85732 ----------------------------------------------------------------- The container suse/kubectl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5119-1 Released: Thu Nov 5 13:03:09 2026 Summary: Security update for helm Type: security Severity: important References: 1281112,1281468,1281469,1283642,1285273,CVE-2026-63209,CVE-2026-78669,CVE-2026-81871,CVE-2026-81872,CVE-2026-85732 This update for helm fixes the following issues: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). - CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285273). - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). - CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). - CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). Changes for helm: - Update to version 3.22.1 The following package changes have been done: - helm-3.22.1-150000.1.104.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Sat Nov 7 08:38:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 09:38:58 +0100 (CET) Subject: SUSE-IU-2026:8561-1: Security update of suse/sl-micro/6.2/base-os-container Message-ID: <20261107083858.3D1CCFCEF@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8561-1 Image Tags : suse/sl-micro/6.2/base-os-container:2.3.2 , suse/sl-micro/6.2/base-os-container:2.3.2-9.12 , suse/sl-micro/6.2/base-os-container:latest Image Release : 9.12 Severity : moderate Type : security References : 1288144 CVE-2026-117556 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2064 Released: Fri Nov 6 14:41:14 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). The following package changes have been done: - libzck1-1.5.1-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:38:26 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:38:26 +0100 (CET) Subject: SUSE-CU-2026:13802-1: Security update of suse/sles/16.0/cdi-cloner Message-ID: <20261107093826.67E7AFD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-cloner ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13802-1 Container Tags : suse/sles/16.0/cdi-cloner:1.65 , suse/sles/16.0/cdi-cloner:1.65.0 , suse/sles/16.0/cdi-cloner:1.65.0-6.31 Container Release : 6.31 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-cloner was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:39:42 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:39:42 +0100 (CET) Subject: SUSE-CU-2026:13804-1: Security update of suse/sles/16.0/cdi-importer Message-ID: <20261107093942.BD4FBFD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-importer ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13804-1 Container Tags : suse/sles/16.0/cdi-importer:1.65 , suse/sles/16.0/cdi-importer:1.65.0 , suse/sles/16.0/cdi-importer:1.65.0-6.31 Container Release : 6.31 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-importer was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:41:42 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:41:42 +0100 (CET) Subject: SUSE-CU-2026:13807-1: Security update of suse/sles/16.0/cdi-uploadserver Message-ID: <20261107094142.E0983FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-uploadserver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13807-1 Container Tags : suse/sles/16.0/cdi-uploadserver:1.65 , suse/sles/16.0/cdi-uploadserver:1.65.0 , suse/sles/16.0/cdi-uploadserver:1.65.0-6.31 Container Release : 6.31 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-uploadserver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:42:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:42:22 +0100 (CET) Subject: SUSE-CU-2026:13809-1: Security update of suse/sles/16.0/cdi-cloner Message-ID: <20261107094222.EF3E4FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-cloner ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13809-1 Container Tags : suse/sles/16.0/cdi-cloner:1.66 , suse/sles/16.0/cdi-cloner:1.66.1 , suse/sles/16.0/cdi-cloner:1.66.1-1.21 Container Release : 1.21 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-cloner was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:43:12 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:43:12 +0100 (CET) Subject: SUSE-CU-2026:13811-1: Security update of suse/sles/16.0/cdi-importer Message-ID: <20261107094312.4A214FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-importer ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13811-1 Container Tags : suse/sles/16.0/cdi-importer:1.66 , suse/sles/16.0/cdi-importer:1.66.1 , suse/sles/16.0/cdi-importer:1.66.1-1.21 Container Release : 1.21 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-importer was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:44:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:44:45 +0100 (CET) Subject: SUSE-CU-2026:13814-1: Security update of suse/sles/16.0/cdi-uploadserver Message-ID: <20261107094445.55191FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/cdi-uploadserver ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13814-1 Container Tags : suse/sles/16.0/cdi-uploadserver:1.66 , suse/sles/16.0/cdi-uploadserver:1.66.1 , suse/sles/16.0/cdi-uploadserver:1.66.1-1.21 Container Release : 1.21 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/cdi-uploadserver was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:53:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:53:10 +0100 (CET) Subject: SUSE-CU-2026:13819-1: Security update of suse/sles/16.0/virt-handler Message-ID: <20261107095310.C5DD7FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-handler ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13819-1 Container Tags : suse/sles/16.0/virt-handler:1.8 , suse/sles/16.0/virt-handler:1.8.4 , suse/sles/16.0/virt-handler:1.8.4-11.23 Container Release : 11.23 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/virt-handler was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:54:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:54:17 +0100 (CET) Subject: SUSE-CU-2026:13820-1: Security update of suse/sles/16.0/virt-launcher Message-ID: <20261107095417.4AF4EFD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-launcher ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13820-1 Container Tags : suse/sles/16.0/virt-launcher:1.8 , suse/sles/16.0/virt-launcher:1.8.4 , suse/sles/16.0/virt-launcher:1.8.4-11.23 Container Release : 11.23 Severity : important Type : security References : 1275288 1287778 CVE-2026-111497 CVE-2026-72712 ----------------------------------------------------------------- The container suse/sles/16.0/virt-launcher was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: 2010 Released: Sun Nov 1 10:38:15 2026 Summary: Security update for nmap Type: security Severity: moderate References: 1275288,CVE-2026-72712 This update for nmap fixes the following issue: - CVE-2026-72712: crafted packet containing a zero-length TCP option causes the `Packet:parse_options()` function to allocate objects in an infinite loop and cause an OOM condition (bsc#1275288). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - ncat-7.92-160000.4.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 09:55:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 10:55:09 +0100 (CET) Subject: SUSE-CU-2026:13821-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261107095509.6D4EDFD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13821-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.8 , suse/sles/16.0/libguestfs-tools:1.8.4 , suse/sles/16.0/libguestfs-tools:1.8.4-11.23 Container Release : 11.23 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:00:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:00:55 +0100 (CET) Subject: SUSE-CU-2026:13830-1: Security update of suse/sles/16.0/virt-handler Message-ID: <20261107100055.BEDD0FD8B@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-handler ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13830-1 Container Tags : suse/sles/16.0/virt-handler:1.9 , suse/sles/16.0/virt-handler:1.9.1 , suse/sles/16.0/virt-handler:1.9.1-2.25 Container Release : 2.25 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/virt-handler was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:01:33 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:01:33 +0100 (CET) Subject: SUSE-CU-2026:13831-1: Security update of suse/sles/16.0/virt-launcher Message-ID: <20261107100133.1C837FD8B@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/virt-launcher ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13831-1 Container Tags : suse/sles/16.0/virt-launcher:1.9 , suse/sles/16.0/virt-launcher:1.9.1 , suse/sles/16.0/virt-launcher:1.9.1-2.25 Container Release : 2.25 Severity : important Type : security References : 1275288 1287778 CVE-2026-111497 CVE-2026-72712 ----------------------------------------------------------------- The container suse/sles/16.0/virt-launcher was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: 2010 Released: Sun Nov 1 10:38:15 2026 Summary: Security update for nmap Type: security Severity: moderate References: 1275288,CVE-2026-72712 This update for nmap fixes the following issue: - CVE-2026-72712: crafted packet containing a zero-length TCP option causes the `Packet:parse_options()` function to allocate objects in an infinite loop and cause an OOM condition (bsc#1275288). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated - ncat-7.92-160000.4.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:02:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:02:08 +0100 (CET) Subject: SUSE-CU-2026:13832-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261107100208.A537CFD8B@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13832-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.9 , suse/sles/16.0/libguestfs-tools:1.9.1 , suse/sles/16.0/libguestfs-tools:1.9.1-2.25 Container Release : 2.25 Severity : important Type : security References : 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2009 Released: Sun Nov 1 04:07:55 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). The following package changes have been done: - libbrotlicommon1-1.1.0-160000.3.1 updated - libbrotlidec1-1.1.0-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:13:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:13:53 +0100 (CET) Subject: SUSE-CU-2026:13837-1: Security update of suse/sles/16.0/toolbox Message-ID: <20261107101353.E2259FD2D@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13837-1 Container Tags : suse/sles/16.0/toolbox:16.3 , suse/sles/16.0/toolbox:16.3-1.148 , suse/sles/16.0/toolbox:latest Container Release : 1.148 Severity : moderate Type : security References : 1288144 CVE-2026-117556 ----------------------------------------------------------------- The container suse/sles/16.0/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2064 Released: Fri Nov 6 14:41:14 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). The following package changes have been done: - libzck1-1.5.1-160000.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:15:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:15:18 +0100 (CET) Subject: SUSE-CU-2026:13838-1: Security update of suse/registry Message-ID: <20261107101518.31F1AFD18@maintenance.suse.de> SUSE Container Update Advisory: suse/registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13838-1 Container Tags : suse/registry:3.1 , suse/registry:3.1 , suse/registry:3.1-80.10 , suse/registry:latest Container Release : 80.10 Severity : critical Type : security References : 1247539 1274235 1274237 1274850 1274852 1274854 CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501 CVE-2026-34502 ----------------------------------------------------------------- The container suse/registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 4 Released: Tue Oct 27 18:00:02 2026 Summary: Security update for apr-util Type: security Severity: critical References: 1247539,1274235,1274237,1274850,1274852,1274854,CVE-2025-49506,CVE-2026-32327,CVE-2026-34191,CVE-2026-34501,CVE-2026-34502 This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854). The following package changes have been done: - libapr-util1-0-1.6.3-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:15:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:15:23 +0100 (CET) Subject: SUSE-CU-2026:13839-1: Security update of suse/kiosk/firefox-esr Message-ID: <20261107101523.522E1FD18@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13839-1 Container Tags : suse/kiosk/firefox-esr:153.5 , suse/kiosk/firefox-esr:153.5-11.8 , suse/kiosk/firefox-esr:esr Container Release : 11.8 Severity : important Type : security References : 1282612 CVE-2026-96889 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 11 Released: Fri Oct 30 16:17:42 2026 Summary: Security update for librsvg Type: security Severity: important References: 1282612,CVE-2026-96889 This update for librsvg fixes the following issues: - CVE-2026-96889: Use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: + This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-2026-96889 / bsc#1282612: - glgo#GNOME/librsvg#1241: Fix use-after-free when there are duplicate XML entities in nested Xinclude documents. Thanks to Rafael B. Dias for reporting this in detail. - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. - The minimum supported Rust version (MSRV) is 1.89.0. The following package changes have been done: - librsvg-2-2-2.60.3-160100.1.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:15:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:15:55 +0100 (CET) Subject: SUSE-CU-2026:13840-1: Security update of bci/nodejs Message-ID: <20261107101555.9FD00FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13840-1 Container Tags : bci/node:24 , bci/node:24-base , bci/node:24.22.1-base , bci/node:24.22.1-base-20.10 , bci/node:latest , bci/nodejs:24 , bci/nodejs:24-base , bci/nodejs:24.22.1-base , bci/nodejs:24.22.1-base-20.10 , bci/nodejs:latest Container Release : 20.10 Severity : important Type : security References : 1252390 1262274 1266318 1276224 1286261 1286561 1286562 1286563 1286564 1286565 1286566 1286567 1286570 CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 15 Released: Mon Nov 2 13:48:29 2026 Summary: Security update for nodejs24 Type: security Severity: important References: 1252390,1262274,1266318,1276224,1286261,1286561,1286562,1286563,1286564,1286565,1286566,1286567,1286570,CVE-2026-105481,CVE-2026-105482,CVE-2026-105483,CVE-2026-106069,CVE-2026-106072,CVE-2026-106073,CVE-2026-106074,CVE-2026-111497 This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-2026-105483: TLS certificate hostname bypass when the IP is written fullwidth digits (bsc#1286562). - CVE-2026-106069: TLS certificate hostname bypass when the host loosely resolves to an IP address (bsc#1286563). - CVE-2026-106072: Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpoints (bsc#1286566). - CVE-2026-106073: Permission Model bypass with fs.realpathSync (bsc#1286570). - CVE-2026-106074: crypto.randomUUID() and randomInt() entropy caches are saved into user-land startup snapshots and SEAs, so every process repeats the same values (bsc#1286567). - CVE-2026-111497: Node.js Brotli decoder out-of-bounds write permits remote code execution (bsc#1286564). Non security issue fixed: - 'npm install -h' output is truncated (bsc#1276224). Changes for nodejs24: Update to 24.22.1: - crypto: update root certificates to NSS 3.131.1 - deps: update c-ares to 1.34.9 - deps: update timezone to 2026e - deps: upgrade openssl sources to openssl-3.5.9 - deps: update undici to 7.30.1 Update to 24.22.0: - crypto: add crypto.parsePKCS12() - crypto: discover ciphers and hashes from OpenSSL providers - crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs - doc: deprecate Server.prototype._listen2 in node:net - net: support sending net.BoundSocket to threads and child processes - perf_hooks: implement SlidingWindowHistogram - perf_hooks: implement qrde analysis support in Histogram - perf_hooks: implement Histogram meanCI API - perf_hooks: add CBOR export/import for histogram exchange - sqlite: add StatementSync.prototype.close() - sqlite: add StatementSync.prototype[Symbol.dispose]() - src,lib: add util.markPromiseAsHandled - util: implement util.throttle - util: implement debounce for details, see https://nodejs.org/en/blog/release/v24.22.0 Update to 24.21.0: - crypto: update root certificates to NSS 3.126 - crypto: support loading private keys through STORE loaders - deps: update Undici to 7.29.1 - lib,src: improve histogram implementation - net: improve performance of net.BlockList - perf_hooks: add statistical hypothesis testing to histogram - util: add non-throwing MIMEType.parse for details see https://nodejs.org/en/blog/release/v24.21.0 Update to 24.20.0: - async_hooks: add using scopes to AsyncLocalStorage - buffer: add end parameter - doc: add MikeMcC399 as collaborator - lib,permission: add permission.drop - loader: implement package maps - src,permission: add --permission-audit - stream: add node:stream/iter implementation - test_runner: add context.log() and test:log event - test_runner: report entryFile in TestStream events - wasm: enable JSPI for details see https://github.com/nodejs/node/releases#release-v24.20.0 Update to 24.19.0: - buffer: implement blob.textStream() - deps: update OpenSSL build config to support compression - doc: update blockList stability status to release candidate - doc: mark stream.compose stable - esm: add --experimental-import-text flag - fs: support caller-supplied readFile() buffers - http: add httpValidation option to configure header value validation - net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive - perf_hooks: sample delay per event loop iteration - src: allow empty --experimental-config-file - stream: expose ReadableStreamTee - tls: report negotiated TLS groups - tls: add certificateCompression option For detailed changes, see https://github.com/nodejs/node/releases#release-v24.19.0 The following package changes have been done: - nodejs24-24.22.1-160100.1.1 updated - npm24-24.22.1-160100.1.1 updated - libbrotlicommon1-1.1.0-160100.2.1 removed - libbrotlidec1-1.1.0-160100.2.1 removed - libbrotlienc1-1.1.0-160100.2.1 removed From sle-container-updates at lists.suse.com Sat Nov 7 10:16:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:16:16 +0100 (CET) Subject: SUSE-CU-2026:13841-1: Security update of bci/nodejs Message-ID: <20261107101616.612FCFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13841-1 Container Tags : bci/node:24-micro , bci/node:24.22.1-micro , bci/node:24.22.1-micro-20.10 , bci/nodejs:24-micro , bci/nodejs:24.22.1-micro , bci/nodejs:24.22.1-micro-20.10 Container Release : 20.10 Severity : important Type : security References : 1252390 1262274 1266318 1276224 1286261 1286561 1286562 1286563 1286564 1286565 1286566 1286567 1286570 CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106072 CVE-2026-106073 CVE-2026-106074 CVE-2026-111497 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 15 Released: Mon Nov 2 13:48:29 2026 Summary: Security update for nodejs24 Type: security Severity: important References: 1252390,1262274,1266318,1276224,1286261,1286561,1286562,1286563,1286564,1286565,1286566,1286567,1286570,CVE-2026-105481,CVE-2026-105482,CVE-2026-105483,CVE-2026-106069,CVE-2026-106072,CVE-2026-106073,CVE-2026-106074,CVE-2026-111497 This update for nodejs24 fixes the following issues: Security issues fixed: - CVE-2026-105481: Keep-alive socket process a response that was written before the request was sent (bsc#1286565). - CVE-2026-105482: dns.resolve truncates names containing NUL char (bsc#1286561). - CVE-2026-105483: TLS certificate hostname bypass when the IP is written fullwidth digits (bsc#1286562). - CVE-2026-106069: TLS certificate hostname bypass when the host loosely resolves to an IP address (bsc#1286563). - CVE-2026-106072: Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpoints (bsc#1286566). - CVE-2026-106073: Permission Model bypass with fs.realpathSync (bsc#1286570). - CVE-2026-106074: crypto.randomUUID() and randomInt() entropy caches are saved into user-land startup snapshots and SEAs, so every process repeats the same values (bsc#1286567). - CVE-2026-111497: Node.js Brotli decoder out-of-bounds write permits remote code execution (bsc#1286564). Non security issue fixed: - 'npm install -h' output is truncated (bsc#1276224). Changes for nodejs24: Update to 24.22.1: - crypto: update root certificates to NSS 3.131.1 - deps: update c-ares to 1.34.9 - deps: update timezone to 2026e - deps: upgrade openssl sources to openssl-3.5.9 - deps: update undici to 7.30.1 Update to 24.22.0: - crypto: add crypto.parsePKCS12() - crypto: discover ciphers and hashes from OpenSSL providers - crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs - doc: deprecate Server.prototype._listen2 in node:net - net: support sending net.BoundSocket to threads and child processes - perf_hooks: implement SlidingWindowHistogram - perf_hooks: implement qrde analysis support in Histogram - perf_hooks: implement Histogram meanCI API - perf_hooks: add CBOR export/import for histogram exchange - sqlite: add StatementSync.prototype.close() - sqlite: add StatementSync.prototype[Symbol.dispose]() - src,lib: add util.markPromiseAsHandled - util: implement util.throttle - util: implement debounce for details, see https://nodejs.org/en/blog/release/v24.22.0 Update to 24.21.0: - crypto: update root certificates to NSS 3.126 - crypto: support loading private keys through STORE loaders - deps: update Undici to 7.29.1 - lib,src: improve histogram implementation - net: improve performance of net.BlockList - perf_hooks: add statistical hypothesis testing to histogram - util: add non-throwing MIMEType.parse for details see https://nodejs.org/en/blog/release/v24.21.0 Update to 24.20.0: - async_hooks: add using scopes to AsyncLocalStorage - buffer: add end parameter - doc: add MikeMcC399 as collaborator - lib,permission: add permission.drop - loader: implement package maps - src,permission: add --permission-audit - stream: add node:stream/iter implementation - test_runner: add context.log() and test:log event - test_runner: report entryFile in TestStream events - wasm: enable JSPI for details see https://github.com/nodejs/node/releases#release-v24.20.0 Update to 24.19.0: - buffer: implement blob.textStream() - deps: update OpenSSL build config to support compression - doc: update blockList stability status to release candidate - doc: mark stream.compose stable - esm: add --experimental-import-text flag - fs: support caller-supplied readFile() buffers - http: add httpValidation option to configure header value validation - net: support TCP_KEEPINTVL and TCP_KEEPCNT in setKeepAlive - perf_hooks: sample delay per event loop iteration - src: allow empty --experimental-config-file - stream: expose ReadableStreamTee - tls: report negotiated TLS groups - tls: add certificateCompression option For detailed changes, see https://github.com/nodejs/node/releases#release-v24.19.0 The following package changes have been done: - nodejs24-24.22.1-160100.1.1 updated - libbrotlienc1-1.1.0-160100.2.1 removed From sle-container-updates at lists.suse.com Sat Nov 7 10:16:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:16:31 +0100 (CET) Subject: SUSE-CU-2026:13842-1: Security update of bci/openjdk-devel Message-ID: <20261107101631.01809FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13842-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-8.11 Container Release : 8.11 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated - container:bci-openjdk-17-16.1.17-8.8 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:16:46 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:16:46 +0100 (CET) Subject: SUSE-CU-2026:13843-1: Security update of bci/openjdk Message-ID: <20261107101646.BDD43FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13843-1 Container Tags : bci/openjdk:17 , bci/openjdk:17.0.20.1 , bci/openjdk:17.0.20.1-8.8 Container Release : 8.8 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:17:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:17:01 +0100 (CET) Subject: SUSE-CU-2026:13844-1: Security update of bci/openjdk-devel Message-ID: <20261107101701.924D2FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13844-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-8.11 Container Release : 8.11 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated - container:bci-openjdk-21-16.1.21-8.8 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:17:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:17:17 +0100 (CET) Subject: SUSE-CU-2026:13845-1: Security update of bci/openjdk Message-ID: <20261107101717.F0CEAFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13845-1 Container Tags : bci/openjdk:21 , bci/openjdk:21.0.12.1 , bci/openjdk:21.0.12.1-8.8 Container Release : 8.8 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:17:33 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:17:33 +0100 (CET) Subject: SUSE-CU-2026:13846-1: Security update of bci/openjdk-devel Message-ID: <20261107101733.2C8DBFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13846-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-8.11 , bci/openjdk-devel:latest Container Release : 8.11 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated - container:bci-openjdk-25-16.1.25-8.8 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:17:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:17:49 +0100 (CET) Subject: SUSE-CU-2026:13847-1: Security update of bci/openjdk Message-ID: <20261107101749.8F278FD18@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13847-1 Container Tags : bci/openjdk:25 , bci/openjdk:25.0.4.1 , bci/openjdk:25.0.4.1-8.8 , bci/openjdk:latest Container Release : 8.8 Severity : important Type : security References : 1281665 1285083 CVE-2026-109088 CVE-2026-94286 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:18:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:18:15 +0100 (CET) Subject: SUSE-CU-2026:13848-1: Security update of bci/php-apache Message-ID: <20261107101815.758ABFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/php-apache ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13848-1 Container Tags : bci/php-apache:8-base , bci/php-apache:8.5.12-base , bci/php-apache:8.5.12-base-19.8 Container Release : 19.8 Severity : critical Type : security References : 1247539 1274235 1274237 1274850 1274852 1274854 CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501 CVE-2026-34502 ----------------------------------------------------------------- The container bci/php-apache was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 4 Released: Tue Oct 27 18:00:02 2026 Summary: Security update for apr-util Type: security Severity: critical References: 1247539,1274235,1274237,1274850,1274852,1274854,CVE-2025-49506,CVE-2026-32327,CVE-2026-34191,CVE-2026-34501,CVE-2026-34502 This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854). The following package changes have been done: - libapr-util1-0-1.6.3-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:18:29 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:18:29 +0100 (CET) Subject: SUSE-CU-2026:13849-1: Security update of bci/php-apache Message-ID: <20261107101829.8761CFD18@maintenance.suse.de> SUSE Container Update Advisory: bci/php-apache ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13849-1 Container Tags : bci/php-apache:8-micro , bci/php-apache:8.5.12-micro , bci/php-apache:8.5.12-micro-19.8 Container Release : 19.8 Severity : critical Type : security References : 1247539 1274235 1274237 1274850 1274852 1274854 CVE-2025-49506 CVE-2026-32327 CVE-2026-34191 CVE-2026-34501 CVE-2026-34502 ----------------------------------------------------------------- The container bci/php-apache was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 4 Released: Tue Oct 27 18:00:02 2026 Summary: Security update for apr-util Type: security Severity: critical References: 1247539,1274235,1274237,1274850,1274852,1274854,CVE-2025-49506,CVE-2026-32327,CVE-2026-34191,CVE-2026-34501,CVE-2026-34502 This update for apr-util fixes the following issues: - CVE-2025-49506: leaking content via side channel timing attack (bsc#1274237). - CVE-2026-32327: XML stack recursion crash (bsc#1274235). - CVE-2026-34191: SQL Injection via apr_dbd_oracle (bsc#1274850). - CVE-2026-34501: heap buffer overflow in redis client (bsc#1274852). - CVE-2026-34502: heap buffer overflow in APR memcached client (bsc#1274854). The following package changes have been done: - libapr-util1-0-1.6.3-160100.3.1 updated From sle-container-updates at lists.suse.com Sat Nov 7 10:20:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Sat, 7 Nov 2026 11:20:41 +0100 (CET) Subject: SUSE-CU-2026:13850-1: Security update of suse/kiosk/tigervnc-x11vnc Message-ID: <20261107102041.0B239FD18@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/tigervnc-x11vnc ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13850-1 Container Tags : suse/kiosk/tigervnc-x11vnc:1 , suse/kiosk/tigervnc-x11vnc:1.16 , suse/kiosk/tigervnc-x11vnc:1.16-1.4 , suse/kiosk/tigervnc-x11vnc:latest Container Release : 1.4 Severity : important Type : security References : 1281665 1282612 1285083 CVE-2026-109088 CVE-2026-94286 CVE-2026-96889 ----------------------------------------------------------------- The container suse/kiosk/tigervnc-x11vnc was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 12 Released: Fri Oct 30 16:10:06 2026 Summary: Security update for libXtst Type: security Severity: important References: 1281665,1285083,CVE-2026-109088,CVE-2026-94286 This update for libXtst fixes the following issues: - CVE-2026-94286: Out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). - CVE-2026-109088: libXtst RECORD EnableContext Reply Endless Loop (bsc#1285083). ----------------------------------------------------------------- Advisory ID: 11 Released: Fri Oct 30 16:17:42 2026 Summary: Security update for librsvg Type: security Severity: important References: 1282612,CVE-2026-96889 This update for librsvg fixes the following issues: - CVE-2026-96889: Use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: - Update to version 2.60.3: + This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-2026-96889 / bsc#1282612: - glgo#GNOME/librsvg#1241: Fix use-after-free when there are duplicate XML entities in nested Xinclude documents. Thanks to Rafael B. Dias for reporting this in detail. - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. - The minimum supported Rust version (MSRV) is 1.89.0. The following package changes have been done: - libXtst6-1.2.5-160100.3.1 updated - librsvg-2-2-2.60.3-160100.1.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:11:42 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:11:42 +0100 (CET) Subject: SUSE-CU-2026:13855-1: Recommended update of private-registry/1.2/harbor-core Message-ID: <20261110081142.C540FFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13855-1 Container Tags : private-registry/1.2/harbor-core:1.2.2 , private-registry/1.2/harbor-core:1.2.2-1.138 , private-registry/1.2/harbor-core:latest Container Release : 1.138 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated - harbor-core-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:12:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:12:40 +0100 (CET) Subject: SUSE-CU-2026:13856-1: Recommended update of private-registry/1.2/harbor-exporter Message-ID: <20261110081240.91EFFFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13856-1 Container Tags : private-registry/1.2/harbor-exporter:1.2.2 , private-registry/1.2/harbor-exporter:1.2.2-1.138 , private-registry/1.2/harbor-exporter:latest Container Release : 1.138 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - harbor-exporter-2.15.4-150700.1.2 updated - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:13:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:13:41 +0100 (CET) Subject: SUSE-CU-2026:13857-1: Recommended update of private-registry/1.2/harbor-jobservice Message-ID: <20261110081341.C5692FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13857-1 Container Tags : private-registry/1.2/harbor-jobservice:1.2.2 , private-registry/1.2/harbor-jobservice:1.2.2-1.136 , private-registry/1.2/harbor-jobservice:latest Container Release : 1.136 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated - harbor-jobservice-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:14:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:14:41 +0100 (CET) Subject: SUSE-CU-2026:13858-1: Recommended update of private-registry/1.2/harbor-portal Message-ID: <20261110081441.5DF16FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13858-1 Container Tags : private-registry/1.2/harbor-portal:1.2.2 , private-registry/1.2/harbor-portal:1.2.2-1.148 , private-registry/1.2/harbor-portal:latest Container Release : 1.148 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated - harbor-portal-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:15:38 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:15:38 +0100 (CET) Subject: SUSE-CU-2026:13859-1: Recommended update of private-registry/1.2/harbor-registry Message-ID: <20261110081538.DD4EDFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13859-1 Container Tags : private-registry/1.2/harbor-registry:1.2.2 , private-registry/1.2/harbor-registry:1.2.2-1.139 , private-registry/1.2/harbor-registry:latest Container Release : 1.139 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:16:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:16:49 +0100 (CET) Subject: SUSE-CU-2026:13860-1: Recommended update of private-registry/1.2/harbor-registryctl Message-ID: <20261110081649.A21CFFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13860-1 Container Tags : private-registry/1.2/harbor-registryctl:1.2.2 , private-registry/1.2/harbor-registryctl:1.2.2-1.139 , private-registry/1.2/harbor-registryctl:latest Container Release : 1.139 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated - harbor-registryctl-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:17:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:17:58 +0100 (CET) Subject: SUSE-CU-2026:13861-1: Recommended update of private-registry/1.2/harbor-trivy-adapter Message-ID: <20261110081758.586CFFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13861-1 Container Tags : private-registry/1.2/harbor-trivy-adapter:1.2.2 , private-registry/1.2/harbor-trivy-adapter:1.2.2-1.151 , private-registry/1.2/harbor-trivy-adapter:latest Container Release : 1.151 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/1.2/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.15.4-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:20:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:20:30 +0100 (CET) Subject: SUSE-CU-2026:13862-1: Recommended update of private-registry/harbor-core Message-ID: <20261110082030.3BDA3FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13862-1 Container Tags : private-registry/harbor-core:1.1.4 , private-registry/harbor-core:1.1.4-2.157 , private-registry/harbor-core:latest Container Release : 2.157 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated - harbor-core-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:23:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:23:08 +0100 (CET) Subject: SUSE-CU-2026:13863-1: Recommended update of private-registry/harbor-exporter Message-ID: <20261110082308.BE256FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13863-1 Container Tags : private-registry/harbor-exporter:1.1.4 , private-registry/harbor-exporter:1.1.4-2.158 , private-registry/harbor-exporter:latest Container Release : 2.158 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - harbor-exporter-2.14.6-150700.1.2 updated - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:25:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:25:45 +0100 (CET) Subject: SUSE-CU-2026:13864-1: Recommended update of private-registry/harbor-jobservice Message-ID: <20261110082545.7F7FEFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13864-1 Container Tags : private-registry/harbor-jobservice:1.1.4 , private-registry/harbor-jobservice:1.1.4-2.157 , private-registry/harbor-jobservice:latest Container Release : 2.157 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated - harbor-jobservice-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:28:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:28:00 +0100 (CET) Subject: SUSE-CU-2026:13865-1: Recommended update of private-registry/harbor-portal Message-ID: <20261110082800.EEC59FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13865-1 Container Tags : private-registry/harbor-portal:1.1.4 , private-registry/harbor-portal:1.1.4-2.174 , private-registry/harbor-portal:latest Container Release : 2.174 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated - harbor-portal-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:29:12 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:29:12 +0100 (CET) Subject: SUSE-CU-2026:13866-1: Recommended update of private-registry/harbor-registry Message-ID: <20261110082912.C6191FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13866-1 Container Tags : private-registry/harbor-registry:1.1.4 , private-registry/harbor-registry:1.1.4-2.158 , private-registry/harbor-registry:latest Container Release : 2.158 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:31:28 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:31:28 +0100 (CET) Subject: SUSE-CU-2026:13867-1: Recommended update of private-registry/harbor-registryctl Message-ID: <20261110083128.1A1DBFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13867-1 Container Tags : private-registry/harbor-registryctl:1.1.4 , private-registry/harbor-registryctl:1.1.4-2.159 , private-registry/harbor-registryctl:latest Container Release : 2.159 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated - harbor-registryctl-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:33:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:33:45 +0100 (CET) Subject: SUSE-CU-2026:13868-1: Recommended update of private-registry/harbor-trivy-adapter Message-ID: <20261110083345.DAE3CFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13868-1 Container Tags : private-registry/harbor-trivy-adapter:1.1.4 , private-registry/harbor-trivy-adapter:1.1.4-2.176 , private-registry/harbor-trivy-adapter:latest Container Release : 2.176 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.14.6-150700.1.2 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:34:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:34:32 +0100 (CET) Subject: SUSE-CU-2026:13869-1: Recommended update of private-registry/harbor-core Message-ID: <20261110083432.3FCFAFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13869-1 Container Tags : private-registry/harbor-core:2.13 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5-1.106 , private-registry/harbor-core:2.13.5-1.106 , private-registry/harbor-core:latest Container Release : 1.106 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated - harbor213-core-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:35:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:35:22 +0100 (CET) Subject: SUSE-CU-2026:13870-1: Recommended update of private-registry/harbor-exporter Message-ID: <20261110083522.170D8FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13870-1 Container Tags : private-registry/harbor-exporter:2.13 , private-registry/harbor-exporter:2.13.5 , private-registry/harbor-exporter:2.13.5 , private-registry/harbor-exporter:2.13.5-1.106 , private-registry/harbor-exporter:2.13.5-1.106 , private-registry/harbor-exporter:latest Container Release : 1.106 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - harbor213-exporter-2.13.5-150700.2.19 updated - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:35:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:35:57 +0100 (CET) Subject: SUSE-CU-2026:13871-1: Recommended update of private-registry/harbor-jobservice Message-ID: <20261110083557.2E810FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13871-1 Container Tags : private-registry/harbor-jobservice:2.13 , private-registry/harbor-jobservice:2.13.5 , private-registry/harbor-jobservice:2.13.5 , private-registry/harbor-jobservice:2.13.5-1.106 , private-registry/harbor-jobservice:2.13.5-1.106 , private-registry/harbor-jobservice:latest Container Release : 1.106 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated - harbor213-jobservice-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:36:44 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:36:44 +0100 (CET) Subject: SUSE-CU-2026:13872-1: Recommended update of private-registry/harbor-portal Message-ID: <20261110083644.16CF9FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13872-1 Container Tags : private-registry/harbor-portal:2.13 , private-registry/harbor-portal:2.13.5 , private-registry/harbor-portal:2.13.5 , private-registry/harbor-portal:2.13.5-1.112 , private-registry/harbor-portal:2.13.5-1.112 , private-registry/harbor-portal:latest Container Release : 1.112 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated - harbor213-portal-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:37:35 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:37:35 +0100 (CET) Subject: SUSE-CU-2026:13873-1: Recommended update of private-registry/harbor-registry Message-ID: <20261110083735.0B59BFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13873-1 Container Tags : private-registry/harbor-registry:2.8.3 , private-registry/harbor-registry:2.8.3-1.107 , private-registry/harbor-registry:latest Container Release : 1.107 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:38:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:38:11 +0100 (CET) Subject: SUSE-CU-2026:13874-1: Recommended update of private-registry/harbor-registryctl Message-ID: <20261110083811.577A8FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13874-1 Container Tags : private-registry/harbor-registryctl:2.13 , private-registry/harbor-registryctl:2.13.5 , private-registry/harbor-registryctl:2.13.5 , private-registry/harbor-registryctl:2.13.5-1.106 , private-registry/harbor-registryctl:2.13.5-1.106 , private-registry/harbor-registryctl:latest Container Release : 1.106 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated - harbor213-registryctl-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:39:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:39:05 +0100 (CET) Subject: SUSE-CU-2026:13875-1: Recommended update of private-registry/harbor-trivy-adapter Message-ID: <20261110083905.AB296FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13875-1 Container Tags : private-registry/harbor-trivy-adapter:0.35.1 , private-registry/harbor-trivy-adapter:0.35.1-1.113 , private-registry/harbor-trivy-adapter:latest Container Release : 1.113 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - system-user-harbor-2.13.5-150700.2.19 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:42:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:42:41 +0100 (CET) Subject: SUSE-IU-2026:8637-1: Security update of suse/sl-micro/6.1/baremetal-os-container Message-ID: <20261110084241.CE764FF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8637-1 Image Tags : suse/sl-micro/6.1/baremetal-os-container:2.2.1 , suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.200 , suse/sl-micro/6.1/baremetal-os-container:latest Image Release : 7.200 Severity : important Type : security References : 1264459 1265781 1266622 1266789 1272088 1277992 1278164 1279213 1279312 1279911 1279912 1279996 CVE-2026-19201 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43284 CVE-2026-56852 CVE-2026-79775 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 ----------------------------------------------------------------- The container suse/sl-micro/6.1/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 778 Released: Mon Nov 9 18:55:55 2026 Summary: Security update for elemental-operator, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1264459,1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-43284,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental-operator, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-operator: - Update to v1.7.6: * c8a50f8d Bump k8s.io/kubernetes v1.34.2 * 4bcb1775 Fix unit tests after bumping libraries * 4f5ba8f1 Fix sporadic failures in unit tests * 39cb29e7 Bump github.com/rancher/yip v1.9.7 * 58bc6f97 User Rewrite function instead of a Director function in ReverseProxy * de920645 Bum github.com/rancher-sandbox/go-tpm * 25012c7a Bump to golang 1.26 * 059e95d3 Bump github.com/google/go-attestation v0.6.4. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 24e86f69 Bump test environment * 2230e1d6 Bump generators * 0d1f058b Bump google.golang.org/grpc v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * ab1381a3 Bump github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * a7d549bf Bump github.com/rancher/wrangler/v3 v3.6.1. Includes - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * b0686910 Bump wrangler from v2 to v3 * 78c027e4 Run make generator * e84090f5 Update controller runtime options * b95756fa Do not allow installing unpinned go modules * c19b694f Add a checksum validation for go-tpm code * 09c2a821 Run make vendor * 273f3903 Updated cluster-api, steve, rancher/apis, client-go and k8s/api to the level they were at rancher v2.13 Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.2.10: * b4749140 Revert 'Update spec dependecies and dracut module dependencies' * ef7c40e7 Fix specfile on Micro 6.1 there is no grub2-common * 82e000aa Bump k8s.io/mount-utils v0.33.3 * 35da0397 use rsync checksum to reliably copy data * c3589f8d Only consider global Boot#### variables when clearing stale entries * 1ccc8702 Move to go1.26 * a6e6700a Update spec dependecies and dracut module dependencies * 8eb1a7ff bump github.com/rancher/yip v1.9.7. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * d22698bf Fix logging messages * 1ad64162 bump github.com/onsi/ginkgo/v2 v2.32.2 * 41301012 bump github.com/containerd/containerd v1.7.36. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-register-1.7.6-slfo.1.1_1.1 updated - elemental-support-1.7.6-slfo.1.1_1.1 updated - elemental-system-agent-0.15.2-slfo.1.1_1.1 updated - elemental-toolkit-2.2.10-slfo.1.1_1.1 updated - container:SL-Micro-base-container-2.2.1-5.214 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:46:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:46:09 +0100 (CET) Subject: SUSE-IU-2026:8638-1: Recommended update of suse/sl-micro/6.1/base-os-container Message-ID: <20261110084609.1610CFF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8638-1 Image Tags : suse/sl-micro/6.1/base-os-container:2.2.1 , suse/sl-micro/6.1/base-os-container:2.2.1-5.213 , suse/sl-micro/6.1/base-os-container:latest Image Release : 5.213 Severity : critical Type : recommended References : 1210382 1259096 1264459 1278729 CVE-2026-43284 ----------------------------------------------------------------- The container suse/sl-micro/6.1/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 777 Released: Mon Nov 9 09:52:03 2026 Summary: Recommended update for shim Type: recommended Severity: critical References: 1210382,1259096,1264459,1278729,CVE-2026-43284 This update for shim fixes the following issues: Changes in shim: * New shim-install includes the following changes: - Update shim-install to limit the scope of the 'removable' SL-Micro to the image booting with TPM2 unsealing (bsc#1210382) from src.opensuse.org/shim - shim-install: Do not update fallback on sl-micro when the fallback is not in efi default boot path - patch is from src.opensuse.org/shim git repo - Create non-nx shim boot entry as a fallback option Because we apply nx shim as the default shim binary in /boot/efi/EFI/opensuse/shim.efi /boot/efi/EFI/boot/bootx64.efi or bootaa64.efi In case that user got any problem when the machine boots with nx-shim, so we create a new boot entry for non-nx shim as a fallback option by efibootmgr. - shim-install: Create non-NX shim boot entry first to prioritize NX shim - Use the NX shim as the default binary for system booting. By creating the boot entry for the non-NX shim prior to the default NX shim, the standard NX shim entry will automatically gain a higher priority in the UEFI BootOrder. This ensures the system boots using the secure NX shim by default while keeping the non-NX shim as a fallback option. - shim-install: Fix the variable name for the source of non-nx shim - shim-install: Create a white list of SUSE distros for supporing nx shim - Modified the pretrans Lua script to work around the broken DB issue caused by buggy firmware when Secure Boot is disabled. It is impossible for the db to be empty while Secure Boot is enabled. If the db is empty, the installation behavior will be treated the same as when Secure Boot is disabled. We allow the shim installation process to continue and display a message reminding the user to add the appropriate certificate. (bsc#1259096) - Add Requires tags for checking the grub2 sbat generation at RPM level. The following package changes have been done: - shim-16.1-slfo.1.1_3.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:46:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:46:10 +0100 (CET) Subject: SUSE-IU-2026:8639-1: Security update of suse/sl-micro/6.1/base-os-container Message-ID: <20261110084610.6DC50FF55@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8639-1 Image Tags : suse/sl-micro/6.1/base-os-container:2.2.1 , suse/sl-micro/6.1/base-os-container:2.2.1-5.214 , suse/sl-micro/6.1/base-os-container:latest Image Release : 5.214 Severity : important Type : security References : 1264459 1265781 1266622 1266789 1272088 1277992 1278164 1279213 1279312 1279911 1279912 1279996 CVE-2026-19201 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43284 CVE-2026-56852 CVE-2026-79775 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 ----------------------------------------------------------------- The container suse/sl-micro/6.1/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 778 Released: Mon Nov 9 18:55:55 2026 Summary: Security update for elemental-operator, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1264459,1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-43284,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental-operator, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-operator: - Update to v1.7.6: * c8a50f8d Bump k8s.io/kubernetes v1.34.2 * 4bcb1775 Fix unit tests after bumping libraries * 4f5ba8f1 Fix sporadic failures in unit tests * 39cb29e7 Bump github.com/rancher/yip v1.9.7 * 58bc6f97 User Rewrite function instead of a Director function in ReverseProxy * de920645 Bum github.com/rancher-sandbox/go-tpm * 25012c7a Bump to golang 1.26 * 059e95d3 Bump github.com/google/go-attestation v0.6.4. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 24e86f69 Bump test environment * 2230e1d6 Bump generators * 0d1f058b Bump google.golang.org/grpc v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * ab1381a3 Bump github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * a7d549bf Bump github.com/rancher/wrangler/v3 v3.6.1. Includes - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * b0686910 Bump wrangler from v2 to v3 * 78c027e4 Run make generator * e84090f5 Update controller runtime options * b95756fa Do not allow installing unpinned go modules * c19b694f Add a checksum validation for go-tpm code * 09c2a821 Run make vendor * 273f3903 Updated cluster-api, steve, rancher/apis, client-go and k8s/api to the level they were at rancher v2.13 Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.2.10: * b4749140 Revert 'Update spec dependecies and dracut module dependencies' * ef7c40e7 Fix specfile on Micro 6.1 there is no grub2-common * 82e000aa Bump k8s.io/mount-utils v0.33.3 * 35da0397 use rsync checksum to reliably copy data * c3589f8d Only consider global Boot#### variables when clearing stale entries * 1ccc8702 Move to go1.26 * a6e6700a Update spec dependecies and dracut module dependencies * 8eb1a7ff bump github.com/rancher/yip v1.9.7. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * d22698bf Fix logging messages * 1ad64162 bump github.com/onsi/ginkgo/v2 v2.32.2 * 41301012 bump github.com/containerd/containerd v1.7.36. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-register-1.7.6-slfo.1.1_1.1 updated - elemental-support-1.7.6-slfo.1.1_1.1 updated - elemental-system-agent-0.15.2-slfo.1.1_1.1 updated - elemental-toolkit-2.2.10-slfo.1.1_1.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:49:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:49:53 +0100 (CET) Subject: SUSE-IU-2026:8641-1: Security update of suse/sl-micro/6.1/kvm-os-container Message-ID: <20261110084953.38A57FF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8641-1 Image Tags : suse/sl-micro/6.1/kvm-os-container:2.2.1 , suse/sl-micro/6.1/kvm-os-container:2.2.1-5.215 , suse/sl-micro/6.1/kvm-os-container:latest Image Release : 5.215 Severity : important Type : security References : 1264459 1265781 1266622 1266789 1272088 1277992 1278164 1279213 1279312 1279911 1279912 1279996 CVE-2026-19201 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43284 CVE-2026-56852 CVE-2026-79775 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 ----------------------------------------------------------------- The container suse/sl-micro/6.1/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 778 Released: Mon Nov 9 18:55:55 2026 Summary: Security update for elemental-operator, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1264459,1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-43284,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental-operator, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-operator: - Update to v1.7.6: * c8a50f8d Bump k8s.io/kubernetes v1.34.2 * 4bcb1775 Fix unit tests after bumping libraries * 4f5ba8f1 Fix sporadic failures in unit tests * 39cb29e7 Bump github.com/rancher/yip v1.9.7 * 58bc6f97 User Rewrite function instead of a Director function in ReverseProxy * de920645 Bum github.com/rancher-sandbox/go-tpm * 25012c7a Bump to golang 1.26 * 059e95d3 Bump github.com/google/go-attestation v0.6.4. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 24e86f69 Bump test environment * 2230e1d6 Bump generators * 0d1f058b Bump google.golang.org/grpc v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * ab1381a3 Bump github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * a7d549bf Bump github.com/rancher/wrangler/v3 v3.6.1. Includes - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * b0686910 Bump wrangler from v2 to v3 * 78c027e4 Run make generator * e84090f5 Update controller runtime options * b95756fa Do not allow installing unpinned go modules * c19b694f Add a checksum validation for go-tpm code * 09c2a821 Run make vendor * 273f3903 Updated cluster-api, steve, rancher/apis, client-go and k8s/api to the level they were at rancher v2.13 Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.2.10: * b4749140 Revert 'Update spec dependecies and dracut module dependencies' * ef7c40e7 Fix specfile on Micro 6.1 there is no grub2-common * 82e000aa Bump k8s.io/mount-utils v0.33.3 * 35da0397 use rsync checksum to reliably copy data * c3589f8d Only consider global Boot#### variables when clearing stale entries * 1ccc8702 Move to go1.26 * a6e6700a Update spec dependecies and dracut module dependencies * 8eb1a7ff bump github.com/rancher/yip v1.9.7. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * d22698bf Fix logging messages * 1ad64162 bump github.com/onsi/ginkgo/v2 v2.32.2 * 41301012 bump github.com/containerd/containerd v1.7.36. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-register-1.7.6-slfo.1.1_1.1 updated - elemental-support-1.7.6-slfo.1.1_1.1 updated - elemental-system-agent-0.15.2-slfo.1.1_1.1 updated - elemental-toolkit-2.2.10-slfo.1.1_1.1 updated - container:SL-Micro-base-container-2.2.1-5.214 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:53:47 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:53:47 +0100 (CET) Subject: SUSE-IU-2026:8643-1: Security update of suse/sl-micro/6.1/rt-os-container Message-ID: <20261110085347.8D8C3FF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.1/rt-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8643-1 Image Tags : suse/sl-micro/6.1/rt-os-container:2.2.1 , suse/sl-micro/6.1/rt-os-container:2.2.1-5.210 , suse/sl-micro/6.1/rt-os-container:latest Image Release : 5.210 Severity : important Type : security References : 1264459 1265781 1266622 1266789 1272088 1277992 1278164 1279213 1279312 1279911 1279912 1279996 CVE-2026-19201 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43284 CVE-2026-56852 CVE-2026-79775 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 ----------------------------------------------------------------- The container suse/sl-micro/6.1/rt-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 778 Released: Mon Nov 9 18:55:55 2026 Summary: Security update for elemental-operator, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1264459,1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-43284,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental-operator, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-operator: - Update to v1.7.6: * c8a50f8d Bump k8s.io/kubernetes v1.34.2 * 4bcb1775 Fix unit tests after bumping libraries * 4f5ba8f1 Fix sporadic failures in unit tests * 39cb29e7 Bump github.com/rancher/yip v1.9.7 * 58bc6f97 User Rewrite function instead of a Director function in ReverseProxy * de920645 Bum github.com/rancher-sandbox/go-tpm * 25012c7a Bump to golang 1.26 * 059e95d3 Bump github.com/google/go-attestation v0.6.4. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 24e86f69 Bump test environment * 2230e1d6 Bump generators * 0d1f058b Bump google.golang.org/grpc v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * ab1381a3 Bump github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * a7d549bf Bump github.com/rancher/wrangler/v3 v3.6.1. Includes - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * b0686910 Bump wrangler from v2 to v3 * 78c027e4 Run make generator * e84090f5 Update controller runtime options * b95756fa Do not allow installing unpinned go modules * c19b694f Add a checksum validation for go-tpm code * 09c2a821 Run make vendor * 273f3903 Updated cluster-api, steve, rancher/apis, client-go and k8s/api to the level they were at rancher v2.13 Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.2.10: * b4749140 Revert 'Update spec dependecies and dracut module dependencies' * ef7c40e7 Fix specfile on Micro 6.1 there is no grub2-common * 82e000aa Bump k8s.io/mount-utils v0.33.3 * 35da0397 use rsync checksum to reliably copy data * c3589f8d Only consider global Boot#### variables when clearing stale entries * 1ccc8702 Move to go1.26 * a6e6700a Update spec dependecies and dracut module dependencies * 8eb1a7ff bump github.com/rancher/yip v1.9.7. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * d22698bf Fix logging messages * 1ad64162 bump github.com/onsi/ginkgo/v2 v2.32.2 * 41301012 bump github.com/containerd/containerd v1.7.36. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-register-1.7.6-slfo.1.1_1.1 updated - elemental-support-1.7.6-slfo.1.1_1.1 updated - elemental-system-agent-0.15.2-slfo.1.1_1.1 updated - elemental-toolkit-2.2.10-slfo.1.1_1.1 updated - container:SL-Micro-container-2.2.1-7.200 updated From sle-container-updates at lists.suse.com Tue Nov 10 09:12:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 10:12:05 +0100 (CET) Subject: SUSE-IU-2026:8644-1: Security update of suse/sl-micro/6.2/baremetal-os-container Message-ID: <20261110091205.3AFC2FF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8644-1 Image Tags : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.29 , suse/sl-micro/6.2/baremetal-os-container:latest Image Release : 9.29 Severity : important Type : security References : 1265781 1266622 1266789 1272088 1277992 1278164 1279213 1279312 1279911 1279912 1279996 CVE-2026-19201 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-56852 CVE-2026-79775 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2071 Released: Mon Nov 9 16:41:01 2026 Summary: Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental, elemental-register, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-pool: - Update to v2.3.2: * 9e6df8e Update KVM flavor to include iptables Changes for elemental-register-pool: - Update to v1.9.3: * ee57a686 Bump github.com/rancher-sandbox/go-tpm * 2a6c4918 Fix sporadic failures in unit tests * 717137bd bump yip library * 9c08fcac User Rewrite function instead of a Director function in ReverseProxy * 3073bcc1 Bump rancher-sandbox/go-tpm * 0746e6be Bump grpc library to v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * 56c83652 Bump to golang 1.26 * f37b9d62 bump go-attestation. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 48e0352f Bump test environment * f78effcf Bump generators * 6c7818a2 Bump wrangler to v3.6.1. Includes fixes for: - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * 0eeb3eac Bump grpc-ecosystem/grpc-gateway/v2. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * 0c104e17 fix(tpm): fix duplicate emulated TPM seeds on UUID suffix collision (#1018) * 3605ef3f Change tags order to facilitate OBS builds - Changes on top of v1.9.2: * 893fbf0f Fix reference in labels * dfaf68ac Adapt labels to pass OBS container checks Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.3.5: * 61bb7271 use rsync checksum to reliably copy data * a5e33158 Only consider global Boot#### variables when clearing stale entries * 74b76a97 Move to go1.26 * c591fd27 Bump yip library. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * 3aa381e5 Fix logging messages * 661d3ae2 Bump ginkgo * 04624721 Bump containerd. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-updater-2.3.2-160000.1.1 updated - elemental-2.3.2-160000.1.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:07:12 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:07:12 +0100 (CET) Subject: SUSE-CU-2026:13851-1: Security update of elemental/base-os-kernel-default Message-ID: <20261110080712.9EA9AFF54@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-default ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13851-1 Container Tags : elemental/base-os-kernel-default:16.0 , elemental/base-os-kernel-default:16.0-4.56 Container Release : 4.56 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279920 1279921 1279971 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-31708 CVE-2026-31709 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container elemental/base-os-kernel-default was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-default-6.12.0-160000.41.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 08:08:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 09:08:54 +0100 (CET) Subject: SUSE-CU-2026:13853-1: Security update of elemental/base-os-kernel-rt Message-ID: <20261110080854.4DB4EFF54@maintenance.suse.de> SUSE Container Update Advisory: elemental/base-os-kernel-rt ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13853-1 Container Tags : elemental/base-os-kernel-rt:16.0 , elemental/base-os-kernel-rt:16.0-4.55 Container Release : 4.55 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279920 1279921 1279971 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-31708 CVE-2026-31709 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container elemental/base-os-kernel-rt was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-rt-6.12.0-160000.41.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:06:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:06:32 +0100 (CET) Subject: SUSE-CU-2026:13884-1: Recommended update of suse/ltss/sle15.5/sle15 Message-ID: <20261110100632.A2FB6FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13884-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.87 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.87 , suse/ltss/sle15.5/sle15:latest Container Release : 8.87 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5148-1 Released: Mon Nov 9 18:42:42 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.0.8-150500.5.83.1 updated - openssl-3-3.0.8-150500.5.83.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:07:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:07:59 +0100 (CET) Subject: SUSE-CU-2026:13885-1: Recommended update of suse/ltss/sle15.6/bci-base-fips Message-ID: <20261110100759.5D5C0FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/bci-base-fips ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13885-1 Container Tags : suse/ltss/sle15.6/bci-base-fips:15.6 , suse/ltss/sle15.6/bci-base-fips:15.6-35.118 , suse/ltss/sle15.6/bci-base-fips:latest Container Release : 35.118 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/ltss/sle15.6/bci-base-fips was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5150-1 Released: Mon Nov 9 18:43:27 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.1.4-150600.5.70.1 updated - container:sles15-ltss-image-15.6.0-5.109 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:11:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:11:16 +0100 (CET) Subject: SUSE-CU-2026:13886-1: Recommended update of suse/ltss/sle15.6/sle15 Message-ID: <20261110101116.C50E4FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13886-1 Container Tags : suse/ltss/sle15.6/bci-base:15.6 , suse/ltss/sle15.6/bci-base:15.6-5.109 , suse/ltss/sle15.6/bci-base:latest , suse/ltss/sle15.6/sle15:15.6 , suse/ltss/sle15.6/sle15:15.6-5.109 , suse/ltss/sle15.6/sle15:latest Container Release : 5.109 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/ltss/sle15.6/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5150-1 Released: Mon Nov 9 18:43:27 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl-3-fips-provider-3.1.4-150600.5.70.1 updated - libopenssl3-3.1.4-150600.5.70.1 updated - openssl-3-3.1.4-150600.5.70.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:11:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:11:56 +0100 (CET) Subject: SUSE-CU-2026:13887-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261110101156.8DAACFF59@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13887-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.207 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.207 Severity : moderate Type : security References : 1288144 CVE-2026-117556 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5138-1 Released: Mon Nov 9 14:00:43 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). The following package changes have been done: - libzck1-1.5.1-150700.3.3.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:11:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:11:58 +0100 (CET) Subject: SUSE-CU-2026:13888-1: Recommended update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261110101158.8023BFF59@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13888-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.208 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.208 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:12:03 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:12:03 +0100 (CET) Subject: SUSE-CU-2026:13889-1: Recommended update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261110101203.36FDFFF59@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13889-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.209 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.209 Severity : important Type : recommended References : 1275739 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5153-1 Released: Tue Nov 10 07:46:43 2026 Summary: Recommended update for grub2 Type: recommended Severity: important References: 1275739 This update for grub2 fixes the following issues: - Backport upstream fixes to verify linux initrd in place to avoid the potential OOM (bsc#1275739): * kern/file: record file type and track in-place verification * verifiers: support in-place verification * tpm/tpcm: mark TPM and TPCM verifiers as in-place capable * loader/linux: measure initrd in place * docs/grub-dev.texi: Document in-place verification - Fix a potential boot error when loading the synthesized initrd: * Skip in-place verifier for the synthesized initrd The following package changes have been done: - grub2-i386-pc-2.12-150700.19.40.1 updated - grub2-x86_64-efi-2.12-150700.19.40.1 updated - grub2-2.12-150700.19.40.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:14:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:14:08 +0100 (CET) Subject: SUSE-CU-2026:13890-1: Recommended update of suse/kea Message-ID: <20261110101408.87FCDFF59@maintenance.suse.de> SUSE Container Update Advisory: suse/kea ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13890-1 Container Tags : suse/kea:2.6 , suse/kea:2.6-80.25 Container Release : 80.25 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kea was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:17:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:17:08 +0100 (CET) Subject: SUSE-CU-2026:13891-1: Security update of suse/kiosk/firefox-esr Message-ID: <20261110101708.D4121FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13891-1 Container Tags : suse/kiosk/firefox-esr:153.6 , suse/kiosk/firefox-esr:153.6-75.64 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest Container Release : 75.64 Severity : important Type : security References : 1286261 1286385 1286955 1287809 CVE-2026-100801 CVE-2026-111497 CVE-2026-113470 CVE-2026-117860 CVE-2026-117861 CVE-2026-117862 CVE-2026-117863 CVE-2026-117864 CVE-2026-117865 CVE-2026-117866 CVE-2026-117867 CVE-2026-117868 CVE-2026-117869 CVE-2026-117870 CVE-2026-117871 CVE-2026-117872 CVE-2026-117873 CVE-2026-117874 CVE-2026-117875 CVE-2026-117876 CVE-2026-117877 CVE-2026-117878 CVE-2026-117879 CVE-2026-117880 CVE-2026-117881 CVE-2026-117882 CVE-2026-117883 CVE-2026-117884 CVE-2026-117885 CVE-2026-117886 CVE-2026-117887 CVE-2026-117888 CVE-2026-117889 CVE-2026-117890 CVE-2026-117891 CVE-2026-117892 CVE-2026-117893 CVE-2026-117894 CVE-2026-117895 CVE-2026-117896 CVE-2026-117897 CVE-2026-117898 CVE-2026-117899 CVE-2026-117900 CVE-2026-117901 CVE-2026-117902 CVE-2026-117903 CVE-2026-117904 CVE-2026-117905 CVE-2026-117906 CVE-2026-117907 CVE-2026-117908 CVE-2026-117909 CVE-2026-117910 CVE-2026-117911 CVE-2026-117912 CVE-2026-117913 CVE-2026-117914 CVE-2026-117915 CVE-2026-117916 CVE-2026-117917 CVE-2026-117918 CVE-2026-117919 CVE-2026-117920 CVE-2026-117921 CVE-2026-117922 CVE-2026-117923 CVE-2026-117924 CVE-2026-117925 CVE-2026-117926 CVE-2026-117927 CVE-2026-117928 CVE-2026-117929 CVE-2026-117930 CVE-2026-117931 CVE-2026-117932 CVE-2026-117933 CVE-2026-117934 CVE-2026-117935 CVE-2026-117936 CVE-2026-117937 CVE-2026-117938 CVE-2026-117939 CVE-2026-117940 CVE-2026-117941 CVE-2026-117942 CVE-2026-117943 CVE-2026-117944 CVE-2026-117945 CVE-2026-117946 CVE-2026-117947 CVE-2026-117948 CVE-2026-117949 CVE-2026-117950 CVE-2026-117951 CVE-2026-117952 CVE-2026-117953 CVE-2026-117954 CVE-2026-117955 CVE-2026-117956 CVE-2026-117957 CVE-2026-117958 CVE-2026-117959 CVE-2026-117960 CVE-2026-117961 CVE-2026-117962 CVE-2026-117963 CVE-2026-117964 CVE-2026-117965 CVE-2026-117966 CVE-2026-117967 CVE-2026-117968 CVE-2026-117969 CVE-2026-117970 CVE-2026-117971 CVE-2026-117972 CVE-2026-117973 CVE-2026-117974 CVE-2026-117975 CVE-2026-117976 CVE-2026-117977 CVE-2026-117978 CVE-2026-117979 CVE-2026-117980 CVE-2026-117981 CVE-2026-117982 CVE-2026-117983 CVE-2026-117984 CVE-2026-117985 CVE-2026-117986 CVE-2026-117987 CVE-2026-117988 CVE-2026-117989 CVE-2026-117990 CVE-2026-117991 CVE-2026-117992 CVE-2026-117993 CVE-2026-117994 CVE-2026-117995 CVE-2026-117996 CVE-2026-117997 CVE-2026-117998 CVE-2026-117999 CVE-2026-118000 CVE-2026-118002 CVE-2026-118003 CVE-2026-118004 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5145-1 Released: Mon Nov 9 15:14:37 2026 Summary: Security update for MozillaFirefox Type: security Severity: important References: 1286261,1286385,1286955,1287809,CVE-2026-100801,CVE-2026-111497,CVE-2026-113470,CVE-2026-117860,CVE-2026-117861,CVE-2026-117862,CVE-2026-117863,CVE-2026-117864,CVE-2026-117865,CVE-2026-117866,CVE-2026-117867,CVE-2026-117868,CVE-2026-117869,CVE-2026-117870,CVE-2026-117871,CVE-2026-117872,CVE-2026-117873,CVE-2026-117874,CVE-2026-117875,CVE-2026-117876,CVE-2026-117877,CVE-2026-117878,CVE-2026-117879,CVE-2026-117880,CVE-2026-117881,CVE-2026-117882,CVE-2026-117883,CVE-2026-117884,CVE-2026-117885,CVE-2026-117886,CVE-2026-117887,CVE-2026-117888,CVE-2026-117889,CVE-2026-117890,CVE-2026-117891,CVE-2026-117892,CVE-2026-117893,CVE-2026-117894,CVE-2026-117895,CVE-2026-117896,CVE-2026-117897,CVE-2026-117898,CVE-2026-117899,CVE-2026-117900,CVE-2026-117901,CVE-2026-117902,CVE-2026-117903,CVE-2026-117904,CVE-2026-117905,CVE-2026-117906,CVE-2026-117907,CVE-2026-117908,CVE-2026-117909,CVE-2026-117910,CVE-2026-117911,CVE-2026-117912,CVE-2026-117913,CVE-2026-117914,CVE-2026-117915,CVE-2026- 117916,CVE-2026-117917,CVE-2026-117918,CVE-2026-117919,CVE-2026-117920,CVE-2026-117921,CVE-2026-117922,CVE-2026-117923,CVE-2026-117924,CVE-2026-117925,CVE-2026-117926,CVE-2026-117927,CVE-2026-117928,CVE-2026-117929,CVE-2026-117930,CVE-2026-117931,CVE-2026-117932,CVE-2026-117933,CVE-2026-117934,CVE-2026-117935,CVE-2026-117936,CVE-2026-117937,CVE-2026-117938,CVE-2026-117939,CVE-2026-117940,CVE-2026-117941,CVE-2026-117942,CVE-2026-117943,CVE-2026-117944,CVE-2026-117945,CVE-2026-117946,CVE-2026-117947,CVE-2026-117948,CVE-2026-117949,CVE-2026-117950,CVE-2026-117951,CVE-2026-117952,CVE-2026-117953,CVE-2026-117954,CVE-2026-117955,CVE-2026-117956,CVE-2026-117957,CVE-2026-117958,CVE-2026-117959,CVE-2026-117960,CVE-2026-117961,CVE-2026-117962,CVE-2026-117963,CVE-2026-117964,CVE-2026-117965,CVE-2026-117966,CVE-2026-117967,CVE-2026-117968,CVE-2026-117969,CVE-2026-117970,CVE-2026-117971,CVE-2026-117972,CVE-2026-117973,CVE-2026-117974,CVE-2026-117975,CVE-2026-117976,CVE-2026-117977,CVE-2026-11797 8,CVE-2026-117979,CVE-2026-117980,CVE-2026-117981,CVE-2026-117982,CVE-2026-117983,CVE-2026-117984,CVE-2026-117985,CVE-2026-117986,CVE-2026-117987,CVE-2026-117988,CVE-2026-117989,CVE-2026-117990,CVE-2026-117991,CVE-2026-117992,CVE-2026-117993,CVE-2026-117994,CVE-2026-117995,CVE-2026-117996,CVE-2026-117997,CVE-2026-117998,CVE-2026-117999,CVE-2026-118000,CVE-2026-118002,CVE-2026-118003,CVE-2026-118004 This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): - CVE-2026-100801: Privilege escalation in the DLL Services component. - CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component (bsc#1286261). - CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component. - CVE-2026-117861: Sandbox escape in the DOM: Navigation component. - CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component. - CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component. - CVE-2026-117864: Sandbox escape in the Form Manager component. - CVE-2026-117865: Use-after-free in the JavaScript: GC component. - CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component. - CVE-2026-117867: Use-after-free in the Layout component. - CVE-2026-117868: Sandbox escape in the DOM: Networking component. - CVE-2026-117869: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117870: Use-after-free in the JavaScript Engine component. - CVE-2026-117871: Invalid pointer in the Graphics component. - CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component. - CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component. - CVE-2026-117874: Use-after-free in the Internationalization component. - CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component. - CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component. - CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component. - CVE-2026-117880: Use-after-free in the XML component. - CVE-2026-117881: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117882: Use-after-free in the Layout component. - CVE-2026-117883: Use-after-free in the DOM: HTML Parser component. - CVE-2026-117884: Use-after-free in the Networking component. - CVE-2026-117885: Use-after-free in the Layout: Grid component. - CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component. - CVE-2026-117887: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component. - CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component. - CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component. - CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component. - CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component. - CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component. - CVE-2026-117895: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117896: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component. - CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component. - CVE-2026-117899: Use-after-free in the Networking: HTTP component. - CVE-2026-117900: Use-after-free in the DOM: Editor component. - CVE-2026-117901: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component. - CVE-2026-117903: Use-after-free in the Audio/Video component. - CVE-2026-117904: Use-after-free in the JavaScript: GC component. - CVE-2026-117905: Use-after-free in the Audio/Video: Playback component. - CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component. - CVE-2026-117907: Use-after-free in the Networking component. - CVE-2026-117908: Use-after-free in the Graphics: ImageLib component. - CVE-2026-117909: Use-after-free in the JavaScript: GC component. - CVE-2026-117910: Invalid pointer in the JavaScript Engine component. - CVE-2026-117911: Use-after-free in the Audio/Video: Playback component. - CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component. - CVE-2026-117913: Use-after-free in the SVG component. - CVE-2026-117914: Use-after-free in the SVG component. - CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component. - CVE-2026-117916: Use-after-free in the XSLT component. - CVE-2026-117917: Invalid pointer in the Graphics: WebRender component. - CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component. - CVE-2026-117919: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117920: Use-after-free in the DOM: HTML Parser component. - CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component. - CVE-2026-117922: Use-after-free in the Networking: WebSockets component. - CVE-2026-117923: Use-after-free in the Audio/Video component. - CVE-2026-117924: Use-after-free in the XSLT component. - CVE-2026-117925: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117926: Incorrect boundary conditions in the SVG component. - CVE-2026-117927: Use-after-free in the SVG component. - CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component. - CVE-2026-117929: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component. - CVE-2026-117931: Use-after-free in the DOM: Events component. - CVE-2026-117932: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component. - CVE-2026-117934: Use-after-free in the Layout component. - CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component. - CVE-2026-117936: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117937: Invalid pointer in the JavaScript Engine component. - CVE-2026-117938: Use-after-free in the Layout component. - CVE-2026-117939: Use-after-free in the XML component. - CVE-2026-117940: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component. - CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component. - CVE-2026-117943: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117944: Use-after-free in the Layout component. - CVE-2026-117945: Incorrect boundary conditions in the XML component. - CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component. - CVE-2026-117947: Use-after-free in the XML component. - CVE-2026-117948: Use-after-free in the SVG component. - CVE-2026-117949: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component. - CVE-2026-117951: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117952: Uninitialized memory in the Networking component. - CVE-2026-117953: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117954: Use-after-free in the Layout: Positioned component. - CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component. - CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component. - CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component. - CVE-2026-117958: Site isolation issue in the Networking: HTTP component. - CVE-2026-117959: Site isolation issue in the DOM: Service Workers component. - CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component. - CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component. - CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. - CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component. - CVE-2026-117964: Use-after-free in the Panning and Zooming component. - CVE-2026-117965: Same-origin policy bypass in the Address Bar component. - CVE-2026-117966: Site isolation issue in the Networking: HTTP component. - CVE-2026-117967: Mitigation bypass in the DOM: Security component. - CVE-2026-117968: Use-after-free in the DOM: Core & HTML component. - CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component. - CVE-2026-117970: Race condition in the Disability Access APIs component. - CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component. - CVE-2026-117972: Use-after-free in the Graphics component. - CVE-2026-117973: Use-after-free in the Networking: DNS component. - CVE-2026-117974: Use-after-free in the XML component. - CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component. - CVE-2026-117976: Site isolation issue in the DOM: Navigation component. - CVE-2026-117977: Other issue in the Console component. - CVE-2026-117978: Incorrect boundary conditions in the Graphics component. - CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component. - CVE-2026-117980: Use-after-free in the Graphics component. - CVE-2026-117981: Privilege escalation in the Toolkit component. - CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component. - CVE-2026-117983: Use-after-free in the Graphics component. - CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component. - CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component. - CVE-2026-117986: Use-after-free in the Graphics component. - CVE-2026-117987: Use-after-free in the Graphics component. - CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. - CVE-2026-117989: Use-after-free in the Graphics component. - CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. - CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component. - CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component. - CVE-2026-117993: Integer overflow in the Graphics: Text component. - CVE-2026-117994: Use-after-free in the JavaScript: GC component. - CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component. - CVE-2026-117996: Incorrect boundary conditions in the WebRTC component. - CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component. - CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component. - CVE-2026-117999: Race condition in the IPC component. - CVE-2026-118000: Information disclosure in the Networking: HTTP component. - CVE-2026-118002: Information disclosure due to race condition in the Networking component. - CVE-2026-118003: Information disclosure in the Networking: DNS component. - CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component. The following package changes have been done: - MozillaFirefox-153.6.0-150400.157.19.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:17:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:17:10 +0100 (CET) Subject: SUSE-CU-2026:13892-1: Recommended update of suse/kiosk/firefox-esr Message-ID: <20261110101710.65D74FF75@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13892-1 Container Tags : suse/kiosk/firefox-esr:153.6 , suse/kiosk/firefox-esr:153.6-75.65 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest Container Release : 75.65 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:19:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:19:04 +0100 (CET) Subject: SUSE-CU-2026:13893-1: Recommended update of suse/postgres Message-ID: <20261110101904.6A0EBFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13893-1 Container Tags : suse/postgres:16-contrib , suse/postgres:16.15 , suse/postgres:16.15-contrib , suse/postgres:16.15-contrib-93.60 Container Release : 93.60 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:19:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:19:55 +0100 (CET) Subject: SUSE-CU-2026:13894-1: Recommended update of suse/postgres Message-ID: <20261110101955.2B3F3FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13894-1 Container Tags : suse/postgres:16 , suse/postgres:16.15 , suse/postgres:16.15 , suse/postgres:16.15-93.60 Container Release : 93.60 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:21:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:21:17 +0100 (CET) Subject: SUSE-CU-2026:13895-1: Recommended update of suse/postgres Message-ID: <20261110102117.4D523FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13895-1 Container Tags : suse/postgres:17-contrib , suse/postgres:17.11 , suse/postgres:17.11-contrib , suse/postgres:17.11-contrib-83.59 Container Release : 83.59 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:21:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:21:55 +0100 (CET) Subject: SUSE-CU-2026:13896-1: Recommended update of suse/postgres Message-ID: <20261110102155.6EFAFFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13896-1 Container Tags : suse/postgres:17 , suse/postgres:17.11 , suse/postgres:17.11 , suse/postgres:17.11-83.59 Container Release : 83.59 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:23:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:23:02 +0100 (CET) Subject: SUSE-CU-2026:13897-1: Recommended update of suse/postgres Message-ID: <20261110102302.71CB1FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13897-1 Container Tags : suse/postgres:18-contrib , suse/postgres:18.6 , suse/postgres:18.6-contrib , suse/postgres:18.6-contrib-74.18 , suse/postgres:latest Container Release : 74.18 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:23:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:23:58 +0100 (CET) Subject: SUSE-CU-2026:13898-1: Recommended update of suse/postgres Message-ID: <20261110102358.725F8FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13898-1 Container Tags : suse/postgres:18 , suse/postgres:18.6 , suse/postgres:18.6 , suse/postgres:18.6-74.18 , suse/postgres:latest Container Release : 74.18 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:25:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:25:59 +0100 (CET) Subject: SUSE-CU-2026:13899-1: Security update of suse/kiosk/pulseaudio Message-ID: <20261110102559.2780AFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/pulseaudio ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13899-1 Container Tags : suse/kiosk/pulseaudio:17 , suse/kiosk/pulseaudio:17.0 , suse/kiosk/pulseaudio:17.0-73.60 , suse/kiosk/pulseaudio:latest Container Release : 73.60 Severity : important Type : security References : 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kiosk/pulseaudio was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libopenssl3-3.5.0-150700.5.56.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:26:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:26:59 +0100 (CET) Subject: SUSE-CU-2026:13900-1: Recommended update of suse/mariadb-client Message-ID: <20261110102659.C9E82FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/mariadb-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13900-1 Container Tags : suse/mariadb-client:11.8 , suse/mariadb-client:11.8.8 , suse/mariadb-client:11.8.8-72.43 , suse/mariadb-client:latest Container Release : 72.43 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/mariadb-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:28:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:28:10 +0100 (CET) Subject: SUSE-CU-2026:13901-1: Recommended update of suse/mariadb Message-ID: <20261110102810.D0F3AFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/mariadb ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13901-1 Container Tags : suse/mariadb:11.8 , suse/mariadb:11.8.8 , suse/mariadb:11.8.8-79.57 , suse/mariadb:latest Container Release : 79.57 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/mariadb was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Tue Nov 10 10:30:12 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 11:30:12 +0100 (CET) Subject: SUSE-CU-2026:13902-1: Recommended update of suse/rmt-server Message-ID: <20261110103012.65726FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/rmt-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13902-1 Container Tags : suse/rmt-server:3 , suse/rmt-server:3.2 , suse/rmt-server:3.2-74.3 , suse/rmt-server:latest Container Release : 74.3 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/rmt-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 08:09:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 09:09:15 +0100 (CET) Subject: SUSE-IU-2026:8659-1: Security update of suse/sle-micro/base-5.5 Message-ID: <20261111080915.26250FF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8659-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.339 , suse/sle-micro/base-5.5:latest Image Release : 5.8.339 Severity : important Type : security References : 1268975 1274489 1274490 1280941 1286261 1289144 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - tar-1.34-150000.3.45.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 08:12:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 09:12:24 +0100 (CET) Subject: SUSE-IU-2026:8660-1: Security update of suse/sle-micro/kvm-5.5 Message-ID: <20261111081224.17C6FFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/kvm-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8660-1 Image Tags : suse/sle-micro/kvm-5.5:2.0.4 , suse/sle-micro/kvm-5.5:2.0.4-3.5.652 , suse/sle-micro/kvm-5.5:latest Image Release : 3.5.652 Severity : important Type : security References : 1268975 1286261 1289144 ----------------------------------------------------------------- The container suse/sle-micro/kvm-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.339 updated From sle-container-updates at lists.suse.com Wed Nov 11 08:16:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 09:16:54 +0100 (CET) Subject: SUSE-IU-2026:8661-1: Security update of suse/sle-micro/rt-5.5 Message-ID: <20261111081654.7C1D0FF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/rt-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8661-1 Image Tags : suse/sle-micro/rt-5.5:2.0.4 , suse/sle-micro/rt-5.5:2.0.4-4.5.783 , suse/sle-micro/rt-5.5:latest Image Release : 4.5.783 Severity : important Type : security References : 1268975 1286261 1289144 ----------------------------------------------------------------- The container suse/sle-micro/rt-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - container:suse-sle-micro-5.5-latest-2.0.4-5.8.158 updated From sle-container-updates at lists.suse.com Wed Nov 11 08:20:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 09:20:23 +0100 (CET) Subject: SUSE-IU-2026:8662-1: Security update of suse/sle-micro/5.5 Message-ID: <20261111082023.1F8EFFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8662-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.158 , suse/sle-micro/5.5:latest Image Release : 5.8.158 Severity : important Type : security References : 1268975 1274489 1274490 1280941 1286261 1289144 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - tar-1.34-150000.3.45.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.339 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:03:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:03:23 +0100 (CET) Subject: SUSE-CU-2026:13935-1: Security update of suse/sle-micro-rancher/5.4 Message-ID: <20261111090323.A68E8FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13935-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.218 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.218 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:03:25 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:03:25 +0100 (CET) Subject: SUSE-CU-2026:13936-1: Security update of suse/sle-micro-rancher/5.4 Message-ID: <20261111090325.30845FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13936-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.219 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.219 Severity : important Type : security References : 1286261 1289144 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:03:26 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:03:26 +0100 (CET) Subject: SUSE-CU-2026:13937-1: Recommended update of suse/sle-micro-rancher/5.4 Message-ID: <20261111090326.A5F6DFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13937-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.220 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.220 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:07:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:07:40 +0100 (CET) Subject: SUSE-CU-2026:13938-1: Security update of suse/sle-micro/5.4/toolbox Message-ID: <20261111090740.C5DCCFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13938-1 Container Tags : suse/sle-micro/5.4/toolbox:16.3 , suse/sle-micro/5.4/toolbox:16.3-5.19.311 , suse/sle-micro/5.4/toolbox:latest Container Release : 5.19.311 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:07:42 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:07:42 +0100 (CET) Subject: SUSE-CU-2026:13939-1: Recommended update of suse/sle-micro/5.4/toolbox Message-ID: <20261111090742.383E6FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13939-1 Container Tags : suse/sle-micro/5.4/toolbox:16.3 , suse/sle-micro/5.4/toolbox:16.3-5.19.312 , suse/sle-micro/5.4/toolbox:latest Container Release : 5.19.312 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 09:11:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 10:11:32 +0100 (CET) Subject: SUSE-CU-2026:13940-1: Security update of suse/sle-micro/5.5/toolbox Message-ID: <20261111091132.074A7FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.5/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13940-1 Container Tags : suse/sle-micro/5.5/toolbox:16.3 , suse/sle-micro/5.5/toolbox:16.3-3.12.225 , suse/sle-micro/5.5/toolbox:latest Container Release : 3.12.225 Severity : moderate Type : security References : 1268975 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/sle-micro/5.5/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:29:14 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:29:14 +0100 (CET) Subject: SUSE-CU-2026:13941-1: Recommended update of suse/ltss/sle15.4/bci-base-fips Message-ID: <20261111102914.25882FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.4/bci-base-fips ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13941-1 Container Tags : suse/ltss/sle15.4/bci-base-fips:15.4 , suse/ltss/sle15.4/bci-base-fips:15.4.2.117 , suse/ltss/sle15.4/bci-base-fips:latest Container Release : 2.117 Severity : important Type : recommended References : 1245199 1268975 ----------------------------------------------------------------- The container suse/ltss/sle15.4/bci-base-fips was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:3836-1 Released: Tue Oct 28 11:38:00 2025 Summary: Recommended update for bash Type: recommended Severity: important References: 1245199 This update for bash fixes the following issues: - Fix histfile missing timestamp for the oldest record (bsc#1245199) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:sles15-ltss-image-15.4.0-6.59 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:32:35 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:32:35 +0100 (CET) Subject: SUSE-CU-2026:13942-1: Recommended update of suse/ltss/sle15.4/sle15 Message-ID: <20261111103235.AE59CFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.4/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13942-1 Container Tags : suse/ltss/sle15.4/bci-base:15.4 , suse/ltss/sle15.4/bci-base:15.4-6.59 , suse/ltss/sle15.4/sle15:15.4 , suse/ltss/sle15.4/sle15:15.4-6.59 , suse/ltss/sle15.4/sle15:latest Container Release : 6.59 Severity : important Type : recommended References : 1245199 1268975 ----------------------------------------------------------------- The container suse/ltss/sle15.4/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:3836-1 Released: Tue Oct 28 11:38:00 2025 Summary: Recommended update for bash Type: recommended Severity: important References: 1245199 This update for bash fixes the following issues: - Fix histfile missing timestamp for the oldest record (bsc#1245199) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:34:54 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:34:54 +0100 (CET) Subject: SUSE-CU-2026:13943-1: Recommended update of suse/ltss/sle15.5/sle15 Message-ID: <20261111103454.081A7FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13943-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.88 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.88 , suse/ltss/sle15.5/sle15:latest Container Release : 8.88 Severity : important Type : recommended References : 1245199 1268975 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:3836-1 Released: Tue Oct 28 11:38:00 2025 Summary: Recommended update for bash Type: recommended Severity: important References: 1245199 This update for bash fixes the following issues: - Fix histfile missing timestamp for the oldest record (bsc#1245199) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:36:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:36:41 +0100 (CET) Subject: SUSE-CU-2026:13944-1: Recommended update of suse/ltss/sle15.6/bci-base-fips Message-ID: <20261111103641.B2D0FFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/bci-base-fips ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13944-1 Container Tags : suse/ltss/sle15.6/bci-base-fips:15.6 , suse/ltss/sle15.6/bci-base-fips:15.6-35.119 , suse/ltss/sle15.6/bci-base-fips:latest Container Release : 35.119 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container suse/ltss/sle15.6/bci-base-fips was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:sles15-ltss-image-15.6.0-5.110 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:41:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:41:27 +0100 (CET) Subject: SUSE-CU-2026:13945-1: Recommended update of suse/ltss/sle15.6/sle15 Message-ID: <20261111104127.54327FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.6/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13945-1 Container Tags : suse/ltss/sle15.6/bci-base:15.6 , suse/ltss/sle15.6/bci-base:15.6-5.110 , suse/ltss/sle15.6/bci-base:latest , suse/ltss/sle15.6/sle15:15.6 , suse/ltss/sle15.6/sle15:15.6-5.110 , suse/ltss/sle15.6/sle15:latest Container Release : 5.110 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container suse/ltss/sle15.6/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:44:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:44:30 +0100 (CET) Subject: SUSE-CU-2026:13946-1: Recommended update of bci/golang Message-ID: <20261111104430.8594EFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13946-1 Container Tags : bci/golang:1.25-openssl , bci/golang:1.25-sles15-openssl , bci/golang:1.25.14-openssl , bci/golang:1.25.14-openssl-92.4 , bci/golang:oldstable-openssl Container Release : 92.4 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl-3-devel-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:47:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:47:16 +0100 (CET) Subject: SUSE-CU-2026:13947-1: Recommended update of bci/golang Message-ID: <20261111104716.4EA6AFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13947-1 Container Tags : bci/golang:1.26-openssl , bci/golang:1.26-sles15-openssl , bci/golang:1.26.10-openssl , bci/golang:1.26.10-openssl-92.4 , bci/golang:latest , bci/golang:stable-openssl Container Release : 92.4 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl-3-devel-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:47:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:47:56 +0100 (CET) Subject: SUSE-CU-2026:13948-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261111104756.DB365FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13948-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.211 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.211 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:47:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:47:58 +0100 (CET) Subject: SUSE-CU-2026:13949-1: Security update of suse/hpc/warewulf4-x86_64/sle-hpc-node Message-ID: <20261111104758.F2DB5FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/hpc/warewulf4-x86_64/sle-hpc-node ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13949-1 Container Tags : suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7 , suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.213 , suse/hpc/warewulf4-x86_64/sle-hpc-node:latest Container Release : 20.8.213 Severity : important Type : security References : 1268975 1286261 1289144 ----------------------------------------------------------------- The container suse/hpc/warewulf4-x86_64/sle-hpc-node was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libfreebl3-3.125.1-150400.3.79.1 updated - libreadline7-7.0-150400.27.13.3 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:53:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:53:57 +0100 (CET) Subject: SUSE-CU-2026:13951-1: Security update of suse/kiosk/firefox-esr Message-ID: <20261111105357.2A9BBFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13951-1 Container Tags : suse/kiosk/firefox-esr:153.6 , suse/kiosk/firefox-esr:153.6-75.66 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest Container Release : 75.66 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). The following package changes have been done: - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:53:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:53:59 +0100 (CET) Subject: SUSE-CU-2026:13952-1: Security update of suse/kiosk/firefox-esr Message-ID: <20261111105359.29D2CFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/firefox-esr ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13952-1 Container Tags : suse/kiosk/firefox-esr:153.6 , suse/kiosk/firefox-esr:153.6-75.67 , suse/kiosk/firefox-esr:esr , suse/kiosk/firefox-esr:latest Container Release : 75.67 Severity : important Type : security References : 1286261 1289144 ----------------------------------------------------------------- The container suse/kiosk/firefox-esr was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:55:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:55:11 +0100 (CET) Subject: SUSE-CU-2026:13953-1: Recommended update of bci/bci-minimal Message-ID: <20261111105511.88F4FFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-minimal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13953-1 Container Tags : bci/bci-minimal:15.7 , bci/bci-minimal:15.7-27.1 Container Release : 27.1 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container bci/bci-minimal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - libreadline7-7.0-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 10:57:52 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 11:57:52 +0100 (CET) Subject: SUSE-CU-2026:13954-1: Security update of bci/openjdk-devel Message-ID: <20261111105752.81862FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13954-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-sles15 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-21.95 Container Release : 21.95 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated - container:bci-openjdk-17-15.7.17-20.82 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:00:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:00:31 +0100 (CET) Subject: SUSE-CU-2026:13955-1: Security update of bci/openjdk Message-ID: <20261111110031.D2716FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13955-1 Container Tags : bci/openjdk:17 , bci/openjdk:17-sles15 , bci/openjdk:17.0.20.1 , bci/openjdk:17.0.20.1-20.82 Container Release : 20.82 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-sysinit-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:03:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:03:02 +0100 (CET) Subject: SUSE-CU-2026:13956-1: Security update of bci/openjdk-devel Message-ID: <20261111110302.AD740FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13956-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21-sles15 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-25.95 Container Release : 25.95 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated - container:bci-openjdk-21-15.7.21-24.81 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:05:50 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:05:50 +0100 (CET) Subject: SUSE-CU-2026:13957-1: Security update of bci/openjdk Message-ID: <20261111110550.97F15FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13957-1 Container Tags : bci/openjdk:21 , bci/openjdk:21-sles15 , bci/openjdk:21.0.12.1 , bci/openjdk:21.0.12.1-24.81 Container Release : 24.81 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-sysinit-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:07:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:07:53 +0100 (CET) Subject: SUSE-CU-2026:13958-1: Security update of bci/openjdk-devel Message-ID: <20261111110753.18F88FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13958-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25-sles15 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-9.96 , bci/openjdk-devel:latest Container Release : 9.96 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated - container:bci-openjdk-25-15.7.25-9.81 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:10:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:10:05 +0100 (CET) Subject: SUSE-CU-2026:13959-1: Security update of bci/openjdk Message-ID: <20261111111005.80713FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13959-1 Container Tags : bci/openjdk:25 , bci/openjdk:25-sles15 , bci/openjdk:25.0.4.1 , bci/openjdk:25.0.4.1-9.81 , bci/openjdk:latest Container Release : 9.81 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 1286261 1289144 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - mozilla-nss-sysinit-3.125.1-150400.3.79.1 updated - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:12:08 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:12:08 +0100 (CET) Subject: SUSE-CU-2026:13960-1: Security update of suse/postgres Message-ID: <20261111111208.BF01FFF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13960-1 Container Tags : suse/postgres:16-contrib , suse/postgres:16.15 , suse/postgres:16.15-contrib , suse/postgres:16.15-contrib-93.62 Container Release : 93.62 Severity : important Type : security References : 1274489 1274490 1280587 1280589 1280591 1280597 1280598 1280941 CVE-2026-18477 CVE-2026-18508 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - tar-1.34-150000.3.45.1 updated - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:13:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:13:09 +0100 (CET) Subject: SUSE-CU-2026:13961-1: Security update of suse/postgres Message-ID: <20261111111309.43950FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13961-1 Container Tags : suse/postgres:16 , suse/postgres:16.15 , suse/postgres:16.15 , suse/postgres:16.15-93.62 Container Release : 93.62 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:15:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:15:15 +0100 (CET) Subject: SUSE-CU-2026:13962-1: Security update of suse/postgres Message-ID: <20261111111515.8D788FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13962-1 Container Tags : suse/postgres:17-contrib , suse/postgres:17.11 , suse/postgres:17.11-contrib , suse/postgres:17.11-contrib-83.61 Container Release : 83.61 Severity : important Type : security References : 1274489 1274490 1280587 1280589 1280591 1280597 1280598 1280941 CVE-2026-18477 CVE-2026-18508 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - tar-1.34-150000.3.45.1 updated - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:16:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:16:31 +0100 (CET) Subject: SUSE-CU-2026:13963-1: Security update of suse/postgres Message-ID: <20261111111631.CC260FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13963-1 Container Tags : suse/postgres:17 , suse/postgres:17.11 , suse/postgres:17.11 , suse/postgres:17.11-83.61 Container Release : 83.61 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:18:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:18:16 +0100 (CET) Subject: SUSE-CU-2026:13964-1: Security update of suse/postgres Message-ID: <20261111111816.8D245FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13964-1 Container Tags : suse/postgres:18-contrib , suse/postgres:18.6 , suse/postgres:18.6-contrib , suse/postgres:18.6-contrib-74.20 , suse/postgres:latest Container Release : 74.20 Severity : important Type : security References : 1274489 1274490 1280587 1280589 1280591 1280597 1280598 1280941 CVE-2026-18477 CVE-2026-18508 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - tar-1.34-150000.3.45.1 updated - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:19:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:19:32 +0100 (CET) Subject: SUSE-CU-2026:13965-1: Security update of suse/postgres Message-ID: <20261111111932.4AA48FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/postgres ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13965-1 Container Tags : suse/postgres:18 , suse/postgres:18.6 , suse/postgres:18.6 , suse/postgres:18.6-74.20 , suse/postgres:latest Container Release : 74.20 Severity : moderate Type : security References : 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container suse/postgres was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). The following package changes have been done: - tar-1.34-150000.3.45.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:22:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:22:22 +0100 (CET) Subject: SUSE-CU-2026:13966-1: Security update of suse/kiosk/pulseaudio Message-ID: <20261111112222.8104AFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/pulseaudio ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13966-1 Container Tags : suse/kiosk/pulseaudio:17 , suse/kiosk/pulseaudio:17.0 , suse/kiosk/pulseaudio:17.0-73.61 , suse/kiosk/pulseaudio:latest Container Release : 73.61 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container suse/kiosk/pulseaudio was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). The following package changes have been done: - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:22:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:22:24 +0100 (CET) Subject: SUSE-CU-2026:13967-1: Security update of suse/kiosk/pulseaudio Message-ID: <20261111112224.D4B9CFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/pulseaudio ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13967-1 Container Tags : suse/kiosk/pulseaudio:17 , suse/kiosk/pulseaudio:17.0 , suse/kiosk/pulseaudio:17.0-73.62 , suse/kiosk/pulseaudio:latest Container Release : 73.62 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/kiosk/pulseaudio was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:24:58 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:24:58 +0100 (CET) Subject: SUSE-CU-2026:13968-1: Security update of bci/python Message-ID: <20261111112458.A583BFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13968-1 Container Tags : bci/python:3 , bci/python:3.6 , bci/python:3.6.15 , bci/python:3.6.15-84.73 Container Release : 84.73 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:26:41 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:26:41 +0100 (CET) Subject: SUSE-CU-2026:13969-1: Security update of suse/mariadb Message-ID: <20261111112641.E13C5FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/mariadb ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13969-1 Container Tags : suse/mariadb:11.8 , suse/mariadb:11.8.8 , suse/mariadb:11.8.8-79.58 , suse/mariadb:latest Container Release : 79.58 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/mariadb was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:28:57 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:28:57 +0100 (CET) Subject: SUSE-CU-2026:13902-1: Recommended update of suse/rmt-server Message-ID: <20261111112857.B12A6FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/rmt-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13902-1 Container Tags : suse/rmt-server:3 , suse/rmt-server:3.2 , suse/rmt-server:3.2-74.3 , suse/rmt-server:latest Container Release : 74.3 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/rmt-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:28:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:28:59 +0100 (CET) Subject: SUSE-CU-2026:13970-1: Security update of suse/rmt-server Message-ID: <20261111112859.96720FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/rmt-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13970-1 Container Tags : suse/rmt-server:3 , suse/rmt-server:3.2 , suse/rmt-server:3.2-74.4 , suse/rmt-server:latest Container Release : 74.4 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/rmt-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:29:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:29:01 +0100 (CET) Subject: SUSE-CU-2026:13971-1: Recommended update of suse/rmt-server Message-ID: <20261111112901.7900CFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/rmt-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13971-1 Container Tags : suse/rmt-server:3 , suse/rmt-server:3.2 , suse/rmt-server:3.2-74.5 , suse/rmt-server:latest Container Release : 74.5 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container suse/rmt-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-4.4-150400.27.13.3 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:31:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:31:53 +0100 (CET) Subject: SUSE-CU-2026:13972-1: Security update of bci/ruby Message-ID: <20261111113153.D0B21FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/ruby ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13972-1 Container Tags : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-28.26 , bci/ruby:2.5-sles15 Container Release : 28.26 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/ruby was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:34:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:34:05 +0100 (CET) Subject: SUSE-CU-2026:13973-1: Security update of bci/rust Message-ID: <20261111113405.D7B21FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/rust ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13973-1 Container Tags : bci/rust:1.98 , bci/rust:1.98-sles15 , bci/rust:1.98.1 , bci/rust:1.98.1-2.2.8 , bci/rust:oldstable Container Release : 2.8 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/rust was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:37:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:37:05 +0100 (CET) Subject: SUSE-CU-2026:13974-1: Security update of bci/rust Message-ID: <20261111113705.4CD1FFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/rust ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13974-1 Container Tags : bci/rust:1.99 , bci/rust:1.99-sles15 , bci/rust:1.99.0 , bci/rust:1.99.0-1.2.8 , bci/rust:latest , bci/rust:stable Container Release : 2.8 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/rust was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:39:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:39:15 +0100 (CET) Subject: SUSE-CU-2026:13975-1: Recommended update of suse/samba-client Message-ID: <20261111113915.065E9FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13975-1 Container Tags : suse/samba-client:4.21 , suse/samba-client:4.21 , suse/samba-client:4.21-75.48 , suse/samba-client:latest Container Release : 75.48 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/samba-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:39:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:39:16 +0100 (CET) Subject: SUSE-CU-2026:13976-1: Security update of suse/samba-client Message-ID: <20261111113916.DFA70FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13976-1 Container Tags : suse/samba-client:4.21 , suse/samba-client:4.21 , suse/samba-client:4.21-75.49 , suse/samba-client:latest Container Release : 75.49 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/samba-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:41:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:41:09 +0100 (CET) Subject: SUSE-CU-2026:13977-1: Recommended update of suse/samba-server Message-ID: <20261111114109.E2BFEFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13977-1 Container Tags : suse/samba-server:4.21 , suse/samba-server:4.21 , suse/samba-server:4.21-76.51 , suse/samba-server:latest Container Release : 76.51 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/samba-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:41:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:41:11 +0100 (CET) Subject: SUSE-CU-2026:13978-1: Security update of suse/samba-server Message-ID: <20261111114111.D08A3FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-server ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13978-1 Container Tags : suse/samba-server:4.21 , suse/samba-server:4.21 , suse/samba-server:4.21-76.52 , suse/samba-server:latest Container Release : 76.52 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/samba-server was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:43:07 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:43:07 +0100 (CET) Subject: SUSE-CU-2026:13979-1: Recommended update of suse/samba-toolbox Message-ID: <20261111114307.CCE21FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13979-1 Container Tags : suse/samba-toolbox:4.21 , suse/samba-toolbox:4.21 , suse/samba-toolbox:4.21-76.48 , suse/samba-toolbox:latest Container Release : 76.48 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/samba-toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - container:suse-sle15-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:43:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:43:10 +0100 (CET) Subject: SUSE-CU-2026:13980-1: Security update of suse/samba-toolbox Message-ID: <20261111114310.45993FF59@maintenance.suse.de> SUSE Container Update Advisory: suse/samba-toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13980-1 Container Tags : suse/samba-toolbox:4.21 , suse/samba-toolbox:4.21 , suse/samba-toolbox:4.21-76.49 , suse/samba-toolbox:latest Container Release : 76.49 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/samba-toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Wed Nov 11 11:45:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Wed, 11 Nov 2026 12:45:45 +0100 (CET) Subject: SUSE-CU-2026:13981-1: Security update of bci/bci-sle15-kernel-module-devel Message-ID: <20261111114545.AB20EFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle15-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13981-1 Container Tags : bci/bci-sle15-kernel-module-devel:15.7 , bci/bci-sle15-kernel-module-devel:15.7-61.48 , bci/bci-sle15-kernel-module-devel:latest Container Release : 61.48 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 1285099 1286261 1289144 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5154-1 Released: Tue Nov 10 09:23:05 2026 Summary: Recommended update for python-rpm-macros Type: recommended Severity: moderate References: 1285099 This update for python-rpm-macros fixes the following issues: - Avoid trailing arguments in recursive macro expansion - Ensure that prio is always an integer number - Fix: update-alternatives bug with python-rpm-macros (bsc#1285099) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - libopenssl1_1-1.1.1w-150700.11.35.1 updated - python-rpm-macros-20260912.881b918-150400.3.27.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-tools-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:08:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:08:30 +0100 (CET) Subject: SUSE-IU-2026:8677-1: Security update of suse/sle-micro/base-5.5 Message-ID: <20261112080830.9B18AFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/base-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8677-1 Image Tags : suse/sle-micro/base-5.5:2.0.4 , suse/sle-micro/base-5.5:2.0.4-5.8.340 , suse/sle-micro/base-5.5:latest Image Release : 5.8.340 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/base-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-1.1.1l-150500.17.68.1 updated - openssl-1_1-1.1.1l-150500.17.68.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:11:06 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:11:06 +0100 (CET) Subject: SUSE-IU-2026:8678-1: Security update of suse/sle-micro/kvm-5.5 Message-ID: <20261112081106.C43BFFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/kvm-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8678-1 Image Tags : suse/sle-micro/kvm-5.5:2.0.4 , suse/sle-micro/kvm-5.5:2.0.4-3.5.654 , suse/sle-micro/kvm-5.5:latest Image Release : 3.5.654 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/kvm-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-1.1.1l-150500.17.68.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.340 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:14:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:14:45 +0100 (CET) Subject: SUSE-IU-2026:8679-1: Security update of suse/sle-micro/rt-5.5 Message-ID: <20261112081445.A75ECFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/rt-5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8679-1 Image Tags : suse/sle-micro/rt-5.5:2.0.4 , suse/sle-micro/rt-5.5:2.0.4-4.5.786 , suse/sle-micro/rt-5.5:latest Image Release : 4.5.786 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/rt-5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-1.1.1l-150500.17.68.1 updated - container:suse-sle-micro-5.5-latest-2.0.4-5.8.160 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:17:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:17:49 +0100 (CET) Subject: SUSE-IU-2026:8680-1: Security update of suse/sle-micro/5.5 Message-ID: <20261112081749.AA7C5FF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8680-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.160 , suse/sle-micro/5.5:latest Image Release : 5.8.160 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-1.1.1l-150500.17.68.1 updated - openssl-1_1-1.1.1l-150500.17.68.1 updated - container:suse-sle-micro-base-5.5-latest-2.0.4-5.8.340 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:25:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:25:56 +0100 (CET) Subject: SUSE-CU-2026:13984-1: Security update of suse/agentic/mcp/multi-linux-manager Message-ID: <20261112082556.7345CFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/agentic/mcp/multi-linux-manager ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13984-1 Container Tags : suse/agentic/mcp/multi-linux-manager:0.6 , suse/agentic/mcp/multi-linux-manager:0.6.3 , suse/agentic/mcp/multi-linux-manager:0.6.3.10.6 , suse/agentic/mcp/multi-linux-manager:latest Container Release : 10.6 Severity : important Type : security References : 1252290 1281297 1282509 1283147 1289299 CVE-2026-84243 CVE-2026-8674 CVE-2026-86805 CVE-2026-97399 ----------------------------------------------------------------- The container suse/agentic/mcp/multi-linux-manager was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 40 Released: Wed Nov 11 22:50:04 2026 Summary: Security update for glibc Type: security Severity: important References: 1252290,1281297,1282509,1283147,1289299,CVE-2026-84243,CVE-2026-8674,CVE-2026-86805,CVE-2026-97399 This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-84243: directory traversal via `gettext` functions and the `LANGUAGE` environment variable can lead to arbitrary code execution (bsc#1289299). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). The following package changes have been done: - glibc-2.40-160100.4.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:27:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:27:11 +0100 (CET) Subject: SUSE-CU-2026:13985-1: Security update of private-registry/1.2/harbor-trivy-adapter Message-ID: <20261112082711.B8CDEFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13985-1 Container Tags : private-registry/1.2/harbor-trivy-adapter:1.2.2 , private-registry/1.2/harbor-trivy-adapter:1.2.2-1.155 , private-registry/1.2/harbor-trivy-adapter:latest Container Release : 1.155 Severity : important Type : security References : 1288377 1289868 CVE-2026-116585 CVE-2026-116586 CVE-2026-116587 CVE-2026-97045 ----------------------------------------------------------------- The container private-registry/1.2/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5190-1 Released: Wed Nov 11 08:44:20 2026 Summary: Security update for trivy Type: security Severity: important References: 1288377,1289868,CVE-2026-116585,CVE-2026-116586,CVE-2026-116587,CVE-2026-97045 This update for trivy fixes the following issues: Update to version 0.76.2. Security issues fixed: - CVE-2026-97045: golang.org/x/net/html: missing checks during ancestor namespace transitions when rendering raw text can cause parser differentials (bsc#1289868). - CVE-2026-116585,CVE-2026-116586,CVE-2026-116587: github.com/go-jose/go-jose/v4: multiple security issues in github.com/go-jose/go-jose before 4.1.6 (bsc#1288377). Other updates and bugfixes: - Update `x/sys` to 0.50.0 to fix ppc64le syscall handling regression. - Version 0.76.2: * fix(deps): bump `golang.org/x/net` from 0.61.0 to 0.62.0 [backport: release/v0.76] (#11554) * chore(deps): bump the common group across 1 directory with 14 updates [backport: release/v0.76] (#11555) * fix(deps): bump `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6 [backport: release/v0.76] (#11553) * fix(deps): bump `alpine` to 3.24.3 in container images [backport: release/v0.76] (#11551) The following package changes have been done: - trivy-0.76.2-150000.1.42.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:29:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:29:45 +0100 (CET) Subject: SUSE-CU-2026:13986-1: Security update of private-registry/harbor-trivy-adapter Message-ID: <20261112082945.BA074FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13986-1 Container Tags : private-registry/harbor-trivy-adapter:1.1.4 , private-registry/harbor-trivy-adapter:1.1.4-2.180 , private-registry/harbor-trivy-adapter:latest Container Release : 2.180 Severity : important Type : security References : 1288377 1289868 CVE-2026-116585 CVE-2026-116586 CVE-2026-116587 CVE-2026-97045 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5190-1 Released: Wed Nov 11 08:44:20 2026 Summary: Security update for trivy Type: security Severity: important References: 1288377,1289868,CVE-2026-116585,CVE-2026-116586,CVE-2026-116587,CVE-2026-97045 This update for trivy fixes the following issues: Update to version 0.76.2. Security issues fixed: - CVE-2026-97045: golang.org/x/net/html: missing checks during ancestor namespace transitions when rendering raw text can cause parser differentials (bsc#1289868). - CVE-2026-116585,CVE-2026-116586,CVE-2026-116587: github.com/go-jose/go-jose/v4: multiple security issues in github.com/go-jose/go-jose before 4.1.6 (bsc#1288377). Other updates and bugfixes: - Update `x/sys` to 0.50.0 to fix ppc64le syscall handling regression. - Version 0.76.2: * fix(deps): bump `golang.org/x/net` from 0.61.0 to 0.62.0 [backport: release/v0.76] (#11554) * chore(deps): bump the common group across 1 directory with 14 updates [backport: release/v0.76] (#11555) * fix(deps): bump `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6 [backport: release/v0.76] (#11553) * fix(deps): bump `alpine` to 3.24.3 in container images [backport: release/v0.76] (#11551) The following package changes have been done: - trivy-0.76.2-150000.1.42.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:30:37 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:30:37 +0100 (CET) Subject: SUSE-CU-2026:13987-1: Security update of private-registry/harbor-trivy-adapter Message-ID: <20261112083037.0D68CFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13987-1 Container Tags : private-registry/harbor-trivy-adapter:0.35.1 , private-registry/harbor-trivy-adapter:0.35.1-1.118 , private-registry/harbor-trivy-adapter:latest Container Release : 1.118 Severity : important Type : security References : 1288377 1289868 CVE-2026-116585 CVE-2026-116586 CVE-2026-116587 CVE-2026-97045 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5190-1 Released: Wed Nov 11 08:44:20 2026 Summary: Security update for trivy Type: security Severity: important References: 1288377,1289868,CVE-2026-116585,CVE-2026-116586,CVE-2026-116587,CVE-2026-97045 This update for trivy fixes the following issues: Update to version 0.76.2. Security issues fixed: - CVE-2026-97045: golang.org/x/net/html: missing checks during ancestor namespace transitions when rendering raw text can cause parser differentials (bsc#1289868). - CVE-2026-116585,CVE-2026-116586,CVE-2026-116587: github.com/go-jose/go-jose/v4: multiple security issues in github.com/go-jose/go-jose before 4.1.6 (bsc#1288377). Other updates and bugfixes: - Update `x/sys` to 0.50.0 to fix ppc64le syscall handling regression. - Version 0.76.2: * fix(deps): bump `golang.org/x/net` from 0.61.0 to 0.62.0 [backport: release/v0.76] (#11554) * chore(deps): bump the common group across 1 directory with 14 updates [backport: release/v0.76] (#11555) * fix(deps): bump `github.com/go-jose/go-jose/v4` from 4.1.5 to 4.1.6 [backport: release/v0.76] (#11553) * fix(deps): bump `alpine` to 3.24.3 in container images [backport: release/v0.76] (#11551) The following package changes have been done: - trivy-0.76.2-150000.1.42.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:37:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:37:23 +0100 (CET) Subject: SUSE-CU-2026:13988-1: Security update of suse/sle-micro-rancher/5.4 Message-ID: <20261112083723.A72A1FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro-rancher/5.4 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13988-1 Container Tags : suse/sle-micro-rancher/5.4:5.4.4.5.221 , suse/sle-micro-rancher/5.4:latest Container Release : 4.5.221 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro-rancher/5.4 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5205-1 Released: Wed Nov 11 13:56:25 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1l-150400.7.107.1 updated - openssl-1_1-1.1.1l-150400.7.107.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:41:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:41:31 +0100 (CET) Subject: SUSE-CU-2026:13989-1: Security update of suse/sle-micro/5.4/toolbox Message-ID: <20261112084131.9A86DFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13989-1 Container Tags : suse/sle-micro/5.4/toolbox:16.3 , suse/sle-micro/5.4/toolbox:16.3-5.19.313 , suse/sle-micro/5.4/toolbox:latest Container Release : 5.19.313 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5205-1 Released: Wed Nov 11 13:56:25 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-hmac-1.1.1l-150400.7.107.1 updated - libopenssl1_1-1.1.1l-150400.7.107.1 updated - openssl-1_1-1.1.1l-150400.7.107.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 08:45:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 09:45:02 +0100 (CET) Subject: SUSE-CU-2026:13990-1: Security update of suse/sle-micro/5.5/toolbox Message-ID: <20261112084502.57EDEFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/sle-micro/5.5/toolbox ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13990-1 Container Tags : suse/sle-micro/5.5/toolbox:16.3 , suse/sle-micro/5.5/toolbox:16.3-3.12.226 , suse/sle-micro/5.5/toolbox:latest Container Release : 3.12.226 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/sle-micro/5.5/toolbox was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-hmac-1.1.1l-150500.17.68.1 updated - libopenssl1_1-1.1.1l-150500.17.68.1 updated - openssl-1_1-1.1.1l-150500.17.68.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 09:25:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 10:25:40 +0100 (CET) Subject: SUSE-IU-2026:8648-1: Security update of suse/sl-micro/6.2/base-os-container Message-ID: <20261110092540.3BB6FFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8648-1 Image Tags : suse/sl-micro/6.2/base-os-container:2.3.2 , suse/sl-micro/6.2/base-os-container:2.3.2-9.14 , suse/sl-micro/6.2/base-os-container:latest Image Release : 9.14 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1265781 1266622 1266789 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272088 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1277992 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278164 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279213 1279312 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279911 1279912 1279920 1279921 1279971 1279996 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-19201 CVE-2026-31708 CVE-2026-31709 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-56852 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-79775 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). ----------------------------------------------------------------- Advisory ID: 2071 Released: Mon Nov 9 16:41:01 2026 Summary: Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental, elemental-register, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-pool: - Update to v2.3.2: * 9e6df8e Update KVM flavor to include iptables Changes for elemental-register-pool: - Update to v1.9.3: * ee57a686 Bump github.com/rancher-sandbox/go-tpm * 2a6c4918 Fix sporadic failures in unit tests * 717137bd bump yip library * 9c08fcac User Rewrite function instead of a Director function in ReverseProxy * 3073bcc1 Bump rancher-sandbox/go-tpm * 0746e6be Bump grpc library to v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * 56c83652 Bump to golang 1.26 * f37b9d62 bump go-attestation. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 48e0352f Bump test environment * f78effcf Bump generators * 6c7818a2 Bump wrangler to v3.6.1. Includes fixes for: - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * 0eeb3eac Bump grpc-ecosystem/grpc-gateway/v2. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * 0c104e17 fix(tpm): fix duplicate emulated TPM seeds on UUID suffix collision (#1018) * 3605ef3f Change tags order to facilitate OBS builds - Changes on top of v1.9.2: * 893fbf0f Fix reference in labels * dfaf68ac Adapt labels to pass OBS container checks Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.3.5: * 61bb7271 use rsync checksum to reliably copy data * a5e33158 Only consider global Boot#### variables when clearing stale entries * 74b76a97 Move to go1.26 * c591fd27 Bump yip library. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * 3aa381e5 Fix logging messages * 661d3ae2 Bump ginkgo * 04624721 Bump containerd. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - kernel-default-6.12.0-160000.41.1 updated - elemental-register-1.9.3-160000.1.1 updated - elemental-support-1.9.3-160000.1.1 updated - elemental-system-agent-0.15.2-160000.1.1 updated - elemental-updater-2.3.2-160000.1.1 updated - elemental-toolkit-2.3.5-160000.1.1 updated - elemental-2.3.2-160000.1.1 updated From sle-container-updates at lists.suse.com Tue Nov 10 09:37:27 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 10:37:27 +0100 (CET) Subject: SUSE-IU-2026:8650-1: Security update of suse/sl-micro/6.2/kvm-os-container Message-ID: <20261110093727.8A2BAFF55@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8650-1 Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.2 , suse/sl-micro/6.2/kvm-os-container:2.3.2-9.33 , suse/sl-micro/6.2/kvm-os-container:latest Image Release : 9.33 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1265781 1266622 1266789 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272088 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1277992 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278164 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279213 1279312 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279911 1279912 1279920 1279921 1279971 1279996 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-19201 CVE-2026-31708 CVE-2026-31709 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-56852 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-79775 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). ----------------------------------------------------------------- Advisory ID: 2071 Released: Mon Nov 9 16:41:01 2026 Summary: Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental, elemental-register, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-pool: - Update to v2.3.2: * 9e6df8e Update KVM flavor to include iptables Changes for elemental-register-pool: - Update to v1.9.3: * ee57a686 Bump github.com/rancher-sandbox/go-tpm * 2a6c4918 Fix sporadic failures in unit tests * 717137bd bump yip library * 9c08fcac User Rewrite function instead of a Director function in ReverseProxy * 3073bcc1 Bump rancher-sandbox/go-tpm * 0746e6be Bump grpc library to v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * 56c83652 Bump to golang 1.26 * f37b9d62 bump go-attestation. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 48e0352f Bump test environment * f78effcf Bump generators * 6c7818a2 Bump wrangler to v3.6.1. Includes fixes for: - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * 0eeb3eac Bump grpc-ecosystem/grpc-gateway/v2. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * 0c104e17 fix(tpm): fix duplicate emulated TPM seeds on UUID suffix collision (#1018) * 3605ef3f Change tags order to facilitate OBS builds - Changes on top of v1.9.2: * 893fbf0f Fix reference in labels * dfaf68ac Adapt labels to pass OBS container checks Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.3.5: * 61bb7271 use rsync checksum to reliably copy data * a5e33158 Only consider global Boot#### variables when clearing stale entries * 74b76a97 Move to go1.26 * c591fd27 Bump yip library. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * 3aa381e5 Fix logging messages * 661d3ae2 Bump ginkgo * 04624721 Bump containerd. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-2.3.2-160000.1.1 updated - elemental-updater-2.3.2-160000.1.1 updated - kernel-default-base-6.12.0-160000.41.1.160000.2.33 updated From sle-container-updates at lists.suse.com Tue Nov 10 09:52:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Tue, 10 Nov 2026 10:52:30 +0100 (CET) Subject: SUSE-IU-2026:8654-1: Security update of suse/sl-micro/6.2/rt-os-container Message-ID: <20261110095230.3A918FF55@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/rt-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8654-1 Image Tags : suse/sl-micro/6.2/rt-os-container:2.3.2 , suse/sl-micro/6.2/rt-os-container:2.3.2-8.24 , suse/sl-micro/6.2/rt-os-container:latest Image Release : 8.24 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1265781 1266622 1266789 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272088 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1277992 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278164 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279213 1279312 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279911 1279912 1279920 1279921 1279971 1279996 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-19201 CVE-2026-31708 CVE-2026-31709 CVE-2026-33814 CVE-2026-37236 CVE-2026-39821 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-56852 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-79775 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-83530 CVE-2026-84303 CVE-2026-84304 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container suse/sl-micro/6.2/rt-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). ----------------------------------------------------------------- Advisory ID: 2071 Released: Mon Nov 9 16:41:01 2026 Summary: Security update for elemental, elemental-register, elemental-system-agent, elemental-toolkit Type: security Severity: important References: 1265781,1266622,1266789,1272088,1277992,1278164,1279213,1279312,1279911,1279912,1279996,CVE-2026-19201,CVE-2026-33814,CVE-2026-37236,CVE-2026-39821,CVE-2026-56852,CVE-2026-79775,CVE-2026-83530,CVE-2026-84303,CVE-2026-84304 This update for elemental, elemental-register, elemental-system-agent, elemental-toolkit fixes the following issues: - CVE-2026-19201: github.com/google/go-attestation/attest: unbounded recursion in Windows ELAM parsing (bsc#1279911 bsc#1279912). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265781). - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control (bsc#1277992). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266622 bsc#1266789). - CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272088). - CVE-2026-79775: github.com/diskfs/go-diskfs: malformed SquashFS image can cause crashes and persistent CPU loops in rclone's archive backend (bsc#1278164). - CVE-2026-83530: github.com/google/cel-go/cel: no enforcement of expression size limit before source construction can lead to excessive resource consumption (bsc#1279996). - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279312). - CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279213). Changes for elemental-pool: - Update to v2.3.2: * 9e6df8e Update KVM flavor to include iptables Changes for elemental-register-pool: - Update to v1.9.3: * ee57a686 Bump github.com/rancher-sandbox/go-tpm * 2a6c4918 Fix sporadic failures in unit tests * 717137bd bump yip library * 9c08fcac User Rewrite function instead of a Director function in ReverseProxy * 3073bcc1 Bump rancher-sandbox/go-tpm * 0746e6be Bump grpc library to v1.83.2. Includes fixes for: - bsc#1279213 (CVE-2026-84304) * 56c83652 Bump to golang 1.26 * f37b9d62 bump go-attestation. Includes fixes for: - bsc#1279912 (CVE-2026-19201) - bsc#1279911 (CVE-2026-19201) * 48e0352f Bump test environment * f78effcf Bump generators * 6c7818a2 Bump wrangler to v3.6.1. Includes fixes for: - bsc#1272088 (CVE-2026-56852) - bsc#1279312 (CVE-2026-84303) - bsc#1266789 (CVE-2026-39821) - bsc#1266622 (CVE-2026-39821) * 0eeb3eac Bump grpc-ecosystem/grpc-gateway/v2. Includes fixes for: - bsc#1277992 (CVE-2026-37236) * 0c104e17 fix(tpm): fix duplicate emulated TPM seeds on UUID suffix collision (#1018) * 3605ef3f Change tags order to facilitate OBS builds - Changes on top of v1.9.2: * 893fbf0f Fix reference in labels * dfaf68ac Adapt labels to pass OBS container checks Changes for elemental-system-agent-pool: - Update to version 0.15.2: * fix: swap kubectl download to cowboy-builder rpm * Update module golang.org/x/crypto to v0.56.0 [SECURITY] * Update module google.golang.org/grpc to v1.83.2 [SECURITY] * Update module golang.org/x/mod to v0.40.0 [SECURITY] * Update module github.com/google/cel-go to v0.30.0 [SECURITY] * Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] * Update module github.com/klauspost/compress to v1.18.7 [SECURITY] This version includes fixes for: - bsc#1279996 (CVE-2026-83530) - bsc#1279312 (CVE-2026-84303) - bsc#1279213 (CVE-2026-84304) - Update to version 0.15.1: * [2.15] Bump go toolchain to 1.26.7 (#426) * Bump dependencies (#421) * Update README (#404) * add uninstall flag (#384) * some cve fixes, notably x/net and kubectl versions (#359) * Update actions/checkout action to v7 * Update actions/upload-artifact action to v7 * Update actions/setup-go action to v6.4.0 * Update rancher/renovate-config digest to fc79cf4 * Update registry.suse.com/bci/bci-micro Docker tag to v16 * switch renovate over to the newer configuration (#293) * bump kubectl to 1.36.1 (#292) * add release branches to renovate config (#289) * Fix swapped kubectl checksums in SUC release image build (#286) * Document versioning schema and branch strategy aligned with Rancher minor releases (#280) * bumping CAPI to v1.13.2 and wrangler unrc version * bump k8s v1.36 * fix logs collection * test: add new Plan State integration tests * chore: bump rancher/rancher/pkg/plan to consume Plan States * test: add e2e tests for Plan States lifecycle * feat: Adapt code to use Plan States * Add README.md for integration tests * Improve comments in scripts and logging * Adapt test framework code to use new pkg/plan library from rancher/rancher * Add test/vendor to .gitignore * Utilize new pkg/plan library from rancher/rancher * bump the fallback version to v0.3.16 * add initial version of integration tests - bsc#1277992 (CVE-2026-37236) - bsc#1272088 (CVE-2026-56852) - bsc#1265781 (CVE-2026-33814) - bsc#1266622 (CVE-2026-39821) Changes for elemental-toolkit-pool: - Update to v2.3.5: * 61bb7271 use rsync checksum to reliably copy data * a5e33158 Only consider global Boot#### variables when clearing stale entries * 74b76a97 Move to go1.26 * c591fd27 Bump yip library. Includes fixes for: - bsc#1278164 (CVE-2026-79775) * 3aa381e5 Fix logging messages * 661d3ae2 Bump ginkgo * 04624721 Bump containerd. Includes fixes for: - bsc#1272088 (CVE-2026-56852) The following package changes have been done: - elemental-2.3.2-160000.1.1 updated - elemental-updater-2.3.2-160000.1.1 updated - kernel-rt-6.12.0-160000.41.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 09:41:37 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:41:37 +0100 (CET) Subject: SUSE-CU-2026:13995-1: Security update of suse/ltss/sle15.4/sle15 Message-ID: <20261112094137.9BDF2FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.4/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13995-1 Container Tags : suse/ltss/sle15.4/bci-base:15.4 , suse/ltss/sle15.4/bci-base:15.4-6.60 , suse/ltss/sle15.4/sle15:15.4 , suse/ltss/sle15.4/sle15:15.4-6.60 , suse/ltss/sle15.4/sle15:latest Container Release : 6.60 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/ltss/sle15.4/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5205-1 Released: Wed Nov 11 13:56:25 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-hmac-1.1.1l-150400.7.107.1 updated - libopenssl1_1-1.1.1l-150400.7.107.1 updated - openssl-1_1-1.1.1l-150400.7.107.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 09:43:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:43:21 +0100 (CET) Subject: SUSE-CU-2026:13996-1: Security update of suse/ltss/sle15.5/sle15 Message-ID: <20261112094321.7CD62FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/ltss/sle15.5/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13996-1 Container Tags : suse/ltss/sle15.5/bci-base:15.5 , suse/ltss/sle15.5/bci-base:15.5-8.89 , suse/ltss/sle15.5/sle15:15.5 , suse/ltss/sle15.5/sle15:15.5-8.89 , suse/ltss/sle15.5/sle15:latest Container Release : 8.89 Severity : important Type : security References : 1277247 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/ltss/sle15.5/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5197-1 Released: Wed Nov 11 13:37:51 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1277247,1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). The following package changes have been done: - libopenssl1_1-hmac-1.1.1l-150500.17.68.1 updated - libopenssl1_1-1.1.1l-150500.17.68.1 updated - openssl-1_1-1.1.1l-150500.17.68.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 09:47:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:47:19 +0100 (CET) Subject: SUSE-CU-2026:13997-1: Security update of suse/kea Message-ID: <20261112094719.59B08FF55@maintenance.suse.de> SUSE Container Update Advisory: suse/kea ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13997-1 Container Tags : suse/kea:2.6 , suse/kea:2.6-80.26 Container Release : 80.26 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/kea was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:05:22 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:05:22 +0100 (CET) Subject: SUSE-CU-2026:13981-1: Security update of bci/bci-sle15-kernel-module-devel Message-ID: <20261112100522.3ADF4FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle15-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13981-1 Container Tags : bci/bci-sle15-kernel-module-devel:15.7 , bci/bci-sle15-kernel-module-devel:15.7-61.48 , bci/bci-sle15-kernel-module-devel:latest Container Release : 61.48 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 1285099 1286261 1289144 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5154-1 Released: Tue Nov 10 09:23:05 2026 Summary: Recommended update for python-rpm-macros Type: recommended Severity: moderate References: 1285099 This update for python-rpm-macros fixes the following issues: - Avoid trailing arguments in recursive macro expansion - Ensure that prio is always an integer number - Fix: update-alternatives bug with python-rpm-macros (bsc#1285099) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - libopenssl1_1-1.1.1w-150700.11.35.1 updated - python-rpm-macros-20260912.881b918-150400.3.27.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-tools-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:07:50 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:07:50 +0100 (CET) Subject: SUSE-CU-2026:14006-1: Recommended update of bci/spack Message-ID: <20261112100750.4F625FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/spack ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14006-1 Container Tags : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.83 , bci/spack:latest Container Release : 25.83 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/spack was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl-3-devel-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:07:51 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:07:51 +0100 (CET) Subject: SUSE-CU-2026:14007-1: Security update of bci/spack Message-ID: <20261112100751.DB4E1FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/spack ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14007-1 Container Tags : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.85 , bci/spack:latest Container Release : 25.85 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container bci/spack was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:08:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:08:19 +0100 (CET) Subject: SUSE-CU-2026:14008-1: Recommended update of suse/kiosk/tigervnc-x11vnc Message-ID: <20261112100819.EE26DFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/tigervnc-x11vnc ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14008-1 Container Tags : suse/kiosk/tigervnc-x11vnc:1 , suse/kiosk/tigervnc-x11vnc:1.14 , suse/kiosk/tigervnc-x11vnc:1.14-64.2 Container Release : 64.2 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kiosk/tigervnc-x11vnc was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:08:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:08:21 +0100 (CET) Subject: SUSE-CU-2026:14009-1: Security update of suse/kiosk/tigervnc-x11vnc Message-ID: <20261112100821.766EFFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/tigervnc-x11vnc ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14009-1 Container Tags : suse/kiosk/tigervnc-x11vnc:1 , suse/kiosk/tigervnc-x11vnc:1.14 , suse/kiosk/tigervnc-x11vnc:1.14-64.3 Container Release : 64.3 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container suse/kiosk/tigervnc-x11vnc was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:09:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:09:40 +0100 (CET) Subject: SUSE-CU-2026:14010-1: Recommended update of suse/kiosk/xorg-client Message-ID: <20261112100940.C5CD1FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14010-1 Container Tags : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-81.24 , suse/kiosk/xorg-client:latest Container Release : 81.24 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kiosk/xorg-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:09:42 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:09:42 +0100 (CET) Subject: SUSE-CU-2026:14011-1: Security update of suse/kiosk/xorg-client Message-ID: <20261112100942.5F216FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14011-1 Container Tags : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-81.25 , suse/kiosk/xorg-client:latest Container Release : 81.25 Severity : important Type : security References : 1153311 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container suse/kiosk/xorg-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2020:362-1 Released: Fri Feb 7 11:14:20 2020 Summary: Recommended update for libXi Type: recommended Severity: moderate References: 1153311 This update for libXi fixes the following issue: - The libXi6-32bit library on x86_64 are now shipped in the Basesystem module. (bsc#1153311) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). The following package changes have been done: - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:09:43 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:09:43 +0100 (CET) Subject: SUSE-CU-2026:14012-1: Security update of suse/kiosk/xorg-client Message-ID: <20261112100943.E9603FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg-client ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14012-1 Container Tags : suse/kiosk/xorg-client:21 , suse/kiosk/xorg-client:21-81.26 , suse/kiosk/xorg-client:latest Container Release : 81.26 Severity : important Type : security References : 1286261 1289144 ----------------------------------------------------------------- The container suse/kiosk/xorg-client was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5168-1 Released: Tue Nov 10 15:48:54 2026 Summary: Security update for mozilla-nss Type: security Severity: important References: 1286261,1289144 This update for mozilla-nss fixes the following issue: - remove compromised eMudhra Intermediates CA (bsc#1286261). Changes for mozilla-nss: - update to NSS 3.125.1 (bsc#1289144): * bmo#2088196 - backport nssckbi 2.92. * bmo#2082793 - Don't cache sessions when ECH was rejected. * bmo#2082792 - Keep DTLS handshake messages whole in the send buffer. * bmo#2082077 - Initialize sftk_MACCtx in sftk_MAC_Init. * bmo#2082027 - reorder session context setup in sftk_doMACInit. * bmo#2054723 - harden against integer overflows in lowpbe.c. * bmo#2054697 - fix AES GCM parameter serialization in pk11_GetPBECryptoMechanism. * bmo#2054695 - handle HMAC truncation when using PK11_Digest* APIs. * bmo#2054616 - reject short ciphertexts in sec_pkcs5_rc2. The following package changes have been done: - libfreebl3-3.125.1-150400.3.79.1 updated - mozilla-nss-certs-3.125.1-150400.3.79.1 updated - libsoftokn3-3.125.1-150400.3.79.1 updated - mozilla-nss-3.125.1-150400.3.79.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:11:31 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:11:31 +0100 (CET) Subject: SUSE-CU-2026:14013-1: Recommended update of suse/kiosk/xorg Message-ID: <20261112101131.50915FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14013-1 Container Tags : suse/kiosk/xorg:21 , suse/kiosk/xorg:21.1 , suse/kiosk/xorg:21.1-83.62 , suse/kiosk/xorg:latest , suse/kiosk/xorg:notaskbar Container Release : 83.62 Severity : moderate Type : recommended References : 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container suse/kiosk/xorg was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) The following package changes have been done: - libopenssl3-3.5.0-150700.5.56.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:11:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:11:32 +0100 (CET) Subject: SUSE-CU-2026:14014-1: Security update of suse/kiosk/xorg Message-ID: <20261112101132.D6420FF54@maintenance.suse.de> SUSE Container Update Advisory: suse/kiosk/xorg ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14014-1 Container Tags : suse/kiosk/xorg:21 , suse/kiosk/xorg:21.1 , suse/kiosk/xorg:21.1-83.63 , suse/kiosk/xorg:latest , suse/kiosk/xorg:notaskbar Container Release : 83.63 Severity : important Type : security References : 1281605 1281606 1281608 1281609 1281612 1281615 1281651 1285084 1285085 CVE-2026-109089 CVE-2026-109090 CVE-2026-93541 CVE-2026-93542 CVE-2026-93543 CVE-2026-93544 CVE-2026-93545 CVE-2026-94281 CVE-2026-94282 ----------------------------------------------------------------- The container suse/kiosk/xorg was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5165-1 Released: Tue Nov 10 12:59:07 2026 Summary: Security update for libXi Type: security Severity: important References: 1281605,1281606,1281608,1281609,1281612,1281615,1281651,1285084,1285085,CVE-2026-109089,CVE-2026-109090,CVE-2026-93541,CVE-2026-93542,CVE-2026-93543,CVE-2026-93544,CVE-2026-93545,CVE-2026-94281,CVE-2026-94282 This update for libXi fixes the following issues: - CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). - CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). - CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). - CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). - CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). - CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). - CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversio (bsc#1281651). - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). The following package changes have been done: - libXi6-1.7.9-150000.3.7.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:25:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:25:02 +0100 (CET) Subject: SUSE-CU-2026:14022-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261112102502.7E5B7FF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14022-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.8 , suse/sles/16.0/libguestfs-tools:1.8.4 , suse/sles/16.0/libguestfs-tools:1.8.4-11.24 Container Release : 11.24 Severity : moderate Type : security References : 1288144 CVE-2026-117556 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2064 Released: Fri Nov 6 14:41:14 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). The following package changes have been done: - libzck1-1.5.1-160000.3.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:31:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:31:04 +0100 (CET) Subject: SUSE-CU-2026:14033-1: Security update of suse/sles/16.0/libguestfs-tools Message-ID: <20261112103104.7452BFF4C@maintenance.suse.de> SUSE Container Update Advisory: suse/sles/16.0/libguestfs-tools ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14033-1 Container Tags : suse/sles/16.0/libguestfs-tools:1.9 , suse/sles/16.0/libguestfs-tools:1.9.1 , suse/sles/16.0/libguestfs-tools:1.9.1-2.26 Container Release : 2.26 Severity : moderate Type : security References : 1288144 CVE-2026-117556 ----------------------------------------------------------------- The container suse/sles/16.0/libguestfs-tools was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2064 Released: Fri Nov 6 14:41:14 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). The following package changes have been done: - libzck1-1.5.1-160000.3.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:37:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:37:53 +0100 (CET) Subject: SUSE-CU-2026:14038-1: Security update of bci/bci-minimal Message-ID: <20261112103753.71C87FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-minimal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14038-1 Container Tags : bci/bci-minimal:16.0 , bci/bci-minimal:16.0-19.2 Container Release : 19.2 Severity : important Type : security References : 1283342 CVE-2026-103111 ----------------------------------------------------------------- The container bci/bci-minimal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - libpcre2-8-0-10.45-160000.5.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 09:49:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:49:23 +0100 (CET) Subject: SUSE-CU-2026:13998-1: Security update of bci/openjdk-devel Message-ID: <20261112094923.0AE81FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13998-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-sles15 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-21.96 Container Release : 21.96 Severity : important Type : security References : 1180125 1183374 1183858 1185588 1186819 1187338 1187668 1188607 1189241 1189287 1189659 1190566 1192249 1193179 1198511 1202624 1203125 1203355 1203750 1204577 1205244 1208443 1208471 1210638 1211158 1214691 1214692 1219559 1219666 1220664 1221563 1221854 1222075 1222109 1226447 1226448 1227233 1227378 1227999 1228780 1229596 1230227 1230906 1231795 1232241 1233012 1233307 1233307 1236705 1243273 1244032 1244056 1244059 1244060 1244061 1244401 1244705 1246697 1247249 1250232 1250782 1250782 1251305 1252974 1254400 1254401 1254997 1256834 1256835 1256836 1256837 1256838 1256839 1256840 1257029 1257031 1257041 1257042 1257044 1257046 1257181 1257599 1259611 1259734 1259735 1259735 1259989 1259989 1260026 1260441 1260442 1260443 1260444 1261678 1261969 1261970 1261970 1262098 1262319 1262467 1262654 1263083 1263443 1264962 1265268 1266340 1266341 1266342 1266349 1266357 1266669 1266783 1267581 1267821 1267974 1268977 1269021 1269066 1269222 1269788 1269959 1270083 1271192 1271712 1273091 1273148 1274683 1274774 1274788 1274795 1276223 1276226 1276227 1276903 1277111 1277271 1280459 1280587 1280589 1280591 1280597 1280598 1284020 1284124 831629 CVE-2007-4559 CVE-2015-20107 CVE-2019-18348 CVE-2020-10735 CVE-2020-8492 CVE-2021-28861 CVE-2021-3426 CVE-2021-3572 CVE-2021-3733 CVE-2021-3737 CVE-2022-37454 CVE-2022-45061 CVE-2022-48566 CVE-2023-24329 CVE-2023-27043 CVE-2023-40217 CVE-2023-52425 CVE-2023-6597 CVE-2024-0397 CVE-2024-0450 CVE-2024-11168 CVE-2024-11168 CVE-2024-12718 CVE-2024-12798 CVE-2024-12801 CVE-2024-4032 CVE-2024-5642 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-9287 CVE-2025-0938 CVE-2025-11226 CVE-2025-11468 CVE-2025-12084 CVE-2025-13462 CVE-2025-13836 CVE-2025-13837 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 CVE-2025-4516 CVE-2025-4517 CVE-2025-6069 CVE-2025-6075 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2025-8194 CVE-2025-8291 CVE-2025-9230 CVE-2026-0672 CVE-2026-0864 CVE-2026-0865 CVE-2026-104721 CVE-2026-10532 CVE-2026-11940 CVE-2026-11972 CVE-2026-1225 CVE-2026-1299 CVE-2026-13006 CVE-2026-13346 CVE-2026-1502 CVE-2026-15308 CVE-2026-15310 CVE-2026-15806 CVE-2026-1703 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-19880 CVE-2026-22795 CVE-2026-22796 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789 CVE-2026-3219 CVE-2026-3276 CVE-2026-34180 CVE-2026-3446 CVE-2026-3446 CVE-2026-3479 CVE-2026-3479 CVE-2026-35189 CVE-2026-3644 CVE-2026-4224 CVE-2026-4224 CVE-2026-42766 CVE-2026-4360 CVE-2026-4519 CVE-2026-45447 CVE-2026-4786 CVE-2026-54872 CVE-2026-54874 CVE-2026-56740 CVE-2026-56741 CVE-2026-6019 CVE-2026-6019 CVE-2026-6100 CVE-2026-63072 CVE-2026-6357 CVE-2026-6879 CVE-2026-7210 CVE-2026-7383 CVE-2026-75806 CVE-2026-77696 CVE-2026-7774 CVE-2026-82049 CVE-2026-8328 CVE-2026-84782 CVE-2026-8643 CVE-2026-9076 CVE-2026-9669 CVE-2026-9828 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:2997-1 Released: Thu Sep 9 14:37:34 2021 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1187338,1189659 This update for python3 fixes the following issues: - Fixed an issue when the missing 'stropts.h' causing build errors for different python modules. (bsc#1187338) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2021:4104-1 Released: Thu Dec 16 11:14:12 2021 Summary: Security update for python3 Type: security Severity: moderate References: 1180125,1183374,1183858,1185588,1187668,1189241,1189287,CVE-2021-3426,CVE-2021-3733,CVE-2021-3737 This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - CVE-2021-3737: Fixed ReDoS in urllib.request (bsc#1189287). - We do not require python-rpm-macros package (bsc#1180125). - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). - Stop providing 'python' symbol, which means python2 currently (bsc#1185588). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:48-1 Released: Tue Jan 11 09:17:57 2022 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1190566,1192249,1193179 This update for python3 fixes the following issues: - Don't use OpenSSL 1.1 on platforms which don't have it. - Remove shebangs from python-base libraries in '_libdir'. (bsc#1193179, bsc#1192249). - Build against 'openssl 1.1' as it is incompatible with 'openssl 3.0+' (bsc#1190566) - Fix for permission error when changing the mtime of the source file in presence of 'SOURCE_DATE_EPOCH'. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:942-1 Released: Thu Mar 24 10:30:15 2022 Summary: Security update for python3 Type: security Severity: moderate References: 1186819,CVE-2021-3572 This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:2357-1 Released: Mon Jul 11 20:34:20 2022 Summary: Security update for python3 Type: security Severity: important References: 1198511,CVE-2015-20107 This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3544-1 Released: Thu Oct 6 13:48:42 2022 Summary: Security update for python3 Type: security Severity: important References: 1202624,CVE-2021-28861 This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4281-1 Released: Tue Nov 29 15:46:10 2022 Summary: Security update for python3 Type: security Severity: important References: 1188607,1203125,1204577,CVE-2019-18348,CVE-2020-10735,CVE-2020-8492,CVE-2022-37454 This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125) The following non-security bug was fixed: - Fixed a crash in the garbage collection (bsc#1188607). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:549-1 Released: Mon Feb 27 17:35:07 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1205244,1208443,CVE-2022-45061 This update for python3 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). Bugfixes: - Fixed issue where email.generator.py replaces a non-existent header (bsc#1208443). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important References: 1203355,1208471,CVE-2023-24329 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2517-1 Released: Thu Jun 15 07:09:52 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1203750,1211158,CVE-2007-4559 This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3828-1 Released: Wed Sep 27 19:07:38 2023 Summary: Security update for python3 Type: security Severity: important References: 1214692,CVE-2023-40217 This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:581-1 Released: Wed Feb 21 14:08:16 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1210638,CVE-2023-27043 This update for python3 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:901-1 Released: Thu Mar 14 17:49:10 2024 Summary: Security update for python3 Type: security Severity: important References: 1214691,1219666,CVE-2022-48566,CVE-2023-6597 This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2022-48566: Make compare_digest more constant-time (bsc#1214691). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:1279-1 Released: Fri Apr 12 21:35:09 2024 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1222109 This update for python3 fixes the following issue: - Fix syslog making default 'ident' from sys.argv (bsc#1222109) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:2479-1 Released: Mon Jul 15 10:33:22 2024 Summary: Security update for python3 Type: security Severity: important References: 1219559,1220664,1221563,1221854,1222075,1226447,1226448,CVE-2023-52425,CVE-2024-0397,CVE-2024-0450,CVE-2024-4032 This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854). - CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448) - CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3470-1 Released: Fri Sep 27 14:34:46 2024 Summary: Security update for python3 Type: security Severity: important References: 1227233,1227378,1227999,1228780,1229596,1230227,CVE-2024-5642,CVE-2024-6232,CVE-2024-6923,CVE-2024-7592 This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API (bsc#1227233). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596). - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999). - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3879-1 Released: Fri Nov 1 17:04:25 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1230906,1232241,CVE-2024-9287 This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:4185-1 Released: Thu Dec 5 06:54:31 2024 Summary: Recommended update for picocli Type: recommended Severity: moderate References: This update for picocli fixes the following issues: picocli was updated from version 4.7.5 to 4.7.6: - Improved property loading and logging. - Fixed bugs related to default values, null pointer exceptions, optional arguments, mixins, and custom type converters. - Clarified documentation for negatable options and exception handling. - The binaries are compatible with java 1.8 ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:4193-1 Released: Thu Dec 5 12:01:40 2024 Summary: Security update for python3 Type: security Severity: low References: 1231795,1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Remove -IVendor/ from python-config (bsc#1231795) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:554-1 Released: Fri Feb 14 16:10:40 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1236705,CVE-2025-0938 This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:1056-1 Released: Fri Mar 28 18:06:22 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:2778-1 Released: Wed Aug 13 08:45:57 2025 Summary: Security update for python3 Type: security Severity: important References: 1233012,1243273,1244032,1244056,1244059,1244060,1244061,1244401,1244705,1247249,831629,CVE-2024-12718,CVE-2025-4138,CVE-2025-4330,CVE-2025-4435,CVE-2025-4516,CVE-2025-4517,CVE-2025-6069,CVE-2025-8194 This update for python3 fixes the following issues: - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273). - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory (bsc#1244060) - CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061) - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: - Limit buffer size for IPv6 address parsing (bsc#1244401). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:2890-1 Released: Tue Aug 19 09:54:32 2025 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1246697 This update for openssl-1_1 fixes the following issues: - FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test instead of NID_secp256k1. [bsc#1246697] ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:3635-1 Released: Fri Oct 17 16:33:06 2025 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250232,CVE-2025-9230 This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: fixed out of bounds read and write in RFC 3211 KEK unwrap (bsc#1250232) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:4368-1 Released: Thu Dec 11 16:12:16 2025 Summary: Security update for python3 Type: security Severity: low References: 1251305,1252974,CVE-2025-6075,CVE-2025-8291 This update for python3 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:27-1 Released: Mon Jan 5 13:45:08 2026 Summary: Security update for python3 Type: security Severity: moderate References: 1254400,1254401,1254997,CVE-2025-12084,CVE-2025-13836,CVE-2025-13837 This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) - CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:331-1 Released: Wed Jan 28 18:12:49 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1256834,1256835,1256836,1256837,1256838,1256839,1256840,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,CVE-2025-69421,CVE-2026-22795,CVE-2026-22796 This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838). - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835). - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:664-1 Released: Thu Feb 26 16:15:04 2026 Summary: Security update for python3 Type: security Severity: important References: 1257029,1257031,1257041,1257042,1257044,1257046,CVE-2025-11468,CVE-2025-15282,CVE-2025-15366,CVE-2025-15367,CVE-2026-0672,CVE-2026-0865 This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel (bsc#1257031). - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers (bsc#1257042). - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1090-1 Released: Thu Mar 26 18:44:54 2026 Summary: Security update for python3 Type: security Severity: important References: 1257181,CVE-2026-1299 This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1386-1 Released: Thu Apr 16 11:17:06 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1260441,1260442,1260443,1260444,1261678,CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31789 This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). - CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1715-1 Released: Wed May 6 14:09:30 2026 Summary: Security update for python3 Type: security Severity: important References: 1259611,1259734,1259735,1259989,1260026,1261969,1261970,1262098,1262319,1262654,CVE-2025-13462,CVE-2026-1502,CVE-2026-3446,CVE-2026-3479,CVE-2026-3644,CVE-2026-4224,CVE-2026-4519,CVE-2026-4786,CVE-2026-6019,CVE-2026-6100 This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989). - CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass (bsc#1259734). - CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735). - CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser command line option injection (bsc#1260026). - CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection (bsc#1262319). - CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654). - CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is under memory pressure(bsc#1262098). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:2041-1 Released: Thu May 21 16:29:18 2026 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1250782 This update for openssl-1_1 fixes the following issues: - Fix 30-test_fips_sli.t fails intermittently on s390x (bsc#1250782): * Fix AES_GCM IV test sometimes failing on s390x. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:2392-1 Released: Mon Jun 15 10:05:31 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250782,1266340,1266341,1266342,1266349,1266357,CVE-2026-34180,CVE-2026-42766,CVE-2026-45447,CVE-2026-7383,CVE-2026-9076 This update for openssl-1_1 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3183-1 Released: Wed Jul 22 09:26:04 2026 Summary: Security update for jline3 Type: security Severity: important References: 1269021,1270083,CVE-2026-56740,CVE-2026-56741 This update for jline3 fixes the following issues: Update to upstream version 3.30.15. - CVE-2026-56741: missing upper bound validation of terminal dimensions received via the Telnet NAWS option allows an unauthenticated remote attacker to cause CPU exhaustion and a Telnet server DoS (bsc#1270083). - CVE-2026-56740: no limit set for environment variables a client may inject via the Telnet NEW-ENVIRON option allows an unauthenticated attacker to cause JVM heap memory exhaustion and a Telnet server DoS (bsc#1269021). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3578-1 Released: Tue Aug 11 15:58:41 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1271712 This update for openssl-1_1 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4041-1 Released: Mon Sep 7 10:29:44 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1274774,1274788,1274795,CVE-2026-54874,CVE-2026-63072 This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4684-1 Released: Thu Oct 15 14:36:53 2026 Summary: Security update for jline3 Type: security Severity: low References: This update for jline3 fixes the following issue: - Update to version 3.30.17: + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) + Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) + Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3) + TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4754-1 Released: Tue Oct 20 12:50:53 2026 Summary: Security update for python3 Type: security Severity: important References: 1257599,1259735,1259989,1261970,1262467,1263083,1263443,1264962,1265268,1266669,1267581,1267821,1267974,1268977,1269066,1269788,1269959,1271192,1273091,1273148,1274683,1276223,1276226,1276227,1276903,1277111,1277271,1280459,CVE-2026-0864,CVE-2026-11940,CVE-2026-11972,CVE-2026-13346,CVE-2026-15308,CVE-2026-15310,CVE-2026-15806,CVE-2026-1703,CVE-2026-17084,CVE-2026-18503,CVE-2026-19672,CVE-2026-3219,CVE-2026-3276,CVE-2026-3446,CVE-2026-3479,CVE-2026-4224,CVE-2026-4360,CVE-2026-6019,CVE-2026-6357,CVE-2026-6879,CVE-2026-7210,CVE-2026-7774,CVE-2026-82049,CVE-2026-8328,CVE-2026-8643,CVE-2026-9669 This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). - CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442 bsc#1263443). - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268). - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). - CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). - CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: - Fix an error that returned non-zero exit status 1 (bsc#1277271). - Fix regression in `http.cookies` (bsc#1263083). - Update bundled pip wheels to pip-20.0.2-py2.py3-none-any.whl. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5189-1 Released: Wed Nov 11 08:40:52 2026 Summary: Security update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn Type: security Severity: important References: 1266783,1269222,1284020,1284124,CVE-2024-12798,CVE-2024-12801,CVE-2025-11226,CVE-2026-104721,CVE-2026-10532,CVE-2026-1225,CVE-2026-13006,CVE-2026-19880,CVE-2026-9828 This update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn fixes the following issues: apache-parent was updated to 40: * Breaking changes + Replace nicoulaj checksum plugin with maveniverse checksum plugin + #586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 + Property version.maven-surefire was removed in #588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Fix several version property issues * Documentation updates + Update documentation for push-to-atr profile + Restore the common wording on the download page * Maintenance + Add local maven configuration for ATR project name override + Remove custom name-template for release-drafter + Port the site documentation from APT to Markdown Update to 39: * New features and improvements + add push-to-atr profile Update to 38: * Maintenance + Update banner links Update to 37: * New features and improvements + Disable parallel PUT on release Update to 36: * Breaking changes + Update minimum maven version to match current stable version (3.6.3 -> 3.9) + Introduce javaVersion property for maven.compiler.* configuration + Switch JDK >= 9 to only use maven.compiler.release * New features and improvements + Add default specification and implementation for javadoc and source manifest entries * Documentation updates + Clarify how to use Apache Snapshot repository + activate Fluido skin's anchorJs * Maintenance + Avoid - WARNING: Use of the three-letter time zone ID ... on JDK 25 for RAT plugin + feat: enable prevent branch protection rules - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of the bnd-maven-plugin distributed as a part of aqute-bnd 3.5.0 - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of aqute-bnd 3.5.0 Upgrade to version 2.14.0 * Support for serializing and deserializing Java records * Add JsonArray.asList and JsonObject.asMap view methods * Add Gson.fromJson(..., TypeToken) overloads * Make Object and JsonElement deserialization iterative rather than recursive * Add support for reflection access filter * Put module-info.class into Multi-Release JAR folder * Add GsonBuilder.disableJdkUnsafe() - Add BuildRequires on google-errorprone-annotations for compiling and Javadoc generation - Refactor ant build to support Java 9+ modular compilation of module-info.java - Rewrite the build system for ant to avoid potential build cycles with upcoming Maven 4 Upgrade to upstream version 1.6.5 * Changes of version 1.6.5 + Fixed a vulnerability (bsc#1284124, CVE-2026-104721) closely related to CVE-2026-19880 (bsc#1284020). The fix made in version 1.6.3, which strips forward and backward slashes from MDC values, was not sufficient. An MDC value could still contain relative path components such as .., variable references such as /, or characters that are special in file name patterns and email addresses. MDCBasedDiscriminator, used by SiftingAppender, now rejects MDC values instead of stripping characters from them. An MDC value is rejected if it is empty, if it is longer than 64 characters, if it contains the sequence .., or if it contains any of the following characters: / \ $ { } [ ] ( ) | ? * + % , @. When an MDC value is rejected, the discriminator returns the value of its DefaultValue property. A warning is emitted for each rejected value. These warnings are rate-limited. + When compression is enabled, TimeBasedRollingPolicy and SizeAndTimeBasedRollingPolicy now also remove old log files that were never compressed, for example because the application was not running at rollover time. Previously, such files were ignored by maxHistory and accumulated indefinitely. + SimpleInvocationGate, deprecated in version 1.6.3, is now marked for removal. Use FixedIntervalInvocationGate instead. * Changes of version 1.6.4 + Variable substitution is again applied to the scan attribute of the element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of . + OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes. + Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock. + Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. + TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. + If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi. + The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter. * Changes of version 1.6.3 + In relation to CVE-2026-19880 (bsc#1284020), MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes). + Colour console support is split out into a dedicated JansiConsoleAppender (ch.qos.logback.core.JansiConsoleAppender). It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. + The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set true continue to work for compatibility, but new setups should use JansiConsoleAppender instead. + ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. + Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate. + The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor. * Changes of version 1.6.2 + Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung. + Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file: + SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access. + Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point. + Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture. + Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12. * Changes of version 1.6.1 + In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. `.gz`, `.zip`, `.xz`). Previously it used a nanotime-based `.tmp` suffix. This makes the file easier to identify if compression fails during rollover. + On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact. + ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. + LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. + FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. + More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise. Upgrade to upstream version 1.6.0 * Notable changes In version 1.5.37 and subsequently in 1.6.x, support for Janino-based conditional expressions was removed. Evaluating arbitrary Java expressions with the Janino library had led to numerous security vulnerabilities. If you are upgrading from a version earlier than 1.5.37 and your configuration files still use those older Janino-style conditionals, you must migrate them to the new format using the element (available since version version 1.5.20). The element accepts implementations of the PropertyCondition interface to decide whether a branch of the configuration should apply. Logback-core ships with several implementations of said interface. For details, see the https://logback.qos.ch/manual/configuration.html#conditional * Changes + Removed deprecated variables - ch.qos.logback.classic.PatternLayout#DEFAULT_CONVERTER_MAP - ch.qos.logback.classic.PatternLayout#defaultConverterMap - ch.qos.logback.classic.util.ContextInitializer #AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #TEST_AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #CONFIG_FILE_PROPERTY + Remove deprecated methods - ch.qos.logback.classic.PatternLayout #getDefaultConverterMap() - ch.qos.logback.core.util.ExecutorServiceUtil #newExecutorService() - ch.qos.logback.core.util.VersionUtil #getVersionOfArtifact(Class) - ch.qos.logback.core.pattern.PatternLayoutBase #setContextForConverters - ch.qos.logback.core.pattern.PatternLayoutEncoderBase #setOutputPatternAsPresentationHeader - ch.qos.logback.core.joran.spi.ConfigurationWatchList #changeDetected - ch.qos.logback.core.joran.GenericXMLConfigurator #informContextOfURLUsedForConfiguration - ch.qos.logback.core.model.ModelUtil#setProperty - ch.qos.logback.core.model.ModelUtil#setProperties - ch.qos.logback.core.joran.action.PreconditionValidator #generic - ch.qos.logback.core.util.EnvUtil#logbackVersion - ch.qos.logback.classic.util.ClassicEnvUtil #getVersionOfLogbackClassic + Remove deprecated class - ch.qos.logback.classic.turbo.ReconfigureOnChangeFilter + In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes + Bump SLF4J dependency to version 2.0.18. Upgrade to upstream version 1.5.38 * Change of 1.5.38 + In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered * Change of 1.5.37 + Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed - Do not use the slf4j2 compatibility package, as the base slf4j package is now on version 2.0.18 Upgrade to upstream version 1.5.36 * Changes of 1.5.36 + The 'condition' attribute in elements now reject certain references that are associated with ACE attacks (bsc#1269222, CVE-2026-13006). * Changes of 1.5.35 + The 'condition' attribute in elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions (bsc#1269222, CVE-2026-13006). Please note that the version 1.5.36 provides the full fix to this vulnerability. + Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error. + ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection. + The logback-examples module is now included in the set of artifacts published to Maven Central. + JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods. Upgrade to upstream version 1.5.34 * General changes between series + The 1.2.x series has been deprecated for several years and is no longer maintained + In Logback 1.2.x/1.3.x, few optional components depend on Java EE, whereas in logback versions 1.4.x/1.5.x, these optional components depend on Jakarta EE. The 1.5.x series continues the 1.4.x series, but with logback-access relocated to its own repository * Fixes + In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException (#1040) + HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes (bsc#1266783, CVE-2026-10532) + PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan='true' attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs (issues/1034) + When processing elements and both class and converterClass attributes are specified, silently use the class attribute without issuing a warning. However, if the attribute values differ, a warning will be issued (issues/1031) + HardenedModelInputStream will no longer accept to deserialize all classes located under the 'java.lang' and 'java.util' packages but only a limited number of explicitly authorized classes in those packages (bsc#1266783, CVE-2026-9828) + SSL parameters for SSLSocketAppender now enable hostname verification by default. Moreover, the default protocol is now 'TLSv1.2' + When printing the status message field, ViewStatusMessagesServletBase now escapes special characters such as '&' as character entities - Require apache-parent 40+ because of changed version variables for surefire plugins Upgrade to Apache Maven parent POM version 50 * Breaking changes + Update configuration for apache-rat-plugin 0.18 + Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 + Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Exclude dev-tooling dotfiles from RAT check * Documentation updates + Document optional repository profiles for Apache snapshots and staging Upgrade to Apache Maven parent POM version 49 * New features and improvements + Upgrade parent to 39 to benefit from push-to-atr profile Upgrade to Apache Maven parent POM version 48 * New features and improvements + Add configuration for rerunning failing integration tests * Bug Fixes + Fix enforce-bytecode-version configuration for ignored scopes * Maintenance + Update banner links + Simplify docs configuration + Remove taglist/jxr/checkstyle/surefire/pmd-reports + Update Maven logos Upgrade to Apache Maven parent POM version 47 Upgrade to Apache Maven parent POM version 46 * Breaking changes + Require Maven 3.6.3+ from plugins + Update rat plugin configuration + Use spotless 3 when running on JDK >= 17 + Drop Doxia Tools parent pom * New features and improvements + MPOM-387: Exclude test scope from enforcedBytecodeVersion + feat: activate Fluido skin's anchorJs + Enhance target JDK definition for JDK >= 9 + Always render a GitHub ribbon on the right-hand side * Maintenance + MPOM-277: Move maven-invoker-plugin configuration to one place + Remove doxia-tools from documentations + feat: enable prevent branch protection rules + Add Apache 2.0 LICENSE file Upgrade to Apache Maven parent POM version 45 * New features and improvements + Use a standard tag template for releases * Bug Fixes + Use spotless / palantirJavaFormat - 2.56.0 for all JDKs * Build + Allow manually executing release-drafter Upgrade to Apache Maven parent POM version 44 * Breaking changes + Move snapshot repositories in a profile + Check test code by checkstyle * New features and improvements + Move snapshot repositories in a profile + Introduce property maven.site.path.suffix to allow override site path + Use v@{project.version} as tag template for releases + import KEYS history from svn + Add licenseText to modello + Update site descriptor to 2.0 + Check test code by checkstyle + Add issues templates + Accept all line endings with spotless + Enable automatic formatter when not on CI + Bump com.diffplug.spotless:spotless-maven-plugin to enable the sortpom/quiet option * Bug Fixes + Fix asf.yaml syntax + Skip render empty taglist report Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x - Set buildshell to bash for '<<<'. Upgrade to upstream version 1.4.2 * Bug: + MRESOLVER-38 - SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 - PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 - make build Reproducible Upgrade to upstream version 1.4.1 * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client * Dependency updates + Bump org.redisson:redisson from 3.52.0 to 4.2.0 + Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 + Bump org.apache.maven:maven-parent from 46 to 47 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.0 to 0.25.4 + Bump mavenVersion from 3.9.11 to 3.9.12 Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test * Dependency updates + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.1 to 0.25.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 + Bump commons-codec:commons-codec from 1.18.0 to 1.20.0 + Bump org.redisson:redisson from 3.50.0 to 3.52.0 + Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre + Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 + Bump jettyVersion from 9.4.57.v20241219 to 9.4.58.v20250814 + Bump mavenVersion from 3.9.10 to 3.9.11 Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x Upgrade to upstream version 1.4.2: * Bug: + MRESOLVER-38 SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 make build Reproducible Upgrade to upstream version 1.4.1: * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20: * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. - Require maven-parent >= 50 in order to interpolate correctly the versions of default plugins for different lifecycles Upgrade to upstream release 3.10.0 * New features and improvements + Maven 3.10.x should use Maven 3.1 validation in strict mode + Do not depend on maven-resolver-supplier-mvn3 + MNG-6797: Remember if Maven model problems were encountered. + feat: add relativePath validation + Add validation for Plexus-based plugin dependency injection + Introduce validation control + Update to Resolver 2.0.21 + MNG-5913: Allow defining aliases for existing server configurations in settings.xml * Bug Fixes + Issue #13265: let a settings server declare the repository origins its credentials may be used with + Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them + MNG-8174: Fix NPE when a property references itself in a plugin configuration (backport #12932) + Fix #13200: publish a complete set from MavenProject.getArtifacts + Fixes #13135: ensure completeness of the reactor summary, privilege failures last + Fix #13084: sandbox profile activation context for external model builds + Fix #13100: honor repositories from legitimately-active external model profiles + Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) + Scope server credentials and validate legacy relocation coordinates + Honour configured policy and validate inputs on the legacy compat paths + Add unit test for #12600 null-guard in forked executions + Fix: make ProjectIndex thread-safe for parallel builds + Fail on misconfigured plugin-requested toolchains + Resolve classified POM artifacts from the reactor in Maven 3.x + Convert paths for MSYS2 and jvm.config placeholders in bin/mvn + Preserve dependency scope in plugin artifacts * Documentation updates + docs: document plugin.xml V4 vs V3 + Port the site documentation from APT to Markdown + improve doc about deprecating plugin descriptor's requirement + Drop mention of Plexus XML * Maintenance + maintenance: Align use of profiles + Remove version from rat directory deployment + Update NOTICE file in distribution packages + Restrict what a repository-resolved model contributes to the build + Validate coordinates and repository precedence during artifact resolution + MNG-8129: Clarify relativePath validation comment + Keep plexus-cipher at 2.0: POM note + Use try-with-resources + Migrate the embedder-test-project fixture to JUnit 5 + Port the site documentation from APT to Markdown + Migrate legacy plugin Javadoc annotations in Maven Embedder tests + Replace custom GraphLogger with DependencyGraphDumper in dependency resolution + Fix UT: do not use checkout directly Upgrade to upstream preview version 3.10.0-rc-1 - Notable Changes: * New Features and Improvements + use Resolver 2.x + allow defining user-wide and installation-wide Maven extensions + Reproducible Builds is active by default + promote session.topDirectory, session.rootDirectory and project.rootDirectory properties + version range filtering + allow defining user relocations + allow using transitive dependency manager + in a failed build limit reactor summary to only failed modules + new CLI options for fine-grained update policy control: -UA (force artifact updates only), -UM (force metadata updates only), --artifacts-update-policy=, --metadata-update-policy= * New API and Updates for Maven Plugins + upgrade SLF4J to 2.x + promote MessageBuilderFactory service for colored message support + promote java version in JavaToolchain - Potentially Breaking Core Changes (if migrating from 3.9.x) * Classpath ordering change + Dependency classpath ordering changed from 'pre-order' (depth-first) to 'level-order' (breadth-first), aligning with Maven 4 behavior and Resolver 2.x defaults. + To restore the previous behavior, add -Daether.system.dependencyVisitor=preOrder to your Maven invocation. * Changes in the Super POM: + removed deprecated release-profile; each project should have its own release profile + removed plugin management; each project should have its own plugin management + set default values for project.build.sourceEncoding and project.reporting.outputEncoding to UTF-8 + avoid cycle between maven-resolver-supplier-mvn3 from maven-resolver and maven-resolver-provider from this build that are the dependencies of each other + The Maven Resolver transport has changed from Wagon to 'native HTTP', see Resolver Transport guide. - Initial packaging with version 1.9.0 Upgrade to 2.0.20: * Changes + Marker instances are slated to become immutable in future releases. As such, methods in the Marker interface adding/removing children are now marked as deprecated. Changes of version 2.0.19: * Changes + When the fluent API was used with XLogger/LoggerWrapper in the slf4j-ext module, caller location was incorrectly reported. To correct this, LoggerWrapper now delegates makeLoggingEventBuilder() to the wrapped logger so that the application caller can be correctly extracted. + In slf4j-api/DefaultLoggingEventBuilder, a failing toString() invocation on a key-value value, including StackOverflowError, no longer aborts logging. The builder now substitutes [FAILED toString()], matching the existing behaviour of MessageFormatter for message arguments. + The isLoggable() method in SLF4JPlatformLogger now maps System.Logger.Level.ALL and Level.OFF the same way as log(), that is ALL as TRACE and OFF as ERROR, instead of treating both as always loggable. + Published JAR files now package each module's own LICENSE.txt under META-INF/. Previously the parent POM copied the repository-root MIT license into every module, so Apache-2.0 modules such as jcl-over-slf4j and log4j-over-slf4j shipped the wrong license text. Upgrade to 2.0.18: * Breaking Changes & Compatibility + Minimum Java Requirement Bump: The baseline Java requirement has been upgraded from Java 5 (in the 1.7.x series) to Java 8. + New Backend Discovery Mechanism: SLF4J no longer relies on the legacy StaticLoggerBinder class-path search mechanism. It has fully migrated to using the Java ServiceLoader mechanism (SPI) to discover logging backends. Downstream logging providers (like Logback or SLF4J bridges) must be updated to versions that support ServiceLoader to function with SLF4J 2.x. + Explicit Provider Override: Introduced the slf4j.provider system property, allowing administrators or developers to explicitly specify the logging provider class, bypassing the ServiceLoader mechanism entirely for faster initialization. * New Features & Enhancements + Fluent Logging API: Introduced a backward-compatible fluent logging API (e.g., logger.atInfo().setMessage('...').log()). Existing clients using the traditional logging methods do not need to rewrite their code. + JPMS Modularity: SLF4J has been fully modularized in accordance with the Java Platform Module System (JPMS) specifications. + BOM Artifact: Introduced a Bill of Materials (BOM) file (added in 2.0.8) to help downstream projects easily synchronize and align versions across all org.slf4j bridge and API packages. * Notable Internal Fixes + MDC Initialization Race Condition: Fixed an edge-case bug where the Mapped Diagnostic Context (MDC) could be initialized before the LoggerFactory, which occasionally resulted in the MDC getting stuck using an incorrect MDCAdapter instance. The following package changes have been done: - apache-commons-cli-1.9.0-150200.3.11.1 updated - glassfish-annotation-api-1.3.2-150200.3.6.1 updated - httpcomponents-core-4.4.14-150200.3.11.1 updated - jline3-native-3.30.17-150200.5.11.1 added - libopenssl1_1-1.1.1w-150700.11.35.1 added - maven-resolver-api-2.0.24-150200.3.32.3 updated - slf4j-2.0.20-150200.3.7.1 updated - google-gson-2.14.0-150200.3.13.2 updated - jline3-terminal-3.30.17-150200.5.11.1 added - libpython3_6m1_0-3.6.15-150300.10.129.1 added - python3-base-3.6.15-150300.10.129.1 added - python3-3.6.15-150300.10.129.1 added - maven-resolver-util-2.0.24-150200.3.32.3 updated - maven-wagon-provider-api-3.5.3-150200.3.10.1 updated - httpcomponents-client-4.5.14-150200.3.14.2 updated - maven-resolver-named-locks-2.0.24-150200.3.32.3 updated - jcl-over-slf4j-2.0.20-150200.3.7.1 updated - maven-resolver-spi-2.0.24-150200.3.32.3 updated - jline3-terminal-jni-3.30.17-150200.5.11.1 added - jline3-jansi-core-3.30.17-150200.5.11.1 added - maven-wagon-file-3.5.3-150200.3.10.1 updated - maven-wagon-http-shared-3.5.3-150200.3.10.1 updated - maven-resolver-transport-wagon-2.0.24-150200.3.32.3 updated - maven-resolver-transport-file-2.0.24-150200.3.32.3 updated - maven-resolver-transport-apache-2.0.24-150200.3.32.3 added - maven-resolver-impl-2.0.24-150200.3.32.3 updated - maven-resolver-connector-basic-2.0.24-150200.3.32.3 updated - maven-wagon-http-3.5.3-150200.3.10.1 updated - maven-lib-3.10.0-150200.4.36.1 updated - maven-3.10.0-150200.4.36.1 updated - cal10n-0.8.1.10-150200.11.6.3 removed - hamcrest-3.0-150200.12.22.1 removed - jansi-2.4.0-150200.3.9.1 removed - junit-4.13.2-150200.3.17.1 removed - maven-resolver-transport-http-1.9.27-150200.3.29.1 removed - maven-shared-utils-3.4.2-150200.3.10.1 removed From sle-container-updates at lists.suse.com Thu Nov 12 09:51:26 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:51:26 +0100 (CET) Subject: SUSE-CU-2026:13999-1: Security update of bci/openjdk-devel Message-ID: <20261112095126.2FC13FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:13999-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21-sles15 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-25.96 Container Release : 25.96 Severity : important Type : security References : 1180125 1183374 1183858 1185588 1186819 1187338 1187668 1188607 1189241 1189287 1189659 1190566 1192249 1193179 1198511 1202624 1203125 1203355 1203750 1204577 1205244 1208443 1208471 1210638 1211158 1214691 1214692 1219559 1219666 1220664 1221563 1221854 1222075 1222109 1226447 1226448 1227233 1227378 1227999 1228780 1229596 1230227 1230906 1231795 1232241 1233012 1233307 1233307 1236705 1243273 1244032 1244056 1244059 1244060 1244061 1244401 1244705 1246697 1247249 1250232 1250782 1250782 1251305 1252974 1254400 1254401 1254997 1256834 1256835 1256836 1256837 1256838 1256839 1256840 1257029 1257031 1257041 1257042 1257044 1257046 1257181 1257599 1259611 1259734 1259735 1259735 1259989 1259989 1260026 1260441 1260442 1260443 1260444 1261678 1261969 1261970 1261970 1262098 1262319 1262467 1262654 1263083 1263443 1264962 1265268 1266340 1266341 1266342 1266349 1266357 1266669 1266783 1267581 1267821 1267974 1268977 1269021 1269066 1269222 1269788 1269959 1270083 1271192 1271712 1273091 1273148 1274683 1274774 1274788 1274795 1276223 1276226 1276227 1276903 1277111 1277271 1280459 1280587 1280589 1280591 1280597 1280598 1284020 1284124 831629 CVE-2007-4559 CVE-2015-20107 CVE-2019-18348 CVE-2020-10735 CVE-2020-8492 CVE-2021-28861 CVE-2021-3426 CVE-2021-3572 CVE-2021-3733 CVE-2021-3737 CVE-2022-37454 CVE-2022-45061 CVE-2022-48566 CVE-2023-24329 CVE-2023-27043 CVE-2023-40217 CVE-2023-52425 CVE-2023-6597 CVE-2024-0397 CVE-2024-0450 CVE-2024-11168 CVE-2024-11168 CVE-2024-12718 CVE-2024-12798 CVE-2024-12801 CVE-2024-4032 CVE-2024-5642 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-9287 CVE-2025-0938 CVE-2025-11226 CVE-2025-11468 CVE-2025-12084 CVE-2025-13462 CVE-2025-13836 CVE-2025-13837 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 CVE-2025-4516 CVE-2025-4517 CVE-2025-6069 CVE-2025-6075 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2025-8194 CVE-2025-8291 CVE-2025-9230 CVE-2026-0672 CVE-2026-0864 CVE-2026-0865 CVE-2026-104721 CVE-2026-10532 CVE-2026-11940 CVE-2026-11972 CVE-2026-1225 CVE-2026-1299 CVE-2026-13006 CVE-2026-13346 CVE-2026-1502 CVE-2026-15308 CVE-2026-15310 CVE-2026-15806 CVE-2026-1703 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-19880 CVE-2026-22795 CVE-2026-22796 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789 CVE-2026-3219 CVE-2026-3276 CVE-2026-34180 CVE-2026-3446 CVE-2026-3446 CVE-2026-3479 CVE-2026-3479 CVE-2026-35189 CVE-2026-3644 CVE-2026-4224 CVE-2026-4224 CVE-2026-42766 CVE-2026-4360 CVE-2026-4519 CVE-2026-45447 CVE-2026-4786 CVE-2026-54872 CVE-2026-54874 CVE-2026-56740 CVE-2026-56741 CVE-2026-6019 CVE-2026-6019 CVE-2026-6100 CVE-2026-63072 CVE-2026-6357 CVE-2026-6879 CVE-2026-7210 CVE-2026-7383 CVE-2026-75806 CVE-2026-77696 CVE-2026-7774 CVE-2026-82049 CVE-2026-8328 CVE-2026-84782 CVE-2026-8643 CVE-2026-9076 CVE-2026-9669 CVE-2026-9828 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:2997-1 Released: Thu Sep 9 14:37:34 2021 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1187338,1189659 This update for python3 fixes the following issues: - Fixed an issue when the missing 'stropts.h' causing build errors for different python modules. (bsc#1187338) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2021:4104-1 Released: Thu Dec 16 11:14:12 2021 Summary: Security update for python3 Type: security Severity: moderate References: 1180125,1183374,1183858,1185588,1187668,1189241,1189287,CVE-2021-3426,CVE-2021-3733,CVE-2021-3737 This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - CVE-2021-3737: Fixed ReDoS in urllib.request (bsc#1189287). - We do not require python-rpm-macros package (bsc#1180125). - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). - Stop providing 'python' symbol, which means python2 currently (bsc#1185588). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:48-1 Released: Tue Jan 11 09:17:57 2022 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1190566,1192249,1193179 This update for python3 fixes the following issues: - Don't use OpenSSL 1.1 on platforms which don't have it. - Remove shebangs from python-base libraries in '_libdir'. (bsc#1193179, bsc#1192249). - Build against 'openssl 1.1' as it is incompatible with 'openssl 3.0+' (bsc#1190566) - Fix for permission error when changing the mtime of the source file in presence of 'SOURCE_DATE_EPOCH'. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:942-1 Released: Thu Mar 24 10:30:15 2022 Summary: Security update for python3 Type: security Severity: moderate References: 1186819,CVE-2021-3572 This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:2357-1 Released: Mon Jul 11 20:34:20 2022 Summary: Security update for python3 Type: security Severity: important References: 1198511,CVE-2015-20107 This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3544-1 Released: Thu Oct 6 13:48:42 2022 Summary: Security update for python3 Type: security Severity: important References: 1202624,CVE-2021-28861 This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4281-1 Released: Tue Nov 29 15:46:10 2022 Summary: Security update for python3 Type: security Severity: important References: 1188607,1203125,1204577,CVE-2019-18348,CVE-2020-10735,CVE-2020-8492,CVE-2022-37454 This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125) The following non-security bug was fixed: - Fixed a crash in the garbage collection (bsc#1188607). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:549-1 Released: Mon Feb 27 17:35:07 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1205244,1208443,CVE-2022-45061 This update for python3 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). Bugfixes: - Fixed issue where email.generator.py replaces a non-existent header (bsc#1208443). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important References: 1203355,1208471,CVE-2023-24329 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2517-1 Released: Thu Jun 15 07:09:52 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1203750,1211158,CVE-2007-4559 This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3828-1 Released: Wed Sep 27 19:07:38 2023 Summary: Security update for python3 Type: security Severity: important References: 1214692,CVE-2023-40217 This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:581-1 Released: Wed Feb 21 14:08:16 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1210638,CVE-2023-27043 This update for python3 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:901-1 Released: Thu Mar 14 17:49:10 2024 Summary: Security update for python3 Type: security Severity: important References: 1214691,1219666,CVE-2022-48566,CVE-2023-6597 This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2022-48566: Make compare_digest more constant-time (bsc#1214691). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:1279-1 Released: Fri Apr 12 21:35:09 2024 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1222109 This update for python3 fixes the following issue: - Fix syslog making default 'ident' from sys.argv (bsc#1222109) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:2479-1 Released: Mon Jul 15 10:33:22 2024 Summary: Security update for python3 Type: security Severity: important References: 1219559,1220664,1221563,1221854,1222075,1226447,1226448,CVE-2023-52425,CVE-2024-0397,CVE-2024-0450,CVE-2024-4032 This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854). - CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448) - CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3470-1 Released: Fri Sep 27 14:34:46 2024 Summary: Security update for python3 Type: security Severity: important References: 1227233,1227378,1227999,1228780,1229596,1230227,CVE-2024-5642,CVE-2024-6232,CVE-2024-6923,CVE-2024-7592 This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API (bsc#1227233). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596). - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999). - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3879-1 Released: Fri Nov 1 17:04:25 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1230906,1232241,CVE-2024-9287 This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:4185-1 Released: Thu Dec 5 06:54:31 2024 Summary: Recommended update for picocli Type: recommended Severity: moderate References: This update for picocli fixes the following issues: picocli was updated from version 4.7.5 to 4.7.6: - Improved property loading and logging. - Fixed bugs related to default values, null pointer exceptions, optional arguments, mixins, and custom type converters. - Clarified documentation for negatable options and exception handling. - The binaries are compatible with java 1.8 ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:4193-1 Released: Thu Dec 5 12:01:40 2024 Summary: Security update for python3 Type: security Severity: low References: 1231795,1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Remove -IVendor/ from python-config (bsc#1231795) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:554-1 Released: Fri Feb 14 16:10:40 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1236705,CVE-2025-0938 This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:1056-1 Released: Fri Mar 28 18:06:22 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:2778-1 Released: Wed Aug 13 08:45:57 2025 Summary: Security update for python3 Type: security Severity: important References: 1233012,1243273,1244032,1244056,1244059,1244060,1244061,1244401,1244705,1247249,831629,CVE-2024-12718,CVE-2025-4138,CVE-2025-4330,CVE-2025-4435,CVE-2025-4516,CVE-2025-4517,CVE-2025-6069,CVE-2025-8194 This update for python3 fixes the following issues: - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273). - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory (bsc#1244060) - CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061) - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: - Limit buffer size for IPv6 address parsing (bsc#1244401). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:2890-1 Released: Tue Aug 19 09:54:32 2025 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1246697 This update for openssl-1_1 fixes the following issues: - FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test instead of NID_secp256k1. [bsc#1246697] ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:3635-1 Released: Fri Oct 17 16:33:06 2025 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250232,CVE-2025-9230 This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: fixed out of bounds read and write in RFC 3211 KEK unwrap (bsc#1250232) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:4368-1 Released: Thu Dec 11 16:12:16 2025 Summary: Security update for python3 Type: security Severity: low References: 1251305,1252974,CVE-2025-6075,CVE-2025-8291 This update for python3 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:27-1 Released: Mon Jan 5 13:45:08 2026 Summary: Security update for python3 Type: security Severity: moderate References: 1254400,1254401,1254997,CVE-2025-12084,CVE-2025-13836,CVE-2025-13837 This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) - CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:331-1 Released: Wed Jan 28 18:12:49 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1256834,1256835,1256836,1256837,1256838,1256839,1256840,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,CVE-2025-69421,CVE-2026-22795,CVE-2026-22796 This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838). - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835). - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:664-1 Released: Thu Feb 26 16:15:04 2026 Summary: Security update for python3 Type: security Severity: important References: 1257029,1257031,1257041,1257042,1257044,1257046,CVE-2025-11468,CVE-2025-15282,CVE-2025-15366,CVE-2025-15367,CVE-2026-0672,CVE-2026-0865 This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel (bsc#1257031). - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers (bsc#1257042). - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1090-1 Released: Thu Mar 26 18:44:54 2026 Summary: Security update for python3 Type: security Severity: important References: 1257181,CVE-2026-1299 This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1386-1 Released: Thu Apr 16 11:17:06 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1260441,1260442,1260443,1260444,1261678,CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31789 This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). - CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1715-1 Released: Wed May 6 14:09:30 2026 Summary: Security update for python3 Type: security Severity: important References: 1259611,1259734,1259735,1259989,1260026,1261969,1261970,1262098,1262319,1262654,CVE-2025-13462,CVE-2026-1502,CVE-2026-3446,CVE-2026-3479,CVE-2026-3644,CVE-2026-4224,CVE-2026-4519,CVE-2026-4786,CVE-2026-6019,CVE-2026-6100 This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989). - CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass (bsc#1259734). - CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735). - CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser command line option injection (bsc#1260026). - CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection (bsc#1262319). - CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654). - CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is under memory pressure(bsc#1262098). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:2041-1 Released: Thu May 21 16:29:18 2026 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1250782 This update for openssl-1_1 fixes the following issues: - Fix 30-test_fips_sli.t fails intermittently on s390x (bsc#1250782): * Fix AES_GCM IV test sometimes failing on s390x. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:2392-1 Released: Mon Jun 15 10:05:31 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250782,1266340,1266341,1266342,1266349,1266357,CVE-2026-34180,CVE-2026-42766,CVE-2026-45447,CVE-2026-7383,CVE-2026-9076 This update for openssl-1_1 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3183-1 Released: Wed Jul 22 09:26:04 2026 Summary: Security update for jline3 Type: security Severity: important References: 1269021,1270083,CVE-2026-56740,CVE-2026-56741 This update for jline3 fixes the following issues: Update to upstream version 3.30.15. - CVE-2026-56741: missing upper bound validation of terminal dimensions received via the Telnet NAWS option allows an unauthenticated remote attacker to cause CPU exhaustion and a Telnet server DoS (bsc#1270083). - CVE-2026-56740: no limit set for environment variables a client may inject via the Telnet NEW-ENVIRON option allows an unauthenticated attacker to cause JVM heap memory exhaustion and a Telnet server DoS (bsc#1269021). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3578-1 Released: Tue Aug 11 15:58:41 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1271712 This update for openssl-1_1 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4041-1 Released: Mon Sep 7 10:29:44 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1274774,1274788,1274795,CVE-2026-54874,CVE-2026-63072 This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4684-1 Released: Thu Oct 15 14:36:53 2026 Summary: Security update for jline3 Type: security Severity: low References: This update for jline3 fixes the following issue: - Update to version 3.30.17: + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) + Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) + Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3) + TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4754-1 Released: Tue Oct 20 12:50:53 2026 Summary: Security update for python3 Type: security Severity: important References: 1257599,1259735,1259989,1261970,1262467,1263083,1263443,1264962,1265268,1266669,1267581,1267821,1267974,1268977,1269066,1269788,1269959,1271192,1273091,1273148,1274683,1276223,1276226,1276227,1276903,1277111,1277271,1280459,CVE-2026-0864,CVE-2026-11940,CVE-2026-11972,CVE-2026-13346,CVE-2026-15308,CVE-2026-15310,CVE-2026-15806,CVE-2026-1703,CVE-2026-17084,CVE-2026-18503,CVE-2026-19672,CVE-2026-3219,CVE-2026-3276,CVE-2026-3446,CVE-2026-3479,CVE-2026-4224,CVE-2026-4360,CVE-2026-6019,CVE-2026-6357,CVE-2026-6879,CVE-2026-7210,CVE-2026-7774,CVE-2026-82049,CVE-2026-8328,CVE-2026-8643,CVE-2026-9669 This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). - CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442 bsc#1263443). - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268). - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). - CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). - CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: - Fix an error that returned non-zero exit status 1 (bsc#1277271). - Fix regression in `http.cookies` (bsc#1263083). - Update bundled pip wheels to pip-20.0.2-py2.py3-none-any.whl. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5189-1 Released: Wed Nov 11 08:40:52 2026 Summary: Security update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn Type: security Severity: important References: 1266783,1269222,1284020,1284124,CVE-2024-12798,CVE-2024-12801,CVE-2025-11226,CVE-2026-104721,CVE-2026-10532,CVE-2026-1225,CVE-2026-13006,CVE-2026-19880,CVE-2026-9828 This update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn fixes the following issues: apache-parent was updated to 40: * Breaking changes + Replace nicoulaj checksum plugin with maveniverse checksum plugin + #586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 + Property version.maven-surefire was removed in #588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Fix several version property issues * Documentation updates + Update documentation for push-to-atr profile + Restore the common wording on the download page * Maintenance + Add local maven configuration for ATR project name override + Remove custom name-template for release-drafter + Port the site documentation from APT to Markdown Update to 39: * New features and improvements + add push-to-atr profile Update to 38: * Maintenance + Update banner links Update to 37: * New features and improvements + Disable parallel PUT on release Update to 36: * Breaking changes + Update minimum maven version to match current stable version (3.6.3 -> 3.9) + Introduce javaVersion property for maven.compiler.* configuration + Switch JDK >= 9 to only use maven.compiler.release * New features and improvements + Add default specification and implementation for javadoc and source manifest entries * Documentation updates + Clarify how to use Apache Snapshot repository + activate Fluido skin's anchorJs * Maintenance + Avoid - WARNING: Use of the three-letter time zone ID ... on JDK 25 for RAT plugin + feat: enable prevent branch protection rules - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of the bnd-maven-plugin distributed as a part of aqute-bnd 3.5.0 - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of aqute-bnd 3.5.0 Upgrade to version 2.14.0 * Support for serializing and deserializing Java records * Add JsonArray.asList and JsonObject.asMap view methods * Add Gson.fromJson(..., TypeToken) overloads * Make Object and JsonElement deserialization iterative rather than recursive * Add support for reflection access filter * Put module-info.class into Multi-Release JAR folder * Add GsonBuilder.disableJdkUnsafe() - Add BuildRequires on google-errorprone-annotations for compiling and Javadoc generation - Refactor ant build to support Java 9+ modular compilation of module-info.java - Rewrite the build system for ant to avoid potential build cycles with upcoming Maven 4 Upgrade to upstream version 1.6.5 * Changes of version 1.6.5 + Fixed a vulnerability (bsc#1284124, CVE-2026-104721) closely related to CVE-2026-19880 (bsc#1284020). The fix made in version 1.6.3, which strips forward and backward slashes from MDC values, was not sufficient. An MDC value could still contain relative path components such as .., variable references such as /, or characters that are special in file name patterns and email addresses. MDCBasedDiscriminator, used by SiftingAppender, now rejects MDC values instead of stripping characters from them. An MDC value is rejected if it is empty, if it is longer than 64 characters, if it contains the sequence .., or if it contains any of the following characters: / \ $ { } [ ] ( ) | ? * + % , @. When an MDC value is rejected, the discriminator returns the value of its DefaultValue property. A warning is emitted for each rejected value. These warnings are rate-limited. + When compression is enabled, TimeBasedRollingPolicy and SizeAndTimeBasedRollingPolicy now also remove old log files that were never compressed, for example because the application was not running at rollover time. Previously, such files were ignored by maxHistory and accumulated indefinitely. + SimpleInvocationGate, deprecated in version 1.6.3, is now marked for removal. Use FixedIntervalInvocationGate instead. * Changes of version 1.6.4 + Variable substitution is again applied to the scan attribute of the element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of . + OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes. + Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock. + Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. + TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. + If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi. + The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter. * Changes of version 1.6.3 + In relation to CVE-2026-19880 (bsc#1284020), MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes). + Colour console support is split out into a dedicated JansiConsoleAppender (ch.qos.logback.core.JansiConsoleAppender). It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. + The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set true continue to work for compatibility, but new setups should use JansiConsoleAppender instead. + ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. + Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate. + The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor. * Changes of version 1.6.2 + Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung. + Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file: + SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access. + Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point. + Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture. + Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12. * Changes of version 1.6.1 + In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. `.gz`, `.zip`, `.xz`). Previously it used a nanotime-based `.tmp` suffix. This makes the file easier to identify if compression fails during rollover. + On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact. + ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. + LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. + FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. + More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise. Upgrade to upstream version 1.6.0 * Notable changes In version 1.5.37 and subsequently in 1.6.x, support for Janino-based conditional expressions was removed. Evaluating arbitrary Java expressions with the Janino library had led to numerous security vulnerabilities. If you are upgrading from a version earlier than 1.5.37 and your configuration files still use those older Janino-style conditionals, you must migrate them to the new format using the element (available since version version 1.5.20). The element accepts implementations of the PropertyCondition interface to decide whether a branch of the configuration should apply. Logback-core ships with several implementations of said interface. For details, see the https://logback.qos.ch/manual/configuration.html#conditional * Changes + Removed deprecated variables - ch.qos.logback.classic.PatternLayout#DEFAULT_CONVERTER_MAP - ch.qos.logback.classic.PatternLayout#defaultConverterMap - ch.qos.logback.classic.util.ContextInitializer #AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #TEST_AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #CONFIG_FILE_PROPERTY + Remove deprecated methods - ch.qos.logback.classic.PatternLayout #getDefaultConverterMap() - ch.qos.logback.core.util.ExecutorServiceUtil #newExecutorService() - ch.qos.logback.core.util.VersionUtil #getVersionOfArtifact(Class) - ch.qos.logback.core.pattern.PatternLayoutBase #setContextForConverters - ch.qos.logback.core.pattern.PatternLayoutEncoderBase #setOutputPatternAsPresentationHeader - ch.qos.logback.core.joran.spi.ConfigurationWatchList #changeDetected - ch.qos.logback.core.joran.GenericXMLConfigurator #informContextOfURLUsedForConfiguration - ch.qos.logback.core.model.ModelUtil#setProperty - ch.qos.logback.core.model.ModelUtil#setProperties - ch.qos.logback.core.joran.action.PreconditionValidator #generic - ch.qos.logback.core.util.EnvUtil#logbackVersion - ch.qos.logback.classic.util.ClassicEnvUtil #getVersionOfLogbackClassic + Remove deprecated class - ch.qos.logback.classic.turbo.ReconfigureOnChangeFilter + In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes + Bump SLF4J dependency to version 2.0.18. Upgrade to upstream version 1.5.38 * Change of 1.5.38 + In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered * Change of 1.5.37 + Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed - Do not use the slf4j2 compatibility package, as the base slf4j package is now on version 2.0.18 Upgrade to upstream version 1.5.36 * Changes of 1.5.36 + The 'condition' attribute in elements now reject certain references that are associated with ACE attacks (bsc#1269222, CVE-2026-13006). * Changes of 1.5.35 + The 'condition' attribute in elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions (bsc#1269222, CVE-2026-13006). Please note that the version 1.5.36 provides the full fix to this vulnerability. + Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error. + ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection. + The logback-examples module is now included in the set of artifacts published to Maven Central. + JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods. Upgrade to upstream version 1.5.34 * General changes between series + The 1.2.x series has been deprecated for several years and is no longer maintained + In Logback 1.2.x/1.3.x, few optional components depend on Java EE, whereas in logback versions 1.4.x/1.5.x, these optional components depend on Jakarta EE. The 1.5.x series continues the 1.4.x series, but with logback-access relocated to its own repository * Fixes + In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException (#1040) + HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes (bsc#1266783, CVE-2026-10532) + PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan='true' attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs (issues/1034) + When processing elements and both class and converterClass attributes are specified, silently use the class attribute without issuing a warning. However, if the attribute values differ, a warning will be issued (issues/1031) + HardenedModelInputStream will no longer accept to deserialize all classes located under the 'java.lang' and 'java.util' packages but only a limited number of explicitly authorized classes in those packages (bsc#1266783, CVE-2026-9828) + SSL parameters for SSLSocketAppender now enable hostname verification by default. Moreover, the default protocol is now 'TLSv1.2' + When printing the status message field, ViewStatusMessagesServletBase now escapes special characters such as '&' as character entities - Require apache-parent 40+ because of changed version variables for surefire plugins Upgrade to Apache Maven parent POM version 50 * Breaking changes + Update configuration for apache-rat-plugin 0.18 + Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 + Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Exclude dev-tooling dotfiles from RAT check * Documentation updates + Document optional repository profiles for Apache snapshots and staging Upgrade to Apache Maven parent POM version 49 * New features and improvements + Upgrade parent to 39 to benefit from push-to-atr profile Upgrade to Apache Maven parent POM version 48 * New features and improvements + Add configuration for rerunning failing integration tests * Bug Fixes + Fix enforce-bytecode-version configuration for ignored scopes * Maintenance + Update banner links + Simplify docs configuration + Remove taglist/jxr/checkstyle/surefire/pmd-reports + Update Maven logos Upgrade to Apache Maven parent POM version 47 Upgrade to Apache Maven parent POM version 46 * Breaking changes + Require Maven 3.6.3+ from plugins + Update rat plugin configuration + Use spotless 3 when running on JDK >= 17 + Drop Doxia Tools parent pom * New features and improvements + MPOM-387: Exclude test scope from enforcedBytecodeVersion + feat: activate Fluido skin's anchorJs + Enhance target JDK definition for JDK >= 9 + Always render a GitHub ribbon on the right-hand side * Maintenance + MPOM-277: Move maven-invoker-plugin configuration to one place + Remove doxia-tools from documentations + feat: enable prevent branch protection rules + Add Apache 2.0 LICENSE file Upgrade to Apache Maven parent POM version 45 * New features and improvements + Use a standard tag template for releases * Bug Fixes + Use spotless / palantirJavaFormat - 2.56.0 for all JDKs * Build + Allow manually executing release-drafter Upgrade to Apache Maven parent POM version 44 * Breaking changes + Move snapshot repositories in a profile + Check test code by checkstyle * New features and improvements + Move snapshot repositories in a profile + Introduce property maven.site.path.suffix to allow override site path + Use v@{project.version} as tag template for releases + import KEYS history from svn + Add licenseText to modello + Update site descriptor to 2.0 + Check test code by checkstyle + Add issues templates + Accept all line endings with spotless + Enable automatic formatter when not on CI + Bump com.diffplug.spotless:spotless-maven-plugin to enable the sortpom/quiet option * Bug Fixes + Fix asf.yaml syntax + Skip render empty taglist report Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x - Set buildshell to bash for '<<<'. Upgrade to upstream version 1.4.2 * Bug: + MRESOLVER-38 - SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 - PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 - make build Reproducible Upgrade to upstream version 1.4.1 * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client * Dependency updates + Bump org.redisson:redisson from 3.52.0 to 4.2.0 + Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 + Bump org.apache.maven:maven-parent from 46 to 47 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.0 to 0.25.4 + Bump mavenVersion from 3.9.11 to 3.9.12 Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test * Dependency updates + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.1 to 0.25.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 + Bump commons-codec:commons-codec from 1.18.0 to 1.20.0 + Bump org.redisson:redisson from 3.50.0 to 3.52.0 + Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre + Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 + Bump jettyVersion from 9.4.57.v20241219 to 9.4.58.v20250814 + Bump mavenVersion from 3.9.10 to 3.9.11 Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x Upgrade to upstream version 1.4.2: * Bug: + MRESOLVER-38 SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 make build Reproducible Upgrade to upstream version 1.4.1: * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20: * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. - Require maven-parent >= 50 in order to interpolate correctly the versions of default plugins for different lifecycles Upgrade to upstream release 3.10.0 * New features and improvements + Maven 3.10.x should use Maven 3.1 validation in strict mode + Do not depend on maven-resolver-supplier-mvn3 + MNG-6797: Remember if Maven model problems were encountered. + feat: add relativePath validation + Add validation for Plexus-based plugin dependency injection + Introduce validation control + Update to Resolver 2.0.21 + MNG-5913: Allow defining aliases for existing server configurations in settings.xml * Bug Fixes + Issue #13265: let a settings server declare the repository origins its credentials may be used with + Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them + MNG-8174: Fix NPE when a property references itself in a plugin configuration (backport #12932) + Fix #13200: publish a complete set from MavenProject.getArtifacts + Fixes #13135: ensure completeness of the reactor summary, privilege failures last + Fix #13084: sandbox profile activation context for external model builds + Fix #13100: honor repositories from legitimately-active external model profiles + Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) + Scope server credentials and validate legacy relocation coordinates + Honour configured policy and validate inputs on the legacy compat paths + Add unit test for #12600 null-guard in forked executions + Fix: make ProjectIndex thread-safe for parallel builds + Fail on misconfigured plugin-requested toolchains + Resolve classified POM artifacts from the reactor in Maven 3.x + Convert paths for MSYS2 and jvm.config placeholders in bin/mvn + Preserve dependency scope in plugin artifacts * Documentation updates + docs: document plugin.xml V4 vs V3 + Port the site documentation from APT to Markdown + improve doc about deprecating plugin descriptor's requirement + Drop mention of Plexus XML * Maintenance + maintenance: Align use of profiles + Remove version from rat directory deployment + Update NOTICE file in distribution packages + Restrict what a repository-resolved model contributes to the build + Validate coordinates and repository precedence during artifact resolution + MNG-8129: Clarify relativePath validation comment + Keep plexus-cipher at 2.0: POM note + Use try-with-resources + Migrate the embedder-test-project fixture to JUnit 5 + Port the site documentation from APT to Markdown + Migrate legacy plugin Javadoc annotations in Maven Embedder tests + Replace custom GraphLogger with DependencyGraphDumper in dependency resolution + Fix UT: do not use checkout directly Upgrade to upstream preview version 3.10.0-rc-1 - Notable Changes: * New Features and Improvements + use Resolver 2.x + allow defining user-wide and installation-wide Maven extensions + Reproducible Builds is active by default + promote session.topDirectory, session.rootDirectory and project.rootDirectory properties + version range filtering + allow defining user relocations + allow using transitive dependency manager + in a failed build limit reactor summary to only failed modules + new CLI options for fine-grained update policy control: -UA (force artifact updates only), -UM (force metadata updates only), --artifacts-update-policy=, --metadata-update-policy= * New API and Updates for Maven Plugins + upgrade SLF4J to 2.x + promote MessageBuilderFactory service for colored message support + promote java version in JavaToolchain - Potentially Breaking Core Changes (if migrating from 3.9.x) * Classpath ordering change + Dependency classpath ordering changed from 'pre-order' (depth-first) to 'level-order' (breadth-first), aligning with Maven 4 behavior and Resolver 2.x defaults. + To restore the previous behavior, add -Daether.system.dependencyVisitor=preOrder to your Maven invocation. * Changes in the Super POM: + removed deprecated release-profile; each project should have its own release profile + removed plugin management; each project should have its own plugin management + set default values for project.build.sourceEncoding and project.reporting.outputEncoding to UTF-8 + avoid cycle between maven-resolver-supplier-mvn3 from maven-resolver and maven-resolver-provider from this build that are the dependencies of each other + The Maven Resolver transport has changed from Wagon to 'native HTTP', see Resolver Transport guide. - Initial packaging with version 1.9.0 Upgrade to 2.0.20: * Changes + Marker instances are slated to become immutable in future releases. As such, methods in the Marker interface adding/removing children are now marked as deprecated. Changes of version 2.0.19: * Changes + When the fluent API was used with XLogger/LoggerWrapper in the slf4j-ext module, caller location was incorrectly reported. To correct this, LoggerWrapper now delegates makeLoggingEventBuilder() to the wrapped logger so that the application caller can be correctly extracted. + In slf4j-api/DefaultLoggingEventBuilder, a failing toString() invocation on a key-value value, including StackOverflowError, no longer aborts logging. The builder now substitutes [FAILED toString()], matching the existing behaviour of MessageFormatter for message arguments. + The isLoggable() method in SLF4JPlatformLogger now maps System.Logger.Level.ALL and Level.OFF the same way as log(), that is ALL as TRACE and OFF as ERROR, instead of treating both as always loggable. + Published JAR files now package each module's own LICENSE.txt under META-INF/. Previously the parent POM copied the repository-root MIT license into every module, so Apache-2.0 modules such as jcl-over-slf4j and log4j-over-slf4j shipped the wrong license text. Upgrade to 2.0.18: * Breaking Changes & Compatibility + Minimum Java Requirement Bump: The baseline Java requirement has been upgraded from Java 5 (in the 1.7.x series) to Java 8. + New Backend Discovery Mechanism: SLF4J no longer relies on the legacy StaticLoggerBinder class-path search mechanism. It has fully migrated to using the Java ServiceLoader mechanism (SPI) to discover logging backends. Downstream logging providers (like Logback or SLF4J bridges) must be updated to versions that support ServiceLoader to function with SLF4J 2.x. + Explicit Provider Override: Introduced the slf4j.provider system property, allowing administrators or developers to explicitly specify the logging provider class, bypassing the ServiceLoader mechanism entirely for faster initialization. * New Features & Enhancements + Fluent Logging API: Introduced a backward-compatible fluent logging API (e.g., logger.atInfo().setMessage('...').log()). Existing clients using the traditional logging methods do not need to rewrite their code. + JPMS Modularity: SLF4J has been fully modularized in accordance with the Java Platform Module System (JPMS) specifications. + BOM Artifact: Introduced a Bill of Materials (BOM) file (added in 2.0.8) to help downstream projects easily synchronize and align versions across all org.slf4j bridge and API packages. * Notable Internal Fixes + MDC Initialization Race Condition: Fixed an edge-case bug where the Mapped Diagnostic Context (MDC) could be initialized before the LoggerFactory, which occasionally resulted in the MDC getting stuck using an incorrect MDCAdapter instance. The following package changes have been done: - apache-commons-cli-1.9.0-150200.3.11.1 updated - glassfish-annotation-api-1.3.2-150200.3.6.1 updated - httpcomponents-core-4.4.14-150200.3.11.1 updated - jline3-native-3.30.17-150200.5.11.1 added - libopenssl1_1-1.1.1w-150700.11.35.1 added - maven-resolver-api-2.0.24-150200.3.32.3 updated - slf4j-2.0.20-150200.3.7.1 updated - google-gson-2.14.0-150200.3.13.2 updated - jline3-terminal-3.30.17-150200.5.11.1 added - libpython3_6m1_0-3.6.15-150300.10.129.1 added - python3-base-3.6.15-150300.10.129.1 added - python3-3.6.15-150300.10.129.1 added - maven-resolver-util-2.0.24-150200.3.32.3 updated - maven-wagon-provider-api-3.5.3-150200.3.10.1 updated - httpcomponents-client-4.5.14-150200.3.14.2 updated - maven-resolver-named-locks-2.0.24-150200.3.32.3 updated - jcl-over-slf4j-2.0.20-150200.3.7.1 updated - maven-resolver-spi-2.0.24-150200.3.32.3 updated - jline3-terminal-jni-3.30.17-150200.5.11.1 added - jline3-jansi-core-3.30.17-150200.5.11.1 added - maven-wagon-file-3.5.3-150200.3.10.1 updated - maven-wagon-http-shared-3.5.3-150200.3.10.1 updated - maven-resolver-transport-wagon-2.0.24-150200.3.32.3 updated - maven-resolver-transport-file-2.0.24-150200.3.32.3 updated - maven-resolver-transport-apache-2.0.24-150200.3.32.3 added - maven-resolver-impl-2.0.24-150200.3.32.3 updated - maven-resolver-connector-basic-2.0.24-150200.3.32.3 updated - maven-wagon-http-3.5.3-150200.3.10.1 updated - maven-lib-3.10.0-150200.4.36.1 updated - maven-3.10.0-150200.4.36.1 updated - cal10n-0.8.1.10-150200.11.6.3 removed - hamcrest-3.0-150200.12.22.1 removed - jansi-2.4.0-150200.3.9.1 removed - junit-4.13.2-150200.3.17.1 removed - maven-resolver-transport-http-1.9.27-150200.3.29.1 removed - maven-shared-utils-3.4.2-150200.3.10.1 removed From sle-container-updates at lists.suse.com Thu Nov 12 09:52:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 10:52:56 +0100 (CET) Subject: SUSE-CU-2026:14000-1: Security update of bci/openjdk-devel Message-ID: <20261112095256.04095FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14000-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25-sles15 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-9.97 , bci/openjdk-devel:latest Container Release : 9.97 Severity : important Type : security References : 1180125 1183374 1183858 1185588 1186819 1187338 1187668 1188607 1189241 1189287 1189659 1190566 1192249 1193179 1198511 1202624 1203125 1203355 1203750 1204577 1205244 1208443 1208471 1210638 1211158 1214691 1214692 1219559 1219666 1220664 1221563 1221854 1222075 1222109 1226447 1226448 1227233 1227378 1227999 1228780 1229596 1230227 1230906 1231795 1232241 1233012 1233307 1233307 1236705 1243273 1244032 1244056 1244059 1244060 1244061 1244401 1244705 1246697 1247249 1250232 1250782 1250782 1251305 1252974 1254400 1254401 1254997 1256834 1256835 1256836 1256837 1256838 1256839 1256840 1257029 1257031 1257041 1257042 1257044 1257046 1257181 1257599 1259611 1259734 1259735 1259735 1259989 1259989 1260026 1260441 1260442 1260443 1260444 1261678 1261969 1261970 1261970 1262098 1262319 1262467 1262654 1263083 1263443 1264962 1265268 1266340 1266341 1266342 1266349 1266357 1266669 1266783 1267581 1267821 1267974 1268977 1269021 1269066 1269222 1269788 1269959 1270083 1271192 1271712 1273091 1273148 1274683 1274774 1274788 1274795 1276223 1276226 1276227 1276903 1277111 1277271 1280459 1280587 1280589 1280591 1280597 1280598 1284020 1284124 831629 CVE-2007-4559 CVE-2015-20107 CVE-2019-18348 CVE-2020-10735 CVE-2020-8492 CVE-2021-28861 CVE-2021-3426 CVE-2021-3572 CVE-2021-3733 CVE-2021-3737 CVE-2022-37454 CVE-2022-45061 CVE-2022-48566 CVE-2023-24329 CVE-2023-27043 CVE-2023-40217 CVE-2023-52425 CVE-2023-6597 CVE-2024-0397 CVE-2024-0450 CVE-2024-11168 CVE-2024-11168 CVE-2024-12718 CVE-2024-12798 CVE-2024-12801 CVE-2024-4032 CVE-2024-5642 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-9287 CVE-2025-0938 CVE-2025-11226 CVE-2025-11468 CVE-2025-12084 CVE-2025-13462 CVE-2025-13836 CVE-2025-13837 CVE-2025-15282 CVE-2025-15366 CVE-2025-15367 CVE-2025-4138 CVE-2025-4330 CVE-2025-4435 CVE-2025-4516 CVE-2025-4517 CVE-2025-6069 CVE-2025-6075 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2025-8194 CVE-2025-8291 CVE-2025-9230 CVE-2026-0672 CVE-2026-0864 CVE-2026-0865 CVE-2026-104721 CVE-2026-10532 CVE-2026-11940 CVE-2026-11972 CVE-2026-1225 CVE-2026-1299 CVE-2026-13006 CVE-2026-13346 CVE-2026-1502 CVE-2026-15308 CVE-2026-15310 CVE-2026-15806 CVE-2026-1703 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-19880 CVE-2026-22795 CVE-2026-22796 CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-31789 CVE-2026-3219 CVE-2026-3276 CVE-2026-34180 CVE-2026-3446 CVE-2026-3446 CVE-2026-3479 CVE-2026-3479 CVE-2026-35189 CVE-2026-3644 CVE-2026-4224 CVE-2026-4224 CVE-2026-42766 CVE-2026-4360 CVE-2026-4519 CVE-2026-45447 CVE-2026-4786 CVE-2026-54872 CVE-2026-54874 CVE-2026-56740 CVE-2026-56741 CVE-2026-6019 CVE-2026-6019 CVE-2026-6100 CVE-2026-63072 CVE-2026-6357 CVE-2026-6879 CVE-2026-7210 CVE-2026-7383 CVE-2026-75806 CVE-2026-77696 CVE-2026-7774 CVE-2026-82049 CVE-2026-8328 CVE-2026-84782 CVE-2026-8643 CVE-2026-9076 CVE-2026-9669 CVE-2026-9828 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2021:2997-1 Released: Thu Sep 9 14:37:34 2021 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1187338,1189659 This update for python3 fixes the following issues: - Fixed an issue when the missing 'stropts.h' causing build errors for different python modules. (bsc#1187338) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2021:4104-1 Released: Thu Dec 16 11:14:12 2021 Summary: Security update for python3 Type: security Severity: moderate References: 1180125,1183374,1183858,1185588,1187668,1189241,1189287,CVE-2021-3426,CVE-2021-3733,CVE-2021-3737 This update for python3 fixes the following issues: - CVE-2021-3426: Fixed information disclosure via pydoc (bsc#1183374). - CVE-2021-3733: Fixed infinitely reading potential HTTP headers after a 100 Continue status response from the server (bsc#1189241). - CVE-2021-3737: Fixed ReDoS in urllib.request (bsc#1189287). - We do not require python-rpm-macros package (bsc#1180125). - Use versioned python-Sphinx to avoid dependency on other version of Python (bsc#1183858). - Stop providing 'python' symbol, which means python2 currently (bsc#1185588). - Modify Lib/ensurepip/__init__.py to contain the same version numbers as are in reality the ones in the bundled wheels (bsc#1187668). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2022:48-1 Released: Tue Jan 11 09:17:57 2022 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1190566,1192249,1193179 This update for python3 fixes the following issues: - Don't use OpenSSL 1.1 on platforms which don't have it. - Remove shebangs from python-base libraries in '_libdir'. (bsc#1193179, bsc#1192249). - Build against 'openssl 1.1' as it is incompatible with 'openssl 3.0+' (bsc#1190566) - Fix for permission error when changing the mtime of the source file in presence of 'SOURCE_DATE_EPOCH'. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:942-1 Released: Thu Mar 24 10:30:15 2022 Summary: Security update for python3 Type: security Severity: moderate References: 1186819,CVE-2021-3572 This update for python3 fixes the following issues: - CVE-2021-3572: Fixed an improper handling of unicode characters in pip (bsc#1186819). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:2357-1 Released: Mon Jul 11 20:34:20 2022 Summary: Security update for python3 Type: security Severity: important References: 1198511,CVE-2015-20107 This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module (bsc#1198511). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:3544-1 Released: Thu Oct 6 13:48:42 2022 Summary: Security update for python3 Type: security Severity: important References: 1202624,CVE-2021-28861 This update for python3 fixes the following issues: - CVE-2021-28861: Fixed an open redirection vulnerability in the HTTP server when an URI path starts with // (bsc#1202624). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2022:4281-1 Released: Tue Nov 29 15:46:10 2022 Summary: Security update for python3 Type: security Severity: important References: 1188607,1203125,1204577,CVE-2019-18348,CVE-2020-10735,CVE-2020-8492,CVE-2022-37454 This update for python3 fixes the following issues: - CVE-2022-37454: Fixed a buffer overflow in hashlib.sha3_* implementations. (bsc#1204577) - CVE-2020-10735: Fixed a bug to limit amount of digits converting text to int and vice vera. (bsc#1203125) The following non-security bug was fixed: - Fixed a crash in the garbage collection (bsc#1188607). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:549-1 Released: Mon Feb 27 17:35:07 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1205244,1208443,CVE-2022-45061 This update for python3 fixes the following issues: - CVE-2022-45061: Fixed DoS when IDNA decodes extremely long domain names (bsc#1205244). Bugfixes: - Fixed issue where email.generator.py replaces a non-existent header (bsc#1208443). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:868-1 Released: Wed Mar 22 09:41:01 2023 Summary: Security update for python3 Type: security Severity: important References: 1203355,1208471,CVE-2023-24329 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:2517-1 Released: Thu Jun 15 07:09:52 2023 Summary: Security update for python3 Type: security Severity: moderate References: 1203750,1211158,CVE-2007-4559 This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2023:3828-1 Released: Wed Sep 27 19:07:38 2023 Summary: Security update for python3 Type: security Severity: important References: 1214692,CVE-2023-40217 This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:581-1 Released: Wed Feb 21 14:08:16 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1210638,CVE-2023-27043 This update for python3 fixes the following issues: - CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:901-1 Released: Thu Mar 14 17:49:10 2024 Summary: Security update for python3 Type: security Severity: important References: 1214691,1219666,CVE-2022-48566,CVE-2023-6597 This update for python3 fixes the following issues: - CVE-2023-6597: Fixed symlink bug in cleanup of tempfile.TemporaryDirectory (bsc#1219666). - CVE-2022-48566: Make compare_digest more constant-time (bsc#1214691). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:1279-1 Released: Fri Apr 12 21:35:09 2024 Summary: Recommended update for python3 Type: recommended Severity: moderate References: 1222109 This update for python3 fixes the following issue: - Fix syslog making default 'ident' from sys.argv (bsc#1222109) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:2479-1 Released: Mon Jul 15 10:33:22 2024 Summary: Security update for python3 Type: security Severity: important References: 1219559,1220664,1221563,1221854,1222075,1226447,1226448,CVE-2023-52425,CVE-2024-0397,CVE-2024-0450,CVE-2024-4032 This update for python3 fixes the following issues: - CVE-2023-52425: Fixed backport so it uses features sniffing, not just comparing version number (bsc#1219559). - CVE-2024-0450: Fixed detecting the vulnerability of 'quoted-overlap' zipbomb (bsc#1221854). - CVE-2024-4032: Rearranging definition of private v global IP. (bsc#1226448) - CVE-2024-0397: Remove a memory race condition in ssl.SSLContext certificate store methods. (bsc#1226447) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3470-1 Released: Fri Sep 27 14:34:46 2024 Summary: Security update for python3 Type: security Severity: important References: 1227233,1227378,1227999,1228780,1229596,1230227,CVE-2024-5642,CVE-2024-6232,CVE-2024-6923,CVE-2024-7592 This update for python3 fixes the following issues: - CVE-2024-6923: Fixed uncontrolled CPU resource consumption when in http.cookies module (bsc#1228780). - CVE-2024-5642: Fixed buffer overread when NPN is used and invalid values are sent to the OpenSSL API (bsc#1227233). - CVE-2024-7592: Fixed Email header injection due to unquoted newlines (bsc#1229596). - CVE-2024-6232: excessive backtracking when parsing tarfile headers leads to ReDoS. (bsc#1230227) Bug fixes: - %{profileopt} variable is set according to the variable %{do_profiling} (bsc#1227999). - Stop using %%defattr, it seems to be breaking proper executable attributes on /usr/bin/ scripts (bsc#1227378). - Remove %suse_update_desktop_file macro as it is not useful any more. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:3879-1 Released: Fri Nov 1 17:04:25 2024 Summary: Security update for python3 Type: security Severity: moderate References: 1230906,1232241,CVE-2024-9287 This update for python3 fixes the following issues: Security fixes: - CVE-2024-9287: properly quote path names provided when creating a virtual environment (bsc#1232241) Other fixes: - Drop .pyc files from docdir for reproducible builds (bsc#1230906) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2024:4185-1 Released: Thu Dec 5 06:54:31 2024 Summary: Recommended update for picocli Type: recommended Severity: moderate References: This update for picocli fixes the following issues: picocli was updated from version 4.7.5 to 4.7.6: - Improved property loading and logging. - Fixed bugs related to default values, null pointer exceptions, optional arguments, mixins, and custom type converters. - Clarified documentation for negatable options and exception handling. - The binaries are compatible with java 1.8 ----------------------------------------------------------------- Advisory ID: SUSE-SU-2024:4193-1 Released: Thu Dec 5 12:01:40 2024 Summary: Security update for python3 Type: security Severity: low References: 1231795,1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307) Other fixes: - Remove -IVendor/ from python-config (bsc#1231795) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:554-1 Released: Fri Feb 14 16:10:40 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1236705,CVE-2025-0938 This update for python3 fixes the following issues: - CVE-2025-0938: domain names containing square brackets are not identified as incorrect by urlparse. (bsc#1236705) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:1056-1 Released: Fri Mar 28 18:06:22 2025 Summary: Security update for python3 Type: security Severity: moderate References: 1233307,CVE-2024-11168 This update for python3 fixes the following issues: - CVE-2024-11168: Fixed improper validation of IPv6 and IPvFuture addresses (bsc#1233307). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:2778-1 Released: Wed Aug 13 08:45:57 2025 Summary: Security update for python3 Type: security Severity: important References: 1233012,1243273,1244032,1244056,1244059,1244060,1244061,1244401,1244705,1247249,831629,CVE-2024-12718,CVE-2025-4138,CVE-2025-4330,CVE-2025-4435,CVE-2025-4516,CVE-2025-4517,CVE-2025-6069,CVE-2025-8194 This update for python3 fixes the following issues: - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273). - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside extraction directory (bsc#1244056) - CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory, and the modification of some file metadata (bsc#1244059) - CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory (bsc#1244060) - CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061) - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with filter='data' (bsc#1244032) - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs with HTMLParser (bsc#1244705) - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249) Other fixes: - Limit buffer size for IPv6 address parsing (bsc#1244401). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2025:2890-1 Released: Tue Aug 19 09:54:32 2025 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1246697 This update for openssl-1_1 fixes the following issues: - FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test instead of NID_secp256k1. [bsc#1246697] ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:3635-1 Released: Fri Oct 17 16:33:06 2025 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250232,CVE-2025-9230 This update for openssl-1_1 fixes the following issues: - CVE-2025-9230: fixed out of bounds read and write in RFC 3211 KEK unwrap (bsc#1250232) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2025:4368-1 Released: Thu Dec 11 16:12:16 2025 Summary: Security update for python3 Type: security Severity: low References: 1251305,1252974,CVE-2025-6075,CVE-2025-8291 This update for python3 fixes the following issues: - CVE-2025-6075: quadratic complexity in `os.path.expandvars()` can lead to performance degradation when values passed to it are user-controlled (bsc#1252974). - CVE-2025-8291: lack of validity checks on the ZIP64 End of Central Directory (EOCD) record allows for the creation of ZIP archives that are processed inconsistently by the `zipfile` module (bsc#1251305). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:27-1 Released: Mon Jan 5 13:45:08 2026 Summary: Security update for python3 Type: security Severity: moderate References: 1254400,1254401,1254997,CVE-2025-12084,CVE-2025-13836,CVE-2025-13837 This update for python3 fixes the following issues: - CVE-2025-12084: cpython: Fixed quadratic algorithm in xml.dom.minidom leading to denial of service (bsc#1254997) - CVE-2025-13836: Fixed default Content-Lenght read amount from HTTP response (bsc#1254400) - CVE-2025-13837: Fixed plistlib module denial of service (bsc#1254401) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:331-1 Released: Wed Jan 28 18:12:49 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1256834,1256835,1256836,1256837,1256838,1256839,1256840,CVE-2025-68160,CVE-2025-69418,CVE-2025-69419,CVE-2025-69420,CVE-2025-69421,CVE-2026-22795,CVE-2026-22796 This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838). - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835). - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:664-1 Released: Thu Feb 26 16:15:04 2026 Summary: Security update for python3 Type: security Severity: important References: 1257029,1257031,1257041,1257042,1257044,1257046,CVE-2025-11468,CVE-2025-15282,CVE-2025-15366,CVE-2025-15367,CVE-2026-0672,CVE-2026-0865 This update for python3 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters (bsc#1257029). - CVE-2026-0672: HTTP header injection via user-controlled cookie values and parameters when using http.cookies.Morsel (bsc#1257031). - CVE-2026-0865: user-controlled header containing newlines can allow injecting HTTP headers (bsc#1257042). - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines (bsc#1257044). - CVE-2025-15282: user-controlled data URLs parsed may allow injecting headers (bsc#1257046). - CVE-2025-15367: control characters may allow the injection of additional commands (bsc#1257041). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1090-1 Released: Thu Mar 26 18:44:54 2026 Summary: Security update for python3 Type: security Severity: important References: 1257181,CVE-2026-1299 This update for python3 fixes the following issues: - CVE-2026-1299: header injection when an email is serialized due to improper newline quoting in BytesGenerator (bsc#1257181). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1386-1 Released: Thu Apr 16 11:17:06 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1260441,1260442,1260443,1260444,1261678,CVE-2026-28387,CVE-2026-28388,CVE-2026-28389,CVE-2026-28390,CVE-2026-31789 This update for openssl-1_1 fixes the following issues: - CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). - CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:1715-1 Released: Wed May 6 14:09:30 2026 Summary: Security update for python3 Type: security Severity: important References: 1259611,1259734,1259735,1259989,1260026,1261969,1261970,1262098,1262319,1262654,CVE-2025-13462,CVE-2026-1502,CVE-2026-3446,CVE-2026-3479,CVE-2026-3644,CVE-2026-4224,CVE-2026-4519,CVE-2026-4786,CVE-2026-6019,CVE-2026-6100 This update for python3 fixes the following issues: - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to misinterpretation of tar archives (bsc#1259611). - CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). - CVE-2026-3446: base64 decoding stops at first padded quad by default and ignores other information that could be processed (bsc#1261970). - CVE-2026-3479: improper resource argument validation in `pkgutil.get_data()` can lead to path traversal (bsc#1259989). - CVE-2026-3644: incomplete control character validation in http.cookies can lead to input validation bypass (bsc#1259734). - CVE-2026-4224: parsing XML with deeply nested DTD content models can lead to C stack overflow (bsc#1259735). - CVE-2026-4519: failure to sanitize leading dashes in URLs in the `webbrowser.open()` API can lead to web browser command line option injection (bsc#1260026). - CVE-2026-4786: URLs prefixed with `%action` can pass the dash-prefix safety check and allow for command injection (bsc#1262319). - CVE-2026-6019: `BaseCookie.js_output()` does not neutralize characters in cookie values embedded in JS (bsc#1262654). - CVE-2026-6100: use-after-free in `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when process is under memory pressure(bsc#1262098). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:2041-1 Released: Thu May 21 16:29:18 2026 Summary: Recommended update for openssl-1_1 Type: recommended Severity: moderate References: 1250782 This update for openssl-1_1 fixes the following issues: - Fix 30-test_fips_sli.t fails intermittently on s390x (bsc#1250782): * Fix AES_GCM IV test sometimes failing on s390x. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:2392-1 Released: Mon Jun 15 10:05:31 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1250782,1266340,1266341,1266342,1266349,1266357,CVE-2026-34180,CVE-2026-42766,CVE-2026-45447,CVE-2026-7383,CVE-2026-9076 This update for openssl-1_1 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3183-1 Released: Wed Jul 22 09:26:04 2026 Summary: Security update for jline3 Type: security Severity: important References: 1269021,1270083,CVE-2026-56740,CVE-2026-56741 This update for jline3 fixes the following issues: Update to upstream version 3.30.15. - CVE-2026-56741: missing upper bound validation of terminal dimensions received via the Telnet NAWS option allows an unauthenticated remote attacker to cause CPU exhaustion and a Telnet server DoS (bsc#1270083). - CVE-2026-56740: no limit set for environment variables a client may inject via the Telnet NEW-ENVIRON option allows an unauthenticated attacker to cause JVM heap memory exhaustion and a Telnet server DoS (bsc#1269021). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:3578-1 Released: Tue Aug 11 15:58:41 2026 Summary: Security update for openssl-1_1 Type: security Severity: moderate References: 1271712 This update for openssl-1_1 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4041-1 Released: Mon Sep 7 10:29:44 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1274774,1274788,1274795,CVE-2026-54874,CVE-2026-63072 This update for openssl-1_1 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch (bsc#1274795). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1274788). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4684-1 Released: Thu Oct 15 14:36:53 2026 Summary: Security update for jline3 Type: security Severity: low References: This update for jline3 fixes the following issue: - Update to version 3.30.17: + Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) + Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) + Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3) + TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4754-1 Released: Tue Oct 20 12:50:53 2026 Summary: Security update for python3 Type: security Severity: important References: 1257599,1259735,1259989,1261970,1262467,1263083,1263443,1264962,1265268,1266669,1267581,1267821,1267974,1268977,1269066,1269788,1269959,1271192,1273091,1273148,1274683,1276223,1276226,1276227,1276903,1277111,1277271,1280459,CVE-2026-0864,CVE-2026-11940,CVE-2026-11972,CVE-2026-13346,CVE-2026-15308,CVE-2026-15310,CVE-2026-15806,CVE-2026-1703,CVE-2026-17084,CVE-2026-18503,CVE-2026-19672,CVE-2026-3219,CVE-2026-3276,CVE-2026-3446,CVE-2026-3479,CVE-2026-4224,CVE-2026-4360,CVE-2026-6019,CVE-2026-6357,CVE-2026-6879,CVE-2026-7210,CVE-2026-7774,CVE-2026-82049,CVE-2026-8328,CVE-2026-8643,CVE-2026-9669 This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). - CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). - CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). - CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). - CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). - CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). - CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). - CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442 bsc#1263443). - CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). - CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). - CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). - CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server-supplied PASV host address (bsc#1265268). - CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669). - CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). - CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). - CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). - CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). - CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). - CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). - CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). - CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). - CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: - Fix an error that returned non-zero exit status 1 (bsc#1277271). - Fix regression in `http.cookies` (bsc#1263083). - Update bundled pip wheels to pip-20.0.2-py2.py3-none-any.whl. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5189-1 Released: Wed Nov 11 08:40:52 2026 Summary: Security update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn Type: security Severity: important References: 1266783,1269222,1284020,1284124,CVE-2024-12798,CVE-2024-12801,CVE-2025-11226,CVE-2026-104721,CVE-2026-10532,CVE-2026-1225,CVE-2026-13006,CVE-2026-19880,CVE-2026-9828 This update for apache-parent, aqute-bnd, google-gson, logback, maven, maven-artifact-transfer, maven-parent, maven-resolver, methanol, osgi-service-subsystem, slf4j, xmvn fixes the following issues: apache-parent was updated to 40: * Breaking changes + Replace nicoulaj checksum plugin with maveniverse checksum plugin + #586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 + Property version.maven-surefire was removed in #588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Fix several version property issues * Documentation updates + Update documentation for push-to-atr profile + Restore the common wording on the download page * Maintenance + Add local maven configuration for ATR project name override + Remove custom name-template for release-drafter + Port the site documentation from APT to Markdown Update to 39: * New features and improvements + add push-to-atr profile Update to 38: * Maintenance + Update banner links Update to 37: * New features and improvements + Disable parallel PUT on release Update to 36: * Breaking changes + Update minimum maven version to match current stable version (3.6.3 -> 3.9) + Introduce javaVersion property for maven.compiler.* configuration + Switch JDK >= 9 to only use maven.compiler.release * New features and improvements + Add default specification and implementation for javadoc and source manifest entries * Documentation updates + Clarify how to use Apache Snapshot repository + activate Fluido skin's anchorJs * Maintenance + Avoid - WARNING: Use of the three-letter time zone ID ... on JDK 25 for RAT plugin + feat: enable prevent branch protection rules - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of the bnd-maven-plugin distributed as a part of aqute-bnd 3.5.0 - Port to slf4j 2.x - Add dependency on osgi-service-subsystem to allow upgrade to osgi-compendium 8.0.0 Update to aqute-bnd 6.4.1 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.0 * https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic - Initial packaging of aqute-bnd 3.5.0 Upgrade to version 2.14.0 * Support for serializing and deserializing Java records * Add JsonArray.asList and JsonObject.asMap view methods * Add Gson.fromJson(..., TypeToken) overloads * Make Object and JsonElement deserialization iterative rather than recursive * Add support for reflection access filter * Put module-info.class into Multi-Release JAR folder * Add GsonBuilder.disableJdkUnsafe() - Add BuildRequires on google-errorprone-annotations for compiling and Javadoc generation - Refactor ant build to support Java 9+ modular compilation of module-info.java - Rewrite the build system for ant to avoid potential build cycles with upcoming Maven 4 Upgrade to upstream version 1.6.5 * Changes of version 1.6.5 + Fixed a vulnerability (bsc#1284124, CVE-2026-104721) closely related to CVE-2026-19880 (bsc#1284020). The fix made in version 1.6.3, which strips forward and backward slashes from MDC values, was not sufficient. An MDC value could still contain relative path components such as .., variable references such as /, or characters that are special in file name patterns and email addresses. MDCBasedDiscriminator, used by SiftingAppender, now rejects MDC values instead of stripping characters from them. An MDC value is rejected if it is empty, if it is longer than 64 characters, if it contains the sequence .., or if it contains any of the following characters: / \ $ { } [ ] ( ) | ? * + % , @. When an MDC value is rejected, the discriminator returns the value of its DefaultValue property. A warning is emitted for each rejected value. These warnings are rate-limited. + When compression is enabled, TimeBasedRollingPolicy and SizeAndTimeBasedRollingPolicy now also remove old log files that were never compressed, for example because the application was not running at rollover time. Previously, such files were ignored by maxHistory and accumulated indefinitely. + SimpleInvocationGate, deprecated in version 1.6.3, is now marked for removal. Use FixedIntervalInvocationGate instead. * Changes of version 1.6.4 + Variable substitution is again applied to the scan attribute of the element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of . + OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes. + Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock. + Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. + TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. + If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi. + The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter. * Changes of version 1.6.3 + In relation to CVE-2026-19880 (bsc#1284020), MDCBasedDiscriminator (used by SiftingAppender) now strips forward and backward slashes (/, \) from MDC values before they are used as discriminating keys. This prevents path segments from escaping into destinations controlled by an attacker. When sanitisation actually changes a value, a warning is emitted; the warning is rate-limited (a small batch, then a lull of about ten minutes). + Colour console support is split out into a dedicated JansiConsoleAppender (ch.qos.logback.core.JansiConsoleAppender). It wraps stdout or stderr with Jansi so ANSI escape sequences (for example coloured patterns) render correctly on terminals that need it, notably Windows. Prefer this class over the older path described next. + The withJansi property on ConsoleAppender is deprecated. Existing configurations that still set true continue to work for compatibility, but new setups should use JansiConsoleAppender instead. + ConsoleAppender no longer treats the process console as an exclusive resource: stopping it does not close System.out / System.err. JansiConsoleAppender pairs each AnsiConsole.systemInstall() with systemUninstall() on stop, so repeated start/stop cycles do not leave Jansi installed or tear down streams shared with the rest of the JVM. + Invocation throttling helpers were reworked: SimpleInvocationGate is renamed FixedIntervalInvocationGate, and BatchedFixedIntervalInvocationGate allows a short burst of invocations before applying a fixed lull. The sanitisation warning above uses the batched gate. + The JPMS module-info for logback-core now exports the ch.qos.logback.core.property package, which had been missing from the module descriptor. * Changes of version 1.6.2 + Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung. + Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file: + SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access. + Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point. + Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture. + Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12. * Changes of version 1.6.1 + In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. `.gz`, `.zip`, `.xz`). Previously it used a nanotime-based `.tmp` suffix. This makes the file easier to identify if compression fails during rollover. + On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact. + ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. + LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. + FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. + More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise. Upgrade to upstream version 1.6.0 * Notable changes In version 1.5.37 and subsequently in 1.6.x, support for Janino-based conditional expressions was removed. Evaluating arbitrary Java expressions with the Janino library had led to numerous security vulnerabilities. If you are upgrading from a version earlier than 1.5.37 and your configuration files still use those older Janino-style conditionals, you must migrate them to the new format using the element (available since version version 1.5.20). The element accepts implementations of the PropertyCondition interface to decide whether a branch of the configuration should apply. Logback-core ships with several implementations of said interface. For details, see the https://logback.qos.ch/manual/configuration.html#conditional * Changes + Removed deprecated variables - ch.qos.logback.classic.PatternLayout#DEFAULT_CONVERTER_MAP - ch.qos.logback.classic.PatternLayout#defaultConverterMap - ch.qos.logback.classic.util.ContextInitializer #AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #TEST_AUTOCONFIG_FILE - ch.qos.logback.classic.util.ContextInitializer #CONFIG_FILE_PROPERTY + Remove deprecated methods - ch.qos.logback.classic.PatternLayout #getDefaultConverterMap() - ch.qos.logback.core.util.ExecutorServiceUtil #newExecutorService() - ch.qos.logback.core.util.VersionUtil #getVersionOfArtifact(Class) - ch.qos.logback.core.pattern.PatternLayoutBase #setContextForConverters - ch.qos.logback.core.pattern.PatternLayoutEncoderBase #setOutputPatternAsPresentationHeader - ch.qos.logback.core.joran.spi.ConfigurationWatchList #changeDetected - ch.qos.logback.core.joran.GenericXMLConfigurator #informContextOfURLUsedForConfiguration - ch.qos.logback.core.model.ModelUtil#setProperty - ch.qos.logback.core.model.ModelUtil#setProperties - ch.qos.logback.core.joran.action.PreconditionValidator #generic - ch.qos.logback.core.util.EnvUtil#logbackVersion - ch.qos.logback.classic.util.ClassicEnvUtil #getVersionOfLogbackClassic + Remove deprecated class - ch.qos.logback.classic.turbo.ReconfigureOnChangeFilter + In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes + Bump SLF4J dependency to version 2.0.18. Upgrade to upstream version 1.5.38 * Change of 1.5.38 + In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered * Change of 1.5.37 + Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed - Do not use the slf4j2 compatibility package, as the base slf4j package is now on version 2.0.18 Upgrade to upstream version 1.5.36 * Changes of 1.5.36 + The 'condition' attribute in elements now reject certain references that are associated with ACE attacks (bsc#1269222, CVE-2026-13006). * Changes of 1.5.35 + The 'condition' attribute in elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions (bsc#1269222, CVE-2026-13006). Please note that the version 1.5.36 provides the full fix to this vulnerability. + Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error. + ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection. + The logback-examples module is now included in the set of artifacts published to Maven Central. + JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods. Upgrade to upstream version 1.5.34 * General changes between series + The 1.2.x series has been deprecated for several years and is no longer maintained + In Logback 1.2.x/1.3.x, few optional components depend on Java EE, whereas in logback versions 1.4.x/1.5.x, these optional components depend on Jakarta EE. The 1.5.x series continues the 1.4.x series, but with logback-access relocated to its own repository * Fixes + In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException (#1040) + HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes (bsc#1266783, CVE-2026-10532) + PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan='true' attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs (issues/1034) + When processing elements and both class and converterClass attributes are specified, silently use the class attribute without issuing a warning. However, if the attribute values differ, a warning will be issued (issues/1031) + HardenedModelInputStream will no longer accept to deserialize all classes located under the 'java.lang' and 'java.util' packages but only a limited number of explicitly authorized classes in those packages (bsc#1266783, CVE-2026-9828) + SSL parameters for SSLSocketAppender now enable hostname verification by default. Moreover, the default protocol is now 'TLSv1.2' + When printing the status message field, ViewStatusMessagesServletBase now escapes special characters such as '&' as character entities - Require apache-parent 40+ because of changed version variables for surefire plugins Upgrade to Apache Maven parent POM version 50 * Breaking changes + Update configuration for apache-rat-plugin 0.18 + Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 + Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin * New features and improvements + Exclude dev-tooling dotfiles from RAT check * Documentation updates + Document optional repository profiles for Apache snapshots and staging Upgrade to Apache Maven parent POM version 49 * New features and improvements + Upgrade parent to 39 to benefit from push-to-atr profile Upgrade to Apache Maven parent POM version 48 * New features and improvements + Add configuration for rerunning failing integration tests * Bug Fixes + Fix enforce-bytecode-version configuration for ignored scopes * Maintenance + Update banner links + Simplify docs configuration + Remove taglist/jxr/checkstyle/surefire/pmd-reports + Update Maven logos Upgrade to Apache Maven parent POM version 47 Upgrade to Apache Maven parent POM version 46 * Breaking changes + Require Maven 3.6.3+ from plugins + Update rat plugin configuration + Use spotless 3 when running on JDK >= 17 + Drop Doxia Tools parent pom * New features and improvements + MPOM-387: Exclude test scope from enforcedBytecodeVersion + feat: activate Fluido skin's anchorJs + Enhance target JDK definition for JDK >= 9 + Always render a GitHub ribbon on the right-hand side * Maintenance + MPOM-277: Move maven-invoker-plugin configuration to one place + Remove doxia-tools from documentations + feat: enable prevent branch protection rules + Add Apache 2.0 LICENSE file Upgrade to Apache Maven parent POM version 45 * New features and improvements + Use a standard tag template for releases * Bug Fixes + Use spotless / palantirJavaFormat - 2.56.0 for all JDKs * Build + Allow manually executing release-drafter Upgrade to Apache Maven parent POM version 44 * Breaking changes + Move snapshot repositories in a profile + Check test code by checkstyle * New features and improvements + Move snapshot repositories in a profile + Introduce property maven.site.path.suffix to allow override site path + Use v@{project.version} as tag template for releases + import KEYS history from svn + Add licenseText to modello + Update site descriptor to 2.0 + Check test code by checkstyle + Add issues templates + Accept all line endings with spotless + Enable automatic formatter when not on CI + Bump com.diffplug.spotless:spotless-maven-plugin to enable the sortpom/quiet option * Bug Fixes + Fix asf.yaml syntax + Skip render empty taglist report Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x - Set buildshell to bash for '<<<'. Upgrade to upstream version 1.4.2 * Bug: + MRESOLVER-38 - SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 - PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 - make build Reproducible Upgrade to upstream version 1.4.1 * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20 * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. Update to upstream version 1.9.27 * Bug Fixes + Sync TrackingFileManager with 2.x Update to upstream version 1.9.26 * New features and improvements + GH-1773: Treat 410 Gone as 404 Not Found + GH-1737: Revert partially parallel upload change * Bug Fixes + GH-1768; Drastically simplify auth caching + [1.9.x] Bug: GH-1703 Locally cached artifacts defy RRF * Documentation updates + Clarify that HTTP Transport uses Apache HTTP Client * Dependency updates + Bump org.redisson:redisson from 3.52.0 to 4.2.0 + Bump commons-codec:commons-codec from 1.20.0 to 1.21.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 + Bump org.apache.maven:maven-parent from 46 to 47 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.0 to 0.25.4 + Bump mavenVersion from 3.9.11 to 3.9.12 Update to upstream version 1.9.25 * New features and improvements + Add scope support for trusted checksums + Name mappers cleanup and new GAECV mapper + Proper metadata locking support + Ability to augment metadata nature for version range request * Bug Fixes + TrackingFileManager changes + Maven filters daemon friendly + Remove hack from Basic connector + Fix locking issues * Documentation updates + Updated the documentation to reflect the current list of name mappers * Maintenance + Mild backport: support same properties as Resolver 2.x + Maven resolver lockrepro + Bugfix: Java 25 broke test * Dependency updates + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.1 to 0.25.0 + Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.26 + Bump commons-codec:commons-codec from 1.18.0 to 1.20.0 + Bump org.redisson:redisson from 3.50.0 to 3.52.0 + Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre + Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 + Bump jettyVersion from 9.4.57.v20241219 to 9.4.58.v20250814 + Bump mavenVersion from 3.9.10 to 3.9.11 Update to upstream version 1.9.24 * New features and improvements + Metadata type out of coordinates + RFC9457 implementation + Intern context strings * Maintenance + Align plexus-util version with Maven + Align guice version with Maven + Enable Github Issues (1.9.x branch) - Build also maven-resolver-supplier package in separate spec file - Add dependency on objectweb-asm to build with sisu 0.9.0.M4 Update to upstream version 1.9.23 * Bug + MRESOLVER-659: NPE in trusted checksum post processor if * Improvement + MRESOLVER-680: Disable checksum by default for .sigstore.json as well + MRESOLVER-703: HTTP transport should expose config for max redirects Upgrade to upstream version 1.9.22 * Bug + MRESOLVER-572: Resolver-Supplier unusable in OSGi runtimes + MRESOLVER-574: Invalid Cookie set under proxy conditions + MRESOLVER-586: In typical setups, DefaultArtifact copies the same maps over and over again + MRESOLVER-587: Memory consumption improvements * New Feature + MRESOLVER-571: Import o.e.aether packages with the exact same version in OSGi metadata * Improvement + MRESOLVER-570: Remove excessive strictness of OSGi dependency metadata * Task + MRESOLVER-576: Allow co-release of Resolver 1.x and 2.x Upgrade to upstream version 1.9.20 * Bug + MRESOLVER-483: PreorderNodeListGenerator bug: may print trailing ':' + MRESOLVER-522: File locking threads not entering critical region were 'oversleeping' + MRESOLVER-547: BF collector always copies artifacts, even when it should not * Improvement + MRESOLVER-536: Skip setting last modified time when FS does not support it - Add dependency on plexus-xml where relevant * this will be needed for smooth upgrade to plexus-utils 4.0.0 Upgrade to upstream version 1.9.18 * Bug + MRESOLVER-372: Sporadic AccessDeniedEx on Windows + MRESOLVER-441: Undo FileUtils changes that altered non-Windows execution path * Improvement + MRESOLVER-396: Native transport should retry on HTTP 429 (Retry-After) * Task + MRESOLVER-397: Deprecate Guice modules + MRESOLVER-405: Get rid of component name string literals, make them constants and reusable + MRESOLVER-433: Expose configuration for inhibiting Expect-Continue handshake in 1.x + MRESOLVER-435: Refresh download page + MRESOLVER-437: Resolver should not override given HTTP transport default use of expect-continue handshake Upgrade to upstream version 1.9.15 * Bug + MRESOLVER-373: Remove lock upgrading code + MRESOLVER-375: Several key aspects are broken in provided and trusted checksum feature + MRESOLVER-376: StackOverflowError at BfDependencyCollector.processDependency + MRESOLVER-380: Lock diagnostic: attempted lock step is recorded, but on failed attempt is not removed + MRESOLVER-393: Transport HTTP does not retain last modified as sent by remote end * Improvement + MRESOLVER-220: Modify signaling for unsupported operations + MRESOLVER-382: Define local outgoing (bind) address + MRESOLVER-385: Reduce default value for aether.connector.http.connectionMaxTtl * Task + MRESOLVER-378: Update parent POM to 40 + MRESOLVER-381: Undo MRESOLVER-373 as it was fixed by other means + MRESOLVER-386: Make all injected ctors public, deprecate all def ctors + MRESOLVER-388: Transport HTTP old codec proper override Upgrade to upstream version 1.9.12 * Bug + [MRESOLVER-371] Unjustified WARNING log added by MRESOLVER-364 + [MRESOLVER-361] Unreliable TCP and retries on upload + [MRESOLVER-357] ConflictResolver STANDARD verbosity misbehaves + [MRESOLVER-352] Duplicate METADATA_DOWNLOADING event is being sent * Improvement + [MRESOLVER-360] disable checksum by default for .sigstore in addition to .asc * New Feature + [MRESOLVER-370] Lock factory should dump lock states on failure + [MRESOLVER-353] Make aether.checksums.algorithms settable per remote repository * Task + [MRESOLVER-366] Upgrade build plugins + [MRESOLVER-364] Revert MRESOLVER-132 + [MRESOLVER-359] Make build be explicit about build time requirements + [MRESOLVER-356] Remove Guava (is unused) + [MRESOLVER-354] Document expected checksums Upgrade to upstream version 1.9.8 * Bug + [MRESOLVER-345] Conflict resolution in verbose mode is sensitive to version ordering + [MRESOLVER-348] SslConfig httpSecurityMode change is not detected + [MRESOLVER-339] Preemptive Auth broken when default ports used + [MRESOLVER-325] [REGRESSION] Suddenly seeing I/O errors under windows aborting the build + [MRESOLVER-330] Static name mapper is unusable with file-lock factory + [MRESOLVER-314] Getting 'IllegalArgumentException: Comparison method violates its general contract!' + [MRESOLVER-316] DF collector enters endless loop when collecting org.webjars.npm:musquette:1.1.1 + [MRESOLVER-298] javax.inject should be provided or optional + [MRESOLVER-305] Evaluate blocked repositories also when retrieving metadata + [MRESOLVER-309] PrefixesRemoteRepositoryFilterSource aborts the build while it should not + [MRESOLVER-313] Artifact file permissions are 0600 and not implicitly set by umask + [MRESOLVER-296] FileProcessor.write( File, InputStream ) is defunct + [MRESOLVER-292] Documented and used param names mismatch + [MRESOLVER-294] Fix JapiCmp configuration and document it + [MRESOLVER-285] File locking on Windows knows to misbehave + [MRESOLVER-246] m-deploy-p will create hashes for hashes + [MRESOLVER-265] Discrepancy between produced and recognized checksums + [MRESOLVER-241] Resolver checksum calculation should be driven by layout + [MRESOLVER-242] When no remote checksums provided by layout, transfer inevitably fails/warns + [MRESOLVER-250] Usage of descriptors map in DataPool prevents gargabe collection * New Feature + [MRESOLVER-32] Support parallel artifact/metadata uploads + [MRESOLVER-319] Support parallel deploy + [MRESOLVER-297] Chained LRM + [MRESOLVER-167] Support forcing specific repositories for artifacts + [MRESOLVER-268] Apply artifact checksum verification for any resolved artifact + [MRESOLVER-274] Introduce Remote Repository Filter feature + [MRESOLVER-275] Introduce trusted checksums source + [MRESOLVER-276] Resolver post-processor + [MRESOLVER-278] BREAKING: Introduce RepositorySystem shutdown hooks + [MRESOLVER-236] Make it possible to resolve .asc on a 'fail' respository. * Improvement + [MRESOLVER-346] Too eager locking + [MRESOLVER-347] Better connection pool configuration (reuse, max TTL, maxPerRoute) + [MRESOLVER-349] Adapter when locking should 'give up and retry' + [MRESOLVER-350] Get rid of commons-lang dependency + [MRESOLVER-327] Make tranport-http obey system properties regarding proxy settings + [MRESOLVER-340] Make WebDAV 'dance' disabled by default + [MRESOLVER-341] Add option for preemptive PUT Auth + [MRESOLVER-315] Implement preemptive authentication feature for transport-http + [MRESOLVER-328] The transport-http should be able to ignore cert errors + [MRESOLVER-337] Real cause when artifact not found with repository filtering + [MRESOLVER-287] Get rid of deprecated finalize methods + [MRESOLVER-317] Improvements for BF collector + [MRESOLVER-318] Cleanup redundant code and centralize executor handling + [MRESOLVER-303] Make checksum detection reusable + [MRESOLVER-290] Improve file handling resolver wide + [MRESOLVER-7] Download dependency POMs in parallel in BF collector + [MRESOLVER-266] Simplify adapter creation and align configuration for it + [MRESOLVER-269] Allow more compact storage of provided checksums + [MRESOLVER-273] Create more compact File locking layout/mapper + [MRESOLVER-284] BREAKING: Some Sisu parameters needs to be bound + [MRESOLVER-286] Improve basic connector closed state handling + [MRESOLVER-240] Using breadth-first approach to resolve Maven dependencies + [MRESOLVER-247] Avoid unnecessary dependency resolution by a Skip solution based on BFS + [MRESOLVER-248] Make DF and BF collector implementations coexist * Task + [MRESOLVER-326] Resolver transport-http should retry on failures + [MRESOLVER-331] Make DefaultTrackingFileManager write directly to tracking files + [MRESOLVER-333] Distinguish better resolver errors for artifact availability + [MRESOLVER-320] Investigate slower resolving speeds as reported by users + [MRESOLVER-291] Undo MRESOLVER-284 + [MRESOLVER-279] Simplify and improve trusted checksum sources + [MRESOLVER-281] Update configurations page with new elements + [MRESOLVER-282] Drop PartialFile + [MRESOLVER-230] Make supported checksum algorithms extensible + [MRESOLVER-231] Extend 'smart checksum' feature + [MRESOLVER-234] Introduce 'provided' checksums feature + [MRESOLVER-237] Make all checksum mismatches handled same + [MRESOLVER-239] Update and sanitize dependencies + [MRESOLVER-244] Deprecate FileTransformer API + [MRESOLVER-245] Isolate Hazelcast tests * Dependency upgrade + [MRESOLVER-311] Upgrade Parent to 39 + [MRESOLVER-293] Update dependencies, align with Maven + [MRESOLVER-272] Update parent POM to 37, remove plugin version overrides, update bnd + [MRESOLVER-280] Upgrade invoker, install, deploy, require maven 3.8.4+ + [MRESOLVER-251] Upgrade Redisson to 3.17.5 + [MRESOLVER-249] Update Hazelcast to 5.1.1 in named-locks-hazelcast module - Add an alias for the wagon connector - Build against the standalone JavaEE modules unconditionally - Remove the javax.annotation:javax.annotation-api dependency on distribution versions that do not incorporate the JavaEE modules - Add the glassfish-annotation-api jar to the build classpath Upgrade to upstream version 1.7.3 * Bug + [MRESOLVER-96] - Dependency Injection fails after upgrading to Maven 3.6.2 + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ an run on Java 8 due to JDK API breakage + [MRESOLVER-189] - Using semaphore-redisson followed by rwlock-redisson on many parallel build of the same project triggers redisson error * New Feature + [MRESOLVER-90] - HTML content in POM: Maven should validate content before storing in local repo + [MRESOLVER-145] - Introduce more SyncContext implementations * Improvement + [MRESOLVER-103] - Replace deprecated HttpClient classes + [MRESOLVER-104] - maven-resolver-demo-maven-plugin uses reserved artifactId + [MRESOLVER-147] Upgrade to Java 8 + [MRESOLVER-148] - Use vanilla Guice 4 instead of forked Guice 3 + [MRESOLVER-156] - Active dependency management for Google Guice/Guava + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories + [MRESOLVER-193] - Properly type lock key names in Redis + [MRESOLVER-197] - Minors improvements (umbrella) + [MRESOLVER-204] - Add a SessionData#computeIfAbsent method + [MRESOLVER-214] - Remove clirr configuration * Task + [MRESOLVER-141] - Review index-based access to collections + [MRESOLVER-151] - Enforce a checksum policy to be provided explicitly + [MRESOLVER-152] - Perform null checks when interface contracts require it + [MRESOLVER-154] - Move SyncContextFactory interface to SPI module + [MRESOLVER-155] - Make TrackingFileManager member of DefaultUpdateCheckManager + [MRESOLVER-158] - Simplify SimpleDigest class + [MRESOLVER-159] - Mark singleton components as Sisu Singletons + [MRESOLVER-160] - Deprecate ServiceLocator + [MRESOLVER-162] - Restore binary compatibility broken by MRESOLVER-154 + [MRESOLVER-170] - Deprecate org.eclipse.aether.spi.log + [MRESOLVER-172] - Make TrackingFileManager shared singleton component + [MRESOLVER-173] - Drop deprecated AetherModule + [MRESOLVER-174] - Use all bindings in UTs and tests + [MRESOLVER-175] - Drop SyncContextFactory delegates in favor of a selector approach + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver + [MRESOLVER-183] - Don't require optional dependencies for Redisson + [MRESOLVER-184] - Destroy Redisson semaphores if not used anymore + [MRESOLVER-186] Update Maven version in Resolver Demo Snippets + [MRESOLVER-188] - Improve documentation on using the named locks with redis/hazelcast (umbrella) + [MRESOLVER-190] - [Regression] Revert MRESOLVER-184 + [MRESOLVER-191] - Document how to analyze lock issues + [MRESOLVER-196] - Document named locks configuration options + [MRESOLVER-219] - Implement NamedLock with advisory file locking + [MRESOLVER-227] - Refactor NamedLockFactorySelector to a managed component + [MRESOLVER-232] - Make SimpleNamedLockFactorySelector logic reusable * Sub-task + [MRESOLVER-198] - Replace assert by simpler but equivalent calls + [MRESOLVER-199] - Java 8 improvements + [MRESOLVER-200] - Simplify conditions with the same result and avoid extra validations + [MRESOLVER-201] - Make variables final whenever possible + [MRESOLVER-202] - Use isEmpty() instead length() <= 0 * Dependency upgrade + [MRESOLVER-185] Upgrade Redisson to 3.15.6 * Change of API and incompatible with maven-resolver < 1.7 Upgrade to upstream version 1.6.3 * Bug + [MRESOLVER-153] - resolver-status.properties file is corrupted due to concurrent writes + [MRESOLVER-171] - Resolver fails when compiled on Java 9+ and run on Java 8 due to JDK API breakage * Improvement + [MRESOLVER-168] - add DEBUG message when downloading an artifact from repositories * Task + [MRESOLVER-177] - Move pre-/post-processing of metadata from ResolveTask to DefaultMetadataResolver * Needed for maven 3.8.4 - Do not build/run the tests against the legacy guava20 package Upgrade to upstream version 1.6.2 * Sub-task + [MRESOLVER-139] - Make SimpleDigest use SHA-1 or MD5 only + [MRESOLVER-140] - Default to SHA-1 and MD5 hashing algorithms * Bug + [MRESOLVER-25] - Resume support is broken under high concurrency + [MRESOLVER-114] - ArtifactNotFoundExceptions when building in parallel + [MRESOLVER-129] - Exclusion has no setters + [MRESOLVER-137] - Make OSGi bundles reproducible + [MRESOLVER-138] - MRESOLVER-56 introduces severe performance regression * New Feature + [MRESOLVER-109] - AndDependencySelector should override toString + [MRESOLVER-115] - Make checksum algorithms configurable + [MRESOLVER-123] - Provide a global locking sync context by default + [MRESOLVER-131] - Introduce a Redisson-based SyncContextFactory + [MRESOLVER-165] - Add support for mirror selector on external:http:* + [MRESOLVER-166] - Add support for blocked repositories/mirrors * Improvement + [MRESOLVER-56] - Support SHA-256 and SHA-512 as checksums + [MRESOLVER-116] - Add page with all supported configuration options + [MRESOLVER-125] - Use type conversions returning primitives + [MRESOLVER-127] - Don't use boolean for property 'aether.updateCheckManager.sessionState' + [MRESOLVER-136] - Migrate from maven-bundle-plugin to bnd-maven-plugin * Task + [MRESOLVER-119] - Turn log messages to SLF4J placeholders + [MRESOLVER-130] - Move GlobalSyncContextFactory to a separate module + [MRESOLVER-132] - Remove synchronization in TrackingFileManager * Dependency upgrade + [MRESOLVER-105] Update Plexus Components + [MRESOLVER-106] Update HttpComponents + [MRESOLVER-107] Update Wagon Provider API to 3.4.0 + [MRESOLVER-108] Update mockito-core to 2.28.2 + [MRESOLVER-117] Upgrade SLF4J to 1.7.30 + [MRESOLVER-118] Upgrade Sisu Components to 0.3.4 * Needed for maven 3.8.x Upgrade to upstream version 1.4.2: * Bug: + MRESOLVER-38 SOE/OOME in DefaultDependencyNode.accept * Improvements: + MRESOLVER-93 PathRecordingDependencyVisitor to handle 3 cycles + MRESOLVER-102 make build Reproducible Upgrade to upstream version 1.4.1: * Task + [MRESOLVER-92] - Revert MRESOLVER-7 * Bug + [MRESOLVER-86] - ResolveArtifactMojo from resolver example uses plugin repositories to resolve dependencies * New Feature + [MRESOLVER-10] - New 'TransitiveDependencyManager' supporting transitive dependency management + [MRESOLVER-33] - New 'DefaultDependencyManager' managing dependencies on all levels supporting transitive dependency management * Improvement + [MRESOLVER-7] - Download dependency POMs in parallel + [MRESOLVER-84] - Add support for 'release' qualifier + [MRESOLVER-87] - Refresh examples to use maven-resolver artifacts for demo + [MRESOLVER-88] - Code style cleanup to use Java 7 features - Initial packaging of maven-resolver 1.3.1 Update to upstream version 2.0.24 * New features and improvements + Fix PathConflictResolver OOM on dense dependency graphs * Bug Fixes + Fix flaky IpcClientForkedTest on Windows + fix: synchronize IPC stream access + fix: propagate fatal errors from Jetty request content + Use structured logging in the IPC server + MRESOLVER-2142: Increase HTTP3 port allocation retries + Honor system proxy credentials in Apache transport * Documentation updates + docs: rewrite how-resolver-works.md to STE rules + docs: refresh resolver misconception references + docs: clarify checksum trust boundaries + fix: correct config filename to .mvn/maven.config + Use configuration key as link label * Dependency updates + Bump org.apache.maven:maven-parent from 49 to 50 + Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2 + Bump org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4 + Bump dev.sigstore:sigstore-java from 2.2.0 to 2.3.0 Update to upstream version 2.0.23 * New features and improvements + Finish the repo key story + Fix: log only once the warning in DefRemoteRepoMan + Fix #2058: Add links to configuration page + Eliminate per-node HashSet allocation in PathConflictResolver * Bug Fixes + fix: accept locally cached artifacts via same-id fallback when tracking URL changes + Fix listener error swallowing + MRESOLVER-379: Preserve relocated candidates from version ranges + Create the local repository directory before resolving its real path + Optimize TrackingFileManager unit tests and fix potential lock leaks + Validate the repository key used in checksum summary file names + fix: bound response reads and sanitize remote-derived strings + fix: earn trust labels through verification and bind tracking to URL + fix: bind credentials to origin and reject TLS downgrade redirects + fix: prevent remote signals from weakening operator-configured policy + fix: atomic file publication and authenticated IPC lock daemon + fix: deploy-side integrity must fail closed + fix: harden opt-in transport and lock backends against unauthenticated infrastructure + Compose named lock keys one segment per coordinate field + Resolve file transport locations with path operations instead of substring matching + Validate coordinate components in the Maven 2 layout and local path composer * Documentation updates + docs: Clarify trusted checksum sources + Fix #2058: Add links to configuration page * Maintenance + test: move from minio docker image + Fix listener error swallowing + Fix: tidy up f013 + Fix #2096: harden NamedLocksTrackingFileManagerTest against CI load + Carry repository provenance into aggregateRepositories + Validate the repository key used as a local repository path segment * Dependency updates + Bump org.apache.maven.plugin-tools:maven-plugin-tools-api from 3.15.2 to 3.16.0 + Bump version.slf4j from 2.0.18 to 2.0.19 + Bump org.eclipse.jetty:jetty-bom from 12.1.12 to 12.1.13 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.1 to 0.26.2 + Deps: bump to BC provider 1.85.2 + Bump org.codehaus.plexus:plexus-utils from 3.6.1 to 3.6.2 + Bump org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0 + Stop dependabot from offering guice 7 on the 1.9.x line Update to upstream version 2.0.22 * New features and improvements + Fix #1994: log exceptions from IpcNamedLock.tryUnlock() + Consider 'Retry-After' header in Java HTTP Client + Fix compilation error in DefaultRepositorySystemReentrancyTest + Extend re-entrancy detection for broken trace chains + Fix #2013: optimize TransitiveDependencyManager performance + Extract included checksums from x-amz-meta-* headers + Enh: Allow validator factory to abstain * Bug Fixes + Fix InterruptedException silently dropping task in SmartExecutor.Limited.submit(Runnable) + Documentation updates + docs: rewrite expected-checksums.md to STE rules + Support deprecated tag. + Reconcile the two download pages and modernise them + Convert the index page from xdoc to Markdown + docs: rewrite creating-a-repository-system-session.md to STE rules + docs: rewrite common-misconceptions.md to ASD-STE100 rules + docs: rewrite deployment.md in ASD-STE100 Simplified Technical English + docs: rewrite dependency-graph.md in ASD-STE100 Simplified Technical English + docs: rewrite about-checksums.md to STE rules + docs: rewrite api-compatibility.md to STE rules + Docs: rewrite what-is-resolver page in Simplified Technical English (ASD-STE100) + Fix documentation issues across site docs + Improve rendering of javadoc content + Edit version comparison * Maintenance + Drop the versions.junit5 property the parent already provides + Fix #1998: use try-with-resources in test file utilities + Convert the index page from xdoc to Markdown + Use https in license URLs as recommended by ASF + Exclude ODG graphics from RAT checks + Build against Maven 4.0.0-rc-6 + Fix resource leak pattern in DependencyGraphParser.parseLiteral() + Replace printStackTrace with proper error handling * Build + Improve error reporting + .gitignore .vscode/ + Improve rendering of javadoc content Update to upstream version 2.0.21 * New features and improvements + Reduce PathConflictResolver memory and auto-select resolver + Fix dependency selector cache regression in DF collector + Fix thread contention in GenericVersionScheme and WeakInternPool + Improve thread safety across modules + WarnChecksumPolicy: proceed on no checksums + Extend AuthenticationBuilder to support SSLContext for mTLS authentication + DependencyCollectionChecker: new session member + Add any media type to RFC9457 content type header + fix: Configuration to be able to control sending RFC 9457 related Accept HTTP header + Improvement: BF dependency selector hot methods * Bug Fixes + Fix ApacheTransport auth cache CCEx + Checksums: lack of information + Fix inverted SIGTSTP condition in IPC server + Bug: fix IPC named lock client-side robustness for Windows + Bugfix: Fix NPE in PathConflictResolver + Bug: fix IPC named lock server-side waiter leak on client timeout + Bug: fix new PCR as it in certain cases left duplicates * Documentation updates + Javadoc update + Doc: Trusted Checksums Summary File Procedure * Maintenance + Put PCR aside for now + Get rid of BND warnings + Align generators + Fix for ChainedWorkspaceReader + Create simple JMH benchmark to compare CCR and PCR + Tidy up suppliers + Disable IPC lock tests on Windows * Dependency updates + Bump org.apache.maven:maven-parent from 48 to 49 + Bump roasterVersion from 2.31.0.Final to 2.31.1.Final + Bump sisuVersion from 1.0.0 to 1.0.1 + Bump org.redisson:redisson from 4.4.0 to 4.6.1 + Deps: Jetty 12.1.10 + Bump io.minio:minio from 9.0.0 to 9.0.3 + Bump dev.sigstore:sigstore-java from 2.0.0 to 2.2.0 + Bump okhttpVersion from 5.3.2 to 5.4.0 + Bump biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0 + Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1 + Bump org.ow2.asm:asm from 9.9.1 to 9.10.1 + Bump org.codehaus.plexus:plexus-classworlds from 2.11.0 to 2.12.0 + Bump maven3Version from 3.9.15 to 3.9.16 - Allow building the modules that can be built using Java 8 on distribution that don't provide Java 17. This allows to build maven 3.10.x everywhere where it could be built before. Update to upstream version 2.0.20: * Breaking Changes & Compatibility + Major Version API/SPI Shift: Version 2.0.x is a major architectural overhaul designed to support the upcoming Maven 4.x and Maven 3.10.x branches. The 1.x lineage is now officially in 'bugfix only' maintenance mode. + Removal of ServiceLocator: The long-deprecated Plexus ServiceLocator integration has been entirely removed. It conflicted with modern constructor-based Dependency Injection (Eclipse Sisu). + Scope Unawareness: Maven Resolver 2.x is now completely scope-unaware. Dependency scopes are treated merely as transparent labels by the core resolver. Scope handling is now fully delegated to the consumer project (e.g., Maven itself). + Delegation of Classpaths: Classpath generation (NodeListGenerator) and classpath filtering (DependencyFilterUtils), as well as default ArtifactType implementations, have been deprecated/removed from the core and delegated to consumer applications via the maven-resolver-provider module. * Architectural & Lifecycle Enhancements + Session Lifecycle Redesign (Resource Leaks): Introduced SessionBuilder and CloseableSession nested interfaces to replace the legacy DefaultRepositorySystemSession constructor mechanism. Sessions now utilize onSessionEnd hooks and must be explicitly closed when finished. This change is critical to prevent resource leaks when using modern networking features like HTTP/2 transports. - Require maven-parent >= 50 in order to interpolate correctly the versions of default plugins for different lifecycles Upgrade to upstream release 3.10.0 * New features and improvements + Maven 3.10.x should use Maven 3.1 validation in strict mode + Do not depend on maven-resolver-supplier-mvn3 + MNG-6797: Remember if Maven model problems were encountered. + feat: add relativePath validation + Add validation for Plexus-based plugin dependency injection + Introduce validation control + Update to Resolver 2.0.21 + MNG-5913: Allow defining aliases for existing server configurations in settings.xml * Bug Fixes + Issue #13265: let a settings server declare the repository origins its credentials may be used with + Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them + MNG-8174: Fix NPE when a property references itself in a plugin configuration (backport #12932) + Fix #13200: publish a complete set from MavenProject.getArtifacts + Fixes #13135: ensure completeness of the reactor summary, privilege failures last + Fix #13084: sandbox profile activation context for external model builds + Fix #13100: honor repositories from legitimately-active external model profiles + Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) + Scope server credentials and validate legacy relocation coordinates + Honour configured policy and validate inputs on the legacy compat paths + Add unit test for #12600 null-guard in forked executions + Fix: make ProjectIndex thread-safe for parallel builds + Fail on misconfigured plugin-requested toolchains + Resolve classified POM artifacts from the reactor in Maven 3.x + Convert paths for MSYS2 and jvm.config placeholders in bin/mvn + Preserve dependency scope in plugin artifacts * Documentation updates + docs: document plugin.xml V4 vs V3 + Port the site documentation from APT to Markdown + improve doc about deprecating plugin descriptor's requirement + Drop mention of Plexus XML * Maintenance + maintenance: Align use of profiles + Remove version from rat directory deployment + Update NOTICE file in distribution packages + Restrict what a repository-resolved model contributes to the build + Validate coordinates and repository precedence during artifact resolution + MNG-8129: Clarify relativePath validation comment + Keep plexus-cipher at 2.0: POM note + Use try-with-resources + Migrate the embedder-test-project fixture to JUnit 5 + Port the site documentation from APT to Markdown + Migrate legacy plugin Javadoc annotations in Maven Embedder tests + Replace custom GraphLogger with DependencyGraphDumper in dependency resolution + Fix UT: do not use checkout directly Upgrade to upstream preview version 3.10.0-rc-1 - Notable Changes: * New Features and Improvements + use Resolver 2.x + allow defining user-wide and installation-wide Maven extensions + Reproducible Builds is active by default + promote session.topDirectory, session.rootDirectory and project.rootDirectory properties + version range filtering + allow defining user relocations + allow using transitive dependency manager + in a failed build limit reactor summary to only failed modules + new CLI options for fine-grained update policy control: -UA (force artifact updates only), -UM (force metadata updates only), --artifacts-update-policy=, --metadata-update-policy= * New API and Updates for Maven Plugins + upgrade SLF4J to 2.x + promote MessageBuilderFactory service for colored message support + promote java version in JavaToolchain - Potentially Breaking Core Changes (if migrating from 3.9.x) * Classpath ordering change + Dependency classpath ordering changed from 'pre-order' (depth-first) to 'level-order' (breadth-first), aligning with Maven 4 behavior and Resolver 2.x defaults. + To restore the previous behavior, add -Daether.system.dependencyVisitor=preOrder to your Maven invocation. * Changes in the Super POM: + removed deprecated release-profile; each project should have its own release profile + removed plugin management; each project should have its own plugin management + set default values for project.build.sourceEncoding and project.reporting.outputEncoding to UTF-8 + avoid cycle between maven-resolver-supplier-mvn3 from maven-resolver and maven-resolver-provider from this build that are the dependencies of each other + The Maven Resolver transport has changed from Wagon to 'native HTTP', see Resolver Transport guide. - Initial packaging with version 1.9.0 Upgrade to 2.0.20: * Changes + Marker instances are slated to become immutable in future releases. As such, methods in the Marker interface adding/removing children are now marked as deprecated. Changes of version 2.0.19: * Changes + When the fluent API was used with XLogger/LoggerWrapper in the slf4j-ext module, caller location was incorrectly reported. To correct this, LoggerWrapper now delegates makeLoggingEventBuilder() to the wrapped logger so that the application caller can be correctly extracted. + In slf4j-api/DefaultLoggingEventBuilder, a failing toString() invocation on a key-value value, including StackOverflowError, no longer aborts logging. The builder now substitutes [FAILED toString()], matching the existing behaviour of MessageFormatter for message arguments. + The isLoggable() method in SLF4JPlatformLogger now maps System.Logger.Level.ALL and Level.OFF the same way as log(), that is ALL as TRACE and OFF as ERROR, instead of treating both as always loggable. + Published JAR files now package each module's own LICENSE.txt under META-INF/. Previously the parent POM copied the repository-root MIT license into every module, so Apache-2.0 modules such as jcl-over-slf4j and log4j-over-slf4j shipped the wrong license text. Upgrade to 2.0.18: * Breaking Changes & Compatibility + Minimum Java Requirement Bump: The baseline Java requirement has been upgraded from Java 5 (in the 1.7.x series) to Java 8. + New Backend Discovery Mechanism: SLF4J no longer relies on the legacy StaticLoggerBinder class-path search mechanism. It has fully migrated to using the Java ServiceLoader mechanism (SPI) to discover logging backends. Downstream logging providers (like Logback or SLF4J bridges) must be updated to versions that support ServiceLoader to function with SLF4J 2.x. + Explicit Provider Override: Introduced the slf4j.provider system property, allowing administrators or developers to explicitly specify the logging provider class, bypassing the ServiceLoader mechanism entirely for faster initialization. * New Features & Enhancements + Fluent Logging API: Introduced a backward-compatible fluent logging API (e.g., logger.atInfo().setMessage('...').log()). Existing clients using the traditional logging methods do not need to rewrite their code. + JPMS Modularity: SLF4J has been fully modularized in accordance with the Java Platform Module System (JPMS) specifications. + BOM Artifact: Introduced a Bill of Materials (BOM) file (added in 2.0.8) to help downstream projects easily synchronize and align versions across all org.slf4j bridge and API packages. * Notable Internal Fixes + MDC Initialization Race Condition: Fixed an edge-case bug where the Mapped Diagnostic Context (MDC) could be initialized before the LoggerFactory, which occasionally resulted in the MDC getting stuck using an incorrect MDCAdapter instance. The following package changes have been done: - apache-commons-cli-1.9.0-150200.3.11.1 updated - glassfish-annotation-api-1.3.2-150200.3.6.1 updated - httpcomponents-core-4.4.14-150200.3.11.1 updated - jline3-native-3.30.17-150200.5.11.1 added - libopenssl1_1-1.1.1w-150700.11.35.1 added - maven-resolver-api-2.0.24-150200.3.32.3 updated - slf4j-2.0.20-150200.3.7.1 updated - google-gson-2.14.0-150200.3.13.2 updated - jline3-terminal-3.30.17-150200.5.11.1 added - libpython3_6m1_0-3.6.15-150300.10.129.1 added - python3-base-3.6.15-150300.10.129.1 added - python3-3.6.15-150300.10.129.1 added - maven-resolver-util-2.0.24-150200.3.32.3 updated - maven-wagon-provider-api-3.5.3-150200.3.10.1 updated - httpcomponents-client-4.5.14-150200.3.14.2 updated - maven-resolver-named-locks-2.0.24-150200.3.32.3 updated - jcl-over-slf4j-2.0.20-150200.3.7.1 updated - maven-resolver-spi-2.0.24-150200.3.32.3 updated - jline3-terminal-jni-3.30.17-150200.5.11.1 added - jline3-jansi-core-3.30.17-150200.5.11.1 added - maven-wagon-file-3.5.3-150200.3.10.1 updated - maven-wagon-http-shared-3.5.3-150200.3.10.1 updated - maven-resolver-transport-wagon-2.0.24-150200.3.32.3 updated - maven-resolver-transport-file-2.0.24-150200.3.32.3 updated - maven-resolver-transport-apache-2.0.24-150200.3.32.3 added - maven-resolver-impl-2.0.24-150200.3.32.3 updated - maven-resolver-connector-basic-2.0.24-150200.3.32.3 updated - maven-wagon-http-3.5.3-150200.3.10.1 updated - maven-lib-3.10.0-150200.4.36.1 updated - maven-3.10.0-150200.4.36.1 updated - cal10n-0.8.1.10-150200.11.6.3 removed - hamcrest-3.0-150200.12.22.1 removed - jansi-2.4.0-150200.3.9.1 removed - junit-4.13.2-150200.3.17.1 removed - maven-resolver-transport-http-1.9.27-150200.3.29.1 removed - maven-shared-utils-3.4.2-150200.3.10.1 removed From sle-container-updates at lists.suse.com Thu Nov 12 10:39:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:39:56 +0100 (CET) Subject: SUSE-CU-2026:14039-1: Security update of bci/bci-sle16-kernel-module-devel Message-ID: <20261112103956.19A38FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle16-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14039-1 Container Tags : bci/bci-sle16-kernel-module-devel:16.0 , bci/bci-sle16-kernel-module-devel:16.0-33.1 Container Release : 33.1 Severity : important Type : security References : 1215199 1244337 1246086 1248354 1249294 1251142 1256769 1261041 1264022 1264024 1264324 1264823 1264985 1267203 1267501 1267681 1267705 1267720 1267882 1268160 1268276 1269532 1269655 1269798 1269813 1271349 1272261 1272296 1273084 1273250 1273292 1273522 1273805 1273880 1273999 1274082 1274257 1274261 1274550 1274635 1274727 1274750 1274751 1274816 1274839 1274902 1274949 1275518 1275521 1275524 1275543 1275568 1275575 1275581 1275671 1275678 1275680 1275681 1275683 1275684 1275689 1275692 1275694 1275737 1275740 1275797 1275808 1275809 1275810 1275811 1275813 1275939 1275944 1275945 1275946 1275947 1275948 1275951 1275957 1275958 1275959 1275960 1276009 1276245 1276271 1276275 1276280 1276321 1276343 1276350 1276363 1276382 1276384 1276387 1276393 1276440 1276443 1276444 1276445 1276450 1276451 1276453 1276454 1276457 1276476 1276479 1276482 1276483 1276495 1276499 1276502 1276517 1276522 1276574 1276576 1276585 1276592 1276765 1276769 1276770 1276772 1276773 1276776 1276778 1276779 1276798 1276844 1276854 1276860 1276912 1276914 1276925 1276929 1276933 1276934 1276935 1276940 1276943 1276949 1276956 1277044 1277046 1277053 1277064 1277067 1277069 1277071 1277072 1277073 1277075 1277079 1277080 1277082 1277084 1277089 1277091 1277094 1277113 1277119 1277121 1277130 1277133 1277135 1277142 1277148 1277157 1277158 1277161 1277163 1277166 1277167 1277169 1277170 1277171 1277173 1277176 1277177 1277182 1277184 1277190 1277191 1277192 1277193 1277194 1277195 1277196 1277197 1277200 1277201 1277211 1277214 1277221 1277222 1277225 1277240 1277254 1277261 1277264 1277270 1277280 1277282 1277298 1277307 1277310 1277312 1277317 1277319 1277323 1277325 1277329 1277330 1277332 1277333 1277334 1277336 1277337 1277339 1277341 1277343 1277344 1277345 1277355 1277356 1277362 1277364 1277365 1277383 1277387 1277389 1277456 1277457 1277463 1277465 1277467 1277472 1277487 1277488 1277496 1277497 1277516 1277517 1277520 1277522 1277523 1277525 1277529 1277530 1277532 1277533 1277538 1277540 1277541 1277543 1277544 1277546 1277554 1277560 1277566 1277571 1277576 1277578 1277590 1277593 1277606 1277607 1277609 1277610 1277612 1277621 1277623 1277628 1277637 1277645 1277657 1277658 1277675 1277676 1277677 1277678 1277682 1277690 1277730 1277731 1277732 1277741 1277742 1277744 1277746 1277754 1277760 1277770 1277771 1277772 1277810 1277819 1277832 1277835 1277836 1277837 1277839 1277860 1277875 1277877 1277879 1277880 1277881 1277882 1277884 1277887 1277893 1277903 1277911 1277934 1278028 1278030 1278041 1278050 1278057 1278074 1278081 1278101 1278103 1278108 1278117 1278123 1278132 1278139 1278140 1278153 1278160 1278167 1278172 1278178 1278181 1278194 1278198 1278200 1278201 1278202 1278207 1278210 1278211 1278212 1278213 1278214 1278217 1278222 1278241 1278246 1278296 1278310 1278313 1278317 1278318 1278319 1278320 1278323 1278325 1278326 1278329 1278335 1278343 1278350 1278377 1278379 1278393 1278400 1278405 1278412 1278423 1278429 1278430 1278431 1278432 1278704 1278711 1279420 1279422 1279455 1279464 1279467 1279468 1279470 1279471 1279472 1279477 1279480 1279483 1279485 1279486 1279493 1279494 1279496 1279499 1279504 1279508 1279510 1279516 1279518 1279520 1279533 1279564 1279592 1279594 1279603 1279605 1279606 1279607 1279608 1279614 1279616 1279624 1279625 1279627 1279632 1279698 1279699 1279700 1279777 1279778 1279780 1279795 1279798 1279802 1279805 1279808 1279809 1279811 1279812 1279814 1279815 1279816 1279823 1279825 1279874 1279920 1279921 1279971 1280010 1280141 1280142 1280157 1280158 1280161 1280162 1280172 1280182 1280183 1280185 1280215 1280221 1280230 1280234 1280239 1280244 1280246 1280247 1280253 1280260 1280266 1280273 1280276 1280301 1280305 1280306 1280311 1280312 1280315 1280316 1280319 1280326 1280330 1280331 1280332 1280345 1280346 1280378 1280391 1280392 1280395 1280396 1280397 1280399 1280400 1280402 1280408 1280410 1280416 1280421 1280423 1280425 1280426 1280427 1280428 1280429 1280431 1280463 1280472 1280476 1280479 1280480 1280492 1280500 1280501 1280504 1280505 1280510 1280520 1280526 1280528 1280539 1280545 1280554 1280559 1280560 1280563 1280569 1280571 1280573 1280581 1280713 1280735 1280736 1280745 1280749 1280763 1280777 1280785 1280794 1280804 1280806 1280813 1280822 1280826 1280827 1280834 1280867 1280918 1280948 1280960 1280976 1280977 1280978 1280980 1280981 1280984 1280987 1280988 1280990 1280992 1280996 1280998 1281001 1281003 1281004 1281005 1281006 1281008 1281009 1281011 1281012 1281013 1281014 1281018 1281022 1281027 1281028 1281029 1281030 1281032 1281034 1281052 1281056 1281058 1281065 1281080 1281084 1281130 1281136 1281138 1281145 1281146 1281147 1281149 1281150 1281151 1281155 1281156 1281163 1281164 1281165 1281173 1281174 1281175 1281179 1281180 1281181 1281183 1281184 1281185 1281189 1281190 1281191 1281194 1281204 1281205 1281206 1281211 1281214 1281216 1281221 1281222 1281251 1281253 1281254 1281256 1281257 1281260 1281265 1281269 1281270 1281271 1281272 1281274 1281275 1281277 1281281 1281292 1281299 1281300 1281301 1281311 1281315 1281317 1281320 1281331 1281332 1281333 1281334 1281337 1281340 1281342 1281343 1281346 1281347 1281352 1281353 1281357 1281358 1281359 1281360 1281361 1281363 1281368 1281382 1281383 1281384 1281389 1281391 1281392 1281394 1281395 1281396 1281397 1281402 1281413 1281415 1281418 1281422 1281423 1281427 1281429 1281488 1281490 1281495 1281500 1281504 1281505 1281508 1281509 1281510 1281523 1281528 1281532 1281535 1281536 1281538 1281547 1281549 1281551 1281552 1281555 1281563 1281568 1281577 1281579 1281588 1281593 1281619 1281620 1281626 1281631 1281635 1281639 1281640 1281642 1281650 1281672 1281676 1281677 1281686 1281688 1281691 1281694 1281696 1281701 1281702 1281705 1281706 1281707 1281708 1281715 1281723 1281735 1281736 1281753 1281775 1281776 1281779 1281781 1281783 1281784 1281785 1281796 1281799 1281801 1281803 1281804 1281813 1281817 1281818 1281824 1281828 1281850 1281851 1281852 1281853 1281858 1281865 1281868 1281870 1281872 1281877 1281879 1281883 1281886 1281887 1281890 1281891 1281895 1281897 1281899 1281900 1281901 1281903 1281930 1281932 1281968 1281969 1281985 1281987 1281988 1281992 1281993 1281995 1281996 1282001 1282002 1282008 1282018 1282019 1282021 1282025 1282026 1282027 1282031 1282032 1282033 1282034 1282040 1282041 1282042 1282044 1282045 1282063 1282065 1282068 1282080 1282081 1282082 1282083 1282095 1282096 1282109 1282114 1282116 1282117 1282120 1282122 1282128 1282129 1282131 1282133 1282134 1282145 1282146 1282149 1282151 1282154 1282156 1282158 1282165 1282167 1282168 1282169 1282170 1282174 1282178 1282179 1282189 1282192 1282196 1282262 1282266 1282267 1282276 1282284 1282286 1282289 1282296 1282297 1282298 1282300 1282302 1282304 1282306 1282314 1282325 1282327 1282328 1282677 1282684 1282690 1282691 1282695 1282697 1282703 1282727 1282729 1282735 1282737 1282740 1282741 1282744 1282753 1282754 1282755 1282759 1282761 1282762 1282763 1282764 1282767 1282772 1282773 1282775 1282776 1282778 1282804 1282805 1282810 1282814 1282867 1282870 1282879 1282884 1282885 1282886 1282887 1282889 1282890 1282893 1282898 1282911 1282914 1282915 1282916 1282920 1282924 1282925 1282926 1282927 1282928 1282931 1282935 1282955 1282957 1282958 1282962 1282963 1282974 1282984 1282993 1283004 1283017 1283018 1283026 1283028 1283036 1283038 1283039 1283045 1283047 1283051 1283058 1283076 1283077 1283078 1283081 1283082 1283087 1283113 1283114 1283122 1283126 1283130 1283132 1283134 1283136 1283145 1283155 1283157 1283159 1283164 1283175 1283177 1283196 1283197 1283202 1283206 1283208 1283209 1283211 1283214 1283215 1283220 1283223 1283224 1283225 1283226 1283228 1283229 1283231 1283233 1283271 1283276 1283278 1283287 1283288 1283292 1283333 1283334 1283335 1283337 1283339 1283343 1283349 1283356 1283360 1283364 1283397 1283416 1283418 1283429 1283445 1283453 1283458 1283459 1283464 1283469 1283474 1283481 1283483 1283485 1283486 1283495 1283499 1283500 1283502 1283504 1283508 1283511 1283513 1283523 1283585 1283662 1283668 1283736 1283737 1283741 1283746 1283752 1283754 1283755 1283780 1283781 1283782 1283785 1283803 1283810 1283830 1283833 1283834 1283837 1283838 1283842 1283844 1283845 1283848 1283858 1283863 1283869 1283871 1283878 1283884 1283886 1283903 1283916 1283920 1283921 1283928 1283933 1283935 1283941 1283958 1283960 1283967 1283973 1284024 1284031 1284032 1284033 1284062 1284063 1284068 1284150 1284292 1284293 1284296 1284302 1284303 1284304 1284305 1284306 1284313 1284346 1284349 1284350 1284358 1284360 1284363 1284429 1284446 1284455 1284477 1284483 1284484 1284485 1284498 1284503 1284504 1284505 1284508 1284509 1284512 1284513 1284514 1284515 1284517 1284518 1284537 1284539 1284540 1284541 1284542 1284543 1284544 1284545 1284550 1284553 1284554 1284555 1284556 1284557 1284561 1284563 1284568 1284577 1284578 1284579 1284584 1284585 1284595 1284600 1284601 1284602 1284603 1284609 1284615 1284616 1284620 1284621 1284623 1284626 1284630 1284631 1284632 1284635 1284636 1284637 1284638 1284640 1284641 1284642 1284643 1284644 1284652 1284704 1284706 1284707 1284709 1284721 1284723 1284740 1284742 1284944 1284945 1285391 1285553 1285556 1285560 1285561 1285562 1285564 1285569 1285587 1285594 1285596 1285624 1285645 1285647 1285648 1285668 1285888 1285891 1285924 1285957 1285971 1285976 1285978 1285979 1285985 1285988 1285998 1286001 1286002 1286005 1286009 1286012 1286013 1286019 1286020 1286036 1286037 1286112 1286114 1286119 1286121 1286123 1286133 1286158 1286160 1286161 1286171 1286184 1286186 1286190 1286203 1286204 1286205 1286207 1286208 1286215 1286217 1286218 1286224 1286233 1286234 1286237 1286238 1286240 1286257 1286259 1286267 1286268 1286270 1286284 1286342 1286343 1286344 1286346 1286390 1286391 1286394 1286417 1286418 1286421 1286429 1286430 1286431 1286432 1286443 1286444 1286453 1286455 1286457 1286458 1286465 1286469 1286514 1286529 1286554 1286620 1286621 1286625 1286654 1286665 1286667 1286669 1286670 1286671 1286672 1286673 1286674 1286689 1286692 1286694 1286704 1286707 1286708 1286713 1286720 1286735 1286741 1286742 1286743 1286756 1286757 1286769 1286772 1286775 1286778 1286779 1286782 1286785 1286787 1286788 1286806 1286819 1286820 1286821 1286822 1286825 1286826 1286839 1286841 1286843 1286850 1286856 1286857 1286859 1286860 1286862 1286863 1286864 1286865 1286867 1286870 1286872 1286874 1286877 1286888 1286890 1286913 1286918 1286919 1287173 1287191 1287256 1287268 1287342 1287346 1287347 1287351 1287352 1287353 1287364 1287592 1287594 1287597 1287642 1287647 1287648 1287649 1287655 1287658 1287674 1287680 1287682 1287714 1287719 1287720 1287728 1287737 1287742 1287749 1287757 1287762 1287763 1287765 1287770 1287773 1287774 1287825 1287966 1287981 1287984 1287985 1287995 1287997 1288001 1288002 1288005 1288007 1288009 1288014 1288061 1288088 1288124 1288125 1288126 1288127 1288226 1288246 1288248 1288388 1288406 1288454 1288513 1288521 1288522 1288527 1288584 1288592 1288627 1288629 1288668 1288676 1288682 1288703 1288713 1288752 1289119 CVE-2025-38237 CVE-2025-38576 CVE-2025-39729 CVE-2025-39936 CVE-2025-71128 CVE-2026-100071 CVE-2026-100077 CVE-2026-100078 CVE-2026-100079 CVE-2026-31708 CVE-2026-31709 CVE-2026-43178 CVE-2026-43315 CVE-2026-43350 CVE-2026-45944 CVE-2026-46070 CVE-2026-46139 CVE-2026-46155 CVE-2026-46228 CVE-2026-53059 CVE-2026-53090 CVE-2026-53288 CVE-2026-63809 CVE-2026-64257 CVE-2026-64370 CVE-2026-64413 CVE-2026-64425 CVE-2026-64430 CVE-2026-64434 CVE-2026-64441 CVE-2026-64507 CVE-2026-64508 CVE-2026-68140 CVE-2026-68186 CVE-2026-68337 CVE-2026-68383 CVE-2026-68388 CVE-2026-68436 CVE-2026-68447 CVE-2026-68449 CVE-2026-68466 CVE-2026-68467 CVE-2026-68469 CVE-2026-68475 CVE-2026-68478 CVE-2026-68479 CVE-2026-72004 CVE-2026-72005 CVE-2026-72010 CVE-2026-72024 CVE-2026-72029 CVE-2026-72047 CVE-2026-72048 CVE-2026-72049 CVE-2026-72059 CVE-2026-72063 CVE-2026-72064 CVE-2026-72065 CVE-2026-72073 CVE-2026-72074 CVE-2026-72075 CVE-2026-72076 CVE-2026-72077 CVE-2026-72078 CVE-2026-72079 CVE-2026-72089 CVE-2026-72098 CVE-2026-72105 CVE-2026-72111 CVE-2026-72120 CVE-2026-72122 CVE-2026-72123 CVE-2026-72126 CVE-2026-72133 CVE-2026-72135 CVE-2026-72140 CVE-2026-72142 CVE-2026-72144 CVE-2026-72148 CVE-2026-72149 CVE-2026-72151 CVE-2026-72152 CVE-2026-72155 CVE-2026-72156 CVE-2026-72157 CVE-2026-72158 CVE-2026-72165 CVE-2026-72167 CVE-2026-72171 CVE-2026-72182 CVE-2026-72214 CVE-2026-72216 CVE-2026-72226 CVE-2026-72227 CVE-2026-72228 CVE-2026-72230 CVE-2026-72231 CVE-2026-72233 CVE-2026-72240 CVE-2026-72241 CVE-2026-72245 CVE-2026-72257 CVE-2026-72258 CVE-2026-72259 CVE-2026-72260 CVE-2026-72261 CVE-2026-72262 CVE-2026-72264 CVE-2026-72265 CVE-2026-72266 CVE-2026-72267 CVE-2026-72268 CVE-2026-72269 CVE-2026-72270 CVE-2026-72271 CVE-2026-72272 CVE-2026-72273 CVE-2026-72274 CVE-2026-72275 CVE-2026-72276 CVE-2026-72284 CVE-2026-72285 CVE-2026-72286 CVE-2026-72300 CVE-2026-72301 CVE-2026-72302 CVE-2026-72304 CVE-2026-72314 CVE-2026-72318 CVE-2026-72324 CVE-2026-72327 CVE-2026-72334 CVE-2026-72335 CVE-2026-72336 CVE-2026-72351 CVE-2026-72360 CVE-2026-72361 CVE-2026-72362 CVE-2026-72386 CVE-2026-72387 CVE-2026-72391 CVE-2026-72394 CVE-2026-72396 CVE-2026-72400 CVE-2026-72416 CVE-2026-72424 CVE-2026-72428 CVE-2026-72441 CVE-2026-72443 CVE-2026-72449 CVE-2026-72452 CVE-2026-72463 CVE-2026-72464 CVE-2026-72465 CVE-2026-72474 CVE-2026-72475 CVE-2026-72476 CVE-2026-72479 CVE-2026-72480 CVE-2026-72481 CVE-2026-72483 CVE-2026-72484 CVE-2026-72486 CVE-2026-72489 CVE-2026-72496 CVE-2026-72498 CVE-2026-74263 CVE-2026-74265 CVE-2026-74271 CVE-2026-74276 CVE-2026-74278 CVE-2026-74279 CVE-2026-74280 CVE-2026-74287 CVE-2026-74291 CVE-2026-74292 CVE-2026-74293 CVE-2026-74294 CVE-2026-74295 CVE-2026-74300 CVE-2026-74301 CVE-2026-74302 CVE-2026-74303 CVE-2026-74320 CVE-2026-74329 CVE-2026-74331 CVE-2026-74332 CVE-2026-74339 CVE-2026-74340 CVE-2026-74341 CVE-2026-74353 CVE-2026-74380 CVE-2026-74381 CVE-2026-74387 CVE-2026-74393 CVE-2026-74399 CVE-2026-74402 CVE-2026-74404 CVE-2026-74408 CVE-2026-74410 CVE-2026-74411 CVE-2026-74416 CVE-2026-74417 CVE-2026-74424 CVE-2026-74439 CVE-2026-74442 CVE-2026-74443 CVE-2026-74444 CVE-2026-74445 CVE-2026-74446 CVE-2026-74447 CVE-2026-74448 CVE-2026-74451 CVE-2026-74452 CVE-2026-74453 CVE-2026-74454 CVE-2026-74455 CVE-2026-74456 CVE-2026-74457 CVE-2026-74458 CVE-2026-74459 CVE-2026-74460 CVE-2026-74461 CVE-2026-74463 CVE-2026-74466 CVE-2026-74488 CVE-2026-74497 CVE-2026-74498 CVE-2026-74499 CVE-2026-74500 CVE-2026-74501 CVE-2026-74502 CVE-2026-74503 CVE-2026-74504 CVE-2026-74505 CVE-2026-74507 CVE-2026-74508 CVE-2026-74509 CVE-2026-74516 CVE-2026-74519 CVE-2026-74529 CVE-2026-74530 CVE-2026-74531 CVE-2026-74532 CVE-2026-74540 CVE-2026-74541 CVE-2026-74546 CVE-2026-74547 CVE-2026-74549 CVE-2026-74551 CVE-2026-74552 CVE-2026-74553 CVE-2026-74565 CVE-2026-74574 CVE-2026-74585 CVE-2026-74604 CVE-2026-74607 CVE-2026-74613 CVE-2026-74620 CVE-2026-74635 CVE-2026-74641 CVE-2026-74642 CVE-2026-74646 CVE-2026-74647 CVE-2026-74648 CVE-2026-74649 CVE-2026-74650 CVE-2026-74651 CVE-2026-74653 CVE-2026-74654 CVE-2026-74655 CVE-2026-74661 CVE-2026-74673 CVE-2026-74675 CVE-2026-74676 CVE-2026-74677 CVE-2026-74678 CVE-2026-74679 CVE-2026-74680 CVE-2026-74682 CVE-2026-74683 CVE-2026-74684 CVE-2026-74685 CVE-2026-74690 CVE-2026-74691 CVE-2026-74720 CVE-2026-74746 CVE-2026-74748 CVE-2026-74753 CVE-2026-80522 CVE-2026-80539 CVE-2026-80540 CVE-2026-80541 CVE-2026-80542 CVE-2026-80556 CVE-2026-80559 CVE-2026-80563 CVE-2026-80565 CVE-2026-80566 CVE-2026-80567 CVE-2026-80568 CVE-2026-80569 CVE-2026-80570 CVE-2026-80571 CVE-2026-80573 CVE-2026-80574 CVE-2026-80575 CVE-2026-80576 CVE-2026-80577 CVE-2026-80578 CVE-2026-80584 CVE-2026-80593 CVE-2026-80594 CVE-2026-80595 CVE-2026-80596 CVE-2026-80597 CVE-2026-80599 CVE-2026-80602 CVE-2026-80605 CVE-2026-80611 CVE-2026-80618 CVE-2026-80622 CVE-2026-80624 CVE-2026-80635 CVE-2026-80637 CVE-2026-80645 CVE-2026-80649 CVE-2026-80650 CVE-2026-80652 CVE-2026-80654 CVE-2026-80659 CVE-2026-80660 CVE-2026-80663 CVE-2026-80666 CVE-2026-80677 CVE-2026-80678 CVE-2026-80680 CVE-2026-80683 CVE-2026-80684 CVE-2026-80692 CVE-2026-80695 CVE-2026-80696 CVE-2026-80698 CVE-2026-80700 CVE-2026-80702 CVE-2026-80703 CVE-2026-80704 CVE-2026-80706 CVE-2026-80707 CVE-2026-80709 CVE-2026-80710 CVE-2026-80711 CVE-2026-80716 CVE-2026-80717 CVE-2026-80722 CVE-2026-80728 CVE-2026-80736 CVE-2026-80743 CVE-2026-80749 CVE-2026-80752 CVE-2026-80754 CVE-2026-80757 CVE-2026-80759 CVE-2026-80760 CVE-2026-80762 CVE-2026-80763 CVE-2026-80764 CVE-2026-80765 CVE-2026-80767 CVE-2026-80768 CVE-2026-80770 CVE-2026-80771 CVE-2026-80772 CVE-2026-80774 CVE-2026-80781 CVE-2026-80782 CVE-2026-80783 CVE-2026-80794 CVE-2026-80795 CVE-2026-80797 CVE-2026-80798 CVE-2026-80799 CVE-2026-80800 CVE-2026-80801 CVE-2026-80802 CVE-2026-80803 CVE-2026-80808 CVE-2026-80809 CVE-2026-80812 CVE-2026-80815 CVE-2026-80819 CVE-2026-80823 CVE-2026-80824 CVE-2026-80825 CVE-2026-80826 CVE-2026-80827 CVE-2026-80828 CVE-2026-80829 CVE-2026-80830 CVE-2026-80831 CVE-2026-80832 CVE-2026-80839 CVE-2026-80855 CVE-2026-80860 CVE-2026-80862 CVE-2026-80870 CVE-2026-80879 CVE-2026-80881 CVE-2026-80882 CVE-2026-80883 CVE-2026-80886 CVE-2026-80887 CVE-2026-80888 CVE-2026-80902 CVE-2026-80903 CVE-2026-80907 CVE-2026-80908 CVE-2026-80909 CVE-2026-80910 CVE-2026-80911 CVE-2026-80914 CVE-2026-80918 CVE-2026-80922 CVE-2026-80923 CVE-2026-80930 CVE-2026-80931 CVE-2026-80938 CVE-2026-80940 CVE-2026-80941 CVE-2026-80942 CVE-2026-80943 CVE-2026-80944 CVE-2026-80947 CVE-2026-80949 CVE-2026-80951 CVE-2026-80952 CVE-2026-80964 CVE-2026-80965 CVE-2026-80966 CVE-2026-80967 CVE-2026-80968 CVE-2026-80969 CVE-2026-80971 CVE-2026-80972 CVE-2026-80973 CVE-2026-80974 CVE-2026-80978 CVE-2026-80988 CVE-2026-80989 CVE-2026-80990 CVE-2026-81005 CVE-2026-81007 CVE-2026-81008 CVE-2026-81011 CVE-2026-81012 CVE-2026-81013 CVE-2026-81014 CVE-2026-81017 CVE-2026-89438 CVE-2026-89439 CVE-2026-89440 CVE-2026-89442 CVE-2026-89443 CVE-2026-89444 CVE-2026-89454 CVE-2026-89455 CVE-2026-89456 CVE-2026-89461 CVE-2026-89462 CVE-2026-89463 CVE-2026-89464 CVE-2026-89465 CVE-2026-89466 CVE-2026-89468 CVE-2026-89469 CVE-2026-89470 CVE-2026-89471 CVE-2026-89472 CVE-2026-89473 CVE-2026-89474 CVE-2026-89475 CVE-2026-89487 CVE-2026-89491 CVE-2026-89494 CVE-2026-89495 CVE-2026-89504 CVE-2026-89512 CVE-2026-89524 CVE-2026-89537 CVE-2026-89553 CVE-2026-89554 CVE-2026-89559 CVE-2026-89560 CVE-2026-89562 CVE-2026-89583 CVE-2026-89587 CVE-2026-89595 CVE-2026-89597 CVE-2026-89599 CVE-2026-89602 CVE-2026-89608 CVE-2026-89621 CVE-2026-89622 CVE-2026-89623 CVE-2026-89626 CVE-2026-89627 CVE-2026-89628 CVE-2026-89633 CVE-2026-89637 CVE-2026-89648 CVE-2026-89656 CVE-2026-89657 CVE-2026-89724 CVE-2026-89725 CVE-2026-89726 CVE-2026-89729 CVE-2026-89730 CVE-2026-89732 CVE-2026-89733 CVE-2026-89735 CVE-2026-89736 CVE-2026-89737 CVE-2026-89738 CVE-2026-89739 CVE-2026-89740 CVE-2026-89741 CVE-2026-89742 CVE-2026-89743 CVE-2026-89744 CVE-2026-89751 CVE-2026-89757 CVE-2026-89761 CVE-2026-89762 CVE-2026-89774 CVE-2026-89786 CVE-2026-89787 CVE-2026-89797 CVE-2026-89798 CVE-2026-89800 CVE-2026-89801 CVE-2026-89802 CVE-2026-89803 CVE-2026-89807 CVE-2026-89812 CVE-2026-89813 CVE-2026-89816 CVE-2026-89817 CVE-2026-89818 CVE-2026-89819 CVE-2026-89821 CVE-2026-89822 CVE-2026-89823 CVE-2026-89824 CVE-2026-89825 CVE-2026-89842 CVE-2026-89843 CVE-2026-89844 CVE-2026-89845 CVE-2026-89846 CVE-2026-89847 CVE-2026-89848 CVE-2026-89849 CVE-2026-89850 CVE-2026-89851 CVE-2026-89852 CVE-2026-89853 CVE-2026-89854 CVE-2026-89855 CVE-2026-89856 CVE-2026-89857 CVE-2026-89858 CVE-2026-89859 CVE-2026-89860 CVE-2026-89861 CVE-2026-89862 CVE-2026-89863 CVE-2026-89864 CVE-2026-89865 CVE-2026-89870 CVE-2026-89871 CVE-2026-89872 CVE-2026-89874 CVE-2026-89876 CVE-2026-89877 CVE-2026-89878 CVE-2026-89879 CVE-2026-89880 CVE-2026-89881 CVE-2026-89883 CVE-2026-89884 CVE-2026-89885 CVE-2026-89886 CVE-2026-89887 CVE-2026-89888 CVE-2026-89890 CVE-2026-89891 CVE-2026-89892 CVE-2026-89893 CVE-2026-89894 CVE-2026-89895 CVE-2026-89896 CVE-2026-89897 CVE-2026-89898 CVE-2026-89899 CVE-2026-89901 CVE-2026-89924 CVE-2026-89927 CVE-2026-89929 CVE-2026-89930 CVE-2026-89931 CVE-2026-89932 CVE-2026-89933 CVE-2026-89934 CVE-2026-89936 CVE-2026-89937 CVE-2026-89938 CVE-2026-89939 CVE-2026-89940 CVE-2026-89941 CVE-2026-89942 CVE-2026-89943 CVE-2026-89944 CVE-2026-89945 CVE-2026-89946 CVE-2026-89948 CVE-2026-89949 CVE-2026-89950 CVE-2026-89951 CVE-2026-89952 CVE-2026-89953 CVE-2026-89979 CVE-2026-89980 CVE-2026-89982 CVE-2026-89983 CVE-2026-89993 CVE-2026-89994 CVE-2026-89999 CVE-2026-90000 CVE-2026-90001 CVE-2026-90012 CVE-2026-90015 CVE-2026-90017 CVE-2026-90018 CVE-2026-90019 CVE-2026-90020 CVE-2026-90021 CVE-2026-90024 CVE-2026-90025 CVE-2026-90026 CVE-2026-90027 CVE-2026-90030 CVE-2026-90031 CVE-2026-90032 CVE-2026-90033 CVE-2026-90034 CVE-2026-90035 CVE-2026-90042 CVE-2026-90044 CVE-2026-90045 CVE-2026-90055 CVE-2026-90057 CVE-2026-90060 CVE-2026-90068 CVE-2026-90070 CVE-2026-90081 CVE-2026-90082 CVE-2026-90087 CVE-2026-90088 CVE-2026-90090 CVE-2026-90092 CVE-2026-90093 CVE-2026-90103 CVE-2026-90107 CVE-2026-90111 CVE-2026-90114 CVE-2026-90119 CVE-2026-90126 CVE-2026-90128 CVE-2026-90136 CVE-2026-90137 CVE-2026-90138 CVE-2026-90148 CVE-2026-90178 CVE-2026-90192 CVE-2026-90193 CVE-2026-90194 CVE-2026-90196 CVE-2026-90198 CVE-2026-90207 CVE-2026-90214 CVE-2026-90215 CVE-2026-90220 CVE-2026-90221 CVE-2026-90222 CVE-2026-90223 CVE-2026-90224 CVE-2026-90225 CVE-2026-90226 CVE-2026-90227 CVE-2026-90230 CVE-2026-90245 CVE-2026-90251 CVE-2026-90252 CVE-2026-90253 CVE-2026-90254 CVE-2026-90255 CVE-2026-90257 CVE-2026-90284 CVE-2026-90285 CVE-2026-90286 CVE-2026-90297 CVE-2026-90298 CVE-2026-90315 CVE-2026-90316 CVE-2026-90319 CVE-2026-90329 CVE-2026-90334 CVE-2026-90335 CVE-2026-90336 CVE-2026-90344 CVE-2026-90345 CVE-2026-90348 CVE-2026-90352 CVE-2026-90353 CVE-2026-90354 CVE-2026-90357 CVE-2026-90360 CVE-2026-90362 CVE-2026-90366 CVE-2026-90368 CVE-2026-90370 CVE-2026-90372 CVE-2026-90373 CVE-2026-90374 CVE-2026-90375 CVE-2026-90378 CVE-2026-90380 CVE-2026-90382 CVE-2026-90383 CVE-2026-90385 CVE-2026-90386 CVE-2026-90393 CVE-2026-90394 CVE-2026-90395 CVE-2026-90398 CVE-2026-90399 CVE-2026-90402 CVE-2026-90403 CVE-2026-90404 CVE-2026-90407 CVE-2026-90410 CVE-2026-90433 CVE-2026-90434 CVE-2026-90435 CVE-2026-92476 CVE-2026-92482 CVE-2026-92490 CVE-2026-92491 CVE-2026-92496 CVE-2026-92497 CVE-2026-92498 CVE-2026-92504 CVE-2026-92506 CVE-2026-92507 CVE-2026-92508 CVE-2026-92509 CVE-2026-92510 CVE-2026-92511 CVE-2026-92512 CVE-2026-92513 CVE-2026-92521 CVE-2026-92522 CVE-2026-93040 CVE-2026-93041 CVE-2026-93042 CVE-2026-93046 CVE-2026-93048 CVE-2026-93049 CVE-2026-93052 CVE-2026-93053 CVE-2026-93054 CVE-2026-93056 CVE-2026-93061 CVE-2026-93062 CVE-2026-93063 CVE-2026-93064 CVE-2026-93065 CVE-2026-93067 CVE-2026-93070 CVE-2026-93071 CVE-2026-93082 CVE-2026-93083 CVE-2026-93084 CVE-2026-93085 CVE-2026-93086 CVE-2026-93089 CVE-2026-93090 CVE-2026-93091 CVE-2026-93092 CVE-2026-93093 CVE-2026-93101 CVE-2026-93102 CVE-2026-93103 CVE-2026-93104 CVE-2026-93114 CVE-2026-93115 CVE-2026-93116 CVE-2026-93117 CVE-2026-93118 CVE-2026-93119 CVE-2026-93120 CVE-2026-93121 CVE-2026-93122 CVE-2026-93123 CVE-2026-93126 CVE-2026-93130 CVE-2026-93131 CVE-2026-93136 CVE-2026-93141 CVE-2026-93142 CVE-2026-93155 CVE-2026-93156 CVE-2026-93158 CVE-2026-93159 CVE-2026-93161 CVE-2026-93162 CVE-2026-93165 CVE-2026-93168 CVE-2026-93170 CVE-2026-93177 CVE-2026-93178 CVE-2026-93179 CVE-2026-93181 CVE-2026-93183 CVE-2026-93184 CVE-2026-93185 CVE-2026-93188 CVE-2026-93189 CVE-2026-93190 CVE-2026-93205 CVE-2026-93206 CVE-2026-93209 CVE-2026-93210 CVE-2026-93211 CVE-2026-93213 CVE-2026-93214 CVE-2026-93223 CVE-2026-93224 CVE-2026-93228 CVE-2026-93231 CVE-2026-93234 CVE-2026-93236 CVE-2026-93242 CVE-2026-93250 CVE-2026-93262 CVE-2026-93269 CVE-2026-93271 CVE-2026-93274 CVE-2026-93279 CVE-2026-93281 CVE-2026-93283 CVE-2026-93287 CVE-2026-93783 CVE-2026-93784 CVE-2026-93788 CVE-2026-93789 CVE-2026-93790 CVE-2026-93791 CVE-2026-93792 CVE-2026-93793 CVE-2026-93795 CVE-2026-93797 CVE-2026-93799 CVE-2026-93802 CVE-2026-93803 CVE-2026-93804 CVE-2026-93805 CVE-2026-93807 CVE-2026-93808 CVE-2026-93809 CVE-2026-93813 CVE-2026-93817 CVE-2026-93818 CVE-2026-93819 CVE-2026-93820 CVE-2026-93821 CVE-2026-93822 CVE-2026-93823 CVE-2026-93828 CVE-2026-93830 CVE-2026-97407 CVE-2026-97408 CVE-2026-97410 CVE-2026-97414 CVE-2026-97418 CVE-2026-97420 CVE-2026-97425 CVE-2026-97427 CVE-2026-97428 CVE-2026-97429 CVE-2026-97430 CVE-2026-97442 CVE-2026-97444 CVE-2026-97445 CVE-2026-97446 CVE-2026-97447 CVE-2026-97448 CVE-2026-97449 CVE-2026-97450 CVE-2026-97451 CVE-2026-97452 CVE-2026-97453 CVE-2026-97454 CVE-2026-97455 CVE-2026-97456 CVE-2026-97475 CVE-2026-97481 CVE-2026-97482 CVE-2026-97483 CVE-2026-97484 CVE-2026-97492 CVE-2026-97494 CVE-2026-97495 CVE-2026-97497 CVE-2026-97500 CVE-2026-97502 CVE-2026-97504 CVE-2026-97505 CVE-2026-97507 CVE-2026-97508 CVE-2026-97509 CVE-2026-97510 CVE-2026-97512 CVE-2026-97514 CVE-2026-97516 CVE-2026-97517 CVE-2026-97518 CVE-2026-97527 CVE-2026-97528 CVE-2026-97529 CVE-2026-97530 CVE-2026-97531 CVE-2026-97532 CVE-2026-97535 CVE-2026-97536 CVE-2026-97537 CVE-2026-97539 CVE-2026-97540 CVE-2026-97541 CVE-2026-97561 CVE-2026-97570 CVE-2026-97575 CVE-2026-97576 CVE-2026-97577 CVE-2026-97578 CVE-2026-97579 CVE-2026-97581 CVE-2026-97582 CVE-2026-97595 CVE-2026-97596 CVE-2026-97599 CVE-2026-97600 CVE-2026-97601 CVE-2026-97603 CVE-2026-97604 CVE-2026-97612 CVE-2026-97613 CVE-2026-97899 CVE-2026-97900 CVE-2026-97907 CVE-2026-97908 CVE-2026-97909 CVE-2026-97910 CVE-2026-97915 CVE-2026-97916 CVE-2026-97917 CVE-2026-97929 CVE-2026-97930 CVE-2026-97947 CVE-2026-97948 CVE-2026-97954 CVE-2026-97955 CVE-2026-97963 CVE-2026-97964 CVE-2026-97965 CVE-2026-97967 CVE-2026-97968 CVE-2026-97969 CVE-2026-97970 CVE-2026-97975 CVE-2026-97976 CVE-2026-97977 CVE-2026-97988 CVE-2026-97991 CVE-2026-97993 CVE-2026-98001 CVE-2026-98006 CVE-2026-98014 CVE-2026-98022 CVE-2026-98023 CVE-2026-98025 CVE-2026-98027 CVE-2026-98031 CVE-2026-98039 CVE-2026-98044 CVE-2026-98047 CVE-2026-98054 CVE-2026-98055 CVE-2026-98058 CVE-2026-98066 CVE-2026-98068 CVE-2026-98069 CVE-2026-98070 CVE-2026-98071 CVE-2026-98074 CVE-2026-98078 CVE-2026-98080 CVE-2026-98085 CVE-2026-98086 CVE-2026-98092 CVE-2026-98095 CVE-2026-98107 CVE-2026-98108 CVE-2026-98109 CVE-2026-98110 CVE-2026-98111 CVE-2026-98116 CVE-2026-98121 CVE-2026-98122 CVE-2026-98152 CVE-2026-98154 CVE-2026-98155 CVE-2026-98158 CVE-2026-98159 CVE-2026-98160 CVE-2026-98164 CVE-2026-98181 CVE-2026-98184 CVE-2026-98185 CVE-2026-98186 CVE-2026-98187 CVE-2026-98188 CVE-2026-98189 CVE-2026-98190 CVE-2026-98191 CVE-2026-98195 CVE-2026-98196 CVE-2026-98197 CVE-2026-98200 CVE-2026-98201 CVE-2026-98202 CVE-2026-98203 CVE-2026-98204 CVE-2026-98205 CVE-2026-98206 CVE-2026-98207 CVE-2026-98208 CVE-2026-98209 CVE-2026-98210 CVE-2026-98211 CVE-2026-98212 CVE-2026-98213 CVE-2026-98218 CVE-2026-98221 CVE-2026-98222 CVE-2026-98227 CVE-2026-98236 CVE-2026-98237 CVE-2026-98238 CVE-2026-98246 CVE-2026-98247 CVE-2026-98248 CVE-2026-98249 CVE-2026-98257 CVE-2026-98258 CVE-2026-98263 CVE-2026-98264 CVE-2026-98265 CVE-2026-98266 CVE-2026-98270 CVE-2026-98282 CVE-2026-98283 CVE-2026-98290 CVE-2026-98291 CVE-2026-98292 CVE-2026-98293 CVE-2026-98295 CVE-2026-98297 CVE-2026-98298 CVE-2026-98306 CVE-2026-98307 CVE-2026-98308 CVE-2026-98309 CVE-2026-98311 CVE-2026-98312 CVE-2026-98314 CVE-2026-98316 CVE-2026-98319 CVE-2026-98325 CVE-2026-98326 CVE-2026-98327 CVE-2026-98328 CVE-2026-98329 CVE-2026-98331 CVE-2026-98332 CVE-2026-98334 CVE-2026-98335 CVE-2026-98336 CVE-2026-98337 CVE-2026-98339 CVE-2026-98340 CVE-2026-98342 CVE-2026-98343 CVE-2026-98344 CVE-2026-98345 CVE-2026-98346 CVE-2026-98348 CVE-2026-98349 CVE-2026-98351 CVE-2026-98353 CVE-2026-98363 CVE-2026-98368 CVE-2026-98373 CVE-2026-98374 CVE-2026-98375 CVE-2026-98376 CVE-2026-98386 CVE-2026-98390 CVE-2026-98392 CVE-2026-98404 CVE-2026-98406 CVE-2026-98407 CVE-2026-98409 CVE-2026-98410 CVE-2026-98411 CVE-2026-98412 CVE-2026-98416 CVE-2026-98421 CVE-2026-98422 CVE-2026-98426 CVE-2026-98428 CVE-2026-98455 CVE-2026-98456 CVE-2026-98457 CVE-2026-98458 CVE-2026-98459 CVE-2026-98460 CVE-2026-98461 CVE-2026-98462 CVE-2026-98466 CVE-2026-98471 CVE-2026-98481 CVE-2026-98482 CVE-2026-98499 CVE-2026-98501 CVE-2026-98502 CVE-2026-98503 CVE-2026-98504 CVE-2026-98507 CVE-2026-98508 CVE-2026-98509 CVE-2026-98511 CVE-2026-98512 CVE-2026-98513 CVE-2026-98514 CVE-2026-98515 CVE-2026-98516 CVE-2026-98517 CVE-2026-98519 CVE-2026-98521 CVE-2026-98522 CVE-2026-98527 CVE-2026-98529 CVE-2026-98555 CVE-2026-98566 CVE-2026-98575 CVE-2026-98576 CVE-2026-98577 CVE-2026-98578 CVE-2026-98579 CVE-2026-98580 CVE-2026-98581 CVE-2026-98582 CVE-2026-98583 CVE-2026-98597 CVE-2026-98600 CVE-2026-98601 CVE-2026-98602 CVE-2026-98605 CVE-2026-98606 CVE-2026-98607 CVE-2026-98608 CVE-2026-98609 CVE-2026-98612 CVE-2026-98623 CVE-2026-98631 CVE-2026-98632 CVE-2026-98637 CVE-2026-98640 CVE-2026-98656 CVE-2026-98657 CVE-2026-98658 CVE-2026-98660 CVE-2026-98661 CVE-2026-98662 CVE-2026-98663 CVE-2026-98664 CVE-2026-98665 CVE-2026-98666 CVE-2026-98668 CVE-2026-98669 CVE-2026-98670 CVE-2026-98671 CVE-2026-98673 CVE-2026-98679 CVE-2026-98680 CVE-2026-98687 CVE-2026-98694 CVE-2026-98695 CVE-2026-98696 CVE-2026-98697 CVE-2026-98698 CVE-2026-98699 CVE-2026-98700 CVE-2026-98701 CVE-2026-98702 CVE-2026-98703 CVE-2026-98704 CVE-2026-98705 CVE-2026-98706 CVE-2026-98708 CVE-2026-98710 CVE-2026-98711 CVE-2026-98713 CVE-2026-98717 CVE-2026-98718 CVE-2026-98720 CVE-2026-98721 CVE-2026-98722 CVE-2026-98730 CVE-2026-98731 CVE-2026-98732 CVE-2026-98733 CVE-2026-98735 CVE-2026-98736 CVE-2026-98737 CVE-2026-98739 CVE-2026-98741 CVE-2026-98742 CVE-2026-98743 CVE-2026-98744 CVE-2026-98745 CVE-2026-98746 CVE-2026-98748 CVE-2026-98749 CVE-2026-98756 CVE-2026-98757 CVE-2026-98758 CVE-2026-98760 CVE-2026-98761 CVE-2026-98763 CVE-2026-98764 CVE-2026-98765 CVE-2026-98766 CVE-2026-98768 CVE-2026-98769 CVE-2026-98770 CVE-2026-98771 CVE-2026-98772 CVE-2026-98773 CVE-2026-98779 CVE-2026-98780 CVE-2026-98781 CVE-2026-98782 CVE-2026-98783 CVE-2026-98784 CVE-2026-98785 CVE-2026-98809 CVE-2026-98819 CVE-2026-98822 CVE-2026-98823 CVE-2026-98825 CVE-2026-98827 CVE-2026-98828 CVE-2026-98830 CVE-2026-98833 CVE-2026-98834 CVE-2026-98835 CVE-2026-98836 CVE-2026-98837 CVE-2026-98838 CVE-2026-98840 CVE-2026-98845 CVE-2026-98847 CVE-2026-98848 CVE-2026-98860 CVE-2026-98863 CVE-2026-98871 CVE-2026-98876 CVE-2026-98882 CVE-2026-98884 CVE-2026-98885 CVE-2026-98886 CVE-2026-98888 CVE-2026-98889 CVE-2026-98891 CVE-2026-98892 CVE-2026-98893 CVE-2026-98895 CVE-2026-98896 CVE-2026-98898 CVE-2026-98910 CVE-2026-98912 CVE-2026-98915 CVE-2026-98916 CVE-2026-98933 CVE-2026-98935 CVE-2026-98936 CVE-2026-98939 CVE-2026-98940 CVE-2026-98949 CVE-2026-98956 CVE-2026-98957 CVE-2026-98970 CVE-2026-98971 CVE-2026-99004 CVE-2026-99005 CVE-2026-99006 CVE-2026-99007 CVE-2026-99008 CVE-2026-99010 CVE-2026-99011 CVE-2026-99012 CVE-2026-99013 CVE-2026-99015 CVE-2026-99020 CVE-2026-99022 CVE-2026-99034 CVE-2026-99035 CVE-2026-99038 CVE-2026-99039 CVE-2026-99049 CVE-2026-99061 CVE-2026-99069 CVE-2026-99089 CVE-2026-99090 CVE-2026-99091 CVE-2026-99094 CVE-2026-99095 CVE-2026-99131 CVE-2026-99134 CVE-2026-99150 CVE-2026-99176 CVE-2026-99178 CVE-2026-99214 CVE-2026-99216 ----------------------------------------------------------------- The container bci/bci-sle16-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2069 Released: Mon Nov 9 16:25:40 2026 Summary: Security update for the Linux Kernel Type: security Severity: important References: 1215199,1244337,1246086,1248354,1249294,1251142,1256769,1261041,1264022,1264024,1264324,1264823,1264985,1267203,1267501,1267681,1267705,1267720,1267882,1268160,1268276,1269532,1269655,1269798,1269813,1271349,1272261,1272296,1273084,1273250,1273292,1273522,1273805,1273880,1273999,1274082,1274257,1274261,1274550,1274635,1274727,1274750,1274751,1274816,1274839,1274902,1274949,1275518,1275521,1275524,1275543,1275568,1275575,1275581,1275671,1275678,1275680,1275681,1275683,1275684,1275689,1275692,1275694,1275737,1275740,1275797,1275808,1275809,1275810,1275811,1275813,1275939,1275944,1275945,1275946,1275947,1275948,1275951,1275957,1275958,1275959,1275960,1276009,1276245,1276271,1276275,1276280,1276321,1276343,1276350,1276363,1276382,1276384,1276387,1276393,1276440,1276443,1276444,1276445,1276450,1276451,1276453,1276454,1276457,1276476,1276479,1276482,1276483,1276495,1276499,1276502,1276517,1276522,1276574,1276576,1276585,1276592,1276765,1276769,1276770,1276772,1276773,1276776,1 276778,1276779,1276798,1276844,1276854,1276860,1276912,1276914,1276925,1276929,1276933,1276934,1276935,1276940,1276943,1276949,1276956,1277044,1277046,1277053,1277064,1277067,1277069,1277071,1277072,1277073,1277075,1277079,1277080,1277082,1277084,1277089,1277091,1277094,1277113,1277119,1277121,1277130,1277133,1277135,1277142,1277148,1277157,1277158,1277161,1277163,1277166,1277167,1277169,1277170,1277171,1277173,1277176,1277177,1277182,1277184,1277190,1277191,1277192,1277193,1277194,1277195,1277196,1277197,1277200,1277201,1277211,1277214,1277221,1277222,1277225,1277240,1277254,1277261,1277264,1277270,1277280,1277282,1277298,1277307,1277310,1277312,1277317,1277319,1277323,1277325,1277329,1277330,1277332,1277333,1277334,1277336,1277337,1277339,1277341,1277343,1277344,1277345,1277355,1277356,1277362,1277364,1277365,1277383,1277387,1277389,1277456,1277457,1277463,1277465,1277467,1277472,1277487,1277488,1277496,1277497,1277516,1277517,1277520,1277522,1277523,1277525,1277529,1277530,127753 2,1277533,1277538,1277540,1277541,1277543,1277544,1277546,1277554,1277560,1277566,1277571,1277576,1277578,1277590,1277593,1277606,1277607,1277609,1277610,1277612,1277621,1277623,1277628,1277637,1277645,1277657,1277658,1277675,1277676,1277677,1277678,1277682,1277690,1277730,1277731,1277732,1277741,1277742,1277744,1277746,1277754,1277760,1277770,1277771,1277772,1277810,1277819,1277832,1277835,1277836,1277837,1277839,1277860,1277875,1277877,1277879,1277880,1277881,1277882,1277884,1277887,1277893,1277903,1277911,1277934,1278028,1278030,1278041,1278050,1278057,1278074,1278081,1278101,1278103,1278108,1278117,1278123,1278132,1278139,1278140,1278153,1278160,1278167,1278172,1278178,1278181,1278194,1278198,1278200,1278201,1278202,1278207,1278210,1278211,1278212,1278213,1278214,1278217,1278222,1278241,1278246,1278296,1278310,1278313,1278317,1278318,1278319,1278320,1278323,1278325,1278326,1278329,1278335,1278343,1278350,1278377,1278379,1278393,1278400,1278405,1278412,1278423,1278429,1278430,127 8431,1278432,1278704,1278711,1279420,1279422,1279455,1279464,1279467,1279468,1279470,1279471,1279472,1279477,1279480,1279483,1279485,1279486,1279493,1279494,1279496,1279499,1279504,1279508,1279510,1279516,1279518,1279520,1279533,1279564,1279592,1279594,1279603,1279605,1279606,1279607,1279608,1279614,1279616,1279624,1279625,1279627,1279632,1279698,1279699,1279700,1279777,1279778,1279780,1279795,1279798,1279802,1279805,1279808,1279809,1279811,1279812,1279814,1279815,1279816,1279823,1279825,1279874,1279920,1279921,1279971,1280010,1280141,1280142,1280157,1280158,1280161,1280162,1280172,1280182,1280183,1280185,1280215,1280221,1280230,1280234,1280239,1280244,1280246,1280247,1280253,1280260,1280266,1280273,1280276,1280301,1280305,1280306,1280311,1280312,1280315,1280316,1280319,1280326,1280330,1280331,1280332,1280345,1280346,1280378,1280391,1280392,1280395,1280396,1280397,1280399,1280400,1280402,1280408,1280410,1280416,1280421,1280423,1280425,1280426,1280427,1280428,1280429,1280431,1280463, 1280472,1280476,1280479,1280480,1280492,1280500,1280501,1280504,1280505,1280510,1280520,1280526,1280528,1280539,1280545,1280554,1280559,1280560,1280563,1280569,1280571,1280573,1280581,1280713,1280735,1280736,1280745,1280749,1280763,1280777,1280785,1280794,1280804,1280806,1280813,1280822,1280826,1280827,1280834,1280867,1280918,1280948,1280960,1280976,1280977,1280978,1280980,1280981,1280984,1280987,1280988,1280990,1280992,1280996,1280998,1281001,1281003,1281004,1281005,1281006,1281008,1281009,1281011,1281012,1281013,1281014,1281018,1281022,1281027,1281028,1281029,1281030,1281032,1281034,1281052,1281056,1281058,1281065,1281080,1281084,1281130,1281136,1281138,1281145,1281146,1281147,1281149,1281150,1281151,1281155,1281156,1281163,1281164,1281165,1281173,1281174,1281175,1281179,1281180,1281181,1281183,1281184,1281185,1281189,1281190,1281191,1281194,1281204,1281205,1281206,1281211,1281214,1281216,1281221,1281222,1281251,1281253,1281254,1281256,1281257,1281260,1281265,1281269,1281270,12812 71,1281272,1281274,1281275,1281277,1281281,1281292,1281299,1281300,1281301,1281311,1281315,1281317,1281320,1281331,1281332,1281333,1281334,1281337,1281340,1281342,1281343,1281346,1281347,1281352,1281353,1281357,1281358,1281359,1281360,1281361,1281363,1281368,1281382,1281383,1281384,1281389,1281391,1281392,1281394,1281395,1281396,1281397,1281402,1281413,1281415,1281418,1281422,1281423,1281427,1281429,1281488,1281490,1281495,1281500,1281504,1281505,1281508,1281509,1281510,1281523,1281528,1281532,1281535,1281536,1281538,1281547,1281549,1281551,1281552,1281555,1281563,1281568,1281577,1281579,1281588,1281593,1281619,1281620,1281626,1281631,1281635,1281639,1281640,1281642,1281650,1281672,1281676,1281677,1281686,1281688,1281691,1281694,1281696,1281701,1281702,1281705,1281706,1281707,1281708,1281715,1281723,1281735,1281736,1281753,1281775,1281776,1281779,1281781,1281783,1281784,1281785,1281796,1281799,1281801,1281803,1281804,1281813,1281817,1281818,1281824,1281828,1281850,1281851,1281852,12 81853,1281858,1281865,1281868,1281870,1281872,1281877,1281879,1281883,1281886,1281887,1281890,1281891,1281895,1281897,1281899,1281900,1281901,1281903,1281930,1281932,1281968,1281969,1281985,1281987,1281988,1281992,1281993,1281995,1281996,1282001,1282002,1282008,1282018,1282019,1282021,1282025,1282026,1282027,1282031,1282032,1282033,1282034,1282040,1282041,1282042,1282044,1282045,1282063,1282065,1282068,1282080,1282081,1282082,1282083,1282095,1282096,1282109,1282114,1282116,1282117,1282120,1282122,1282128,1282129,1282131,1282133,1282134,1282145,1282146,1282149,1282151,1282154,1282156,1282158,1282165,1282167,1282168,1282169,1282170,1282174,1282178,1282179,1282189,1282192,1282196,1282262,1282266,1282267,1282276,1282284,1282286,1282289,1282296,1282297,1282298,1282300,1282302,1282304,1282306,1282314,1282325,1282327,1282328,1282677,1282684,1282690,1282691,1282695,1282697,1282703,1282727,1282729,1282735,1282737,1282740,1282741,1282744,1282753,1282754,1282755,1282759,1282761,1282762,1282763 ,1282764,1282767,1282772,1282773,1282775,1282776,1282778,1282804,1282805,1282810,1282814,1282867,1282870,1282879,1282884,1282885,1282886,1282887,1282889,1282890,1282893,1282898,1282911,1282914,1282915,1282916,1282920,1282924,1282925,1282926,1282927,1282928,1282931,1282935,1282955,1282957,1282958,1282962,1282963,1282974,1282984,1282993,1283004,1283017,1283018,1283026,1283028,1283036,1283038,1283039,1283045,1283047,1283051,1283058,1283076,1283077,1283078,1283081,1283082,1283087,1283113,1283114,1283122,1283126,1283130,1283132,1283134,1283136,1283145,1283155,1283157,1283159,1283164,1283175,1283177,1283196,1283197,1283202,1283206,1283208,1283209,1283211,1283214,1283215,1283220,1283223,1283224,1283225,1283226,1283228,1283229,1283231,1283233,1283271,1283276,1283278,1283287,1283288,1283292,1283333,1283334,1283335,1283337,1283339,1283343,1283349,1283356,1283360,1283364,1283397,1283416,1283418,1283429,1283445,1283453,1283458,1283459,1283464,1283469,1283474,1283481,1283483,1283485,1283486,1283 495,1283499,1283500,1283502,1283504,1283508,1283511,1283513,1283523,1283585,1283662,1283668,1283736,1283737,1283741,1283746,1283752,1283754,1283755,1283780,1283781,1283782,1283785,1283803,1283810,1283830,1283833,1283834,1283837,1283838,1283842,1283844,1283845,1283848,1283858,1283863,1283869,1283871,1283878,1283884,1283886,1283903,1283916,1283920,1283921,1283928,1283933,1283935,1283941,1283958,1283960,1283967,1283973,1284024,1284031,1284032,1284033,1284062,1284063,1284068,1284150,1284292,1284293,1284296,1284302,1284303,1284304,1284305,1284306,1284313,1284346,1284349,1284350,1284358,1284360,1284363,1284429,1284446,1284455,1284477,1284483,1284484,1284485,1284498,1284503,1284504,1284505,1284508,1284509,1284512,1284513,1284514,1284515,1284517,1284518,1284537,1284539,1284540,1284541,1284542,1284543,1284544,1284545,1284550,1284553,1284554,1284555,1284556,1284557,1284561,1284563,1284568,1284577,1284578,1284579,1284584,1284585,1284595,1284600,1284601,1284602,1284603,1284609,1284615,1284616,1 284620,1284621,1284623,1284626,1284630,1284631,1284632,1284635,1284636,1284637,1284638,1284640,1284641,1284642,1284643,1284644,1284652,1284704,1284706,1284707,1284709,1284721,1284723,1284740,1284742,1284944,1284945,1285391,1285553,1285556,1285560,1285561,1285562,1285564,1285569,1285587,1285594,1285596,1285624,1285645,1285647,1285648,1285668,1285888,1285891,1285924,1285957,1285971,1285976,1285978,1285979,1285985,1285988,1285998,1286001,1286002,1286005,1286009,1286012,1286013,1286019,1286020,1286036,1286037,1286112,1286114,1286119,1286121,1286123,1286133,1286158,1286160,1286161,1286171,1286184,1286186,1286190,1286203,1286204,1286205,1286207,1286208,1286215,1286217,1286218,1286224,1286233,1286234,1286237,1286238,1286240,1286257,1286259,1286267,1286268,1286270,1286284,1286342,1286343,1286344,1286346,1286390,1286391,1286394,1286417,1286418,1286421,1286429,1286430,1286431,1286432,1286443,1286444,1286453,1286455,1286457,1286458,1286465,1286469,1286514,1286529,1286554,1286620,1286621,128662 5,1286654,1286665,1286667,1286669,1286670,1286671,1286672,1286673,1286674,1286689,1286692,1286694,1286704,1286707,1286708,1286713,1286720,1286735,1286741,1286742,1286743,1286756,1286757,1286769,1286772,1286775,1286778,1286779,1286782,1286785,1286787,1286788,1286806,1286819,1286820,1286821,1286822,1286825,1286826,1286839,1286841,1286843,1286850,1286856,1286857,1286859,1286860,1286862,1286863,1286864,1286865,1286867,1286870,1286872,1286874,1286877,1286888,1286890,1286913,1286918,1286919,1287173,1287191,1287256,1287268,1287342,1287346,1287347,1287351,1287352,1287353,1287364,1287592,1287594,1287597,1287642,1287647,1287648,1287649,1287655,1287658,1287674,1287680,1287682,1287714,1287719,1287720,1287728,1287737,1287742,1287749,1287757,1287762,1287763,1287765,1287770,1287773,1287774,1287825,1287966,1287981,1287984,1287985,1287995,1287997,1288001,1288002,1288005,1288007,1288009,1288014,1288061,1288088,1288124,1288125,1288126,1288127,1288226,1288246,1288248,1288388,1288406,1288454,1288513,128 8521,1288522,1288527,1288584,1288592,1288627,1288629,1288668,1288676,1288682,1288703,1288713,1288752,1289119,CVE-2025-38237,CVE-2025-38576,CVE-2025-39729,CVE-2025-39936,CVE-2025-71128,CVE-2026-100071,CVE-2026-100077,CVE-2026-100078,CVE-2026-100079,CVE-2026-31708,CVE-2026-31709,CVE-2026-43178,CVE-2026-43315,CVE-2026-43350,CVE-2026-45944,CVE-2026-46070,CVE-2026-46139,CVE-2026-46155,CVE-2026-46228,CVE-2026-53059,CVE-2026-53090,CVE-2026-53288,CVE-2026-63809,CVE-2026-64257,CVE-2026-64370,CVE-2026-64413,CVE-2026-64425,CVE-2026-64430,CVE-2026-64434,CVE-2026-64441,CVE-2026-64507,CVE-2026-64508,CVE-2026-68140,CVE-2026-68186,CVE-2026-68337,CVE-2026-68383,CVE-2026-68388,CVE-2026-68436,CVE-2026-68447,CVE-2026-68449,CVE-2026-68466,CVE-2026-68467,CVE-2026-68469,CVE-2026-68475,CVE-2026-68478,CVE-2026-68479,CVE-2026-72004,CVE-2026-72005,CVE-2026-72010,CVE-2026-72024,CVE-2026-72029,CVE-2026-72047,CVE-2026-72048,CVE-2026-72049,CVE-2026-72059,CVE-2026-72063,CVE-2026-72064,CVE-2026-72065,CVE-2026-72073 ,CVE-2026-72074,CVE-2026-72075,CVE-2026-72076,CVE-2026-72077,CVE-2026-72078,CVE-2026-72079,CVE-2026-72089,CVE-2026-72098,CVE-2026-72105,CVE-2026-72111,CVE-2026-72120,CVE-2026-72122,CVE-2026-72123,CVE-2026-72126,CVE-2026-72133,CVE-2026-72135,CVE-2026-72140,CVE-2026-72142,CVE-2026-72144,CVE-2026-72148,CVE-2026-72149,CVE-2026-72151,CVE-2026-72152,CVE-2026-72155,CVE-2026-72156,CVE-2026-72157,CVE-2026-72158,CVE-2026-72165,CVE-2026-72167,CVE-2026-72171,CVE-2026-72182,CVE-2026-72214,CVE-2026-72216,CVE-2026-72226,CVE-2026-72227,CVE-2026-72228,CVE-2026-72230,CVE-2026-72231,CVE-2026-72233,CVE-2026-72240,CVE-2026-72241,CVE-2026-72245,CVE-2026-72257,CVE-2026-72258,CVE-2026-72259,CVE-2026-72260,CVE-2026-72261,CVE-2026-72262,CVE-2026-72264,CVE-2026-72265,CVE-2026-72266,CVE-2026-72267,CVE-2026-72268,CVE-2026-72269,CVE-2026-72270,CVE-2026-72271,CVE-2026-72272,CVE-2026-72273,CVE-2026-72274,CVE-2026-72275,CVE-2026-72276,CVE-2026-72284,CVE-2026-72285,CVE-2026-72286,CVE-2026-72300,CVE-2026-72301,CVE-20 26-72302,CVE-2026-72304,CVE-2026-72314,CVE-2026-72318,CVE-2026-72324,CVE-2026-72327,CVE-2026-72334,CVE-2026-72335,CVE-2026-72336,CVE-2026-72351,CVE-2026-72360,CVE-2026-72361,CVE-2026-72362,CVE-2026-72386,CVE-2026-72387,CVE-2026-72391,CVE-2026-72394,CVE-2026-72396,CVE-2026-72400,CVE-2026-72416,CVE-2026-72424,CVE-2026-72428,CVE-2026-72441,CVE-2026-72443,CVE-2026-72449,CVE-2026-72452,CVE-2026-72463,CVE-2026-72464,CVE-2026-72465,CVE-2026-72474,CVE-2026-72475,CVE-2026-72476,CVE-2026-72479,CVE-2026-72480,CVE-2026-72481,CVE-2026-72483,CVE-2026-72484,CVE-2026-72486,CVE-2026-72489,CVE-2026-72496,CVE-2026-72498,CVE-2026-74263,CVE-2026-74265,CVE-2026-74271,CVE-2026-74276,CVE-2026-74278,CVE-2026-74279,CVE-2026-74280,CVE-2026-74287,CVE-2026-74291,CVE-2026-74292,CVE-2026-74293,CVE-2026-74294,CVE-2026-74295,CVE-2026-74300,CVE-2026-74301,CVE-2026-74302,CVE-2026-74303,CVE-2026-74320,CVE-2026-74329,CVE-2026-74331,CVE-2026-74332,CVE-2026-74339,CVE-2026-74340,CVE-2026-74341,CVE-2026-74353,CVE-2026-7438 0,CVE-2026-74381,CVE-2026-74387,CVE-2026-74393,CVE-2026-74399,CVE-2026-74402,CVE-2026-74404,CVE-2026-74408,CVE-2026-74410,CVE-2026-74411,CVE-2026-74416,CVE-2026-74417,CVE-2026-74424,CVE-2026-74439,CVE-2026-74442,CVE-2026-74443,CVE-2026-74444,CVE-2026-74445,CVE-2026-74446,CVE-2026-74447,CVE-2026-74448,CVE-2026-74451,CVE-2026-74452,CVE-2026-74453,CVE-2026-74454,CVE-2026-74455,CVE-2026-74456,CVE-2026-74457,CVE-2026-74458,CVE-2026-74459,CVE-2026-74460,CVE-2026-74461,CVE-2026-74463,CVE-2026-74466,CVE-2026-74488,CVE-2026-74497,CVE-2026-74498,CVE-2026-74499,CVE-2026-74500,CVE-2026-74501,CVE-2026-74502,CVE-2026-74503,CVE-2026-74504,CVE-2026-74505,CVE-2026-74507,CVE-2026-74508,CVE-2026-74509,CVE-2026-74516,CVE-2026-74519,CVE-2026-74529,CVE-2026-74530,CVE-2026-74531,CVE-2026-74532,CVE-2026-74540,CVE-2026-74541,CVE-2026-74546,CVE-2026-74547,CVE-2026-74549,CVE-2026-74551,CVE-2026-74552,CVE-2026-74553,CVE-2026-74565,CVE-2026-74574,CVE-2026-74585,CVE-2026-74604,CVE-2026-74607,CVE-2026-74613,CVE-2 026-74620,CVE-2026-74635,CVE-2026-74641,CVE-2026-74642,CVE-2026-74646,CVE-2026-74647,CVE-2026-74648,CVE-2026-74649,CVE-2026-74650,CVE-2026-74651,CVE-2026-74653,CVE-2026-74654,CVE-2026-74655,CVE-2026-74661,CVE-2026-74673,CVE-2026-74675,CVE-2026-74676,CVE-2026-74677,CVE-2026-74678,CVE-2026-74679,CVE-2026-74680,CVE-2026-74682,CVE-2026-74683,CVE-2026-74684,CVE-2026-74685,CVE-2026-74690,CVE-2026-74691,CVE-2026-74720,CVE-2026-74746,CVE-2026-74748,CVE-2026-74753,CVE-2026-80522,CVE-2026-80539,CVE-2026-80540,CVE-2026-80541,CVE-2026-80542,CVE-2026-80556,CVE-2026-80559,CVE-2026-80563,CVE-2026-80565,CVE-2026-80566,CVE-2026-80567,CVE-2026-80568,CVE-2026-80569,CVE-2026-80570,CVE-2026-80571,CVE-2026-80573,CVE-2026-80574,CVE-2026-80575,CVE-2026-80576,CVE-2026-80577,CVE-2026-80578,CVE-2026-80584,CVE-2026-80593,CVE-2026-80594,CVE-2026-80595,CVE-2026-80596,CVE-2026-80597,CVE-2026-80599,CVE-2026-80602,CVE-2026-80605,CVE-2026-80611,CVE-2026-80618,CVE-2026-80622,CVE-2026-80624,CVE-2026-80635,CVE-2026-806 37,CVE-2026-80645,CVE-2026-80649,CVE-2026-80650,CVE-2026-80652,CVE-2026-80654,CVE-2026-80659,CVE-2026-80660,CVE-2026-80663,CVE-2026-80666,CVE-2026-80677,CVE-2026-80678,CVE-2026-80680,CVE-2026-80683,CVE-2026-80684,CVE-2026-80692,CVE-2026-80695,CVE-2026-80696,CVE-2026-80698,CVE-2026-80700,CVE-2026-80702,CVE-2026-80703,CVE-2026-80704,CVE-2026-80706,CVE-2026-80707,CVE-2026-80709,CVE-2026-80710,CVE-2026-80711,CVE-2026-80716,CVE-2026-80717,CVE-2026-80722,CVE-2026-80728,CVE-2026-80736,CVE-2026-80743,CVE-2026-80749,CVE-2026-80752,CVE-2026-80754,CVE-2026-80757,CVE-2026-80759,CVE-2026-80760,CVE-2026-80762,CVE-2026-80763,CVE-2026-80764,CVE-2026-80765,CVE-2026-80767,CVE-2026-80768,CVE-2026-80770,CVE-2026-80771,CVE-2026-80772,CVE-2026-80774,CVE-2026-80781,CVE-2026-80782,CVE-2026-80783,CVE-2026-80794,CVE-2026-80795,CVE-2026-80797,CVE-2026-80798,CVE-2026-80799,CVE-2026-80800,CVE-2026-80801,CVE-2026-80802,CVE-2026-80803,CVE-2026-80808,CVE-2026-80809,CVE-2026-80812,CVE-2026-80815,CVE-2026-80819,CVE- 2026-80823,CVE-2026-80824,CVE-2026-80825,CVE-2026-80826,CVE-2026-80827,CVE-2026-80828,CVE-2026-80829,CVE-2026-80830,CVE-2026-80831,CVE-2026-80832,CVE-2026-80839,CVE-2026-80855,CVE-2026-80860,CVE-2026-80862,CVE-2026-80870,CVE-2026-80879,CVE-2026-80881,CVE-2026-80882,CVE-2026-80883,CVE-2026-80886,CVE-2026-80887,CVE-2026-80888,CVE-2026-80902,CVE-2026-80903,CVE-2026-80907,CVE-2026-80908,CVE-2026-80909,CVE-2026-80910,CVE-2026-80911,CVE-2026-80914,CVE-2026-80918,CVE-2026-80922,CVE-2026-80923,CVE-2026-80930,CVE-2026-80931,CVE-2026-80938,CVE-2026-80940,CVE-2026-80941,CVE-2026-80942,CVE-2026-80943,CVE-2026-80944,CVE-2026-80947,CVE-2026-80949,CVE-2026-80951,CVE-2026-80952,CVE-2026-80964,CVE-2026-80965,CVE-2026-80966,CVE-2026-80967,CVE-2026-80968,CVE-2026-80969,CVE-2026-80971,CVE-2026-80972,CVE-2026-80973,CVE-2026-80974,CVE-2026-80978,CVE-2026-80988,CVE-2026-80989,CVE-2026-80990,CVE-2026-81005,CVE-2026-81007,CVE-2026-81008,CVE-2026-81011,CVE-2026-81012,CVE-2026-81013,CVE-2026-81014,CVE-2026-81 017,CVE-2026-89438,CVE-2026-89439,CVE-2026-89440,CVE-2026-89442,CVE-2026-89443,CVE-2026-89444,CVE-2026-89454,CVE-2026-89455,CVE-2026-89456,CVE-2026-89461,CVE-2026-89462,CVE-2026-89463,CVE-2026-89464,CVE-2026-89465,CVE-2026-89466,CVE-2026-89468,CVE-2026-89469,CVE-2026-89470,CVE-2026-89471,CVE-2026-89472,CVE-2026-89473,CVE-2026-89474,CVE-2026-89475,CVE-2026-89487,CVE-2026-89491,CVE-2026-89494,CVE-2026-89495,CVE-2026-89504,CVE-2026-89512,CVE-2026-89524,CVE-2026-89537,CVE-2026-89553,CVE-2026-89554,CVE-2026-89559,CVE-2026-89560,CVE-2026-89562,CVE-2026-89583,CVE-2026-89587,CVE-2026-89595,CVE-2026-89597,CVE-2026-89599,CVE-2026-89602,CVE-2026-89608,CVE-2026-89621,CVE-2026-89622,CVE-2026-89623,CVE-2026-89626,CVE-2026-89627,CVE-2026-89628,CVE-2026-89633,CVE-2026-89637,CVE-2026-89648,CVE-2026-89656,CVE-2026-89657,CVE-2026-89724,CVE-2026-89725,CVE-2026-89726,CVE-2026-89729,CVE-2026-89730,CVE-2026-89732,CVE-2026-89733,CVE-2026-89735,CVE-2026-89736,CVE-2026-89737,CVE-2026-89738,CVE-2026-89739,CVE -2026-89740,CVE-2026-89741,CVE-2026-89742,CVE-2026-89743,CVE-2026-89744,CVE-2026-89751,CVE-2026-89757,CVE-2026-89761,CVE-2026-89762,CVE-2026-89774,CVE-2026-89786,CVE-2026-89787,CVE-2026-89797,CVE-2026-89798,CVE-2026-89800,CVE-2026-89801,CVE-2026-89802,CVE-2026-89803,CVE-2026-89807,CVE-2026-89812,CVE-2026-89813,CVE-2026-89816,CVE-2026-89817,CVE-2026-89818,CVE-2026-89819,CVE-2026-89821,CVE-2026-89822,CVE-2026-89823,CVE-2026-89824,CVE-2026-89825,CVE-2026-89842,CVE-2026-89843,CVE-2026-89844,CVE-2026-89845,CVE-2026-89846,CVE-2026-89847,CVE-2026-89848,CVE-2026-89849,CVE-2026-89850,CVE-2026-89851,CVE-2026-89852,CVE-2026-89853,CVE-2026-89854,CVE-2026-89855,CVE-2026-89856,CVE-2026-89857,CVE-2026-89858,CVE-2026-89859,CVE-2026-89860,CVE-2026-89861,CVE-2026-89862,CVE-2026-89863,CVE-2026-89864,CVE-2026-89865,CVE-2026-89870,CVE-2026-89871,CVE-2026-89872,CVE-2026-89874,CVE-2026-89876,CVE-2026-89877,CVE-2026-89878,CVE-2026-89879,CVE-2026-89880,CVE-2026-89881,CVE-2026-89883,CVE-2026-89884,CVE-2026-8 9885,CVE-2026-89886,CVE-2026-89887,CVE-2026-89888,CVE-2026-89890,CVE-2026-89891,CVE-2026-89892,CVE-2026-89893,CVE-2026-89894,CVE-2026-89895,CVE-2026-89896,CVE-2026-89897,CVE-2026-89898,CVE-2026-89899,CVE-2026-89901,CVE-2026-89924,CVE-2026-89927,CVE-2026-89929,CVE-2026-89930,CVE-2026-89931,CVE-2026-89932,CVE-2026-89933,CVE-2026-89934,CVE-2026-89936,CVE-2026-89937,CVE-2026-89938,CVE-2026-89939,CVE-2026-89940,CVE-2026-89941,CVE-2026-89942,CVE-2026-89943,CVE-2026-89944,CVE-2026-89945,CVE-2026-89946,CVE-2026-89948,CVE-2026-89949,CVE-2026-89950,CVE-2026-89951,CVE-2026-89952,CVE-2026-89953,CVE-2026-89979,CVE-2026-89980,CVE-2026-89982,CVE-2026-89983,CVE-2026-89993,CVE-2026-89994,CVE-2026-89999,CVE-2026-90000,CVE-2026-90001,CVE-2026-90012,CVE-2026-90015,CVE-2026-90017,CVE-2026-90018,CVE-2026-90019,CVE-2026-90020,CVE-2026-90021,CVE-2026-90024,CVE-2026-90025,CVE-2026-90026,CVE-2026-90027,CVE-2026-90030,CVE-2026-90031,CVE-2026-90032,CVE-2026-90033,CVE-2026-90034,CVE-2026-90035,CVE-2026-90042,CV E-2026-90044,CVE-2026-90045,CVE-2026-90055,CVE-2026-90057,CVE-2026-90060,CVE-2026-90068,CVE-2026-90070,CVE-2026-90081,CVE-2026-90082,CVE-2026-90087,CVE-2026-90088,CVE-2026-90090,CVE-2026-90092,CVE-2026-90093,CVE-2026-90103,CVE-2026-90107,CVE-2026-90111,CVE-2026-90114,CVE-2026-90119,CVE-2026-90126,CVE-2026-90128,CVE-2026-90136,CVE-2026-90137,CVE-2026-90138,CVE-2026-90148,CVE-2026-90178,CVE-2026-90192,CVE-2026-90193,CVE-2026-90194,CVE-2026-90196,CVE-2026-90198,CVE-2026-90207,CVE-2026-90214,CVE-2026-90215,CVE-2026-90220,CVE-2026-90221,CVE-2026-90222,CVE-2026-90223,CVE-2026-90224,CVE-2026-90225,CVE-2026-90226,CVE-2026-90227,CVE-2026-90230,CVE-2026-90245,CVE-2026-90251,CVE-2026-90252,CVE-2026-90253,CVE-2026-90254,CVE-2026-90255,CVE-2026-90257,CVE-2026-90284,CVE-2026-90285,CVE-2026-90286,CVE-2026-90297,CVE-2026-90298,CVE-2026-90315,CVE-2026-90316,CVE-2026-90319,CVE-2026-90329,CVE-2026-90334,CVE-2026-90335,CVE-2026-90336,CVE-2026-90344,CVE-2026-90345,CVE-2026-90348,CVE-2026-90352,CVE-2026- 90353,CVE-2026-90354,CVE-2026-90357,CVE-2026-90360,CVE-2026-90362,CVE-2026-90366,CVE-2026-90368,CVE-2026-90370,CVE-2026-90372,CVE-2026-90373,CVE-2026-90374,CVE-2026-90375,CVE-2026-90378,CVE-2026-90380,CVE-2026-90382,CVE-2026-90383,CVE-2026-90385,CVE-2026-90386,CVE-2026-90393,CVE-2026-90394,CVE-2026-90395,CVE-2026-90398,CVE-2026-90399,CVE-2026-90402,CVE-2026-90403,CVE-2026-90404,CVE-2026-90407,CVE-2026-90410,CVE-2026-90433,CVE-2026-90434,CVE-2026-90435,CVE-2026-92476,CVE-2026-92482,CVE-2026-92490,CVE-2026-92491,CVE-2026-92496,CVE-2026-92497,CVE-2026-92498,CVE-2026-92504,CVE-2026-92506,CVE-2026-92507,CVE-2026-92508,CVE-2026-92509,CVE-2026-92510,CVE-2026-92511,CVE-2026-92512,CVE-2026-92513,CVE-2026-92521,CVE-2026-92522,CVE-2026-93040,CVE-2026-93041,CVE-2026-93042,CVE-2026-93046,CVE-2026-93048,CVE-2026-93049,CVE-2026-93052,CVE-2026-93053,CVE-2026-93054,CVE-2026-93056,CVE-2026-93061,CVE-2026-93062,CVE-2026-93063,CVE-2026-93064,CVE-2026-93065,CVE-2026-93067,CVE-2026-93070,CVE-2026-93071,C VE-2026-93082,CVE-2026-93083,CVE-2026-93084,CVE-2026-93085,CVE-2026-93086,CVE-2026-93089,CVE-2026-93090,CVE-2026-93091,CVE-2026-93092,CVE-2026-93093,CVE-2026-93101,CVE-2026-93102,CVE-2026-93103,CVE-2026-93104,CVE-2026-93114,CVE-2026-93115,CVE-2026-93116,CVE-2026-93117,CVE-2026-93118,CVE-2026-93119,CVE-2026-93120,CVE-2026-93121,CVE-2026-93122,CVE-2026-93123,CVE-2026-93126,CVE-2026-93130,CVE-2026-93131,CVE-2026-93136,CVE-2026-93141,CVE-2026-93142,CVE-2026-93155,CVE-2026-93156,CVE-2026-93158,CVE-2026-93159,CVE-2026-93161,CVE-2026-93162,CVE-2026-93165,CVE-2026-93168,CVE-2026-93170,CVE-2026-93177,CVE-2026-93178,CVE-2026-93179,CVE-2026-93181,CVE-2026-93183,CVE-2026-93184,CVE-2026-93185,CVE-2026-93188,CVE-2026-93189,CVE-2026-93190,CVE-2026-93205,CVE-2026-93206,CVE-2026-93209,CVE-2026-93210,CVE-2026-93211,CVE-2026-93213,CVE-2026-93214,CVE-2026-93223,CVE-2026-93224,CVE-2026-93228,CVE-2026-93231,CVE-2026-93234,CVE-2026-93236,CVE-2026-93242,CVE-2026-93250,CVE-2026-93262,CVE-2026-93269,CVE-2026 -93271,CVE-2026-93274,CVE-2026-93279,CVE-2026-93281,CVE-2026-93283,CVE-2026-93287,CVE-2026-93783,CVE-2026-93784,CVE-2026-93788,CVE-2026-93789,CVE-2026-93790,CVE-2026-93791,CVE-2026-93792,CVE-2026-93793,CVE-2026-93795,CVE-2026-93797,CVE-2026-93799,CVE-2026-93802,CVE-2026-93803,CVE-2026-93804,CVE-2026-93805,CVE-2026-93807,CVE-2026-93808,CVE-2026-93809,CVE-2026-93813,CVE-2026-93817,CVE-2026-93818,CVE-2026-93819,CVE-2026-93820,CVE-2026-93821,CVE-2026-93822,CVE-2026-93823,CVE-2026-93828,CVE-2026-93830,CVE-2026-97407,CVE-2026-97408,CVE-2026-97410,CVE-2026-97414,CVE-2026-97418,CVE-2026-97420,CVE-2026-97425,CVE-2026-97427,CVE-2026-97428,CVE-2026-97429,CVE-2026-97430,CVE-2026-97442,CVE-2026-97444,CVE-2026-97445,CVE-2026-97446,CVE-2026-97447,CVE-2026-97448,CVE-2026-97449,CVE-2026-97450,CVE-2026-97451,CVE-2026-97452,CVE-2026-97453,CVE-2026-97454,CVE-2026-97455,CVE-2026-97456,CVE-2026-97475,CVE-2026-97481,CVE-2026-97482,CVE-2026-97483,CVE-2026-97484,CVE-2026-97492,CVE-2026-97494,CVE-2026-97495, CVE-2026-97497,CVE-2026-97500,CVE-2026-97502,CVE-2026-97504,CVE-2026-97505,CVE-2026-97507,CVE-2026-97508,CVE-2026-97509,CVE-2026-97510,CVE-2026-97512,CVE-2026-97514,CVE-2026-97516,CVE-2026-97517,CVE-2026-97518,CVE-2026-97527,CVE-2026-97528,CVE-2026-97529,CVE-2026-97530,CVE-2026-97531,CVE-2026-97532,CVE-2026-97535,CVE-2026-97536,CVE-2026-97537,CVE-2026-97539,CVE-2026-97540,CVE-2026-97541,CVE-2026-97561,CVE-2026-97570,CVE-2026-97575,CVE-2026-97576,CVE-2026-97577,CVE-2026-97578,CVE-2026-97579,CVE-2026-97581,CVE-2026-97582,CVE-2026-97595,CVE-2026-97596,CVE-2026-97599,CVE-2026-97600,CVE-2026-97601,CVE-2026-97603,CVE-2026-97604,CVE-2026-97612,CVE-2026-97613,CVE-2026-97899,CVE-2026-97900,CVE-2026-97907,CVE-2026-97908,CVE-2026-97909,CVE-2026-97910,CVE-2026-97915,CVE-2026-97916,CVE-2026-97917,CVE-2026-97929,CVE-2026-97930,CVE-2026-97947,CVE-2026-97948,CVE-2026-97954,CVE-2026-97955,CVE-2026-97963,CVE-2026-97964,CVE-2026-97965,CVE-2026-97967,CVE-2026-97968,CVE-2026-97969,CVE-2026-97970,CVE-202 6-97975,CVE-2026-97976,CVE-2026-97977,CVE-2026-97988,CVE-2026-97991,CVE-2026-97993,CVE-2026-98001,CVE-2026-98006,CVE-2026-98014,CVE-2026-98022,CVE-2026-98023,CVE-2026-98025,CVE-2026-98027,CVE-2026-98031,CVE-2026-98039,CVE-2026-98044,CVE-2026-98047,CVE-2026-98054,CVE-2026-98055,CVE-2026-98058,CVE-2026-98066,CVE-2026-98068,CVE-2026-98069,CVE-2026-98070,CVE-2026-98071,CVE-2026-98074,CVE-2026-98078,CVE-2026-98080,CVE-2026-98085,CVE-2026-98086,CVE-2026-98092,CVE-2026-98095,CVE-2026-98107,CVE-2026-98108,CVE-2026-98109,CVE-2026-98110,CVE-2026-98111,CVE-2026-98116,CVE-2026-98121,CVE-2026-98122,CVE-2026-98152,CVE-2026-98154,CVE-2026-98155,CVE-2026-98158,CVE-2026-98159,CVE-2026-98160,CVE-2026-98164,CVE-2026-98181,CVE-2026-98184,CVE-2026-98185,CVE-2026-98186,CVE-2026-98187,CVE-2026-98188,CVE-2026-98189,CVE-2026-98190,CVE-2026-98191,CVE-2026-98195,CVE-2026-98196,CVE-2026-98197,CVE-2026-98200,CVE-2026-98201,CVE-2026-98202,CVE-2026-98203,CVE-2026-98204,CVE-2026-98205,CVE-2026-98206,CVE-2026-98207 ,CVE-2026-98208,CVE-2026-98209,CVE-2026-98210,CVE-2026-98211,CVE-2026-98212,CVE-2026-98213,CVE-2026-98218,CVE-2026-98221,CVE-2026-98222,CVE-2026-98227,CVE-2026-98236,CVE-2026-98237,CVE-2026-98238,CVE-2026-98246,CVE-2026-98247,CVE-2026-98248,CVE-2026-98249,CVE-2026-98257,CVE-2026-98258,CVE-2026-98263,CVE-2026-98264,CVE-2026-98265,CVE-2026-98266,CVE-2026-98270,CVE-2026-98282,CVE-2026-98283,CVE-2026-98290,CVE-2026-98291,CVE-2026-98292,CVE-2026-98293,CVE-2026-98295,CVE-2026-98297,CVE-2026-98298,CVE-2026-98306,CVE-2026-98307,CVE-2026-98308,CVE-2026-98309,CVE-2026-98311,CVE-2026-98312,CVE-2026-98314,CVE-2026-98316,CVE-2026-98319,CVE-2026-98325,CVE-2026-98326,CVE-2026-98327,CVE-2026-98328,CVE-2026-98329,CVE-2026-98331,CVE-2026-98332,CVE-2026-98334,CVE-2026-98335,CVE-2026-98336,CVE-2026-98337,CVE-2026-98339,CVE-2026-98340,CVE-2026-98342,CVE-2026-98343,CVE-2026-98344,CVE-2026-98345,CVE-2026-98346,CVE-2026-98348,CVE-2026-98349,CVE-2026-98351,CVE-2026-98353,CVE-2026-98363,CVE-2026-98368,CVE-20 26-98373,CVE-2026-98374,CVE-2026-98375,CVE-2026-98376,CVE-2026-98386,CVE-2026-98390,CVE-2026-98392,CVE-2026-98404,CVE-2026-98406,CVE-2026-98407,CVE-2026-98409,CVE-2026-98410,CVE-2026-98411,CVE-2026-98412,CVE-2026-98416,CVE-2026-98421,CVE-2026-98422,CVE-2026-98426,CVE-2026-98428,CVE-2026-98455,CVE-2026-98456,CVE-2026-98457,CVE-2026-98458,CVE-2026-98459,CVE-2026-98460,CVE-2026-98461,CVE-2026-98462,CVE-2026-98466,CVE-2026-98471,CVE-2026-98481,CVE-2026-98482,CVE-2026-98499,CVE-2026-98501,CVE-2026-98502,CVE-2026-98503,CVE-2026-98504,CVE-2026-98507,CVE-2026-98508,CVE-2026-98509,CVE-2026-98511,CVE-2026-98512,CVE-2026-98513,CVE-2026-98514,CVE-2026-98515,CVE-2026-98516,CVE-2026-98517,CVE-2026-98519,CVE-2026-98521,CVE-2026-98522,CVE-2026-98527,CVE-2026-98529,CVE-2026-98555,CVE-2026-98566,CVE-2026-98575,CVE-2026-98576,CVE-2026-98577,CVE-2026-98578,CVE-2026-98579,CVE-2026-98580,CVE-2026-98581,CVE-2026-98582,CVE-2026-98583,CVE-2026-98597,CVE-2026-98600,CVE-2026-98601,CVE-2026-98602,CVE-2026-9860 5,CVE-2026-98606,CVE-2026-98607,CVE-2026-98608,CVE-2026-98609,CVE-2026-98612,CVE-2026-98623,CVE-2026-98631,CVE-2026-98632,CVE-2026-98637,CVE-2026-98640,CVE-2026-98656,CVE-2026-98657,CVE-2026-98658,CVE-2026-98660,CVE-2026-98661,CVE-2026-98662,CVE-2026-98663,CVE-2026-98664,CVE-2026-98665,CVE-2026-98666,CVE-2026-98668,CVE-2026-98669,CVE-2026-98670,CVE-2026-98671,CVE-2026-98673,CVE-2026-98679,CVE-2026-98680,CVE-2026-98687,CVE-2026-98694,CVE-2026-98695,CVE-2026-98696,CVE-2026-98697,CVE-2026-98698,CVE-2026-98699,CVE-2026-98700,CVE-2026-98701,CVE-2026-98702,CVE-2026-98703,CVE-2026-98704,CVE-2026-98705,CVE-2026-98706,CVE-2026-98708,CVE-2026-98710,CVE-2026-98711,CVE-2026-98713,CVE-2026-98717,CVE-2026-98718,CVE-2026-98720,CVE-2026-98721,CVE-2026-98722,CVE-2026-98730,CVE-2026-98731,CVE-2026-98732,CVE-2026-98733,CVE-2026-98735,CVE-2026-98736,CVE-2026-98737,CVE-2026-98739,CVE-2026-98741,CVE-2026-98742,CVE-2026-98743,CVE-2026-98744,CVE-2026-98745,CVE-2026-98746,CVE-2026-98748,CVE-2026-98749,CVE-2 026-98756,CVE-2026-98757,CVE-2026-98758,CVE-2026-98760,CVE-2026-98761,CVE-2026-98763,CVE-2026-98764,CVE-2026-98765,CVE-2026-98766,CVE-2026-98768,CVE-2026-98769,CVE-2026-98770,CVE-2026-98771,CVE-2026-98772,CVE-2026-98773,CVE-2026-98779,CVE-2026-98780,CVE-2026-98781,CVE-2026-98782,CVE-2026-98783,CVE-2026-98784,CVE-2026-98785,CVE-2026-98809,CVE-2026-98819,CVE-2026-98822,CVE-2026-98823,CVE-2026-98825,CVE-2026-98827,CVE-2026-98828,CVE-2026-98830,CVE-2026-98833,CVE-2026-98834,CVE-2026-98835,CVE-2026-98836,CVE-2026-98837,CVE-2026-98838,CVE-2026-98840,CVE-2026-98845,CVE-2026-98847,CVE-2026-98848,CVE-2026-98860,CVE-2026-98863,CVE-2026-98871,CVE-2026-98876,CVE-2026-98882,CVE-2026-98884,CVE-2026-98885,CVE-2026-98886,CVE-2026-98888,CVE-2026-98889,CVE-2026-98891,CVE-2026-98892,CVE-2026-98893,CVE-2026-98895,CVE-2026-98896,CVE-2026-98898,CVE-2026-98910,CVE-2026-98912,CVE-2026-98915,CVE-2026-98916,CVE-2026-98933,CVE-2026-98935,CVE-2026-98936,CVE-2026-98939,CVE-2026-98940,CVE-2026-98949,CVE-2026-989 56,CVE-2026-98957,CVE-2026-98970,CVE-2026-98971,CVE-2026-99004,CVE-2026-99005,CVE-2026-99006,CVE-2026-99007,CVE-2026-99008,CVE-2026-99010,CVE-2026-99011,CVE-2026-99012,CVE-2026-99013,CVE-2026-99015,CVE-2026-99020,CVE-2026-99022,CVE-2026-99034,CVE-2026-99035,CVE-2026-99038,CVE-2026-99039,CVE-2026-99049,CVE-2026-99061,CVE-2026-99069,CVE-2026-99089,CVE-2026-99090,CVE-2026-99091,CVE-2026-99094,CVE-2026-99095,CVE-2026-99131,CVE-2026-99134,CVE-2026-99150,CVE-2026-99176,CVE-2026-99178,CVE-2026-99214,CVE-2026-99216 The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-31708: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path (bsc#1264022). - CVE-2026-31709: smb: client: validate the whole DACL before rewriting it in cifsacl (bsc#1264024). - CVE-2026-43350: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). - CVE-2026-46155: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). - CVE-2026-53288: arm64: Reserve an extra page for early kernel mapping (bsc#1269813). - CVE-2026-64370: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (bsc#1273805). - CVE-2026-64413: netfilter: ebtables: zero chainstack array (bsc#1274082). - CVE-2026-64430: NTB: epf: Avoid calling pci_irq_vector() from hardirq context (bsc#1274257). - CVE-2026-68140: net/iucv: fix use-after-free of a severed iucv_path (bsc#1275581). - CVE-2026-68186: binfmt_misc: set have_execfd only once the interpreter is opened (bsc#1274949). - CVE-2026-68337: bpf: Reject redirect helpers without a bpf_net_context (bsc#1274635). - CVE-2026-68383: drm/xe/guc: Keep scheduler timeline name alive (bsc#1274816). - CVE-2026-68436: drm/amd/display: use kvzalloc to allocate struct dc (bsc#1276275). - CVE-2026-68447: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size (bsc#1276280). - CVE-2026-68449: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning (bsc#1274839). - CVE-2026-72010: cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed (bsc#1276776). - CVE-2026-72073: mmc: vub300: fix use-after-free on probe failure (bsc#1277157). - CVE-2026-72111: bpf: Reset register bounds before narrowing retval range in check_mem_access() (bsc#1277389). - CVE-2026-72318: cifs: validate DFS referral string offsets (bsc#1275939). - CVE-2026-72400: seg6: validate SRH length before reading fixed fields (bsc#1278030). - CVE-2026-72416: netfilter: nft_compat: ebtables emulation must reject non-bridge targets (bsc#1278041). - CVE-2026-72428: bpf: Fix stack slot index in nospec checks (bsc#1278050). - CVE-2026-74399: evm: terminate and bound the evm_xattrs read buffer (bsc#1278319). - CVE-2026-74466: s390/ap/zcrypt: Rework AP message buffer allocation (bsc#1277810). - CVE-2026-74565: netfilter: nf_tables: make nft_object rhltable per table (bsc#1275568). - CVE-2026-74613: vsock/virtio: avoid refilling the RX queue after teardown (bsc#1277903). - CVE-2026-74620: net/sched: act_gact, act_police: range check the fallback control action (bsc#1277044). - CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). - CVE-2026-74690: s390/ism: Fix UAF of sba and ieq during ism_dev_exit() (bsc#1276929). - CVE-2026-74720: bpf: Preserve pointer state for commuted arithmetic (bsc#1276574). - CVE-2026-74746: netfilter: flowtable: publish GC-visible tuple last (bsc#1278101). - CVE-2026-74748: netfilter: ipset: fix refcount race between list:set GC and swap (bsc#1277578). - CVE-2026-80584: s390/qeth: validate user buffer length in SNMP and ARP query (bsc#1277341). - CVE-2026-80602: perf/x86/amd/lbr: Fix kernel address leakage (bsc#1278123). - CVE-2026-80637: netfilter: synproxy: fix unaligned memory access in timestamp adjustment (bsc#1278343). - CVE-2026-80684: KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277467). - CVE-2026-80709: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs (bsc#1278202). - CVE-2026-80710: s390/dasd: Fix undersized format-check buffer (bsc#1278167). - CVE-2026-80717: sctp: validate Adaptation Indication parameter length (bsc#1277836). - CVE-2026-80757: selinux: reject a class permission count below its inherited common (bsc#1278711). - CVE-2026-80808: ext4: stop retrying saturated xattr cache entries (bsc#1279795). - CVE-2026-80809: ocfs2: fix missing metadata reservation for large xattrs (bsc#1279606). - CVE-2026-80855: fuse: fix invalidate lock leak on open O_TRUNC DAX failure (bsc#1279564). - CVE-2026-80879: ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write (bsc#1279494). - CVE-2026-80881: ocfs2: fix buffer head management in ocfs2_read_blocks() (bsc#1279496). - CVE-2026-80978: ip6_gre: fix hardware header length for NBMA tunnels (bsc#1280253). - CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down (bsc#1280266). - CVE-2026-89456: s390/dasd: Propagate partial completion length across ERP (bsc#1280326). - CVE-2026-89487: openvswitch: only skb_tx_error() a packet we are about to drop (bsc#1280510). - CVE-2026-89491: ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin() (bsc#1280472). - CVE-2026-89494: ocfs2: validate lengths in dlm_mig_lockres_handler (bsc#1280520). - CVE-2026-89495: ocfs2: bound namelen in dlm_migrate_request_handler (bsc#1280569). - CVE-2026-89537: SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 (bsc#1280713). - CVE-2026-89554: mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction (bsc#1280736). - CVE-2026-89559: libnvdimm/labels: Prevent integer overflow in __nd_label_validate() (bsc#1280554). - CVE-2026-89560: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation (bsc#1280806). - CVE-2026-89595: fsnotify: Fix stale object mask after concurrent mark updates (bsc#1280834). - CVE-2026-89602: erofs: skip sufficiently large global buffers when resizing (bsc#1280827). - CVE-2026-89608: ecryptfs: pass packet set buffer size to parser (bsc#1280826). - CVE-2026-89633: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() (bsc#1280867). - CVE-2026-89637: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 (bsc#1280492). - CVE-2026-89648: ceph: cap delegated inode count in ceph_parse_deleg_inos() (bsc#1280427). - CVE-2026-89656: libceph: reject buckets with mismatched CRUSH ids (bsc#1280563). - CVE-2026-89657: libceph: validate OSD extent maps before cursor advance (bsc#1280545). - CVE-2026-89751: x86/tdx: Fix off-by-one in port I/O handling (bsc#1280822). - CVE-2026-89757: mm/mglru: fix and remove redundant unevictable folio handling (bsc#1280763). - CVE-2026-89761: apparmor: fix out-of-bounds write when null terminating a label vec (bsc#1280745). - CVE-2026-89762: apparmor: fix cred UAF caused by begin_current_label_crit_section() (bsc#1280749). - CVE-2026-89786: ext4: fix out-of-bounds read in ext4_read_inline_dir() (bsc#1280976). - CVE-2026-89787: ext4: check dir entry fits before reading the hash trailer in ext4_search_dir() (bsc#1280977). - CVE-2026-89812: drm/amdgpu: force complete the MES ring fences on reset (bsc#1281146). - CVE-2026-89813: drm/amdgpu: force complete the KIQ ring fences on reset (bsc#1281147). - CVE-2026-89924: KVM: s390: Fix old_data leak in guest debug error path (bsc#1281347). - CVE-2026-90042: ceph: properly decrypt filenames in vmalloc() buffers (bsc#1280948). - CVE-2026-90057: slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() (bsc#1281650). - CVE-2026-90081: net/rds: use wq_has_sleeper() in rds_cong_map_updated() (bsc#1281490). - CVE-2026-90092: Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (bsc#1281384). - CVE-2026-90103: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (bsc#1281538). - CVE-2026-90107: net/smc: free pending qentry in smc_llc_flow_stop() before memset (bsc#1281510). - CVE-2026-90111: ip6mr: do not clone dst in ip6mr_cache_report() (bsc#1281505). - CVE-2026-90114: net: bridge: Reject descending VLAN tunnel ranges (bsc#1281509). - CVE-2026-90128: vdpa/mlx5: fix wrong list iterated in add_direct_chain error path (bsc#1281577). - CVE-2026-90138: vsock: don't check the listener's sk_err in vsock_accept() (bsc#1281535). - CVE-2026-90148: NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease() (bsc#1281551). - CVE-2026-90227: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (bsc#1281705). - CVE-2026-90230: nvme: Add the DHCHAP maximum HD IDs (bsc#1281715). - CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). - CVE-2026-90393: bpf: Fix potential UAF in bpf_netns_link_update_prog (bsc#1282289). - CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). - CVE-2026-93181: perf/x86/intel/uncore: Fix uncore_box ref/unref ordering (bsc#1281817). - CVE-2026-93211: nfsd: initialize DRC hash table before registering shrinker (bsc#1282740). - CVE-2026-93228: svcrdma: Reject Write/Reply chunks with segcount 0 (bsc#1282697). - CVE-2026-93231: lockd: fix swapped arguments in nlmsvc_match_ip() (bsc#1282778). - CVE-2026-93250: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush() (bsc#1282677). - CVE-2026-93262: md/raid5-ppl: fix use-after-free in ppl_do_flush() (bsc#1283004). - CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). - CVE-2026-93795: blk-cgroup: fix leaks and online flag on radix_tree_insert failure (bsc#1283155). - CVE-2026-93817: perf: Fix addr_filter_ranges lifetime (bsc#1283017). - CVE-2026-93828: exfat: fix handling of damaged volume in exfat_create_upcase_table() (bsc#1282890). - CVE-2026-93830: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask (bsc#1282889). - CVE-2026-97410: netconsole: take target_cleanup_list_lock in drop_netconsole_target() (bsc#1283082). - CVE-2026-97596: ipvs: reject invalid states in connection template sync records (bsc#1283941). - CVE-2026-97603: idpf: disable DIM work before freeing q_vectors (bsc#1283782). - CVE-2026-97612: net: mpls: clear inner_protocol when the last label is popped (bsc#1283967). - CVE-2026-97954: net/rds: fix tcp stream corruption with large pages (bsc#1283113). - CVE-2026-97963: net: stmmac: initialize ptp_lock at probe time (bsc#1282984). - CVE-2026-97964: ppp_synctty: ensure a writeable skb header (bsc#1282962). - CVE-2026-97965: vxlan: initialize _md in vxlan_xmit_one() (bsc#1282963). - CVE-2026-97988: vhost: invalidate vring access on IOTLB transitions (bsc#1283397). - CVE-2026-97991: vdpa_sim_blk: reject out-of-range sector starts (bsc#1283356). - CVE-2026-97993: vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx (bsc#1283339). - CVE-2026-98014: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable (bsc#1283668). - CVE-2026-98022: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations (bsc#1283810). - CVE-2026-98023: vxlan: reject dynamic fdb entries that reference a nexthop id (bsc#1283960). - CVE-2026-98027: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size (bsc#1283803). - CVE-2026-98031: nexthop: Initialize extack in remove_nh_grp_entry() (bsc#1283662). - CVE-2026-98039: bpf: Require MEM_PERCPU for percpu kptr stores (bsc#1284063). - CVE-2026-98047: bpf: Check ancestor frames for rbtree callbacks (bsc#1284068). - CVE-2026-98058: bpf: Mark syscall helpers as sleepable (bsc#1283848). - CVE-2026-98068: net/rds: don't let rds_conn_shutdown() consume a concurrent drop (bsc#1283903). - CVE-2026-98069: net/rds: acquire the fastpath locks in rds_conn_shutdown() (bsc#1283863). - CVE-2026-98070: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() (bsc#1283916). - CVE-2026-98071: net/rds: clear cp_flags bits individually in rds_conn_path_reset() (bsc#1283842). - CVE-2026-98074: bonding: do not clear curr_active_slave prematurely when releasing all slaves (bsc#1283871). - CVE-2026-98078: ipvs: fix reversed sequence option serialization (bsc#1284150). - CVE-2026-98086: ALSA: ump: do not touch legacy_rmidi before it exists (bsc#1283785). - CVE-2026-98095: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header() (bsc#1283921). - CVE-2026-98122: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() (bsc#1283886). - CVE-2026-98154: nvme-rdma: fix -EIO cleanup order in queue_rq (bsc#1283418). - CVE-2026-98158: ppp_async: drop the errored frame instead of resetting its headroom (bsc#1283933). - CVE-2026-98257: rds: ib: use rds_conn_drop() on protocol version mismatch (bsc#1284346). - CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list (bsc#1284584). - CVE-2026-98282: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba (bsc#1284360). - CVE-2026-98283: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() (bsc#1284595). - CVE-2026-98306: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation (bsc#1284505). - CVE-2026-98368: esp: downgrade zerocopy managed frags before mutating skb frags (bsc#1284498). - CVE-2026-98373: mm/hugetlb: preserve mremap address delta when skipping page tables (bsc#1284742). - CVE-2026-98374: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() (bsc#1284740). - CVE-2026-98375: xen/netfront: drop RX packets with a short Ethernet header (bsc#1284944). - CVE-2026-98376: bpf: Use array_map_meta_equal for percpu array inner map replacement (bsc#1284945). - CVE-2026-98466: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 (bsc#1286218). - CVE-2026-98471: KVM: SEV: Do cache maintenance on the source VM during intra-host migration (bsc#1286240). - CVE-2026-98503: packet: use ubuf_info completion for TX_RING packets (bsc#1286020). - CVE-2026-98507: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish (bsc#1286430). - CVE-2026-98555: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure (bsc#1286769). - CVE-2026-98631: xsk: Use a 32-bit compare in xsk_map_gen_lookup (bsc#1286233). - CVE-2026-98713: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT (bsc#1286779). - CVE-2026-98720: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified (bsc#1286743). - CVE-2026-98895: net/mlx5: HWS, Handle destroying table that has a miss table (bsc#1288009). - CVE-2026-99131: xfs: fix capability check in xfs (bsc#1288668). - CVE-2026-99176: KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry (bsc#1288703). - CVE-2026-99178: x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context (bsc#1288713). - CVE-2026-100071: net: hsr: free learned nodes on device setup failure (bsc#1282870). The following non security issues were fixed: - accel/qaic: reject BO sizes that overflow page count (git-fixes). - ACPI: APEI: GHES: Bound CXL event record copy to the firmware section length (git-fixes). - ACPI: CPPC: Validate the _CPC package header (git-fixes). - ACPI: extlog: Validate elog record length before walking sections (git-fixes). - ACPI: fan: Fix memory leak due to leftover devm_kcalloc() argument (git-fixes). - ACPI: HMAT: preserve hmat_adist_nb notifier block (git-fixes). - ACPI: PCI: pci_link: clear driver_data before free (git-fixes). - ACPI: pfr_update: zero-initialize capability query result (git-fixes). - ACPI: PM: Drop parent state update from acpi_device_get_power() (git-fixes). - ACPI: tables: handle failed initrd override mappings (git-fixes). - ACPI: video: Fix backlight unregistration ordering (git-fixes). - ACPICA: Fix memory leak in acpi_ds_create_field() (git-fixes). - ACPICA: Fix PCC OperationRegion command offsets (git-fixes). - ACPICA: Initialize parser_state.aml_end in acpi_install_method() (git-fixes). - ALSA: 6fire: take stream_mutex in the Digital Thru control (git-fixes). - ALSA: aloop: Keep the timer source alive until card release (git-fixes). - ALSA: aloop: Update the PCM Slave controls for a matching playback (git-fixes). - ALSA: caiaq: Allow zero-length packet handling for EP1 (git-fixes). - ALSA: caiaq: Fix races at MIDI URB and trigger accesses (git-fixes). - ALSA: caiaq: Register card at the final step (git-fixes). - ALSA: caiaq: Serialize access to the EP1 command buffer (git-fixes). - ALSA: compress: add missing OPEN-state gate to SET_METADATA (git-fixes). - ALSA: compress: fix buffer leak on failed SET_PARAMS (git-fixes). - ALSA: compress: reject buffer geometry change on gapless next_track (git-fixes). - ALSA: control: Fix virtual master creation reference in kernel-doc (git-fixes). - ALSA: cs46xx: fix unit mismatch in DSP code area bounds check (git-fixes). - ALSA: hda/hdmi: clamp num_cvts against cvt_nids in hdmi_read_pin_conn (git-fixes). - ALSA: hda/hdmi: clamp sad_count in ELD proc write handler (git-fixes). - ALSA: hda: Add NULL check for the driver pointer at unsol event work (git-fixes). - ALSA: hda: Avoid non-operational GPU warning at regular device removal (git-fixes). - ALSA: hda: Fix potential UAF for gating jack (git-fixes). - ALSA: hda: intel: Cancel delayed work at shutdown, too (git-fixes). - ALSA: hda: Reject codec reset on ASoC (ext_ops) buses (git-fixes). - ALSA: info: Fix memory leak at card removal (git-fixes). - ALSA: jack: Fix kctl free at error in snd_jack_kctl_new() (git-fixes). - ALSA: jack: Protect the index scan against control removal (git-fixes). - ALSA: jack: Remove debugfs before freeing unregistered jacks (git-fixes). - ALSA: line6: Clear prev_fbuf on capture buffer release (git-fixes). - ALSA: line6: Fix potential OOB write in line6_capture_copy() (git-fixes). - ALSA: line6: Reject too small max packet sizes (git-fixes). - ALSA: line6: Use kzalloc() for PCM buffer allocation (git-fixes). - ALSA: pcm: Fix driver_tstamp value reporting (git-fixes). - ALSA: pcm: Protect channel-map reads against runtime detach (git-fixes). - ALSA: pcm: Protect delay DMA sync against concurrent HW_FREE (git-fixes). - ALSA: pcm: Protect delay DMA sync in forward and rewind, too (git-fixes). - ALSA: pcm: Protect the unregister notifier traversal (git-fixes). - ALSA: pcm: Remove channel-map controls before freeing substreams (git-fixes). - ALSA: pcm: Unlink substreams before releasing them (git-fixes). - ALSA: pcmtest: Fix a bogus pointer read in snd_pcmtst_pcm_pointer() (git-fixes). - ALSA: pcmtest: handle multiple wraps in random capture fill (git-fixes). - ALSA: pcmtest: Honor the enable parameter (git-fixes). - ALSA: pcmtest: Pin the module while pattern files are open (git-fixes). - ALSA: pcmtest: Reject invalid fill_mode values (git-fixes). - ALSA: rawmidi: Drain input work before freeing the runtime (git-fixes). - ALSA: seq: Fix missing direction and ump_group handling in 32bit compat ioctl (git-fixes). - ALSA: seq: oss: Skip events until fully initialized (git-fixes). - ALSA: sh: aica: Fix spu_memset() stride (git-fixes). - ALSA: ump: Avoid dereference with max_src_size=0 (git-fixes). - ALSA: ump: Correct return size of fill_rpn() (git-fixes). - ALSA: usb-audio: Use fixed control index for us16x08 mixer elements (git-fixes). - ALSA: via82xx: use helper to activate DXS controls (git-fixes). - ALSA: virtio: reset I/O message fill level on prepare (git-fixes). - ALSA: vmaster: Protect follower lookup and setup (git-fixes). - ASoC: adau17x1: return cache sync errors from resume (git-fixes). - ASoC: ak4642: return cache sync errors from resume (git-fixes). - ASoC: amd: acp: Fix .close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: ps: Fix acp63_sdw_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix acp3x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: raven: Fix memory leak in acp3x_dma_close() (git-fixes). - ASoC: amd: renoir: Fix acp_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: vangogh: Fix acp5x_dma_close() being skipped on rollback (git-fixes). - ASoC: amd: yc: Fix acp6x_pdm_dma_close() being skipped on rollback (git-fixes). - ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() (git-fixes). - ASoC: atmel-i2s: fix MCK generator error handling (git-fixes). - ASoC: atmel-i2s: use optional API for gclk (git-fixes). - ASoC: atmel-i2s: use optional API for muxclk (git-fixes). - ASoC: atmel: atmel-pcm-pdc: Fix atmel_pcm_close() being skipped on rollback (git-fixes). - ASoC: codecs: da732x: Fix definition of ADC2 EQ Overall Volume control (git-fixes). - ASoC: codecs: es*: Modify the registers related to ALC RECOVERY (git-fixes). - ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ (git-fixes). - ASoC: codecs: rt5659: propagate GPIO errors (git-fixes). - ASoC: codecs: rt5682s: disable jack detection work on shutdown (git-fixes). - ASoC: codecs: sta32x: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta32x: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: sta350: Fix definition of Ch2 and Ch3 Volume Bypass controls (git-fixes). - ASoC: codecs: sta350: Fix definition of limiter threshold controls (git-fixes). - ASoC: codecs: tlv320adc3xxx: Fix definition of AGC Target Level control (git-fixes). - ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() (git-fixes). - ASoC: codecs: wm5100: Fix definition of EQ3 Band 1 Volume control (git-fixes). - ASoC: codecs: wm8510: Fix definition of ADC Inversion Switch control (git-fixes). - ASoC: codecs: wm8737: Fix definition of zero cross switches (git-fixes). - ASoC: codecs: wm8750: Fix definition of ALC Capture NG Type control (git-fixes). - ASoC: codecs: wm8955: Fix definition of Treble Cutoff control (git-fixes). - ASoC: codecs: wm8983: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8985: Fix definition of ADC 128x Oversampling control (git-fixes). - ASoC: codecs: wm8990: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8990: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8991: Fix definition of LOMIX AINLMUX Bypass Volume control (git-fixes). - ASoC: codecs: wm8991: Fix definition of right input PGA controls (git-fixes). - ASoC: codecs: wm8994: Fix definition of WM8958 noise gate hold time controls (git-fixes). - ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() (git-fixes). - ASoC: codecs: wm_hubs: Fix definition of MIXINR to MIXOUTR volume control (git-fixes). - ASoC: codecs: wsa883x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa883x: Fix VI sense port channel count (git-fixes). - ASoC: codecs: wsa884x: Accept temperatures across the full trim range (git-fixes). - ASoC: codecs: wsa884x: disable runtime PM on unbind (git-fixes). - ASoC: codecs: wsa884x: Fix VI sense port channel count (git-fixes). - ASoC: cs42l56: Remove the ADC Mute Switch control (git-fixes). - ASoC: dwc: Use OF match data again for StarFive JH7110 (git-fixes). - ASoC: es8316: return cache sync errors from resume (git-fixes). - ASoC: es8326: report resume restore errors (git-fixes). - ASoC: fsl_asrc: check the second front-end DMA channel (git-fixes). - ASoC: fsl_asrc: use regmap_write_bits to update clock source registers (git-fixes). - ASoC: hdac_hda: Allocate the private data at codec driver bind (git-fixes). - ASoC: hdac_hda: Balance the runtime PM disable in codec remove (git-fixes). - ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe (git-fixes). - ASoC: hdac_hda: Restore the codec device type on unbind (git-fixes). - ASoC: imx-pcm-rpmsg: Fix imx_rpmsg_pcm_close() being skipped on rollback (git-fixes). - ASoC: intel: atom: Fix .shutdown() being skipped on rollback (git-fixes). - ASoC: Intel: atom: Fix platform device leak on probe failure (git-fixes). - ASoC: Intel: avs: Prevent module info underflow (git-fixes). - ASoC: Intel: avs: Unprepare a stream when recovery occurs (git-fixes). - ASoC: mediatek: common: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: common: Keep codec references until the card is bound (git-fixes). - ASoC: mediatek: mt6797: fix wrong unwind order and error code in enable_clock (git-fixes). - ASoC: mediatek: mt8183: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8183: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8183: Fix wrong clock cleanup on clk_set_parent() failure (git-fixes). - ASoC: mediatek: mt8186: Fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL enable error handling (git-fixes). - ASoC: mediatek: mt8186: Fix APLL mux setting error handling (git-fixes). - ASoC: mediatek: mt8186: Fix clock handling in mux disable path (git-fixes). - ASoC: mediatek: mt8186: Fix MCK error handling (git-fixes). - ASoC: mediatek: mt8188: Handle constraint return value in FE startup (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Handle tuner clock enable errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-clk: Propagate regmap update errors (git-fixes). - ASoC: mediatek: mt8188: mt8188-afe-pcm: Handle runtime resume errors (git-fixes). - ASoC: mediatek: mt8192-mt6359: Fix error handling in MTKAIF calibration (git-fixes). - ASoC: mediatek: mt8192: check return values in mt8192_afe_gpio_init() (git-fixes). - ASoC: mediatek: mt8192: fix AFE clock error handling (git-fixes). - ASoC: mediatek: mt8192: fix APLL mux error handling (git-fixes). - ASoC: mediatek: mt8192: fix error handling in APLL enable functions (git-fixes). - ASoC: mediatek: mt8192: fix MCK clock error handling (git-fixes). - ASoC: mediatek: mt8192: Handle regcache_sync() failure in runtime resume (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in I2S DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate errors in TDM DAI DAPM event handlers (git-fixes). - ASoC: mediatek: mt8192: Propagate mt8192_afe_gpio_request() errors in ADDA DAI (git-fixes). - ASoC: mediatek: mt8192: switch to devm_clk_get_optional() (git-fixes). - ASoC: mediatek: mt8195: Check paired MEMIF clock enable in FE trigger (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM MCLK error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM probe error handling (git-fixes). - ASoC: mediatek: mt8195: Fix ETDM startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix FE startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix HDMI TX startup error handling (git-fixes). - ASoC: mediatek: mt8195: Fix main clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix paired memif clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix register access clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix runtime resume error handling (git-fixes). - ASoC: mediatek: mt8195: Fix timing system clock error handling (git-fixes). - ASoC: mediatek: mt8195: Fix tuner clock error handling (git-fixes). - ASoC: mediatek: mt8195: Propagate IRQ lookup errors (git-fixes). - ASoC: mediatek: mt8365: Fix out-of-bounds read in get_iir_coef() (git-fixes). - ASoC: mediatek: mt8365: Handle constraint return value in FE startup (git-fixes). - ASoC: mt6359-accdet: manage private workqueues with devres (git-fixes). - ASoC: nau8540: return cache sync errors from resume (git-fixes). - ASoC: ops: Fix return value in snd_soc_limit_volume() (git-fixes). - ASoC: pcm6240: do not free an unrequested IRQ (git-fixes). - ASoC: qcom: q6apm: clear g_apm on driver removal (git-fixes). - ASoC: qcom: q6apm: reset the hw pointer with the fragment queue (git-fixes). - ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch (git-fixes). - ASoC: rockchip: rockchip_i2s: Handle runtime PM resume failures in set_fmt (git-fixes). - ASoC: rt711-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt711-sdw: always cancel jack work on remove (git-fixes). - ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls (git-fixes). - ASoC: rt712-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt712: avoid duplicate reset in io_init (git-fixes). - ASoC: rt722-sdca: always cancel jack work on remove (git-fixes). - ASoC: rt1011: return cache sync errors from resume (git-fixes). - ASoC: rt1016: return cache sync errors from resume (git-fixes). - ASoC: rt1305: return cache sync errors from resume (git-fixes). - ASoC: rt1308: return cache sync errors from resume (git-fixes). - ASoC: rt1318: return cache sync errors from resume (git-fixes). - ASoC: rt5616: return cache sync errors from resume (git-fixes). - ASoC: rt5659: return cache sync errors from resume (git-fixes). - ASoC: rt5660: return cache sync errors from resume (git-fixes). - ASoC: rt5665: return cache sync errors from resume (git-fixes). - ASoC: rt5682-sdw: always cancel jack work on remove (git-fixes). - ASoC: samsung: midas_wm1811: run FLL1 at the AIF1 configured rate when idle (git-fixes). - ASoC: sdw_utils: clear stale RT711 device reference on exit (git-fixes). - ASoC: soc-ac97: Fix error handling in snd_soc_new_ac97_component() (git-fixes). - ASoC: soc-card-test: Check return value of kunit_device_register() (git-fixes). - ASoC: soc-component: Fix return type of snd_soc_pcm_component_pointer() (git-fixes). - ASoC: soc-topology-test: Check return value of kunit_device_register() (git-fixes). - ASoC: SOF: amd: fix amd_sof_acp_remove() teardown ordering (git-fixes). - ASoC: SOF: imx: Prevent stack OOB read in DSP panic dump (git-fixes). - ASoC: SOF: pcm: Move period/buffer configuration print after platform open (stable-fixes). - ASoC: SOF: Relocate and rework functionality for PCM stream freeing (stable-fixes). - ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() (git-fixes). - ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks (git-fixes). - ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() (git-fixes). - ASoC: wcd-mbhc-v2: Fix incorrect properties names and typos (git-fixes). - ASoC: wm8994: don't lose the AIF clock ratio when staying at 32kHz SYSCLK (git-fixes). - ASoC: wm8994: fix MCLK gating for AIF clocks sourced from MCLK2 (git-fixes). - ASoC: wm8994: fix MCLK index used for setting MCLK rate (git-fixes). - ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() (git-fixes). - ASoC: wm8994: follow AIF clock source changes in MCLK gating (git-fixes). - ASoC: xilinx: formatter_pcm: Fix read-modify-write of AUD_CTRL in hw_params (git-fixes). - asymmetric_keys: reject trust keys without IDs (git-fixes). - ata: ahci_st: Do not ignore errors when getting the reset controls (git-fixes). - ata: libahci: Free the IRQs when activating a multi-IRQ host fails (git-fixes). - ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 (git-fixes). - ata: libata-scsi: Fix ata_scsi_hotplug() reference in kernel-doc (git-fixes). - ata: pata_parport: fix parport attach idr_alloc for (git-fixes). - ata: pata_parport: Fix use-after-free in new_device_store (git-fixes). - ata: sata_dwc_460ex: Don't enable interrupt if libATA core registration fails (git-fixes). - ata: sata_fsl: Fix use-after-free of host_priv on probe() failure (git-fixes). - backlight: lm3630a: Cancel delayed work before destroying workqueue (git-fixes). - backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() (git-fixes). - backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe (git-fixes). - backlight: qcom-wled: Fix WLED3 brightness register stride (git-fixes). - Bluetooth: 6lowpan: Drain RCU readers on registration failure (git-fixes). - Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file (git-fixes). - Bluetooth: 6LoWPAN: Use RCU-safe device list removal (git-fixes). - Bluetooth: Add missing newline to bt_dev_{err,warn}_ratelimited() (git-fixes). - Bluetooth: btmtk: fix skb double free on ISO padding failure (git-fixes). - Bluetooth: hci_core: Keep RCU protection through LTK filtering (git-fixes). - Bluetooth: hci_debugfs: Pin module for debugfs file operations (git-fixes). - Bluetooth: hci_sync: fix mesh adv timeout units (git-fixes). - Bluetooth: hci_sync: Protect IRK identity reads with RCU (git-fixes). - Bluetooth: hci_sync: Serialize devcoredump reset during device open (git-fixes). - Bluetooth: hci_vhci: Pin module for debugfs file operations (git-fixes). - Bluetooth: ISO: Hold the listener during disconnect notification (git-fixes). - Bluetooth: L2CAP: hold chan in l2cap_ecred_conn_rsp() (git-fixes). - Bluetooth: L2CAP: hold l2cap_conn::lock in l2cap_connect_cfm() (git-fixes). - Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn (git-fixes). - Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests (git-fixes). - Bluetooth: L2CAP: Reject mode changes on connected channels (git-fixes). - Bluetooth: L2CAP: Use default TxWindow for zero socket option (git-fixes). - Bluetooth: MGMT: Fix leaking instance on Add Extended Advertising Parameters (git-fixes). - Bluetooth: MGMT: Fix pending state of instances added without HCI traffic (git-fixes). - Bluetooth: MGMT: Reject quality report requests during unregister (git-fixes). - Bluetooth: msft: Lock failed probe cleanup against feature readers (git-fixes). - Bluetooth: MSFT: Serialize handle map cleanup with event processing (git-fixes). - Bluetooth: selftest: Pin module for selftest debugfs file operations (git-fixes). - bus: arm-cci: Drop cci-control-port node reference in __cci_ace_get_port() (git-fixes). - bus: arm-cci: Drop CPU node reference in cci_ace_init_ports() (git-fixes). - bus: fsl-mc: register the object drivers after misc_class exists (git-fixes). - char: scx200_gpio: check cdev_add() return value (git-fixes). - comedi: comedi_parport: validate the IRQ supplied by userspace (git-fixes). - comedi: dmm32at: validate the IRQ supplied by userspace (git-fixes). - comedi: dt2811: fix shift-out-of-bounds in IRQ check (git-fixes). - comedi: dt2814: validate the IRQ supplied by userspace (git-fixes). - comedi: ni_atmio16d: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmmio: validate the IRQ supplied by userspace (git-fixes). - comedi: pcmuio: validate the IRQs supplied by userspace (git-fixes). - crypto: algif_skcipher - rewind rounded output bytes (git-fixes). - crypto: amlogic - Fix DMA memory leak in cipher error path (git-fixes). - crypto: amlogic - Fix IRQ handler return value and fallthrough logic (git-fixes). - crypto: asymmetric_keys - fix OOB read in pefile_parse_binary (git-fixes). - crypto: atmel - handle authenc requests without plaintext (git-fixes). - crypto: atmel-aes - fix AADLENR for standalone GHASH (git-fixes). - crypto: atmel-sha - reject initialization without a device (git-fixes). - crypto: atmel-tdes - sync output bounce buffer before DMA (git-fixes). - crypto: atmel-tdes - zero-initialize device state (git-fixes). - crypto: caam - fix double-free in caam_rsa_set_priv_key_form() (git-fixes). - crypto: ccp - Initialize DBC ioctl mutex before registering device (git-fixes). - crypto: ccp - kill v3 IRQ tasklet during teardown (git-fixes). - crypto: ccp - kill v5 IRQ tasklet during teardown (git-fixes). - crypto: hisilicon/hpre - enable all clusters clock gating (stable-fixes). - crypto: hisilicon/hpre - fix ECDH destination DMA mapping (git-fixes). - crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent (git-fixes). - crypto: hisilicon/hpre - fix pointer dereference before length check (git-fixes). - crypto: hisilicon/hpre - remove dma_free_coherent on NULL req->dst in ECDH (git-fixes). - crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer (git-fixes). - crypto: lskcipher - preserve state across unaligned chunks (git-fixes). - crypto: mxs-dcp - handle zero-length skcipher requests (git-fixes). - crypto: qat - avoid OOB read when stripping RSA leading zeros (git-fixes). - crypto: qat - fix active_devs leak on crypto alg registration failure (git-fixes). - crypto: qat - fix error source for QAT GEN6 transmit interface faults (git-fixes). - crypto: qat - fix use of destroyed vf2pf_lock on VF restart (git-fixes). - crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() (git-fixes). - crypto: qat - release instance on DH fallback allocation failure (git-fixes). - crypto: qat - zero the VF migration state buffer on save (git-fixes). - crypto: tcrypt - Avoid reading req->base after submission (git-fixes). - dmaengine: altera-msgdma: initialize state before requesting IRQ (git-fixes). - dmaengine: at_hdmac: Fix use-after-free by proper tasklet cleanup (git-fixes). - dmaengine: dw-axi-dmac: convert clock handling to clk_bulk API (git-fixes). - dmaengine: dw-axi-dmac: Fix AXI burst length encoding (git-fixes). - dmaengine: dw-axi-dmac: Fix CH_CFG2 channel priority position (git-fixes). - dmaengine: dw-axi-dmac: Fix LLI dump out-of-bounds access (git-fixes). - dmaengine: fsl_raid: avoid free_q underflow in free_chan_resources (git-fixes). - dmaengine: fsl_raid: don't invoke client callback under desc_lock (git-fixes). - dmaengine: fsl_raid: zero CF descriptor pool allocations (git-fixes). - dmaengine: img-mdc: Fix runtime PM usage counter leak (git-fixes). - dmaengine: ioat: disable relaxed ordering before registering the device (git-fixes). - dmaengine: mediatek: hsdma: fix runtime PM leak on init failure (git-fixes). - dmaengine: mv_xor: kill tasklet on channel add error path (git-fixes). - dmaengine: plx_dma: fix NULL pointer deref in plx_dma_isr() (git-fixes). - dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree (git-fixes). - dmaengine: qcom: bam_dma: free interrupt before the clock in error path (git-fixes). - dmaengine: sprd: use clk_bulk API to fix clock imbalance (git-fixes). - dmaengine: sun6i-dma: Fix use-after-free in error handling paths (git-fixes). - dmaengine: xilinx_dma: Fix MCDMA descriptor fields based on DMA direction (git-fixes). - dmaengine: xilinx_dma: Move descriptors to done list based on completion bit (git-fixes). - Documentation: devres: Remove non-existent SPI register helpers (git-fixes). - Documentation: RAS: Use the real EDAC PCI parity control names (git-fixes). - Documentation: rs485: Pull uart_get_rs485_mode() from serial_core.c (git-fixes). - Documentation: virt: Fix the struct snp_guest_request_ioctl name in sev-guest.rst (git-fixes). - driver core: Limit the messages on a refused uevent (git-fixes). - drivers/base/node: fix UAF on device_register() failure (git-fixes). - drm/amd/display: assign missing trace entry in amdgpu_dm_dc_clocks_state (git-fixes). - drm/amd/display: copy function name into dcn_fpu trace event (git-fixes). - drm/amd/display: copy function name into dcn_optc_lock_unlock_state trace event (git-fixes). - drm/amd/display: disable replay when crc source is enabled (stable-fixes). - drm/amd/display: Fix swap in median3() for DSC rate control (git-fixes). - drm/amd/display: fix vready offset assignment in dcn_optc_lock_unlock_state (git-fixes). - drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG (git-fixes). - drm/amd/display: remove duplicated prev_p_state_change_support assignment (git-fixes). - drm/amd/display: take a runtime PM reference only when a CRTC turns on (git-fixes). - drm/amd/display: use right type for amdgpu_dc_performance event entries (git-fixes). - drm/amd/pm: bound SCLK FCW range entries to the table size (git-fixes). - drm/amdgpu/atombios: drop empty function (stable-fixes). - drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang (stable-fixes). - drm/amdgpu: Check for multiplication overflow in checkpoint stack (bsc#1276280). - drm/amdgpu: re-enable GFXOFF for compute on GFX12 (git-fixes). - drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs (git-fixes). - drm/amdgpu: Remove unused amdgpu_i2c functions (stable-fixes). - drm/amdgpu: rework i2c init and fini (stable-fixes). - drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support (stable-fixes). - drm/amdgpu: Use dbg level for VBIOS check messages (stable-fixes). - drm/amdkfd: don't drop an SVM CWSR reference that was never taken (git-fixes). - drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO (git-fixes). - drm/amdkfd: Fix checkpoint-restore on multi-xcc (bsc#1276280). - drm/amdkfd: fix doorbell allocation race creating duplicate allocations (git-fixes). - drm/amdkfd: Fix partial migrate issue (stable-fixes). - drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping (git-fixes). - drm/amdkfd: validate SRAT subtables before parsing (git-fixes). - drm/amdkfd: wait for a GPU reset before freeing a BO (git-fixes). - drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties (git-fixes). - drm/exynos/fimd: fix register offset type in fimd_trigger() (git-fixes). - drm/i915/crt: convert to struct intel_display (stable-fixes). - drm/i915/display: convert I915_STATE_WARN() to struct intel_display (stable-fixes). - drm/i915/display: pass display to intel_crtc_for_pipe() (stable-fixes). - drm/i915/gmbus: convert to struct intel_display (stable-fixes). - drm/i915/vga: Convert VGA code to intel_display (stable-fixes). - drm/i915: document range_overflows() and range_end_overflows() macros (stable-fixes). - drm/i915: rename range_overflows_end() to range_end_overflows() (stable-fixes). - drm/imx/lcdc: avoid duplicate clk_per enable (git-fixes). - drm/komeda: Fix bits parsing of GLB_CORE_ID (git-fixes). - drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() (git-fixes). - drm/msm/a6xx: Fix secondary rail vote in ARC votes (git-fixes). - drm/msm/a6xx: fix use-after-free of OPP in a6xx_pm_resume (git-fixes). - drm/msm/dp: don't report link training success after a reinit (git-fixes). - drm/msm/dp: Initialize the debugfs connector pointer (git-fixes). - drm/msm/dpu: disable the slave encoder before the master (git-fixes). - drm/msm/dpu: round up the compressed INTF width (git-fixes). - drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure (git-fixes). - drm/msm/mdp5: drop cursor pipe for msm8x76 (git-fixes). - drm/msm: Properly handle msm_ioremap() without name (git-fixes). - drm/nouveau/svm: drain fault handler before freeing svmm (git-fixes). - drm/nouveau: cancel the DP IRQ work before freeing the connector (git-fixes). - drm/nouveau: disable the fence uevent work instead of just cancelling it (git-fixes). - drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq (git-fixes). - drm/nouveau: reject zero-size notifier object allocation (git-fixes). - drm/omap: dsi: avoid sending bta sync all the time in writes (git-fixes). - drm/panel: ebbg-ft8719: Set prepare_prev_first (git-fixes). - drm/panfrost: Explicitly enable MMU interrupts at device init (git-fixes). - drm/panfrost: Prevent division by 0 (git-fixes). - drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase (git-fixes). - drm/panthor: Take reqs_lock in soft_reset for clearing pending_reqs (git-fixes). - drm/tegra: Don't pass an ERR_PTR to drm_syncobj_replace_fence() (git-fixes). - drm/tegra: Drop reference on postfence (git-fixes). - drm/tegra: Fix syncobj_in wait return value check (git-fixes). - drm/ttm: return an error when kmapping a BO without pages (git-fixes). - drm/vc4: Fix firmware reference leak in vc4_drm_bind() (git-fixes). - drm/vc4: Use video aperture helpers (stable-fixes). - drm/virtio: Add a helper to map and note the dma addrs and lengths (stable-fixes). - drm/virtio: Use drm_gem_plane_helper_prepare_fb() (stable-fixes). - drm/vmwgfx: Stop using dev_private to store driver data (stable-fixes). - drm: of: Fix drm_of_get_data_lanes_count_ep() return value documentation (git-fixes). - fbdev: atmel_lcdfb: Prevent FIFO work after removal (git-fixes). - fbdev: gxt4500: Release WC setup on probe failure (git-fixes). - fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error (git-fixes). - fbdev: smscufx: check for fb_deferred_io_init() error (git-fixes). - fbdev: ssd1307fb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: check for fb_deferred_io_init() error (git-fixes). - fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use (git-fixes). - fbdev: xen-fbfront: check for fb_deferred_io_init() error (git-fixes). - firewire: cdev: Fix FW_CDEV_IOC_CREATE_ISO_CONTEXT references in kernel-doc (git-fixes). - firewire: core: fix source bus ID detection for AT context in big-endian systems (git-fixes). - firmware: arm_scmi: Don't reuse raw xfers with async_done still armed (git-fixes). - firmware: arm_scmi: Protect xfer->async_done with xfer->lock (git-fixes). - firmware: cs_dsp: clear dsp->running on the cs_dsp_run() error path (git-fixes). - firmware: imx: dsp: fix mailbox channel leak on kasprintf failure (git-fixes). - fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs (git-fixes). - gpio: crystalcove: add missing MODULE_ALIAS() (git-fixes). - gpio: davinci: Clear interrupt status in every bank on suspend (git-fixes). - gpio: mxc: fix both_edges bit operations (git-fixes). - gpio: mxc: fix wakeup_pads bit operations (git-fixes). - gpio: mxc: use BIT() macro (stable-fixes). - gpio: mxc: use lock guards for the generic GPIO chip lock (stable-fixes). - gpio: pca953x: Handle direction register read errors in IRQ paths (git-fixes). - gpio: pca953x: Preserve wakeup accounting on parent IRQ failure (git-fixes). - gpio: Respect valid_mask when requesting GPIOs (stable-fixes). - gpiolib: clear requested flag if line is invalid (git-fixes). - gpiolib: don't report -ENOMEM for a requested line without a label (git-fixes). - gpiolib: Free chip resources when allocating the label fails (git-fixes). - gpiolib: sanitize the return value of gpio_chip::request() (stable-fixes). - HID: amd_sfh: Remove unsupported motion-state field from accelerometer report (git-fixes). - HID: amd_sfh: Use report type from request node (git-fixes). - HID: core: Fix out-of-bounds left shift by 32 in s32ton() (git-fixes). - HID: cougar: reject short special-key reports (git-fixes). - HID: cp2112: validate response report lengths (git-fixes). - HID: elo: reject short touchscreen reports (git-fixes). - HID: i2c-hid: Unfollow the panel on shutdown (git-fixes). - HID: logitech-dj: validate unnumbered keyboard reports (git-fixes). - HID: logitech-hidpp: cancel reset_hi_res_work on probe failure (git-fixes). - HID: mcp2200: validate READ_ALL response length (git-fixes). - HID: mcp2221: validate response report length (git-fixes). - HID: picoLCD: check for fb_deferred_io_init() error (git-fixes). - HID: prodikeys: validate fixed-format MIDI reports (git-fixes). - HID: pxrc: reject short input reports (git-fixes). - HID: quirks: Set ALWAYS_POLL for LOGITECH_BOLT_RECEIVER (bsc#1285891). - HID: roccat: isku: reject short button reports (git-fixes). - HID: roccat: koneplus: reject short button reports (git-fixes). - HID: roccat: konepure: reject short button reports (git-fixes). - HID: roccat: kovaplus: reject short button reports (git-fixes). - HID: roccat: pyra: reject short button reports (git-fixes). - HID: roccat: ryos: reject short special reports (git-fixes). - HID: roccat: savu: reject short special reports (git-fixes). - HID: wacom: fix wacom_intuos_irq NULL pen_input deref (git-fixes). - HID: zydacron: validate key report length (git-fixes). - hwmon: (asus_rog_ryujin) Add per-device configuration (stable-fixes). - hwmon: (asus_rog_ryujin) Rely on subsystem locking (stable-fixes). - hwmon: (coretemp) Fix handling of isolated SMT siblings (git-fixes). - hwmon: (coretemp) Refresh the temperature on the first read (git-fixes). - hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe (git-fixes). - hwmon: (gigabyte_waterforce) reject short input reports (git-fixes). - hwmon: (k10temp) Stop matching Hygon devices (git-fixes). - hwmon: (lm70) Fix rounding of negative temperatures (git-fixes). - hwmon: (lm95245) Fix negative temperature conversion (git-fixes). - hwmon: (sht3x) Return the consumed count for heater writes (git-fixes). - hwrng: amd - report partial reads in non-blocking mode (git-fixes). - hwrng: ba431 - fix reported byte count (git-fixes). - hwrng: cctrng - Fix runtime PM usage counter leak (git-fixes). - hwrng: core - reject unknown RNG names (git-fixes). - hwrng: intel - return -ENOMEM when ioremap() fails (git-fixes). - hwrng: intel - return -ENOMEM when kmalloc_obj() fails (git-fixes). - hwrng: starfive - propagate clock and reset errors (git-fixes). - i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() (git-fixes). - i2c: designware: queue only one read command for block reads (git-fixes). - i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len (git-fixes). - i2c: qcom-cci: Fix HALT_ACK reset request being dropped (git-fixes). - i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() (git-fixes). - i2c: viai2c-wmt: Replace dev_err() with dev_err_probe() in probe function (stable-fixes). - ibmveth: check headers in the RX large send and checksum helpers (bsc#1285888). - ibmveth: disable the reset work before unregister in remove (bsc#1285888). - ibmveth: do not close twice after a failed reopen (bsc#1285888). - ibmveth: fix netpoll races with RX replenish (bsc#1285888). - ibmveth: fix TX LTB and filter unwind on open-fail (bsc#1285888). - ibmveth: h_free logical LAN on open-fail after register (bsc#1285888). - ibmveth: release the pool kobjects when probe fails (bsc#1285888). - ibmveth: return the error when set_channels cannot add TX queues (bsc#1285888). - ibmveth: step past bad RX correlators instead of spinning or oopsing (bsc#1285888). - ibmveth: wait for in-flight transmits in ibmveth_close() (bsc#1285888). - ibmveth: wait for the RX poll to return before freeing the RX queue (bsc#1285888). - ice: add E835 device IDs (jsc#PED-14404 jsc#PED-15079 jsc#PED-16956). - idpf: keep the netdev when a reset fails (bsc#1285391). - iio: accel: adis16201: fix channel order for buffer mode (git-fixes). - iio: accel: adxl313: reject devices without match data (git-fixes). - iio: accel: adxl380: reject devices without match data (git-fixes). - iio: accel: kionix-kx022a: Fix IPOL macro name (git-fixes). - iio: accel: kxcjk-1013: Disable autosuspend on remove (git-fixes). - iio: accel: mma9551: disable autosuspend on remove (git-fixes). - iio: accel: mma9553: disable autosuspend on remove (git-fixes). - iio: adc: ad7192: reject devices without match data (git-fixes). - iio: adc: at91-sama5d2: disable autosuspend on remove (git-fixes). - iio: adc: max11205: reject devices without match data (git-fixes). - iio: adc: mcp3911: reject devices without match data (git-fixes). - iio: adc: stm32: fix minimum sampling time values (git-fixes). - iio: adc: ti-adc128s052: validate SPI match data (git-fixes). - iio: dac: ad5755: validate SPI match data (git-fixes). - iio: dac: ad5758: Fix alignment for DMA safety (git-fixes). - iio: dac: ad5758: Fix the offset calculation (git-fixes). - iio: dac: ad5758: Reject out-of-range raw values (git-fixes). - iio: frequency: adf4377: reject devices without match data (git-fixes). - iio: humidity: hts221: report available values via read_avail() (git-fixes). - iio: imu: adis16400: Check return value of spi_setup() (git-fixes). - iio: imu: inv_icm42600: fix odr change not caught in certain cases (git-fixes). - iio: imu: inv_icm42600: force accel odr change when switching power mode (git-fixes). - iio: light: apds9306: fix default sampling frequency definition (git-fixes). - iio: potentiometer: x9250: reject devices without match data (git-fixes). - iio: pressure: bmp280: validate SPI match data (git-fixes). - iio: pressure: dps310: fix CFG_REG bit definitions (git-fixes). - iio: pressure: rohm-bm1390: Fix AVE_NUM initialization (git-fixes). - iio: temperature: tmp117: fix calibbias cache update on I2C write failure (git-fixes). - inet: Avoid ehash lookup race in inet_ehash_insert() (bsc#1286554). - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (bsc#1286554). - Input: da7280 - fix input device parent assignment (git-fixes). - Input: drv2665 - fix input device parent assignment (git-fixes). - Input: drv2667 - fix input device parent assignment (git-fixes). - Input: maple_keyb - fix key press detection (git-fixes). - Input: maplecontrol - emit EV_SYN report after reporting events (git-fixes). - Input: matrix-keymap - reject keycodes above KEY_MAX (git-fixes). - Input: matrix_keypad - propagate error code from matrix_keypad_build_keymap() (git-fixes). - Input: tps6507x-ts - fix input device parent assignment (git-fixes). - interconnect: qcom: icc-rpm: Handle icc_link_create() failures (git-fixes). - kobject: fix out-of-bounds access in kobject_action_type() (git-fixes). - kobject: Fix the kobj_set_name reference in kset_register() kernel-doc (git-fixes). - KVM: s390: Limit adapter indicator access to mapped page (bsc#1268160). - KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state (git-fixes). - KVM: TDX: Check if there is valid exit infos based on vp_enter_ret (git-fixes). - KVM: TDX: Enable Notify VM exit (git-fixes). - KVM: x86/mmu: Fix NX page unaccounting for TDP MMU pages (git-fixes). - KVM: x86/mmu: Reload MMU on *every* page pre-fault attempt/iteration (git-fixes). - KVM: x86/mmu: Use KVM's max TDP level to determine need for 32-bit TDP root (git-fixes). - KVM: x86: Take SRCU in kvm_zap_gfn_range() (git-fixes). - KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak (git-fixes). - leds: flash: Prevent using uninitialized variable in flash_fault_show() (git-fixes). - leds: ktd2692: Pass context to regulator cleanup (git-fixes). - leds: lm3692x: Fix regulator/gpio leak and wrong enabled state on last write failure (git-fixes). - leds: lp8860: Fix device_node leak in lp8860_probe() (git-fixes). - leds: pca9532: Check i2c_smbus_read_byte_data() return value (git-fixes). - mac80211: tx: Use info->flags in ieee80211_tx_h_select_key() (git-fixes). - media: adv748x: Fix endpoint reference leaks on probe failure (git-fixes). - media: adv7180: Initialize mutex before ancillary clients (git-fixes). - media: adv7604: avoid negative array index in log_status when cp_read fails (git-fixes). - media: amphion: fix runtime PM imbalance on probe failure (git-fixes). - media: amphion: prevent unbind while video instances are open (git-fixes). - media: atmel-isi: release unregistered video device on remove (git-fixes). - media: au0828: Fix media device leak in au0828_usb_probe() (git-fixes). - media: au0828: fix use-after-free in bulk_timeout timer on disconnect (git-fixes). - media: au0828: Free URBs when starting DVB streaming fails (git-fixes). - media: cec: extron: clear response tail before dispatch (git-fixes). - media: cx18: Disable PCI device on probe failure (git-fixes). - media: cx88: Disable PCI device on MPEG initialization failure (git-fixes). - media: cx231xx-audio: drain wq_trigger before audio fini (git-fixes). - media: cx231xx: Fix cleanup path on failure (git-fixes). - media: cx23885: Fix use-after-free in cx23885_finidev due to race condition (git-fixes). - media: cx23885: unregister DVB bus when SP2 CI setup fails (git-fixes). - media: em28xx: fix double free in em28xx_alloc_urbs (git-fixes). - media: em28xx: reject audio endpoint with zero packet size (git-fixes). - media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler (git-fixes). - media: go7007: bound EZ-USB I2C transfers to the usb_buf size (git-fixes). - media: go7007: unregister the I2C adapter on USB probe failure (git-fixes). - media: gspca: use vb2_video_unregister_device() on disconnect (git-fixes). - media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path (git-fixes). - media: hantro: disable runtime PM before hardware teardown (git-fixes). - media: hantro: Harden MPEG-2 control access against NULL (git-fixes). - media: i2c: alvium-csi2: balance runtime PM usage count on remove (git-fixes). - media: i2c: ar0521: remove duplicate media entity cleanup (git-fixes). - media: i2c: ov5648: Fix a data race on state->streaming (git-fixes). - media: i2c: ov8856: fix debug message to report actual CSI-2 lane count (git-fixes). - media: i2c: tc358743: add missing color-space strings (git-fixes). - media: imagination: Fix value clamping in calculate_qp_tables (git-fixes). - media: imon: fix use-after-free in display_close via dev_dbg (git-fixes). - media: imx-jpeg: cancel timeout worker when streaming stops (git-fixes). - media: imx-jpeg: finish the job on device_run() error paths (git-fixes). - media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled (git-fixes). - media: ir_toy: Validate the maximum tx carrier (git-fixes). - media: m2m-deinterlace: fix default capture field (git-fixes). - media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA (git-fixes). - media: marvell: manage the MMP camera clock provider (git-fixes). - media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers (git-fixes). - media: mediatek: jpeg: Avoid context access after job finish (git-fixes). - media: mediatek: jpeg: retry HW selection after successful wait (git-fixes). - media: mediatek: vcodec: destroy core workqueue on remove (git-fixes). - media: mediatek: vpu: free IRQ before destroying watchdog workqueue (git-fixes). - media: mediatek: vpu: release reserved memory on remove (git-fixes). - media: meson-ir-tx: Ensure clock is disabled on unbind (git-fixes). - media: meson-ir-tx: Ensure probe error is propagated (git-fixes). - media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() (git-fixes). - media: meson: vdec: size capture planes from the aligned canvas (git-fixes). - media: microchip-csi2dc: fix async notifier leak on probe error path (git-fixes). - media: microchip-isc: disable histogram and flush AWB work on teardown (git-fixes). - media: microchip-isc: do not touch WB registers when not streaming (git-fixes). - media: microchip-isc: don't sleep in the clk .is_enabled callback (git-fixes). - media: microchip-isc: fix awb_mutex and lock lifecycle (git-fixes). - media: microchip-isc: fix PM runtime leak in AWB work handler (git-fixes). - media: microchip-isc: fix WB offset and gain register field masking (git-fixes). - media: microchip-isc: synchronize the IRQ before disabling clocks on stop (git-fixes). - media: microchip-isc: take a reference on the parsed endpoints (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() (git-fixes). - media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() (git-fixes). - media: nuvoton: npcm-video: quiesce VCD IRQ before teardown (git-fixes). - media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() (git-fixes). - media: pvrusb2: Fix USB parent device leak in class_dev_create() (git-fixes). - media: qcom: camss: vfe-17x: Fix write master buffer done being dropped (git-fixes). - media: qcom: camss: vfe: Fix VFE reset while another line is streaming (git-fixes). - media: rc: fintek-cir: process a full RX buffer instead of overflowing it (git-fixes). - media: rc: mce_kbd: Fix inconsistent locking of keylock (git-fixes). - media: redrat3: Ensure all urbs are suspended (git-fixes). - media: redrat3: Ensure we don't read beyond the end of the packet (git-fixes). - media: redrat3: fix UAF in probe error path leaving rc device registered (git-fixes). - media: require two-byte Cypress type 04 records (git-fixes). - media: rtl28xxu: fix SDR platform device leak (git-fixes). - media: saa7146: Initialize interrupt lock before requesting IRQ (git-fixes). - media: sti: delta: use unaligned accessors for MJPEG SOF fields (git-fixes). - media: stm32: dcmipp: replace s_stream with enable/disable_streams (stable-fixes). - media: stm32: dcmipp: use v4l2_subdev_is_streaming (stable-fixes). - media: streamzap: Add missing rc_unregister_device() (git-fixes). - media: stv090x: bound DiSEqC reply length to msg size (git-fixes). - media: stv0900: bound DiSEqC reply length to msg size (git-fixes). - media: tw68: balance PCI enable on cleanup (git-fixes). - media: tw686x: fix V4L2 device lifetime on probe failure (git-fixes). - media: uvcvideo: Fix NULL deref on events for uninitialized controls (git-fixes). - media: v4l2-common: Fix P010 format info (git-fixes). - media: v4l2-ctrls: do nothing if controls == NULL in cluster functions (git-fixes). - media: venus: Drop session events without an instance (git-fixes). - media: verisilicon: rockchip: Fix leaks in init (git-fixes). - media: vicodec: fix NULL deref on oversized frame (git-fixes). - media: vicodec: fix out-of-bounds write on under-rounded coded dimensions (git-fixes). - media: vicodec: make encoder CAPTURE dimensions read-only (git-fixes). - media: vicodec: zero-initialize stateful decoder heap buffers (git-fixes). - media: vidtv: fix frontend reference leak on unbind (git-fixes). - media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail (git-fixes). - media: vim2m: keep transaction buffer count stable while streaming (git-fixes). - media: vivid: cancel svid ctrl work on release (git-fixes). - media: vivid: round the height down to the vertical subsampling factor (git-fixes). - media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - media: vpif_display: Fix i2c adapter reference leak in vpif_probe() (git-fixes). - mei: vsc-tp: initialize IRQ state before requesting interrupt (git-fixes). - mei: vsc: Fix packet CRC computed over pointer size (git-fixes). - memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT (git-fixes). - memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset (git-fixes). - memory: brcmstb_dpfe: validate firmware section sizes (git-fixes). - memory: emif: fix device_node reference leak on np_ddr (git-fixes). - memory: exynos5422-dmc: handle clock enable failures (git-fixes). - mfd: ab8500: Fix child device leaks on probe failure (git-fixes). - mfd: da903x: Cancel IRQ work during teardown (git-fixes). - mfd: da9150: Balance IRQ wake on teardown (git-fixes). - mfd: intel_quark_i2c_gpio: Manage the fixed-rate clock (git-fixes). - mfd: rk8xx: Register poweroff handler in atomic phase (git-fixes). - mfd: tps65217: Check return value when masking interrupt sources (git-fixes). - mfd: tps65217: Fix NULL pointer dereference on IRQ init failure (git-fixes). - mfd: tps65217: Use devres for IRQ domain and wake teardown (git-fixes). - mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral (git-fixes). - mfd: wcd934x: set DMA mask on parent to silence 'DMA mask not set' (git-fixes). - misc: enclosure: fix UAF on device_register() failure (git-fixes). - misc: nsm: fix CBOR short-length decoding (git-fixes). - misc: nsm: mark device ready before registering the hwrng and misc device (git-fixes). - mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() (git-fixes). - mtd: block: prevent reclaim I/O during request processing (git-fixes). - mtd: Call get_wunit() on the master partition (git-fixes). - mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device (git-fixes). - mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() (git-fixes). - mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() (git-fixes). - mtd: maps: pci: balance PCI enable on cleanup (git-fixes). - mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() (git-fixes). - mtd: parsers: qcom: fix offset/size overflow on large partitions (git-fixes). - mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() (git-fixes). - mtd: rawnand: pl353: fix clk reference leak in pl35x_nfc_setup_interface() (git-fixes). - mtd: rawnand: sunxi: reject ECC maximization on small pages (git-fixes). - mtd: spi-nor: sfdp: check the length of the SCCR map (git-fixes). - mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table (git-fixes). - mtd: spi-nor: spansion: Remove s25fs256s0 (git-fixes). - mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption (git-fixes). - mtd: spinand: Fix spinand_manufacturer_ops kernel-doc (git-fixes). - net-sysfs: release queue trackers before allowing reuse (bsc#1278140). - net-sysfs: remove rtnl_trylock from device attributes (bsc#1278140). - net-sysfs: remove rtnl_trylock from queue attributes (bsc#1278140). - net-sysfs: restore behavior for not running devices (bsc#1278140). - net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown (git-fixes). - net/rds: use clear_bit_unlock() in release_refill() (git-fixes). - net: ethernet: mtk_wed: Fix dma_unmap_single() size (git-fixes). - net: phy: marvell: keep WOL_EIE across interrupt reconfiguration (git-fixes). - net: phy: qca83xx: read resolved QCA8337 link status (git-fixes). - net: usb: cdc_mbim: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: cdc_ncm: don't enable BHs in tx_fixup under netpoll (git-fixes). - net: usb: lan78xx: reject invalid EEPROM write requests (git-fixes). - net: usb: pegasus: check rx pkt_len against the received length (git-fixes). - net: usb: pegasus: do not advance rx_skb->data on dropped frames (git-fixes). - net: usb: r8153_ecm: reject short register reads (git-fixes). - net: usb: sierra_net: reject short firmware attribute reads (git-fixes). - net: wwan: iosm: validate msg_head before indexing msg_ring (git-fixes). - nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT (git-fixes). - PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow (git-fixes). - PCI/AER: Fix struct pci_dev reference leak in aer_process_err_devices() (git-fixes). - PCI/P2PDMA: Gate the host bridge whitelist warning on verbose (git-fixes). - PCI/P2PDMA: Safely terminate ACS redirect lists (git-fixes). - PCI/sysfs: Handle a malformed _DSM result in acpi_attr_is_visible() (git-fixes). - PCI/sysfs: Pass the device name length in UTF-16 code units (git-fixes). - PCI/sysfs: Stop reporting _DSM failures as -EPERM (git-fixes). - PCI/TPH: Validate the firmware Steering Tag response (git-fixes). - PCI: aardvark: Disable PHY on probe failures (git-fixes). - PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() (git-fixes). - PCI: Disable MSI for ULi M1575 EHCI controller (git-fixes). - PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV (git-fixes). - PCI: dra7xx: Fix clock enable leak on probe failure (git-fixes). - PCI: endpoint: pci-epf-vntb: Pass PF/VF number when BAR programming (git-fixes). - PCI: endpoint: pci-epf-vntb: Serialize virtual PCI bus scan (git-fixes). - PCI: Fix out-of-bounds MMIO read in nvme_disable_and_flr() (git-fixes). - PCI: qcom-ep: Deinitialize endpoint on remove (git-fixes). - PCI: qcom: Honor IOMMU provider's #iommu-cells in qcom_pcie_config_sid_1_9_0() (git-fixes). - PCI: rcar-gen4: Add Application/Local register reset control (git-fixes). - PCI: rockchip-host: Do not attempt 5.0 GT/s retraining (git-fixes). - PCI: xgene: Use managed clock for PCIe controller (git-fixes). - PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() (git-fixes). - peci: aspeed: Initialize state before requesting IRQ (git-fixes). - peci: npcm: Initialize state before requesting IRQ (git-fixes). - phy: cadence: Sierra: Do not modify register when getting parent clock (git-fixes). - phy: core: Fix race-condition between _of_phy_get() and try_module_get() (git-fixes). - phy: HiSilicon: Fix error handling in hi3670_pcie_allclk_ctrl() (git-fixes). - phy: hisilicon: hi3670: Fix OF node and device reference leaks (git-fixes). - phy: rockchip: usbdp: Do not lose USB3 PHY status (git-fixes). - phy: rockchip: usbdp: Drop seamless DP takeover (git-fixes). - phy: rockchip: usbdp: Fix devm_clk_bulk_get_all check (git-fixes). - phy: rockchip: usbdp: Handle missing clock-names DT property gracefully (git-fixes). - phy: rockchip: usbdp: Handle rk_udphy_reset_deassert errors (git-fixes). - phy: rockchip: usbdp: Hold mutex in DP PHY configure (git-fixes). - phy: rockchip: usbdp: Only enable USB3 when not in high-speed mode (git-fixes). - phy: rockchip: usbdp: Update mode_change after error handling (git-fixes). - pinctrl: mediatek: mt7629: fix the 2.4 GHz Wi-Fi pin mode array (git-fixes). - pinctrl: mediatek: paris: don't double-check the GPIO number (stable-fixes). - pinctrl: nuvoton: Fix clock reference leak in ma35_get_bank_data() (git-fixes). - pinctrl: sprd: free maps on DT map failure (git-fixes). - pinctrl: stm32: Fix clock reference leak in stm32_pctl_probe() (git-fixes). - pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() (git-fixes). - platform/chrome: cros_ec_proto: Fix deferred response (git-fixes). - platform/chrome: cros_ec_typec: Validate SVID and mode counts in discovery data (git-fixes). - platform/olpc: Reserve space for a string terminator (git-fixes). - platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() (git-fixes). - platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() (git-fixes). - platform/x86/amd/pmf: Validate the APTS state index (git-fixes). - platform/x86/amd: Stop counting intermediate cycles with metrics table (git-fixes). - platform/x86/intel-uncore-freq: Continue restoring limits on resume (git-fixes). - platform/x86/intel/pmt: Block mmap when callback is present (git-fixes). - platform/x86: asus-wmi: fix screenpad power state detection (git-fixes). - platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming (git-fixes). - platform/x86: asus-wmi: fix unclear usage of bd->props.power (git-fixes). - platform/x86: asus-wmi: validate custom fan curves on enable (git-fixes). - platform/x86: gpd pocket fan: Cancel work before releasing GPIOs (git-fixes). - platform/x86: hp-bioscfg: allow clearing current_password (git-fixes). - platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token (git-fixes). - platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix off-by-one in password length check (git-fixes). - platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() (git-fixes). - platform/x86: hp-bioscfg: fix oops on short integer attribute buffer (git-fixes). - platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() (git-fixes). - platform/x86: hp-bioscfg: NUL-terminate the SPM auth token (git-fixes). - platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() (git-fixes). - platform/x86: hp-bioscfg: validate SPM state returned by firmware (git-fixes). - platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() (git-fixes). - platform/x86: ibm_rtl: Fix potential OOB read at signature search (git-fixes). - platform/x86: intel_telemetry: initialize default trace verbosity (git-fixes). - platform/x86: msi-ec: Report valid charge thresholds when unset (git-fixes). - platform/x86: simatic-ipc: fix platform device leak on registration failure (git-fixes). - platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() (git-fixes). - PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() (git-fixes). - power: supply: ab8500: Preserve battery termination current (git-fixes). - power: supply: ab8500_btemp: Fix event temperature reporting (git-fixes). - power: supply: ab8500_charger: Decode AB8505 USB status (git-fixes). - power: supply: ab8500_charger: Fix AC charger re-enable (git-fixes). - power: supply: ab8500_charger: Handle detection errors (git-fixes). - power: supply: ab8500_charger: Recover inactive AB8505 charger (git-fixes). - power: supply: ab8500_charger: Respect AB8505 register layout (git-fixes). - power: supply: ab8500_charger: Retry AB8505 USB detection (git-fixes). - power: supply: ab8500_charger: Skip absent AB8505 main charger (git-fixes). - power: supply: ab8500_fg: Accept status from supplied power (git-fixes). - power: supply: ab8500_fg: Avoid reserved AB8505 CCConf bit (git-fixes). - power: supply: ab8500_fg: Finalize current measurements (git-fixes). - power: supply: ab8500_fg: Report sub-percent charge changes (git-fixes). - power: supply: bq27xxx: synchronize work cancellation on suspend (git-fixes). - power: supply: bq2515x: Propagate charge-enable read errors (git-fixes). - power: supply: generic-adc-battery: fix status with no supplier (git-fixes). - power: supply: generic-adc-battery: Propagate charged GPIO errors (git-fixes). - power: supply: gpio-charger: Report discharging without input power (git-fixes). - power: supply: mm8013: Publish the OF module alias (git-fixes). - power: supply: mp2629: Use the full batt_impedance_compensation name in the ABI document (git-fixes). - power: supply: qcom_battmgr: report full batteries (git-fixes). - power: supply: qcom_battmgr: report the USB type from USB_ADAP_TYPE (git-fixes). - power: supply: sbs-battery: disable polling before supply teardown (git-fixes). - pwm: lp3943: fix NULL pointer dereference for an unconfigured channel (git-fixes). - pwm: mtk-disp: Fix period readback (git-fixes). - pwm: renesas-tpu: Fix runtime PM reference leak (git-fixes). - pwm: tiehrpwm: Clear period on disable to allow reconfiguration (git-fixes). - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (bsc#1286554). - regulator: ab8500: Fix AB8505 VANA voltage selectors (git-fixes). - regulator: ab8500: Handle AB8505 VINTCORE selector 7 (git-fixes). - regulator: ab8500: Propagate mode enable read errors (git-fixes). - regulator: ab8500: Test dedicated enable bits only (git-fixes). - regulator: ab8500: Treat cut 1.0 VAUX3 as fixed (git-fixes). - regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() (git-fixes). - regulator: core: Fix coupled regulators reference leak on removal (git-fixes). - regulator: core: Fix rdev reference leak in regulator_resolve_supply() (git-fixes). - regulator: fixed: reject incompatible platform devices (git-fixes). - regulator: mp886x: check get_voltage_sel() return value (git-fixes). - regulator: mp886x: fix pontential division by zero (git-fixes). - regulator: mp886x: fix vsel_mask (git-fixes). - regulator: qcom-rpmh: Fix the return value in rpmh_regulator_vrm_get_optimum_mode() kernel-doc (git-fixes). - regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() (git-fixes). - Revert 'Input: matrix_keypad - force switch rows to input mode' (git-fixes). - Revert 'mkspec: Exclude rt flavor from kernel-syms dependencies' (bsc#1244337). - Revert 'rpm/mkspec: Fix missing kernel-syms-rt creation' (bsc#1244337) - Revert 'wifi: mac80211: do not use old MBSSID elements' (git-fixes). - Revert 'wifi: rtw89: fix unable to receive probe responses under MLO connection' (stable-fixes). - rtc: abx80x: fix error check after i2c_smbus_read in read_alarm() (git-fixes). - rtc: abx80x: properly handle shared IRQs (git-fixes). - rtc: cmos: Disable ACPI RTC event before handling it (git-fixes). - rtc: ds1685: arm the wake-up alarm at power-off only if an alarm is set (git-fixes). - rtc: ds1685: do not sleep in the power-off handler (git-fixes). - rtc: ftrtc010: fix integer overflow in time calculation (git-fixes). - rtc: mpfs: Fix alarm register word order (git-fixes). - rtc: s35390a: Add missing newline to dev_err (git-fixes). - rtc: s35390a: Fix alarm not disabling (git-fixes). - s390/cio: Purge based on the cdev's online status (bsc#1284429). - s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks (bsc#1279778). - s390/topology: Use zero-based numbering for containing (bsc#1275518). - s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove (bsc#1287642). - s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL (bsc#1287642). - s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed (bsc#1287642). - s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects (bsc#1287642). - s390/vfio-ap: Fix NULL deref in status_show() during queue probe (bsc#1287642). - s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap (bsc#1287642). - s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object (bsc#1287642). - s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove (bsc#1287642). - scsi: qla2xxx: Add 29xx extended logio IOCB support (bsc#1275737). - scsi: qla2xxx: Add 29xx series PCI device ID support (bsc#1275737). - scsi: qla2xxx: Add 29xx support in queue initialisation path (bsc#1275737). - scsi: qla2xxx: Add 64G/128G port speed setting support (bsc#1275737). - scsi: qla2xxx: Add 128-byte IOCB definitions for 29xx (bsc#1275737). - scsi: qla2xxx: Add abort command handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add BSG MPI firmware load/dump for 29xx (bsc#1275737). - scsi: qla2xxx: Add build-time size check for VP config IOCB layout (bsc#1275737). - scsi: qla2xxx: Add extended status continuation and marker IOCBs (bsc#1275737). - scsi: qla2xxx: Add FC operational firmware load for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash block read/write BSG support for 29xx (bsc#1275737). - scsi: qla2xxx: Add flash read/write interface for 29xx (bsc#1275737). - scsi: qla2xxx: Add LS4 pass-through IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Add NVRAM config support for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Add size check for ELS status entry layout on 29xx (bsc#1275737). - scsi: qla2xxx: Add size check for extended VP report ID entry (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in data rate functions (bsc#1275737). - scsi: qla2xxx: Add support for QLA29XX in memory allocation (bsc#1275737). - scsi: qla2xxx: Adjust feature gating in BSG paths for 29xx support (bsc#1275737). - scsi: qla2xxx: Avoid double completion in async IOCB timeout (bsc#1275737). - scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry() (bsc#1275737). - scsi: qla2xxx: Bound i2c->length in I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions() (bsc#1275737). - scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (bsc#1275737). - scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size (bsc#1275737). - scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config() (bsc#1275737). - scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity (bsc#1275737). - scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation (bsc#1275737). - scsi: qla2xxx: Clarify MPI optrom address/length units (bsc#1275737). - scsi: qla2xxx: Don't query firmware state while chip is down (bsc#1275737). - scsi: qla2xxx: Drop vport reference under lock in report ID acquisition (bsc#1275737). - scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check (bsc#1275737). - scsi: qla2xxx: Enable get_adapter_id mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_firmware_state for 29xx (bsc#1275737). - scsi: qla2xxx: Enable get_fw_version mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable init_firmware mailbox for 29xx (bsc#1275737). - scsi: qla2xxx: Enable qla2x00_shutdown for 29xx (bsc#1275737). - scsi: qla2xxx: Enable serdes, resource count and FCE trace for 29xx (bsc#1275737). - scsi: qla2xxx: Enable set_els_cmds and echo_test for 29xx (bsc#1275737). - scsi: qla2xxx: Enhance ABTS processing for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance ct_entry_24xx_ext iocb handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance purex_entry handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Enhance task management IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Extend execute_fw mailbox to include 29xx (bsc#1275737). - scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate (bsc#1275737). - scsi: qla2xxx: Fix an error code in qla_get_tmf() (bsc#1275737). - scsi: qla2xxx: Fix an loop timeout test (bsc#1275737). - scsi: qla2xxx: Fix BSG job leak on validate flash image error path (bsc#1275737). - scsi: qla2xxx: Fix cs84xx use-after-free on host teardown (bsc#1275737). - scsi: qla2xxx: Fix endianness annotations in vp_rpt_id_entry structures (bsc#1275737). - scsi: qla2xxx: Fix FCE trace enable parsing in debugfs (bsc#1275737). - scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump (bsc#1275737). - scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters (bsc#1275737). - scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort (bsc#1275737). - scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking (bsc#1275737). - scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb() (bsc#1275737). - scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature (bsc#1275737). - scsi: qla2xxx: Fix the ql2xfc2target parameter description (bsc#1275737). - scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown (bsc#1275737). - scsi: qla2xxx: Handle INTx not connected while passing through (bsc#1275737). - scsi: qla2xxx: Handle sts_cont_entry_ext_t for 29xx adapters (bsc#1275737). - scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject (bsc#1275737). - scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() (bsc#1275737). - scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Improve firmware dump data capture (bsc#1275737). - scsi: qla2xxx: Initialize NVMe abort_work once at submission (bsc#1275737). - scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path (bsc#1275737). - scsi: qla2xxx: Quiesce response IRQ before freeing request queue (bsc#1275737). - scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path (bsc#1275737). - scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path (bsc#1275737). - scsi: qla2xxx: Replace __le16 bitfields with scalar and accessors (bsc#1275737). - scsi: qla2xxx: Serialize flash version read in reset handler (bsc#1275737). - scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock (bsc#1275737). - scsi: qla2xxx: Skip image-set-valid attribute for 29xx (bsc#1275737). - scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started (bsc#1275737). - scsi: qla2xxx: Skip unsupported sysfs attributes for 29xx (bsc#1275737). - scsi: qla2xxx: Skip vport under deletion in report ID acquisition (bsc#1275737). - scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error (bsc#1275737). - scsi: qla2xxx: Update handling of ELS IOCBs for 29xx series (bsc#1275737). - scsi: qla2xxx: Update handling of status entries for 29xx series (bsc#1275737). - scsi: qla2xxx: Update IO path to use 128-byte IOCBs for 29xx (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b1 (bsc#1275737). - scsi: qla2xxx: Update version to 12.00.00.2607b2 (bsc#1275737). - scsi: qla2xxx: Update VP control IOCB handling for 29xx series (bsc#1275737). - scsi: qla2xxx: Use 64-bit FPM word counters for 29xx host stats (bsc#1275737). - scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics (bsc#1275737). - scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot (bsc#1275737). - scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs (bsc#1275737). - scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd (bsc#1275737). - scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak (bsc#1275737). - scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() (bsc#1275737). - scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers (bsc#1275737). - scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak (bsc#1275737). - selftests/alsa: Do not take another control's event as our own (git-fixes). - selftests: ALSA: pcmtest: Check the frame count of each transfer (git-fixes). - selftests: ALSA: pcmtest: Compare all captured bytes in ni_capture (git-fixes). - selftests: ALSA: pcmtest: Make room for the longest fill pattern (git-fixes). - serial: 8250_exar: store the GPIO platform device in struct exar8250 (git-fixes). - serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() (git-fixes). - serial: 8250_omap: set priv->line before enabling the IRQ (git-fixes). - serial: 8250_uniphier: Use devm_clk_get_enabled() (git-fixes). - serial: core: shut down initialized port on removal (git-fixes). - serial: ma35d1: Do not force-enable an unselected console (git-fixes). - serial: max310x: don't clobber the TX break bit in set_termios (git-fixes). - serial: max310x: fix breaks not reaching the wire in RS485 mode (git-fixes). - serial: msm: select PM_OPP (git-fixes). - serial: pmac_zilog: push received data to the port that received it (git-fixes). - serial: pmac_zilog: report received breaks (git-fixes). - slimbus: messaging: fix leaked PM vote on tid allocation failure (git-fixes). - smb: client: fix cifs_pick_channel when channel needs reconnect (git-fixes). - soc/tegra: flowctrl: Release OF node reference on error (git-fixes). - soc/tegra: pmc: Add kerneldoc for wake-up variables (git-fixes). - soc/tegra: pmc: Document tegra_pmc.syscore field (stable-fixes). - soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() (git-fixes). - soc: fsl: dpio: Fix cleanup on IRQ registration failure (git-fixes). - soc: fsl: dpio: Free the IRQ before releasing the I/O object (git-fixes). - soc: qcom: apr: clean up failed service registrations (git-fixes). - soc: qcom: pmic_pdcharger_ulog: prevent work requeue during remove (git-fixes). - soc: ti: k3-ringacc: Correct ring API kernel-doc (git-fixes). - soc: ti: k3-ringacc: Fix DMA ring initialization kernel-doc (git-fixes). - soundwire: intel: initialise quirk_mask before reading it (git-fixes). - soundwire: intel_auxdevice: Fix system suspend/resume handling (git-fixes). - spi: amd: fix len==0 underflow and FIFO overflow (git-fixes). - spi: bcm63xx-hsspi: Disable runtime PM on remove (git-fixes). - spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() (git-fixes). - spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op (git-fixes). - spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path (git-fixes). - spi: ch341: fix devres lifetime (git-fixes). - spi: ch341: handle transfers without a TX or RX buffer (git-fixes). - spi: ch341: switch to use devm_spi_alloc_host() (stable-fixes). - spi: Fix the return value in spi_new_ancillary_device() kernel-doc (git-fixes). - spi: jcore: fix divide-by-zero when speed_hz is zero (git-fixes). - spi: ljca: validate the response length before copying the data (git-fixes). - spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() (stable-fixes). - spi: microchip-core-qspi: set min_speed_hz during probe (stable-fixes). - spi: mpc52xx: clean up interrupt handling (stable-fixes). - spi: mtk-nor: fix runtime PM usage count leak in probe error path (git-fixes). - spi: mxic: fix ps_clk leak in runtime resume (git-fixes). - spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer (git-fixes). - spi: omap2-mcspi: handle DMA setup failures (git-fixes). - spi: omap2-mcspi: Remove unbalanced pm_runtime_put_sync() calls (git-fixes). - spi: rspi: Fix DMA mode when the DMA controller is built as a module (git-fixes). - spi: spi-sun4i: sun4i_spi_fill_fifo(): always apply A10 FIFO fill level workaround (git-fixes). - spi: spi-sun4i: sun4i_spi_handler(): fix race condition between transfer completion and RX FIFO interrupt (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix setting of clock rate (git-fixes). - spi: spi-sun4i: sun4i_spi_transfer_one(): fix transfers for SUN4I_FIFO_DEPTH (git-fixes). - spi: tegra114: assert CS GPIO for every transfer in a message (git-fixes). - spi: tegra114: initialize native chip selects inactive (git-fixes). - spi: zynq-qspi: fix address buffer corruption and support 4-byte address (git-fixes). - staging: iio: adc: ad7816: Fix DMA safety issues in SPI transfers (git-fixes). - staging: media: av7110: fix corrupted BER reporting in sp8870 (git-fixes). - staging: media: av7110: fix sp8870 initialization failure state (git-fixes). - staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error (git-fixes). - staging: rtl8723bs: fix RX buffer OOB write from device-reported length (git-fixes). - staging: sm750fb: free cmap on framebuffer release (git-fixes). - thermal/drivers/sprd: validate the sensor id from the device tree (git-fixes). - thermal: Fix CPU mask truncation in power limit trace event (git-fixes). - thermal: gov_power_allocator: Fix NULL pointer dereference in update_tz() (git-fixes). - thermal: intel: int340x: Fix temperature selection around 0 C (git-fixes). - thermal: intel: powerclamp: Reject invalid window_size values (git-fixes). - thermal: ti-soc-thermal: Fix the return value in ti_bandgap_get_sensor_data() kernel-doc (git-fixes). - thunderbolt: Do not RPM complete unrelated subtrees on unplug (git-fixes). - tools/power turbostat: Fix add_counter issue if > 24 counters (git-fixes). - tools/power turbostat: Fix fd_perf leak on reset (git-fixes). - tools/thermal/tmon: Fix string truncation warning in optarg copy (git-fixes). - tpm: fix zero-length read discarding the pending response (git-fixes). - tpm: tpm_nsc: fix NULL pointer dereference on init failure (git-fixes). - tpm: tpm_nsc: stop using the cleanup callback as dev.release (git-fixes). - usb-storage: alauda: check the return value of alauda_read_map() (git-fixes). - usb-storage: alauda: do not do DMA from the stack (git-fixes). - usb-storage: alauda: fix out-of-bounds zone index (git-fixes). - USB: cdc-acm: fix urb leak on disconnect (git-fixes). - usb: fotg210: validate endpoint index in ep0 handlers (git-fixes). - usb: gadget: composite: avoid warning on aborted delayed status (git-fixes). - usb: gadget: dummy_hcd: fix SuperSpeed ep0 maxpacket (git-fixes). - usb: gadget: dummy_hcd: prevent unbind via sysfs (git-fixes). - usb: gadget: f_mass_storage: ignore class requests while inactive (git-fixes). - USB: gadgetfs: do not WARN about excessively large memory allocations (git-fixes). - usb: image: microtek: stop SG processing after transfer errors (git-fixes). - usb: musb: da8xx: depopulate OF children on probe failure (git-fixes). - usb: musb: da8xx: depopulate OF children on remove (git-fixes). - USB: pci-quirks: Release EHCI device reference (git-fixes). - USB: serial: sierra: fix urb leak on write completion (git-fixes). - USB: serial: usb_wwan: fix urb leak on disconnect (git-fixes). - usb: typec: ucsi_ccg: Add retry mechanism in ccg_read (git-fixes). - USB: usbmon: fix null-ptr-deref in mon_bus_remove() when mon_bus_init() fails (git-fixes). - usbnet: fix EVENT_RX_PAUSED race in usbnet_skb_return() (git-fixes). - usbnet: fix smp_processor_id() use in preemptible context (git-fixes). - watchdog: mediatek: Apply the driver's mode to a watchdog left running (git-fixes). - wifi: ath6kl: don't take RTNL in del_virtual_intf (git-fixes). - wifi: ath9k: delete channel-context timers on deinit (git-fixes). - wifi: ath10k: avoid IDR mutation during TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during pending mgmt TX cleanup (git-fixes). - wifi: ath11k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath11k: disable interrupts during firmware crash recovery (git-fixes). - wifi: ath11k: fix locking problem in ath11k_dp_rx_tid_del_func() (git-fixes). - wifi: ath11k: fix NULL dereference in ahb remove when QMI init incomplete (git-fixes). - wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() (git-fixes). - wifi: ath11k: fix sporadic WLAN initialization failures (git-fixes). - wifi: ath11k: fix unbalanced IRQ enable/disable during suspend/resume (git-fixes). - wifi: ath11k: modify null check logic in ath11k_ce_rx_post_pipe() (git-fixes). - wifi: ath11k: unregister PM notifier on QMI init failure path (git-fixes). - wifi: ath12k: avoid IDR mutation during vif mgmt TX cleanup (git-fixes). - wifi: ath12k: fix incorrect TID updation in DP monitor status path (stable-fixes). - wifi: ath12k: Free allocated CE IRQs on request_irq() failure (git-fixes). - wifi: ath12k: Reserve space for a string terminator (git-fixes). - wifi: b43: don't pass unterminated string to sscanf() (git-fixes). - wifi: b43: fix use-after-free in b43_bcma_remove() (git-fixes). - wifi: b43legacy: debugfs: NUL terminate string in debugfs (git-fixes). - wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz (git-fixes). - wifi: carl9170: NUL terminate string in debugfs (git-fixes). - wifi: cfg80211: allow zero HE OBSS PD offsets (git-fixes). - wifi: cfg80211: reg: protect regdb pointer with RCU (git-fixes). - wifi: cfg80211: track SSID regardless of country data (git-fixes). - wifi: iwlwifi: dvm: pair transport op-mode enter/leave (stable-fixes). - wifi: iwlwifi: simplify nested if checks (stable-fixes). - wifi: mac80211: clear fragment cache entry 'is_protected' (git-fixes). - wifi: mac80211: don't reset the TXQ scheduling round number (git-fixes). - wifi: mac80211: don't send encap offload frames unencrypted (git-fixes). - wifi: mac80211: drop encap offload frames with a tainted key (git-fixes). - wifi: mac80211: Fix a race when expiring a mesh path (git-fixes). - wifi: mac80211: fix encryption tailroom (git-fixes). - wifi: mac80211: fix key selection for encap offload frames (git-fixes). - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (stable-fixes). - wifi: mac80211: fix swapped fq_overlimit/fq_overmemory in aqm debugfs (git-fixes). - wifi: mac80211: Fix the return value in mesh_path_add() kernel-doc (git-fixes). - wifi: mac80211: fix typo in HE MCS check (stable-fixes). - wifi: mac80211: fix unauthorised port check for encap offload (git-fixes). - wifi: mac80211: init radiotap iter after length checks (git-fixes). - wifi: mac80211: kill wake_txqs_tasklet on unregistration (git-fixes). - wifi: mac80211: limit injected HT/VHT MCSes (git-fixes). - wifi: mac80211: log link information in ieee80211_determine_chan_mode (stable-fixes). - wifi: mac80211: mesh: use hlist_add_head_rcu() (git-fixes). - wifi: mac80211: refactor populating mesh related fields in sinfo (stable-fixes). - wifi: mac80211: reserve MME tailroom for protected beacons (git-fixes). - wifi: mac80211: use link address as TA for non-MLO 4-addr station on MLD AP (git-fixes). - wifi: mt76: feed the station RSSI average from the chain signals (git-fixes). - wifi: mt76: fix memory leak in USB TX path (git-fixes). - wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() (git-fixes). - wifi: mt76: fix unlocked wcid check in mt76_tx_status_skb_add() (git-fixes). - wifi: mt76: fix wcid->pktid corruption in mt76_wcid_cleanup() (git-fixes). - wifi: mt76: mt76x02: validate RX padding before use (git-fixes). - wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff (git-fixes). - wifi: mt76: mt792x: compute the assoc RSSI from the chain signals (git-fixes). - wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory (git-fixes). - wifi: mt76: mt7603: don't drop short frames looped back on PS entry (git-fixes). - wifi: mt76: mt7615: cancel reset work during unregister (git-fixes). - wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs (git-fixes). - wifi: mt76: mt7615: read MT7663 temperature from the correct offset (git-fixes). - wifi: mt76: mt7615: restore DBDC state after ext PHY failure (git-fixes). - wifi: mt76: mt7615: usb: fix source overread in mt7663u_copy (git-fixes). - wifi: mt76: mt7615: validate MCU response lengths (git-fixes). - wifi: mt76: mt7915: check default EEPROM firmware size before copying (git-fixes). - wifi: mt76: mt7915: guard firmware memory dump write on disabled memdump (git-fixes). - wifi: mt76: mt7915: publish wcid before MCU add commands (git-fixes). - wifi: mt76: mt7915: unregister thermal cooling device on hwmon failure (git-fixes). - wifi: mt76: mt7921: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7921: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7921: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7921: honour FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7921: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: check drv_pmctrl return in the PCIe reset path (git-fixes). - wifi: mt76: mt7925: fix lock inversion between dev->mutex and iflist_mtx (git-fixes). - wifi: mt76: mt7925: fix the lock inversion in suspend and resume (git-fixes). - wifi: mt76: mt7925: honour mac80211's FIF_FCSFAIL instead of hardcoding drop_err (git-fixes). - wifi: mt76: mt7925: keep the join ROC until the station is authorized (git-fixes). - wifi: mt76: mt7925: restore the reset state when fw_pmctrl fails (git-fixes). - wifi: mt76: mt7996: disable the RX NAPIs before the DMA cleanup (git-fixes). - wifi: mt76: mt7996: fix PLE free page and AC queue register offsets (git-fixes). - wifi: mt76: mt7996: validate firmware event lengths before parsing (git-fixes). - wifi: mt76: usb: fix source overread in mt76u_copy (git-fixes). - wifi: mwifiex: append hotfix number to firmware version string (git-fixes). - wifi: nl80211: check link is beaconing for color change (stable-fixes). - wifi: p54: validate firmware record lengths (stable-fixes). - wifi: rtl8xxxu: free RX skb when URB submission fails (git-fixes). - wifi: rtw88: debugfs: don't vzalloc(0) when rsvd_page is read unconfigured (git-fixes). - wifi: rtw88: fix out-of-bounds CAM write when key table is full (git-fixes). - wifi: rtw88: sdio: zero the padding added to a TX transfer (git-fixes). - wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields (git-fixes). - wifi: rtw89: cap firmware section_num before parsing (git-fixes). - wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM (git-fixes). - wifi: wfx: fix possible device hang during init (git-fixes). - wifi: wfx: fix use-after-free of the cooling work on device removal (git-fixes). - workqueue: Fix unbound pool lifetime for pending pwqs (bsc#1289119). - workqueue: release pwq pools by pool type (bsc#1289119). - wwan: wwan_hwsim: Pin module for debugfs file operations (git-fixes). - x86/microcode/intel: Reject problematic loading on Granite Rapids systems (git-fixes). - x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 (git-fixes). - xhci: dbc: lock the minor IDR on registration failure (git-fixes). The following package changes have been done: - kernel-macros-6.12.0-160000.41.1 updated - kernel-devel-6.12.0-160000.41.1 updated - kernel-default-devel-6.12.0-160000.41.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:55:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:55:53 +0100 (CET) Subject: SUSE-CU-2026:14089-1: Security update of trento/trento-wanda Message-ID: <20261112105553.315C6FF4C@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-wanda ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14089-1 Container Tags : trento/trento-wanda:2.2.0 , trento/trento-wanda:2.2.0-build1.40.2 , trento/trento-wanda:latest Container Release : 1.40.2 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container trento/trento-wanda was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 10:56:29 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 11:56:29 +0100 (CET) Subject: SUSE-CU-2026:14090-1: Security update of trento/trento-web Message-ID: <20261112105629.36DEAFF4C@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-web ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14090-1 Container Tags : trento/trento-web:3.2 , trento/trento-web:3.2.0 , trento/trento-web:3.2.0-build4.67.2 , trento/trento-web:latest Container Release : 4.67.2 Severity : important Type : security References : 1280587 1280589 1280591 1280597 1280598 CVE-2026-35189 CVE-2026-54872 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 ----------------------------------------------------------------- The container trento/trento-web was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5172-1 Released: Tue Nov 10 16:21:36 2026 Summary: Security update for openssl-1_1 Type: security Severity: important References: 1280587,1280589,1280591,1280597,1280598,CVE-2026-35189,CVE-2026-54872,CVE-2026-75806,CVE-2026-77696,CVE-2026-84782 This update for openssl-1_1 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). The following package changes have been done: - libopenssl1_1-1.1.1w-150700.11.35.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:10:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:10:21 +0100 (CET) Subject: SUSE-CU-2026:14091-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151021.BFE6BFF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14091-1 Container Tags : rancher/elemental-channel/sl-micro:6.1-baremetal , rancher/elemental-channel/sl-micro:6.1-baremetal-16.1 Container Release : 16.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1265304 1274723 1274726 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-41066 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). The following package changes have been done: - glibc-2.38-slfo.1.1_10.1 updated - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - container:suse-toolbox-image-1.0.0-5.120 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:10:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:10:30 +0100 (CET) Subject: SUSE-CU-2026:14092-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151030.7B738FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14092-1 Container Tags : rancher/elemental-channel/sl-micro:6.1-base , rancher/elemental-channel/sl-micro:6.1-base-16.1 Container Release : 16.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1265304 1274723 1274726 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-41066 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). The following package changes have been done: - glibc-2.38-slfo.1.1_10.1 updated - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - container:suse-toolbox-image-1.0.0-5.120 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:10:39 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:10:39 +0100 (CET) Subject: SUSE-CU-2026:14093-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151039.4BF66FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14093-1 Container Tags : rancher/elemental-channel/sl-micro:6.1-kvm , rancher/elemental-channel/sl-micro:6.1-kvm-16.1 Container Release : 16.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1265304 1274723 1274726 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-41066 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). The following package changes have been done: - glibc-2.38-slfo.1.1_10.1 updated - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - container:suse-toolbox-image-1.0.0-5.120 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:10:48 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:10:48 +0100 (CET) Subject: SUSE-CU-2026:14094-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151048.038F3FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14094-1 Container Tags : rancher/elemental-channel/sl-micro:6.1-rt , rancher/elemental-channel/sl-micro:6.1-rt-16.1 Container Release : 16.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1265304 1274723 1274726 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-41066 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). The following package changes have been done: - glibc-2.38-slfo.1.1_10.1 updated - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - container:suse-toolbox-image-1.0.0-5.120 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:10:55 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:10:55 +0100 (CET) Subject: SUSE-CU-2026:14095-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151055.B6BE9FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14095-1 Container Tags : rancher/elemental-channel/sl-micro:6.2-baremetal , rancher/elemental-channel/sl-micro:6.2-baremetal-11.1 Container Release : 11.1 Severity : important Type : security References : 1217586 1271544 1271545 1271547 1271548 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1280049 1280050 1280051 1280052 1280053 1280054 1281297 1282509 1282550 1282551 1282552 1282568 1282575 1282576 1282653 1283342 CVE-2023-42366 CVE-2026-103111 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-38752 CVE-2026-38753 CVE-2026-38754 CVE-2026-38755 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-88830 CVE-2026-88831 CVE-2026-88832 CVE-2026-88835 CVE-2026-88837 CVE-2026-88839 CVE-2026-88841 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1856 Released: Tue Oct 6 18:06:37 2026 Summary: Security update for busybox Type: security Severity: moderate References: 1217586,1271544,1271545,1271547,1271548,CVE-2023-42366,CVE-2026-38752,CVE-2026-38753,CVE-2026-38754,CVE-2026-38755 This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). - CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). - CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ----------------------------------------------------------------- Advisory ID: 1880 Released: Fri Oct 9 08:37:11 2026 Summary: Security update for busybox Type: security Severity: important References: 1282550,1282551,1282552,1282568,1282575,1282576,1282653,CVE-2026-88830,CVE-2026-88831,CVE-2026-88832,CVE-2026-88835,CVE-2026-88837,CVE-2026-88839,CVE-2026-88841 This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). - CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker-controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). - CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). - CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). - CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). - CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - busybox-1.37.0-160000.8.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:03 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:03 +0100 (CET) Subject: SUSE-CU-2026:14096-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151103.24F87FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14096-1 Container Tags : rancher/elemental-channel/sl-micro:6.2-base , rancher/elemental-channel/sl-micro:6.2-base-11.1 Container Release : 11.1 Severity : important Type : security References : 1217586 1271544 1271545 1271547 1271548 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1280049 1280050 1280051 1280052 1280053 1280054 1281297 1282509 1282550 1282551 1282552 1282568 1282575 1282576 1282653 1283342 CVE-2023-42366 CVE-2026-103111 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-38752 CVE-2026-38753 CVE-2026-38754 CVE-2026-38755 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-88830 CVE-2026-88831 CVE-2026-88832 CVE-2026-88835 CVE-2026-88837 CVE-2026-88839 CVE-2026-88841 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1856 Released: Tue Oct 6 18:06:37 2026 Summary: Security update for busybox Type: security Severity: moderate References: 1217586,1271544,1271545,1271547,1271548,CVE-2023-42366,CVE-2026-38752,CVE-2026-38753,CVE-2026-38754,CVE-2026-38755 This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). - CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). - CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ----------------------------------------------------------------- Advisory ID: 1880 Released: Fri Oct 9 08:37:11 2026 Summary: Security update for busybox Type: security Severity: important References: 1282550,1282551,1282552,1282568,1282575,1282576,1282653,CVE-2026-88830,CVE-2026-88831,CVE-2026-88832,CVE-2026-88835,CVE-2026-88837,CVE-2026-88839,CVE-2026-88841 This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). - CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker-controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). - CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). - CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). - CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). - CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - busybox-1.37.0-160000.8.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:10 +0100 (CET) Subject: SUSE-CU-2026:14097-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151110.2F124FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14097-1 Container Tags : rancher/elemental-channel/sl-micro:6.2-kvm , rancher/elemental-channel/sl-micro:6.2-kvm-11.1 Container Release : 11.1 Severity : important Type : security References : 1217586 1271544 1271545 1271547 1271548 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1280049 1280050 1280051 1280052 1280053 1280054 1281297 1282509 1282550 1282551 1282552 1282568 1282575 1282576 1282653 1283342 CVE-2023-42366 CVE-2026-103111 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-38752 CVE-2026-38753 CVE-2026-38754 CVE-2026-38755 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-88830 CVE-2026-88831 CVE-2026-88832 CVE-2026-88835 CVE-2026-88837 CVE-2026-88839 CVE-2026-88841 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1856 Released: Tue Oct 6 18:06:37 2026 Summary: Security update for busybox Type: security Severity: moderate References: 1217586,1271544,1271545,1271547,1271548,CVE-2023-42366,CVE-2026-38752,CVE-2026-38753,CVE-2026-38754,CVE-2026-38755 This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). - CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). - CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ----------------------------------------------------------------- Advisory ID: 1880 Released: Fri Oct 9 08:37:11 2026 Summary: Security update for busybox Type: security Severity: important References: 1282550,1282551,1282552,1282568,1282575,1282576,1282653,CVE-2026-88830,CVE-2026-88831,CVE-2026-88832,CVE-2026-88835,CVE-2026-88837,CVE-2026-88839,CVE-2026-88841 This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). - CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker-controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). - CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). - CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). - CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). - CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - busybox-1.37.0-160000.8.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:17 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:17 +0100 (CET) Subject: SUSE-CU-2026:14098-1: Security update of rancher/elemental-channel/sl-micro Message-ID: <20261112151117.5434CFF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-channel/sl-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14098-1 Container Tags : rancher/elemental-channel/sl-micro:6.2-rt , rancher/elemental-channel/sl-micro:6.2-rt-11.1 Container Release : 11.1 Severity : important Type : security References : 1217586 1271544 1271545 1271547 1271548 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1280049 1280050 1280051 1280052 1280053 1280054 1281297 1282509 1282550 1282551 1282552 1282568 1282575 1282576 1282653 1283342 CVE-2023-42366 CVE-2026-103111 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-38752 CVE-2026-38753 CVE-2026-38754 CVE-2026-38755 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-88830 CVE-2026-88831 CVE-2026-88832 CVE-2026-88835 CVE-2026-88837 CVE-2026-88839 CVE-2026-88841 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-channel/sl-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1856 Released: Tue Oct 6 18:06:37 2026 Summary: Security update for busybox Type: security Severity: moderate References: 1217586,1271544,1271545,1271547,1271548,CVE-2023-42366,CVE-2026-38752,CVE-2026-38753,CVE-2026-38754,CVE-2026-38755 This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). - CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). - CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). - CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). - CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ----------------------------------------------------------------- Advisory ID: 1880 Released: Fri Oct 9 08:37:11 2026 Summary: Security update for busybox Type: security Severity: important References: 1282550,1282551,1282552,1282568,1282575,1282576,1282653,CVE-2026-88830,CVE-2026-88831,CVE-2026-88832,CVE-2026-88835,CVE-2026-88837,CVE-2026-88839,CVE-2026-88841 This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). - CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). - CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker-controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). - CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). - CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). - CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). - CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - busybox-1.37.0-160000.8.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:24 +0100 (CET) Subject: SUSE-CU-2026:14099-1: Security update of rancher/elemental-operator Message-ID: <20261112151124.30CAFFF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-operator ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14099-1 Container Tags : rancher/elemental-operator:1.9.3 , rancher/elemental-operator:1.9.3-6.1 , rancher/elemental-operator:latest Container Release : 6.1 Severity : important Type : security References : 1268867 1269664 1272698 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1279961 1280049 1280050 1280051 1280052 1280053 1280054 1280702 1281297 1282509 1283342 1286261 1287180 CVE-2026-103111 CVE-2026-114406 CVE-2026-13757 CVE-2026-18374 CVE-2026-18938 CVE-2026-19499 CVE-2026-19542 CVE-2026-54369 CVE-2026-54370 CVE-2026-54371 CVE-2026-56391 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-operator was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1661 Released: Fri Sep 11 13:45:57 2026 Summary: Security update for acl, attr Type: security Severity: important References: 1268867,CVE-2026-54369,CVE-2026-54370,CVE-2026-54371 This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501): Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. (CVE-2026-54369, bsc#1268867) The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. (CVE-2026-54370, bsc#1268867) In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. (CVE-2026-54371, bsc#1268867) This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ('Too many levels of symbolic links') error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into 'symbolic link directories'. This is wrong. When dirlink is a symbolic link that refers to a directory, 'getfattr -Rh dirlink' will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent Changes for attr: - Update to 2.6.0 (jsc#PED-16501): Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. (CVE-2026-54369, bsc#1268867) The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. (CVE-2026-54370, bsc#1268867) In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. (CVE-2026-54371, bsc#1268867) This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ('Too many levels of symbolic links') error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into 'symbolic link directories'. This is wrong. When dirlink is a symbolic link that refers to a directory, 'getfattr -Rh dirlink' will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1790 Released: Wed Sep 30 11:29:23 2026 Summary: Recommended update for ca-certificates-mozilla Type: recommended Severity: moderate References: 1279961 This update for ca-certificates-mozilla fixes the following issues: Changes in ca-certificates-mozilla: - Updated to 2.90 state (bsc#1279961): * Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority + FIRMAPROFESIONAL CA ROOT-A WEB + GLOBALTRUST 2020 + Secure Global CA + SecureSign Root CA12 + SecureTrust CA + TeliaSonera Root CA v1 + Trustwave Global Certification Authority + Trustwave Global ECC P256 Certification Authority + Trustwave Global ECC P384 Certification Authority + XRamp Global Certification Authority * Added: + SECOM SMIME RSA Root CA 2024 + SECOM TLS ECC Root CA 2024 + SECOM TLS RSA Root CA 2024 + SecureSign Root CA16 + Telia EC Email Root CA v3 + Telia EC TLS Root CA v3 + Telia RSA Email Root CA v3 + Telia RSA TLS Root CA v3 ----------------------------------------------------------------- Advisory ID: 1919 Released: Thu Oct 15 14:13:14 2026 Summary: Security update for p11-kit Type: security Severity: moderate References: 1269664,1280702,CVE-2026-13757,CVE-2026-18938 This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ----------------------------------------------------------------- Advisory ID: 1951 Released: Wed Oct 21 10:10:37 2026 Summary: Security update for coreutils Type: security Severity: moderate References: 1272698,CVE-2026-56391 This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698). ----------------------------------------------------------------- Advisory ID: 1958 Released: Fri Oct 23 15:50:54 2026 Summary: Security update for ca-certificates-mozilla Type: security Severity: moderate References: 1286261,1287180,CVE-2026-114406 This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1 ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - elemental-operator1.9-1.9.3-160000.1.1 updated - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - libattr1-2.6.0-160000.1.1 updated - libacl1-2.4.0-160000.1.1 updated - libp11-kit0-0.25.5-160000.3.1 updated - p11-kit-0.25.5-160000.3.1 updated - p11-kit-tools-0.25.5-160000.3.1 updated - coreutils-9.6-160000.3.1 updated - ca-certificates-mozilla-2.92-160000.1.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:51 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:51 +0100 (CET) Subject: SUSE-CU-2026:14100-1: Security update of rancher/elemental-operator Message-ID: <20261112151151.03FB1FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-operator ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14100-1 Container Tags : rancher/elemental-operator:1.8.3 , rancher/elemental-operator:1.8.3-7.1 Container Release : 7.1 Severity : important Type : security References : 1268867 1269664 1272698 1274723 1274726 1276892 1276946 1277247 1277262 1277707 1277708 1277709 1277710 1277711 1277712 1277713 1277921 1277922 1279893 1279961 1280049 1280050 1280051 1280052 1280053 1280054 1280702 1281297 1282509 1283342 1286261 1287180 CVE-2026-103111 CVE-2026-114406 CVE-2026-13757 CVE-2026-18374 CVE-2026-18938 CVE-2026-19499 CVE-2026-19542 CVE-2026-54369 CVE-2026-54370 CVE-2026-54371 CVE-2026-56391 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-8674 CVE-2026-86805 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 CVE-2026-89162 ----------------------------------------------------------------- The container rancher/elemental-operator was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 1661 Released: Fri Sep 11 13:45:57 2026 Summary: Security update for acl, attr Type: security Severity: important References: 1268867,CVE-2026-54369,CVE-2026-54370,CVE-2026-54371 This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl (bsc#1268867). Changes for acl: - Update to 2.4.0 (jsc#PED-16501): Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. (CVE-2026-54369, bsc#1268867) The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. (CVE-2026-54370, bsc#1268867) In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. (CVE-2026-54371, bsc#1268867) This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ('Too many levels of symbolic links') error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into 'symbolic link directories'. This is wrong. When dirlink is a symbolic link that refers to a directory, 'getfattr -Rh dirlink' will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent Changes for attr: - Update to 2.6.0 (jsc#PED-16501): Major Issues Fixed: - The libacl library functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() take a pathname argument and follow symbolic links. When a privileged user calls one of those functions, an attacker that controls a pathname component can replace a file or directory with a symbolic link and redirect the operation to a different file. This can lead to local privilege escalation. (CVE-2026-54369, bsc#1268867) The library functions cannot be fixed without breaking compatibility; the described behaviour is by design. Instead, version 2.4.0 of the acl package introduces the additional functions acl_get_file_at(), acl_set_file_at(), acl_extended_file_at(), and acl_delete_def_file_at(). These functions each take a dirfd file descriptor argument and an at_flags argument and accept the AT_SYMLINK_NOFOLLOW and AT_EMPTY_PATH flags. Use these functions to control when to follow symbolic links. (CVE-2026-54370, bsc#1268867) In addition, the libacl functions acl_get_fd(), acl_set_fd(), and acl_extended_fd() functions always operate on the access ACL; the library previously did not offer a way to operate on the default ACL of a directory file descriptor. The new functions remove that restriction. It will be up to each individual program to start using these new library functions where appropriate. - When walking directory trees, the getfacl, setfacl, chacl, and getfattr utilities constructed the full pathname of each file in the tree and use that pathname to access the file. When a privileged user used those utilities, an attacker that controlled a pathname component could replace a directory with a symbolic link and redirect the operation to a different file, leading to a local privilege escalation. (CVE-2026-54371, bsc#1268867) This is fixed by using directory file descriptors and operating relative to those directory file descriptors. - When resolving the final pathname component, the getfacl, setfacl, chacl, getfattr, and setfattr utilities in some cases used functions that resolve symbolic links. This includes the above mentioned libacl functions, but also stat(), chmod(), and chown(). This is fixed by using symlink-safe functions throughout the code. - When restoring a backup, the setfacl and setfattr utilities read the full pathnames of files from the backup. When those pathnames were resolved, pathname components that are symbolic links were traversed. An attacker that controlled a pathname component could replace it with a symbolic link, causing a privileged user to operate on a file other than the one intended. This could lead to the same kind of local privilege escalation as discussed before. This is fixed by using openat2(RESOLVE_NO_SYMLINKS) to resolve the directory components of a pathname, but see Compatibility Notes below for the details. Minor Issues Fixed: - When a symbolic link was specified on the command line but symbolic link traversal was disabled using option -P (--physical), the getfacl and setfacl utilities previously silently ignored the symlink. Now, an ELOOP ('Too many levels of symbolic links') error will result instead. - acl_delete_entry() now verifies that the specified entry belongs to the specified acl. - Numeric uids and gids that cannot be represented in types uid_t and gid_t are checked more carefully and invalid numbers are rejected. - Functions acl_get_file(), acl_get_file_at(), and acl_get_fd() will retry several times when the size of an ACL grows unexpectedly; previously, they only grew the allocated buffer once before giving up. - When passed a directory file descriptor, function perm_copy_fd() didn't copy the default ACL from one directory to the other. It now does. - setfacl --restore accidentally ignored leading whitespace in filenames. It no longer does. - setfacl --restore accidentally called chmod() when in --test mode. It no longer does. - When the setfattr --restore option was used multiple times, a buffer was accessed after being freed. This no longer happens. - When the setfattr -h (--no-dereference) option was given after --restore, it was ignored. Now, the options can be passed in any order. - The -h (--no-dereference) option of getfattr prevented getfattr from recursing into 'symbolic link directories'. This is wrong. When dirlink is a symbolic link that refers to a directory, 'getfattr -Rh dirlink' will now visit that directory. The -P (--physical) option can be used to prevent that. - Similarly, when a symbolic link referring to a directory was specified on the getfacl or setfacl command line, the -R option did not cause that directory to be visited. This has been fixed so that those directories will now be visited. The -P (--physical) option can be used to prevent ----------------------------------------------------------------- Advisory ID: 1747 Released: Wed Sep 23 21:42:24 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1277707,1277708,1277709,1277710,1277711,1277712,1277713,1279893,1280049,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161,CVE-2026-89162 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). - CVE-2026-89162: information disclosure via `pcre2_serialize_encode` (bsc#1280049). ----------------------------------------------------------------- Advisory ID: 1769 Released: Tue Sep 29 14:25:10 2026 Summary: Security update for glibc Type: security Severity: important References: 1274723,1274726,1276892,1276946,1277247,1277262,1277921,1277922,1281297,1282509,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489,CVE-2026-8674,CVE-2026-86805 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: - Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ----------------------------------------------------------------- Advisory ID: 1790 Released: Wed Sep 30 11:29:23 2026 Summary: Recommended update for ca-certificates-mozilla Type: recommended Severity: moderate References: 1279961 This update for ca-certificates-mozilla fixes the following issues: Changes in ca-certificates-mozilla: - Updated to 2.90 state (bsc#1279961): * Removed: + AffirmTrust Commercial + AffirmTrust Networking + AffirmTrust Premium + AffirmTrust Premium ECC + certSIGN ROOT CA + Entrust Root Certification Authority + PKI Root Certification Authority + FIRMAPROFESIONAL CA ROOT-A WEB + GLOBALTRUST 2020 + Secure Global CA + SecureSign Root CA12 + SecureTrust CA + TeliaSonera Root CA v1 + Trustwave Global Certification Authority + Trustwave Global ECC P256 Certification Authority + Trustwave Global ECC P384 Certification Authority + XRamp Global Certification Authority * Added: + SECOM SMIME RSA Root CA 2024 + SECOM TLS ECC Root CA 2024 + SECOM TLS RSA Root CA 2024 + SecureSign Root CA16 + Telia EC Email Root CA v3 + Telia EC TLS Root CA v3 + Telia RSA Email Root CA v3 + Telia RSA TLS Root CA v3 ----------------------------------------------------------------- Advisory ID: 1919 Released: Thu Oct 15 14:13:14 2026 Summary: Security update for p11-kit Type: security Severity: moderate References: 1269664,1280702,CVE-2026-13757,CVE-2026-18938 This update for p11-kit fixes the following issues: - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). - CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ----------------------------------------------------------------- Advisory ID: 1951 Released: Wed Oct 21 10:10:37 2026 Summary: Security update for coreutils Type: security Severity: moderate References: 1272698,CVE-2026-56391 This update for coreutils fixes the following issue: - CVE-2026-56391: uniq: denial of service and information disclosure via out-of-bounds read with multibyte input (bsc#1272698). ----------------------------------------------------------------- Advisory ID: 1958 Released: Fri Oct 23 15:50:54 2026 Summary: Security update for ca-certificates-mozilla Type: security Severity: moderate References: 1286261,1287180,CVE-2026-114406 This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: - emSign ECC Root CA - C3 - emSign ECC Root CA - G3 - emSign Root CA - C1 ----------------------------------------------------------------- Advisory ID: 2045 Released: Wed Nov 4 18:07:08 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1283342,CVE-2026-103111 This update for pcre2 fixes the following issue: - CVE-2026-103111: there is an attacker-controlled regular expression and certain JIT API usage, allowing an out-of- bounds write with arbitrary data (bsc#1283342). The following package changes have been done: - elemental-operator-1.8.3-160000.1.1 updated - glibc-2.40-160000.7.1 updated - libpcre2-8-0-10.45-160000.5.1 updated - libattr1-2.6.0-160000.1.1 updated - libacl1-2.4.0-160000.1.1 updated - libp11-kit0-0.25.5-160000.3.1 updated - p11-kit-0.25.5-160000.3.1 updated - p11-kit-tools-0.25.5-160000.3.1 updated - coreutils-9.6-160000.3.1 updated - ca-certificates-mozilla-2.92-160000.1.1 updated - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 15:11:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:11:59 +0100 (CET) Subject: SUSE-CU-2026:14101-1: Security update of rancher/elemental-operator Message-ID: <20261112151159.36BEDFF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/elemental-operator ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14101-1 Container Tags : rancher/elemental-operator:1.7.6 , rancher/elemental-operator:1.7.6-7.1 Container Release : 7.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1265304 1274723 1274726 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-41066 CVE-2026-6368 CVE-2026-6791 CVE-2026-77117 CVE-2026-80489 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/elemental-operator was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). The following package changes have been done: - compat-usrmerge-tools-84.87-slfo.1.1_1.5 updated - elemental-operator-1.7.5-slfo.1.1_1.1 updated - system-user-root-20190513-slfo.1.1_1.2 updated - filesystem-84.87-slfo.1.1_1.2 updated - glibc-2.38-slfo.1.1_10.1 updated - libtasn1-6-4.19.0-slfo.1.1_3.1 updated - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - libgmp10-6.3.0-slfo.1.1_1.5 updated - libgcc_s1-14.3.0+git11799-slfo.1.1_1.1 added - libffi8-3.4.6-slfo.1.1_1.4 updated - libcap2-2.69-slfo.1.1_2.1 updated - libattr1-2.5.1-slfo.1.1_1.3 updated - libacl1-2.3.1-slfo.1.1_1.3 updated - libselinux1-3.5-slfo.1.1_1.3 updated - libstdc++6-14.3.0+git11799-slfo.1.1_1.1 added - libp11-kit0-0.25.3-slfo.1.1_1.2 updated - libncurses6-6.4.20240224-slfo.1.1_2.1 updated - terminfo-base-6.4.20240224-slfo.1.1_2.1 updated - p11-kit-0.25.3-slfo.1.1_1.2 updated - p11-kit-tools-0.25.3-slfo.1.1_1.2 updated - libreadline8-8.2-slfo.1.1_1.4 updated - bash-5.2.15-slfo.1.1_1.6 updated - bash-sh-5.2.15-slfo.1.1_1.6 updated - coreutils-9.4-slfo.1.1_2.1 updated - ca-certificates-2+git20240805.fd24d50-slfo.1.1_1.2 updated - ca-certificates-mozilla-2.84-slfo.1.1_1.1 updated - container:suse-toolbox-image-1.0.0-5.120 added - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 removed From sle-container-updates at lists.suse.com Thu Nov 12 15:12:46 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 16:12:46 +0100 (CET) Subject: SUSE-CU-2026:14104-1: Security update of rancher/seedimage-builder Message-ID: <20261112151246.D5961FF55@maintenance.suse.de> SUSE Container Update Advisory: rancher/seedimage-builder ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14104-1 Container Tags : rancher/seedimage-builder:1.7.6 , rancher/seedimage-builder:1.7.6-7.1 Container Release : 7.1 Severity : important Type : security References : 1255300 1257312 1257471 1260535 1263254 1264378 1264449 1264450 1265304 1265428 1265578 1265580 1265581 1265582 1265583 1265584 1265585 1265586 1265587 1265588 1265589 1265758 1274723 1274726 1275441 1276892 1276946 1277262 1277707 1277708 1277709 1277710 1277711 1277713 1277921 1277922 1278729 1279893 1280050 1280051 1280052 1280053 1280054 CVE-2026-18374 CVE-2026-19499 CVE-2026-19542 CVE-2026-32792 CVE-2026-33278 CVE-2026-33814 CVE-2026-40622 CVE-2026-41066 CVE-2026-41292 CVE-2026-41888 CVE-2026-42534 CVE-2026-42923 CVE-2026-42944 CVE-2026-42959 CVE-2026-42960 CVE-2026-43284 CVE-2026-43500 CVE-2026-44390 CVE-2026-44608 CVE-2026-6368 CVE-2026-6791 CVE-2026-72693 CVE-2026-77117 CVE-2026-80489 CVE-2026-8090 CVE-2026-8091 CVE-2026-8092 CVE-2026-8094 CVE-2026-86145 CVE-2026-89156 CVE-2026-89157 CVE-2026-89158 CVE-2026-89160 CVE-2026-89161 ----------------------------------------------------------------- The container rancher/seedimage-builder was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 728 Released: Mon Sep 14 17:52:13 2026 Summary: Security update for glibc Type: security Severity: moderate References: 1263254,1274723,1274726,1276892,1276946,1277262,1277921,1277922,CVE-2026-18374,CVE-2026-19499,CVE-2026-19542,CVE-2026-41066,CVE-2026-6368,CVE-2026-6791,CVE-2026-77117,CVE-2026-80489 This update for glibc fixes the following issues: - CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). - CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). - CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). - CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). - CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). - CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). - CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). ----------------------------------------------------------------- Advisory ID: 730 Released: Tue Sep 15 09:31:40 2026 Summary: Security update for pcre2 Type: security Severity: important References: 1255300,1257312,1257471,1260535,1265304,1277707,1277708,1277709,1277710,1277711,1277713,1279893,1280050,1280051,1280052,1280053,1280054,CVE-2026-86145,CVE-2026-89156,CVE-2026-89157,CVE-2026-89158,CVE-2026-89160,CVE-2026-89161 This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). - CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). - CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). - CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). - CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). ----------------------------------------------------------------- Advisory ID: 732 Released: Wed Sep 16 11:16:27 2026 Summary: Security update for kbd Type: security Severity: important References: 1264378,1265578,1265580,1265581,1265582,1265583,1265584,1265585,1265586,1265587,1265588,1265589,1275441,CVE-2026-32792,CVE-2026-33278,CVE-2026-40622,CVE-2026-41292,CVE-2026-42534,CVE-2026-42923,CVE-2026-42944,CVE-2026-42959,CVE-2026-42960,CVE-2026-44390,CVE-2026-44608,CVE-2026-72693,CVE-2026-8090,CVE-2026-8091,CVE-2026-8092,CVE-2026-8094 This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in `openvt` due to incorrect process owner verification that allows `passwordless` root login (bsc#1275441). ----------------------------------------------------------------- Advisory ID: 734 Released: Thu Sep 17 09:07:22 2026 Summary: Recommended update for grub2 Type: recommended Severity: moderate References: 1264449,1264450,1265428,1265758,1278729,CVE-2026-33814,CVE-2026-41888,CVE-2026-43284,CVE-2026-43500 This update for grub2 fixes the following issues: - Add SBAT Provides to support shim SBAT dependency checks (bsc#1278729) The following package changes have been done: - boost-license1_84_0-1.84.0-slfo.1.1_1.4 added - btrfsprogs-udev-rules-6.8.1-slfo.1.1_1.2 updated - compat-usrmerge-tools-84.87-slfo.1.1_1.5 updated - crypto-policies-20230920.570ea89-slfo.1.1_2.1 updated - elemental-httpfy-1.7.5-slfo.1.1_1.1 updated - elemental-seedimage-hooks-1.7.5-slfo.1.1_1.1 updated - libsemanage-conf-3.5-slfo.1.1_1.3 updated - libssh-config-0.10.6-slfo.1.1_6.1 updated - pkgconf-m4-1.8.0-slfo.1.1_1.5 updated - system-user-root-20190513-slfo.1.1_1.2 updated - filesystem-84.87-slfo.1.1_1.2 updated - glibc-2.38-slfo.1.1_10.1 updated - libzstd1-1.5.5-slfo.1.1_1.4 updated - libz1-1.2.13-slfo.1.1_2.1 updated - libxxhash0-0.8.1-slfo.1.1_2.1 updated - libverto1-0.3.2-slfo.1.1_1.2 updated - libuuid1-2.40.4-slfo.1.1_7.1 updated - liburcu8-0.14.0-slfo.1.1_1.3 updated - libunistring5-1.1-slfo.1.1_1.2 updated - libtextstyle0-0.21.1-slfo.1.1_2.1 updated - libtasn1-6-4.19.0-slfo.1.1_3.1 updated - libsmartcols1-2.40.4-slfo.1.1_7.1 updated - libsepol2-3.5-slfo.1.1_1.3 updated - libseccomp2-2.5.4-slfo.1.1_1.4 updated - libsasl2-3-2.1.28-slfo.1.1_1.2 updated - libpopt0-1.19-slfo.1.1_1.3 updated - libpkgconf3-1.8.0-slfo.1.1_1.5 added - libpcre2-8-0-10.42-slfo.1.1_2.1 updated - libparted-fs-resize0-3.5-slfo.1.1_1.2 updated - libnss_usrfiles2-2.27-slfo.1.1_1.3 updated - libnghttp2-14-1.52.0-slfo.1.1_3.1 updated - liblzo2-2-2.10-slfo.1.1_1.3 updated - liblzma5-5.4.3-slfo.1.1_3.1 updated - liblz4-1-1.9.4-slfo.1.1_1.2 updated - liblua5_4-5-5.4.6-slfo.1.1_1.3 updated - libkeyutils1-1.6.3-slfo.1.1_1.3 updated - libjson-c5-0.16-slfo.1.1_1.2 updated - libjitterentropy3-3.4.1-slfo.1.1_1.3 updated - libip4tc2-1.8.9-slfo.1.1_2.1 added - libgpg-error0-1.47-slfo.1.1_1.3 updated - libgmp10-6.3.0-slfo.1.1_1.5 updated - libgcc_s1-14.3.0+git11799-slfo.1.1_1.1 updated - libfuse2-2.9.9-slfo.1.1_1.2 added - libffi8-3.4.6-slfo.1.1_1.4 updated - libexpat1-2.7.1-slfo.1.1_5.1 updated - libeconf0-0.7.2-slfo.1.1_1.3 updated - libcrypt1-4.4.36-slfo.1.1_1.4 updated - libcom_err2-1.47.0-slfo.1.1_1.2 updated - libcap2-2.69-slfo.1.1_2.1 updated - libcap-ng0-0.8.3-slfo.1.1_1.4 updated - libbz2-1-1.0.8-slfo.1.1_2.1 updated - libburn4-1.5.4-slfo.1.1_1.2 updated - libbtrfsutil1-6.8.1-slfo.1.1_1.2 updated - libbtrfs0-6.8.1-slfo.1.1_1.2 updated - libbrotlicommon1-1.1.0-slfo.1.1_1.3 updated - libaudit1-3.1.1-slfo.1.1_2.1 updated - libattr1-2.5.1-slfo.1.1_1.3 updated - libargon2-1-20190702-slfo.1.1_1.2 added - libalternatives1-1.2+30.a5431e9-slfo.1.1_1.3 updated - libaio1-0.3.113-slfo.1.1_1.2 updated - libacl1-2.3.1-slfo.1.1_1.3 updated - fillup-1.42-slfo.1.1_2.2 updated - dosfstools-4.2-slfo.1.1_1.2 updated - diffutils-3.10-slfo.1.1_1.3 updated - libpng16-16-1.6.58-slfo.1.1_1.1 updated - libidn2-0-2.3.4-slfo.1.1_1.2 updated - pkgconf-1.8.0-slfo.1.1_1.5 updated - libselinux1-3.5-slfo.1.1_1.3 updated - netcfg-11.6-slfo.1.1_1.2 updated - libxml2-2-2.11.6-slfo.1.1_9.1 updated - squashfs-4.6.1-slfo.1.1_1.2 updated - libgcrypt20-1.10.3-slfo.1.1_4.1 updated - libstdc++6-14.3.0+git11799-slfo.1.1_1.1 updated - libp11-kit0-0.25.3-slfo.1.1_1.2 updated - libblkid1-2.40.4-slfo.1.1_7.1 updated - perl-base-5.38.2-slfo.1.1_3.1 updated - libext2fs2-1.47.0-slfo.1.1_1.2 updated - libudev1-254.27-slfo.1.1_5.1 updated - chkstat-1600_20240206-slfo.1.1_1.5 added - libzio1-1.08-slfo.1.1_1.3 updated - libjte2-1.22-slfo.1.1_1.2 updated - libbrotlidec1-1.1.0-slfo.1.1_1.3 updated - alts-1.2+30.a5431e9-slfo.1.1_1.3 updated - libpsl5-0.21.2-slfo.1.1_1.2 updated - sed-4.9-slfo.1.1_2.1 updated - libsubid4-4.15.1-slfo.1.1_1.3 added - libsemanage2-3.5-slfo.1.1_1.3 updated - findutils-4.9.0-slfo.1.1_2.1 updated - libsystemd0-254.27-slfo.1.1_5.1 updated - libncurses6-6.4.20240224-slfo.1.1_2.1 updated - terminfo-base-6.4.20240224-slfo.1.1_2.1 updated - libinih0-56-slfo.1.1_1.3 updated - libboost_thread1_84_0-1.84.0-slfo.1.1_1.4 added - p11-kit-0.25.3-slfo.1.1_1.2 updated - p11-kit-tools-0.25.3-slfo.1.1_1.2 updated - libmount1-2.40.4-slfo.1.1_7.1 updated - libfdisk1-2.40.4-slfo.1.1_7.1 updated - libisofs6-1.5.4-slfo.1.1_1.2 updated - libfreetype6-2.14.3-slfo.1.1_1.1 updated - ncurses-utils-6.4.20240224-slfo.1.1_2.1 updated - libreadline8-8.2-slfo.1.1_1.4 updated - libedit0-20210910.3.1-slfo.1.1_1.3 updated - gptfdisk-1.0.9-slfo.1.1_2.1 updated - libisoburn1-1.5.4-slfo.1.1_1.2 updated - bash-5.2.15-slfo.1.1_1.6 updated - bash-sh-5.2.15-slfo.1.1_1.6 updated - xz-5.4.3-slfo.1.1_3.1 updated - systemd-default-settings-branding-openSUSE-0.7-slfo.1.1_1.2 added - systemd-default-settings-0.7-slfo.1.1_1.2 added - pkgconf-pkg-config-1.8.0-slfo.1.1_1.5 updated - login_defs-4.15.1-slfo.1.1_1.3 updated - libdevmapper1_03-2.03.22_1.02.196-slfo.1.1_1.3 updated - gzip-1.13-slfo.1.1_4.1 updated - grep-3.11-slfo.1.1_1.2 updated - gettext-runtime-0.21.1-slfo.1.1_2.1 updated - coreutils-9.4-slfo.1.1_2.1 updated - ALP-dummy-release-0.1-slfo.1.1_1.5 updated - libparted2-3.5-slfo.1.1_1.2 updated - libdevmapper-event1_03-2.03.22_1.02.196-slfo.1.1_1.3 updated - info-7.0.3-slfo.1.1_1.3 updated - xfsprogs-6.5.0-slfo.1.1_1.2 updated - thin-provisioning-tools-0.9.0-slfo.1.1_1.4 updated - systemd-rpm-macros-24-slfo.1.1_1.2 updated - systemd-presets-common-SUSE-15-slfo.1.1_1.2 updated - rpm-config-SUSE-20240214-slfo.1.1_1.2 updated - rpm-4.18.0-slfo.1.1_3.1 updated - permissions-config-1600_20240206-slfo.1.1_1.5 updated - glibc-locale-base-2.38-slfo.1.1_10.1 updated - e2fsprogs-1.47.0-slfo.1.1_1.2 updated - ca-certificates-2+git20240805.fd24d50-slfo.1.1_1.2 updated - ca-certificates-mozilla-2.84-slfo.1.1_1.1 updated - btrfsprogs-6.8.1-slfo.1.1_1.2 updated - parted-3.5-slfo.1.1_1.2 updated - liblvm2cmd2_03-2.03.22-slfo.1.1_1.3 updated - xorriso-1.5.4-slfo.1.1_1.2 updated - device-mapper-2.03.22_1.02.196-slfo.1.1_1.3 updated - systemd-presets-branding-ALP-transactional-20230214-slfo.1.1_1.2 added - permissions-1600_20240206-slfo.1.1_1.5 updated - mtools-4.0.43-slfo.1.1_1.2 updated - libopenssl3-3.1.4-slfo.1.1_13.1 updated - pam-1.6.1-slfo.1.1_5.1 updated - grub2-2.12-slfo.1.1_8.1 updated - grub2-i386-pc-2.12-slfo.1.1_8.1 updated - suse-module-tools-16.0.43-slfo.1.1_1.2 updated - kmod-32-slfo.1.1_2.1 updated - rsync-3.3.0-slfo.1.1_7.1 updated - libldap2-2.6.4-slfo.1.1_1.2 added - libkmod2-32-slfo.1.1_2.1 updated - libcryptsetup12-2.6.1-slfo.1.1_2.1 updated - krb5-1.21.3-slfo.1.1_5.1 updated - util-linux-2.40.4-slfo.1.1_7.1 updated - shadow-4.15.1-slfo.1.1_1.3 updated - pam-config-2.11+git.20240906-slfo.1.1_2.1 updated - kbd-2.6.4-slfo.1.1_2.1 updated - libssh4-0.10.6-slfo.1.1_6.1 updated - libsnapper7-0.11.2-slfo.1.1_1.2 updated - aaa_base-84.87+git20250903.33e5ba4-slfo.1.1_1.1 updated - libcurl4-8.14.1-slfo.1.1_10.1 updated - dbus-1-daemon-1.14.10-slfo.1.1_1.2 added - curl-8.14.1-slfo.1.1_10.1 updated - dbus-1-tools-1.14.10-slfo.1.1_1.2 updated - systemd-254.27-slfo.1.1_5.1 updated - sysuser-shadow-3.1-slfo.1.1_1.2 updated - dbus-1-common-1.14.10-slfo.1.1_1.2 updated - libdbus-1-3-1.14.10-slfo.1.1_1.2 updated - dbus-1-1.14.10-slfo.1.1_1.2 updated - system-group-kvm-20170617-slfo.1.1_1.2 updated - system-group-hardware-20170617-slfo.1.1_1.2 updated - udev-254.27-slfo.1.1_5.1 updated - snapper-0.11.2-slfo.1.1_1.2 updated - lvm2-2.03.22-slfo.1.1_1.3 updated - elemental-toolkit-2.2.9-slfo.1.1_1.1 updated - container:suse-toolbox-image-1.0.0-5.120 added - boost-license1_86_0-1.86.0-160000.2.2 removed - container:bci-bci-base-16.0-f1e8d646d8608529472a09294358b504dfd818e55257797c889699e790842108-0 removed - cpio-2.15-160000.3.1 removed - dbus-broker-36-160000.3.1 removed - dbus-broker-block-restart-36-160000.3.1 removed - dracut-059+suse.732.g39fc900f5-160000.1.1 removed - elfutils-0.192-160000.3.1 removed - envsubst-0.22.5-160000.2.2 removed - file-5.46-160000.2.2 removed - file-magic-5.46-160000.2.2 removed - fuse3-3.16.2-160000.3.1 removed - gawk-5.3.2-160000.3.1 removed - glibc-gconv-modules-extra-2.40-160000.7.1 removed - grub2-common-2.12-160000.8.1 removed - libasm1-0.192-160000.3.1 removed - libboost_thread1_86_0-1.86.0-160000.2.2 removed - libdw1-0.192-160000.3.1 removed - libelf1-0.192-160000.3.1 removed - libfuse3-3-3.16.2-160000.3.1 removed - libkbdfile1-2.7.1-160000.3.1 removed - libkeymap1-2.7.1-160000.3.1 removed - libkfont0-2.7.1-160000.3.1 removed - liblastlog2-2-2.41.1-160000.5.1 removed - libldap-2-2.6.13+157-160000.1.1 removed - libldap-data-2.6.13+157-160000.1.1 removed - liblz1-1.15-160000.2.2 removed - libmagic1-5.46-160000.2.2 removed - libmpdec4-4.0.1-160000.2.2 removed - libmpfr6-4.2.1-160000.2.2 removed - libpkgconf5-2.2.0-160000.2.2 removed - libpython3_13-1_0-3.13.14-160000.2.1 removed - libsqlite3-0-3.53.2-160000.1.1 removed - libsubid5-4.17.2-160000.2.2 removed - pam-extra-1.7.1-160000.5.1 removed - permctl-1699_20250120-160000.2.2 removed - pigz-2.8-160000.2.2 removed - python3-base-3.13.14-160000.2.1 removed - python313-base-3.13.14-160000.2.1 removed - system-user-lp-20170617-160000.2.2 removed - systemd-default-settings-branding-upstream-0.10-160000.2.2 removed - systemd-presets-branding-SLE-15.1-160000.4.1 removed - util-linux-systemd-2.41.1-160000.5.1 removed - zstd-1.5.7-160000.2.2 removed From sle-container-updates at lists.suse.com Thu Nov 12 16:31:01 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 17:31:01 +0100 (CET) Subject: SUSE-CU-2026:14107-1: Recommended update of bci/bci-micro-fips Message-ID: <20261112163101.B560BFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-micro-fips ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14107-1 Container Tags : bci/bci-micro-fips:15.7 , bci/bci-micro-fips:15.7-28.1 Container Release : 28.1 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/bci-micro-fips was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:bci-bci-base-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 16:31:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 17:31:49 +0100 (CET) Subject: SUSE-CU-2026:14108-1: Recommended update of bci/bci-micro Message-ID: <20261112163149.1A651FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-micro ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14108-1 Container Tags : bci/bci-micro:15.7 , bci/bci-micro:15.7-62.1 Container Release : 62.1 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container bci/bci-micro was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:bci-bci-base-15.7-7df35f6ac67ddb16ac906885538442fa28f9bfbc35454db5bd43d13fd180b846-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 16:37:28 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 17:37:28 +0100 (CET) Subject: SUSE-CU-2026:14109-1: Security update of suse/sle15 Message-ID: <20261112163728.DD6DBFF54@maintenance.suse.de> SUSE Container Update Advisory: suse/sle15 ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14109-1 Container Tags : bci/bci-base:15.7 , bci/bci-base:15.7-5.23.69 , bci/bci-base:latest , suse/sle15:15.7 , suse/sle15:15.7-5.23.69 , suse/sle15:latest Container Release : 5.23.69 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1268975 1274489 1274490 1277477 1277478 1277482 1278173 1279541 1280941 1281325 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287778 1287781 1288144 CVE-2026-107929 CVE-2026-111497 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-117556 CVE-2026-11856 CVE-2026-12064 CVE-2026-18477 CVE-2026-18508 CVE-2026-18924 CVE-2026-19931 CVE-2026-34182 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container suse/sle15 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5045-1 Released: Mon Nov 2 18:31:58 2026 Summary: Recommended update for libsolv, libzypp, zypper Type: recommended Severity: moderate References: 1279541 This update for libsolv, libzypp, zypper fixes the following issues: - improve SUSE product link dependency generation if there are multiple release packages for the same product [bsc#1279541] - fix possible segfault in the SUSE namespace dependency generation - bump version to 0.7.39 - BuildRequires: %{libsolv_devel_package} >= 0.7.40 (bsc#1279541) This fix resolves issues in online migrations to SLES 16.1. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5138-1 Released: Mon Nov 9 14:00:43 2026 Summary: Security update for zchunk Type: security Severity: moderate References: 1288144,CVE-2026-117556 This update for zchunk fixes the following issue: - CVE-2026-117556: heap out-of-bounds read in `read_preface()` allows attackers to cause an application crash via a crafted `.zck` file (bsc#1288144). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - bash-sh-4.4-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - curl-8.22.0-150700.7.33.1 updated - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libcurl4-8.22.0-150700.7.33.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libreadline7-7.0-150400.27.13.3 updated - libsolv-tools-base-0.7.40-150700.11.13.1 updated - libzck1-1.5.1-150700.3.3.1 updated - libzypp-17.38.16-150700.6.19.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - tar-1.34-150000.3.45.1 updated - zypper-1.14.101-150700.13.12.1 updated From sle-container-updates at lists.suse.com Thu Nov 12 17:13:35 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 18:13:35 +0100 (CET) Subject: SUSE-CU-2026:14121-1: Recommended update of trento/mcp-server-trento Message-ID: <20261112171335.B718EFF55@maintenance.suse.de> SUSE Container Update Advisory: trento/mcp-server-trento ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14121-1 Container Tags : trento/mcp-server-trento:1.2.0 , trento/mcp-server-trento:1.2.0-build1.15.3 , trento/mcp-server-trento:latest Container Release : 1.15.3 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container trento/mcp-server-trento was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 17:14:04 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 18:14:04 +0100 (CET) Subject: SUSE-CU-2026:14122-1: Recommended update of trento/trento-checks Message-ID: <20261112171404.65189FF55@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-checks ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14122-1 Container Tags : trento/trento-checks:1.4.0 , trento/trento-checks:1.4.0-build1.24.3 , trento/trento-checks:latest Container Release : 1.24.3 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container trento/trento-checks was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 17:14:39 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 18:14:39 +0100 (CET) Subject: SUSE-CU-2026:14123-1: Recommended update of trento/trento-wanda Message-ID: <20261112171439.D042FFF55@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-wanda ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14123-1 Container Tags : trento/trento-wanda:2.2.0 , trento/trento-wanda:2.2.0-build1.40.4 , trento/trento-wanda:latest Container Release : 1.40.4 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container trento/trento-wanda was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Thu Nov 12 17:15:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Thu, 12 Nov 2026 18:15:23 +0100 (CET) Subject: SUSE-CU-2026:14124-1: Recommended update of trento/trento-web Message-ID: <20261112171523.CC35DFF59@maintenance.suse.de> SUSE Container Update Advisory: trento/trento-web ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14124-1 Container Tags : trento/trento-web:3.2 , trento/trento-web:3.2.0 , trento/trento-web:3.2.0-build4.67.4 , trento/trento-web:latest Container Release : 4.67.4 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container trento/trento-web was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:38:52 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:38:52 +0100 (CET) Subject: SUSE-IU-2026:8795-1: Security update of suse/sle-micro/5.5 Message-ID: <20261113083852.EEB65FF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sle-micro/5.5 ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8795-1 Image Tags : suse/sle-micro/5.5:2.0.4 , suse/sle-micro/5.5:2.0.4-5.8.161 , suse/sle-micro/5.5:latest Image Release : 5.8.161 Severity : important Type : security References : 1228084 1239107 1240541 1240969 1268352 1268353 1275171 1275258 1275260 1275261 1275262 CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728 CVE-2026-44943 CVE-2026-44944 ----------------------------------------------------------------- The container suse/sle-micro/5.5 was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5224-1 Released: Thu Nov 12 18:55:57 2026 Summary: Security update for open-iscsi Type: security Severity: important References: 1228084,1239107,1240541,1240969,1268352,1268353,1275171,1275258,1275260,1275261,1275262,CVE-2026-18724,CVE-2026-18725,CVE-2026-18726,CVE-2026-18727,CVE-2026-18728,CVE-2026-44943,CVE-2026-44944 This update for open-iscsi fixes the following issues: - CVE-2026-18724: Stack buffer overflow in idbm record parsing (bsc#1275171). - CVE-2026-18725: Out-of-bounds access in iscsiuio ICMPv6 echo handling (bsc#1275258). - CVE-2026-18726: Denial of service in iscsiuio Router Advertisement parsing (bsc#1275260). - CVE-2026-18727: Integer underflow in iscsiuio DHCPv6 parsing (bsc#1275261). - CVE-2026-18728: Integer underflow in iscsiuio IPv4 DHCP parsing (bsc#1275262). - CVE-2026-44943: remote file-write as root via discovery (bsc#1268353). - CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352). Changes for open-iscsi: - Update to version 2.1.13.suse+4.dc2446a1: * iscsid: honor REPORT LUNS DATA HAS CHANGED again (#557) * Convert shell scripts to POSIX sh (#552) * Preparing for version 2.1.13 * iscsiuio: fix incorrect comparison of IPv6 subnet mask * usr: verify IPC peer credentials before sending data * login: fix infinite redirect loops with configurable limits * iscsiuio: strengthen IPv6 payload length validation in uip_process() * iscsiuio: strengthen DHCPv6 option parsing loop bound check * iscsiuio: validate DHCPv6 IA_NA option lengths to prevent OOB reads * usr: network code ioctl handling improvements * fix typo in user-facing error message in verify_mode_params() (#548) * gitignore: ignore generated build artifacts (#550) * iscsiadm: handle getopt errors directly (#551) * Fix iscsi_conn_iface_has_ip error handling (#531) * Fix reopen log freq change (#542) * iscsi_net_util: fix broken VLAN support in find_vlan_dev (#545) * Fixes for CVEs CVE-2026-18724 - CVE-2026-18728 (#544) * usr: fix '-Wdiscarded-qualifiers' warning in auth.c (#539) * usr: Fix -Wdiscarded-qualifiers warning in iqn_name_valid (#537) * iscsiuio: Fix -Waddress-of-packed-member (#534) - Update to version 2.1.12.suse+0.8f77cf16: * Preparing for version 2.1.12 (#536) * iscsi-init.service: Use iscsi-gen-initiatorname * iscsi-gen-initiatorname use @IQN_PREFIX@ as default * avoid possible double free of found in idbm_rec_update_param (#528) * iscsi: validate interface IP against target address family (#527) - Update to version 2.1.11.suse+88.8e0635b3: * Make iface.example a doc file. (#526) * Updated SPEC file to deliver iface.example as a %doc file, no longer in the database directory. - Update to version 2.1.11.suse+85.4ef97a15: * Fix unused variable warning in usr/io.c (#524) * Remove old rpm subdirectory, no longer needed. * Add tcp.congestion_control configuration option (#520) * Small cleanups for firmware discovery. (#522) * Fix incorrect parsing of node.discovery_type 'static' and 'fw' (#518) * iscsi_net_util: avoid copying NULL pointers with strlcpy() (#515) * iscsi: delay reconnect until interface has valid IP. (#511) - Update to version 2.1.11.suse+73.1723affc61eb: * README for rpm build directory * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969) * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504) * Makefile: fix 'No rule to make target 'iscsiuio/Makefile.in' issue (#506) * Fix typo in initiator.c (#507) - Fixed some issues in this changes file * One date had incorrect format from 2014 * Two separator lines were formatted incrrectly - Update to version 2.1.11.suse+66.13c070123738: * Fix iscsid.conf NOP configuration (bsc#1240541) - Change SPEC file so that open-iscsi lock files always go in /run/lock/iscsi (bsc#1239107) - Update to version 2.1.11.suse+65.65365e1cdedb: * doc: fixup iscsiadm man page option for -r (#501) * Modify log function to print session id (#498) * Fix minor typo ('authenticaton') (#500) * Preparing for version 2.1.11 (#499) * iscsid: Rate limit session reopen log messages (#492) * IPv6 support for iBFT iSCSI boot (#493) * Improve iscsiadm command line parsing messages (#494) * More testing cleanup, and fix dprint test usage (#491) * Fix a typo in test/README (#486) * iscsid: Fix hang during login with scan=manual (#485) * fix 4 issues which are finded when building with clang 17 (#478) - Drop rcFOO symlinks for CODE16 (PED-266). - Update to version 2.1.10.suse+51.fea0fde82ed1: * Incudes upstream version 2.1.10 plus some fixes * Fix firmware targets startup to always be 'onboot' (#482) (bsc#1228084) * Change a discovery function to void return type (#481) * Fix gcc issues (#480) * Bugfix read specific sysfs value 'off' of session attribute (#466) * Fix bug where abort_tmo read failures were ignored. (#467) * grammar nitpicks (#464) * Fix memory leak in iscsi_check_session_use_count (#465) * improve the comments in idbm_lock() (#458) * Make it visible when memory allocation failure (#457) * Better handle multiple iscsiadm commands (#453) * iscsiadm: allow hostnames in node-mode commands (#451) * Modify how workqueue priority is set (#445) * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443) * iscsid: Rescan devices on relogin (#444) * Adds missing characters in README. (#440) * Turn off iSCSI NOP-Outs, by default. * fix: add usr/iscsid_req.h missinig underline (#431) (#436) - Updated to latest upstream: two small changes, with no known functional changes: * Incorrect documentation for `iscsiadm -m session` print level (upstream issue #432) * Stop using deprecated inet_aton and inet_ntoa (upstream issue #435) The following package changes have been done: - libopeniscsiusr0-0.2.0-150500.46.6.1 updated - open-iscsi-2.1.13-150500.46.6.1 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:51:38 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:51:38 +0100 (CET) Subject: SUSE-CU-2026:14131-1: Recommended update of private-registry/1.2/harbor-core Message-ID: <20261113085138.8ECF2FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14131-1 Container Tags : private-registry/1.2/harbor-core:1.2.2 , private-registry/1.2/harbor-core:1.2.2-1.142 , private-registry/1.2/harbor-core:latest Container Release : 1.142 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:52:29 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:52:29 +0100 (CET) Subject: SUSE-CU-2026:14133-1: Recommended update of private-registry/1.2/harbor-exporter Message-ID: <20261113085229.A99A1FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14133-1 Container Tags : private-registry/1.2/harbor-exporter:1.2.2 , private-registry/1.2/harbor-exporter:1.2.2-1.142 , private-registry/1.2/harbor-exporter:latest Container Release : 1.142 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:53:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:53:24 +0100 (CET) Subject: SUSE-CU-2026:14135-1: Recommended update of private-registry/1.2/harbor-jobservice Message-ID: <20261113085324.33CD9FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14135-1 Container Tags : private-registry/1.2/harbor-jobservice:1.2.2 , private-registry/1.2/harbor-jobservice:1.2.2-1.140 , private-registry/1.2/harbor-jobservice:latest Container Release : 1.140 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:54:19 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:54:19 +0100 (CET) Subject: SUSE-CU-2026:14137-1: Security update of private-registry/1.2/harbor-portal Message-ID: <20261113085419.6EC84FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14137-1 Container Tags : private-registry/1.2/harbor-portal:1.2.2 , private-registry/1.2/harbor-portal:1.2.2-1.153 , private-registry/1.2/harbor-portal:latest Container Release : 1.153 Severity : important Type : security References : 1268975 1289167 CVE-2026-52492 ----------------------------------------------------------------- The container private-registry/1.2/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5221-1 Released: Thu Nov 12 16:02:56 2026 Summary: Security update for tiff Type: security Severity: important References: 1289167,CVE-2026-52492 This update for tiff fixes the following issue: - CVE-2026-52492: libtiff: integer overflow in rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes (bsc#1289167). The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libtiff5-4.0.9-150000.45.75.1 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:55:11 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:55:11 +0100 (CET) Subject: SUSE-CU-2026:14139-1: Recommended update of private-registry/1.2/harbor-registry Message-ID: <20261113085511.12C61FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14139-1 Container Tags : private-registry/1.2/harbor-registry:1.2.2 , private-registry/1.2/harbor-registry:1.2.2-1.143 , private-registry/1.2/harbor-registry:latest Container Release : 1.143 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:56:02 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:56:02 +0100 (CET) Subject: SUSE-CU-2026:14141-1: Recommended update of private-registry/1.2/harbor-registryctl Message-ID: <20261113085602.A2E16FF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14141-1 Container Tags : private-registry/1.2/harbor-registryctl:1.2.2 , private-registry/1.2/harbor-registryctl:1.2.2-1.143 , private-registry/1.2/harbor-registryctl:latest Container Release : 1.143 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:57:10 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:57:10 +0100 (CET) Subject: SUSE-CU-2026:14143-1: Recommended update of private-registry/1.2/harbor-trivy-adapter Message-ID: <20261113085710.A0DDDFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/1.2/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14143-1 Container Tags : private-registry/1.2/harbor-trivy-adapter:1.2.2 , private-registry/1.2/harbor-trivy-adapter:1.2.2-1.156 , private-registry/1.2/harbor-trivy-adapter:latest Container Release : 1.156 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/1.2/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 08:59:35 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 09:59:35 +0100 (CET) Subject: SUSE-CU-2026:14159-1: Recommended update of private-registry/harbor-core Message-ID: <20261113085935.E0CCFFF4C@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14159-1 Container Tags : private-registry/harbor-core:1.1.4 , private-registry/harbor-core:1.1.4-2.161 , private-registry/harbor-core:latest Container Release : 2.161 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:01:37 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:01:37 +0100 (CET) Subject: SUSE-CU-2026:14161-1: Recommended update of private-registry/harbor-exporter Message-ID: <20261113090137.5FDF6FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14161-1 Container Tags : private-registry/harbor-exporter:1.1.4 , private-registry/harbor-exporter:1.1.4-2.162 , private-registry/harbor-exporter:latest Container Release : 2.162 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:04:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:04:00 +0100 (CET) Subject: SUSE-CU-2026:14163-1: Recommended update of private-registry/harbor-jobservice Message-ID: <20261113090400.ECD31FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14163-1 Container Tags : private-registry/harbor-jobservice:1.1.4 , private-registry/harbor-jobservice:1.1.4-2.161 , private-registry/harbor-jobservice:latest Container Release : 2.161 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:07:09 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:07:09 +0100 (CET) Subject: SUSE-CU-2026:14165-1: Security update of private-registry/harbor-portal Message-ID: <20261113090709.59B07FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14165-1 Container Tags : private-registry/harbor-portal:1.1.4 , private-registry/harbor-portal:1.1.4-2.179 , private-registry/harbor-portal:latest Container Release : 2.179 Severity : important Type : security References : 1268975 1289167 CVE-2026-52492 ----------------------------------------------------------------- The container private-registry/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5221-1 Released: Thu Nov 12 16:02:56 2026 Summary: Security update for tiff Type: security Severity: important References: 1289167,CVE-2026-52492 This update for tiff fixes the following issue: - CVE-2026-52492: libtiff: integer overflow in rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes (bsc#1289167). The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libtiff5-4.0.9-150000.45.75.1 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:08:47 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:08:47 +0100 (CET) Subject: SUSE-CU-2026:14167-1: Recommended update of private-registry/harbor-registry Message-ID: <20261113090847.935D4FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14167-1 Container Tags : private-registry/harbor-registry:1.1.4 , private-registry/harbor-registry:1.1.4-2.162 , private-registry/harbor-registry:latest Container Release : 2.162 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:11:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:11:32 +0100 (CET) Subject: SUSE-CU-2026:14169-1: Recommended update of private-registry/harbor-registryctl Message-ID: <20261113091132.2C704FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14169-1 Container Tags : private-registry/harbor-registryctl:1.1.4 , private-registry/harbor-registryctl:1.1.4-2.163 , private-registry/harbor-registryctl:latest Container Release : 2.163 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:14:24 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:14:24 +0100 (CET) Subject: SUSE-CU-2026:14171-1: Recommended update of private-registry/harbor-trivy-adapter Message-ID: <20261113091424.A3975FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14171-1 Container Tags : private-registry/harbor-trivy-adapter:1.1.4 , private-registry/harbor-trivy-adapter:1.1.4-2.181 , private-registry/harbor-trivy-adapter:latest Container Release : 2.181 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:15:20 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:15:20 +0100 (CET) Subject: SUSE-CU-2026:14173-1: Recommended update of private-registry/harbor-core Message-ID: <20261113091520.E76BEFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-core ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14173-1 Container Tags : private-registry/harbor-core:2.13 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5 , private-registry/harbor-core:2.13.5-1.111 , private-registry/harbor-core:2.13.5-1.111 , private-registry/harbor-core:latest Container Release : 1.111 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-core was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:16:28 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:16:28 +0100 (CET) Subject: SUSE-CU-2026:14175-1: Recommended update of private-registry/harbor-exporter Message-ID: <20261113091628.C45D1FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-exporter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14175-1 Container Tags : private-registry/harbor-exporter:2.13 , private-registry/harbor-exporter:2.13.5 , private-registry/harbor-exporter:2.13.5 , private-registry/harbor-exporter:2.13.5-1.111 , private-registry/harbor-exporter:2.13.5-1.111 , private-registry/harbor-exporter:latest Container Release : 1.111 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-exporter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:17:23 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:17:23 +0100 (CET) Subject: SUSE-CU-2026:14177-1: Recommended update of private-registry/harbor-jobservice Message-ID: <20261113091723.55B6FFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-jobservice ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14177-1 Container Tags : private-registry/harbor-jobservice:2.13 , private-registry/harbor-jobservice:2.13.5 , private-registry/harbor-jobservice:2.13.5 , private-registry/harbor-jobservice:2.13.5-1.111 , private-registry/harbor-jobservice:2.13.5-1.111 , private-registry/harbor-jobservice:latest Container Release : 1.111 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-jobservice was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:18:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:18:16 +0100 (CET) Subject: SUSE-CU-2026:14179-1: Security update of private-registry/harbor-portal Message-ID: <20261113091816.D3FE8FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-portal ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14179-1 Container Tags : private-registry/harbor-portal:2.13 , private-registry/harbor-portal:2.13.5 , private-registry/harbor-portal:2.13.5 , private-registry/harbor-portal:2.13.5-1.118 , private-registry/harbor-portal:2.13.5-1.118 , private-registry/harbor-portal:latest Container Release : 1.118 Severity : important Type : security References : 1268975 1289167 CVE-2026-52492 ----------------------------------------------------------------- The container private-registry/harbor-portal was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5221-1 Released: Thu Nov 12 16:02:56 2026 Summary: Security update for tiff Type: security Severity: important References: 1289167,CVE-2026-52492 This update for tiff fixes the following issue: - CVE-2026-52492: libtiff: integer overflow in rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes (bsc#1289167). The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libtiff5-4.0.9-150000.45.75.1 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:19:06 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:19:06 +0100 (CET) Subject: SUSE-CU-2026:14181-1: Recommended update of private-registry/harbor-registry Message-ID: <20261113091906.730F4FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registry ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14181-1 Container Tags : private-registry/harbor-registry:2.8.3 , private-registry/harbor-registry:2.8.3-1.112 , private-registry/harbor-registry:latest Container Release : 1.112 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-registry was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:19:53 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:19:53 +0100 (CET) Subject: SUSE-CU-2026:14183-1: Recommended update of private-registry/harbor-registryctl Message-ID: <20261113091953.888BCFF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-registryctl ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14183-1 Container Tags : private-registry/harbor-registryctl:2.13 , private-registry/harbor-registryctl:2.13.5 , private-registry/harbor-registryctl:2.13.5 , private-registry/harbor-registryctl:2.13.5-1.111 , private-registry/harbor-registryctl:2.13.5-1.111 , private-registry/harbor-registryctl:latest Container Release : 1.111 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-registryctl was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:20:49 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:20:49 +0100 (CET) Subject: SUSE-CU-2026:14185-1: Recommended update of private-registry/harbor-trivy-adapter Message-ID: <20261113092049.69EA2FF54@maintenance.suse.de> SUSE Container Update Advisory: private-registry/harbor-trivy-adapter ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14185-1 Container Tags : private-registry/harbor-trivy-adapter:0.35.1 , private-registry/harbor-trivy-adapter:0.35.1-1.119 , private-registry/harbor-trivy-adapter:latest Container Release : 1.119 Severity : moderate Type : recommended References : 1268975 ----------------------------------------------------------------- The container private-registry/harbor-trivy-adapter was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - container:suse-sle15-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated - container:registry.suse.com-bci-bci-micro-15.7-82978402ac573c2be65b88d67d41c084b63be59c7ab820f64ec3c2ae3485e647-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:27:15 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:27:15 +0100 (CET) Subject: SUSE-IU-2026:8797-1: Security update of suse/sl-micro/6.2/baremetal-os-container Message-ID: <20261113092715.AC63BFF54@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/baremetal-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8797-1 Image Tags : suse/sl-micro/6.2/baremetal-os-container:2.3.2 , suse/sl-micro/6.2/baremetal-os-container:2.3.2-9.36 , suse/sl-micro/6.2/baremetal-os-container:latest Image Release : 9.36 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sl-micro/6.2/baremetal-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2085 Released: Thu Nov 12 15:28:04 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted-fs-resize0-3.6-160000.3.1 updated - libparted2-3.6-160000.3.1 updated - parted-3.6-160000.3.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-536f0cd57068481e71a2857cfa1c3601ca325bfa5dcf1fe8ef2e5c0680b57c71-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:42:46 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:42:46 +0100 (CET) Subject: SUSE-IU-2026:8801-1: Security update of suse/sl-micro/6.2/base-os-container Message-ID: <20261113094246.3BED0FF59@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/base-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8801-1 Image Tags : suse/sl-micro/6.2/base-os-container:2.3.2 , suse/sl-micro/6.2/base-os-container:2.3.2-9.15 , suse/sl-micro/6.2/base-os-container:latest Image Release : 9.15 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sl-micro/6.2/base-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2085 Released: Thu Nov 12 15:28:04 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted-fs-resize0-3.6-160000.3.1 updated - libparted2-3.6-160000.3.1 updated - parted-3.6-160000.3.1 updated From sle-container-updates at lists.suse.com Fri Nov 13 09:56:21 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 10:56:21 +0100 (CET) Subject: SUSE-IU-2026:8805-1: Security update of suse/sl-micro/6.2/kvm-os-container Message-ID: <20261113095621.70440FF4C@maintenance.suse.de> SUSE Image Update Advisory: suse/sl-micro/6.2/kvm-os-container ----------------------------------------------------------------- Image Advisory ID : SUSE-IU-2026:8805-1 Image Tags : suse/sl-micro/6.2/kvm-os-container:2.3.2 , suse/sl-micro/6.2/kvm-os-container:2.3.2-9.40 , suse/sl-micro/6.2/kvm-os-container:latest Image Release : 9.40 Severity : important Type : security References : 1286017 1286018 CVE-2026-89085 CVE-2026-89088 ----------------------------------------------------------------- The container suse/sl-micro/6.2/kvm-os-container was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: 2085 Released: Thu Nov 12 15:28:04 2026 Summary: Security update for parted Type: security Severity: important References: 1286017,1286018,CVE-2026-89085,CVE-2026-89088 This update for parted fixes the following issues: - CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017). - CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018). The following package changes have been done: - libparted-fs-resize0-3.6-160000.3.1 updated - libparted2-3.6-160000.3.1 updated - parted-3.6-160000.3.1 updated - container:suse-sl-micro-6.2-base-os-container-latest-536f0cd57068481e71a2857cfa1c3601ca325bfa5dcf1fe8ef2e5c0680b57c71-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:26:50 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:26:50 +0100 (CET) Subject: SUSE-CU-2026:14187-1: Recommended update of bci/dotnet-aspnet Message-ID: <20261113102650.553B1FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/dotnet-aspnet ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14187-1 Container Tags : bci/dotnet-aspnet:10.0 , bci/dotnet-aspnet:10.0-sles15 , bci/dotnet-aspnet:10.0.15 , bci/dotnet-aspnet:10.0.15-34.1 , bci/dotnet-aspnet:latest Container Release : 34.1 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/dotnet-aspnet was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:28:36 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:28:36 +0100 (CET) Subject: SUSE-CU-2026:14189-1: Recommended update of bci/bci-base-fips Message-ID: <20261113102836.EC3F5FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-base-fips ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14189-1 Container Tags : bci/bci-base-fips:15.7 , bci/bci-base-fips:15.7-25.4 Container Release : 25.4 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/bci-base-fips was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-8d2c3965d4a2275a783f5702ec2e9456f37e0f8b879ffd69e9e57c87991e4a1c-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:30:00 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:30:00 +0100 (CET) Subject: SUSE-CU-2026:14190-1: Recommended update of bci/dotnet-sdk Message-ID: <20261113103000.EBFFDFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/dotnet-sdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14190-1 Container Tags : bci/dotnet-sdk:10.0 , bci/dotnet-sdk:10.0-sles15 , bci/dotnet-sdk:10.0.15 , bci/dotnet-sdk:10.0.15-34.1 , bci/dotnet-sdk:latest Container Release : 34.1 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/dotnet-sdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:31:29 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:31:29 +0100 (CET) Subject: SUSE-CU-2026:14192-1: Recommended update of bci/dotnet-runtime Message-ID: <20261113103129.35BB3FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/dotnet-runtime ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14192-1 Container Tags : bci/dotnet-runtime:10.0 , bci/dotnet-runtime:10.0-sles15 , bci/dotnet-runtime:10.0.15 , bci/dotnet-runtime:10.0.15-34.1 , bci/dotnet-runtime:latest Container Release : 34.1 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/dotnet-runtime was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:31:47 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:31:47 +0100 (CET) Subject: SUSE-CU-2026:14194-1: Security update of bci/golang Message-ID: <20261113103147.43FEFFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14194-1 Container Tags : bci/golang:1.25 , bci/golang:1.25-sles15 , bci/golang:1.25.14 , bci/golang:1.25.14-3.74.7 , bci/golang:oldoldstable Container Release : 74.7 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:33:37 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:33:37 +0100 (CET) Subject: SUSE-CU-2026:14196-1: Security update of bci/golang Message-ID: <20261113103337.979B4FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14196-1 Container Tags : bci/golang:1.26 , bci/golang:1.26-sles15 , bci/golang:1.26.11 , bci/golang:1.26.11-2.75.8 , bci/golang:oldstable Container Release : 75.8 Severity : important Type : security References : 1255111 1268975 1281325 1287778 1289978 1289979 1289980 1289981 1289982 1289983 1289984 1289985 1289986 1289987 1289988 1289989 CVE-2026-111497 CVE-2026-34182 CVE-2026-97033 CVE-2026-97034 CVE-2026-97035 CVE-2026-97036 CVE-2026-97037 CVE-2026-97038 CVE-2026-97039 CVE-2026-97040 CVE-2026-97041 CVE-2026-97042 CVE-2026-97043 CVE-2026-97054 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5227-1 Released: Thu Nov 12 20:55:43 2026 Summary: Security update for go1.26 Type: security Severity: important References: 1255111,1289978,1289979,1289980,1289981,1289982,1289983,1289984,1289985,1289986,1289987,1289988,1289989,CVE-2026-97033,CVE-2026-97034,CVE-2026-97035,CVE-2026-97036,CVE-2026-97037,CVE-2026-97038,CVE-2026-97039,CVE-2026-97040,CVE-2026-97041,CVE-2026-97042,CVE-2026-97043,CVE-2026-97054 This update for go1.26 fixes the following issue: Security issues fixed: - CVE-2026-97033: `cmd/go`: unexpected code execution via `--sysroot`, `-target`, `-isysroot`, `-Wl,-syslibroot`, and `-x cgo` flags (bsc#1289978). - CVE-2026-97034: `cmd/go`: arbitrary command execution via GCC spec files in `cgo` linker search directories (bsc#1289979). - CVE-2026-97035: `cmd/go`: unexpected code execution and arbitrary file write via Clang `-gen-*` and GCC `-gnat*` flags in `cgo` (bsc#1289980). - CVE-2026-97036: `cmd/go`: arbitrary code execution during build on darwin via `-l to_library` in `cgo` (bsc#1289981). - CVE-2026-97037: `cmd/go`: linker script injection via split `-Wl,` flags and Darwin or symbol linker flags in `cgo` (bsc#1289982). - CVE-2026-97038: `cmd/go`: arbitrary code execution via crafted `.syso` files and `cgo` linker input files (bsc#1289983). - CVE-2026-97039: `cmd/go`: flag sanitization bypass via `#cgo pkg-config:` directives (bsc#1289984). - CVE-2026-97040: `cmd/go`, `cmd/link`: `cgo` directive injection via `.syso` files disguised as Go object files (bsc#1289985). - CVE-2026-97041: `cmd/compile`, `cmd/link`: host linker flag injection via `//go:cgo_*` directives (bsc#1289986). - CVE-2026-97042: `cmd/cgo`, `cmd/compile`, `cmd/link`: linker flag injection via `cgo_import_dynamic` and PE DLL names (bsc#1289987). - CVE-2026-97043: `cmd/go`, `cmd/compile`: unexpected code execution via escaped quotes in `//go:cgo_ldflag` (bsc#1289988). - CVE-2026-97054: `net/http`: HTTP/1 server crash due to `MaxBytesReader` header race (bsc#1289989). Changes for go1.26: Update to version go1.26.11 (bsc#1255111): - go#81865 `cmd/compile`: `branchelim` optimization can eliminate result of store - go#81869 `cmd/compile`: generic shift-by-constant canonicalization gives `Const64` the wrong type - go#81926 `cmd/asm`: amd64 assembler loops forever on a forward jump to a labelled `PCALIGN` when a branch needs widening - go#81946 `net/http`: backport fix to protect against middleware changing server response body - go#82022 `net`: `Dialer.Dial{TCP,UDP,IP}` incorrectly treats invalid addresses as `::` - go#82149 `runtime`: linux/mips `time64` nanosecond layout causes busy waits and empty CPU profiles - go#82333 `cmd/dist`: `GOFIPS140` bootstrap from Go 1.26 fails - go#82626 `crypto/fips140`: minor compliance improvements - go#82642 `cmd/compile`: ICE on 386 when inlining nested bit rotations (`Int64Lo` not lowered) The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - go1.26-doc-1.26.11-150000.1.39.1 updated - go1.26-1.26.11-150000.1.39.1 updated - go1.26-race-1.26.11-150000.1.39.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:35:29 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:35:29 +0100 (CET) Subject: SUSE-CU-2026:14197-1: Security update of bci/golang Message-ID: <20261113103529.91172FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14197-1 Container Tags : bci/golang:1.25-openssl , bci/golang:1.25-sles15-openssl , bci/golang:1.25.14-openssl , bci/golang:1.25.14-openssl-92.7 , bci/golang:oldstable-openssl Container Release : 92.7 Severity : important Type : security References : 1268975 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:37:38 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:37:38 +0100 (CET) Subject: SUSE-CU-2026:14198-1: Security update of bci/golang Message-ID: <20261113103738.8B52EFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14198-1 Container Tags : bci/golang:1.27 , bci/golang:1.27-sles15 , bci/golang:1.27.4 , bci/golang:1.27.4-1.75.8 , bci/golang:latest , bci/golang:stable Container Release : 75.8 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - go1.27-doc-1.27.4-150000.1.18.1 updated - go1.27-1.27.4-150000.1.18.1 updated - go1.27-race-1.27.4-150000.1.18.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:40:34 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:40:34 +0100 (CET) Subject: SUSE-CU-2026:14199-1: Security update of bci/golang Message-ID: <20261113104034.41419FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/golang ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14199-1 Container Tags : bci/golang:1.26-openssl , bci/golang:1.26-sles15-openssl , bci/golang:1.26.10-openssl , bci/golang:1.26.10-openssl-92.7 , bci/golang:latest , bci/golang:stable-openssl Container Release : 92.7 Severity : important Type : security References : 1268975 1287778 CVE-2026-111497 ----------------------------------------------------------------- The container bci/golang was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:44:05 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:44:05 +0100 (CET) Subject: SUSE-CU-2026:14202-1: Recommended update of bci/bci-init Message-ID: <20261113104405.A968AFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-init ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14202-1 Container Tags : bci/bci-init:15.7 , bci/bci-init:15.7-55.3 Container Release : 55.3 Severity : moderate Type : recommended References : 1268975 1281325 CVE-2026-34182 ----------------------------------------------------------------- The container bci/bci-init was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:51:44 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:51:44 +0100 (CET) Subject: SUSE-CU-2026:14208-1: Security update of bci/nodejs Message-ID: <20261113105144.D83D1FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/nodejs ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14208-1 Container Tags : bci/node:22 , bci/node:22-sles15 , bci/node:22.23.4 , bci/node:22.23.4-24.77 , bci/nodejs:22 , bci/nodejs:22-sles15 , bci/nodejs:22.23.4 , bci/nodejs:22.23.4-24.77 Container Release : 24.77 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/nodejs was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:53:44 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:53:44 +0100 (CET) Subject: SUSE-CU-2026:14210-1: Security update of bci/openjdk-devel Message-ID: <20261113105344.41DF9FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14210-1 Container Tags : bci/openjdk-devel:17 , bci/openjdk-devel:17-sles15 , bci/openjdk-devel:17.0.20.1 , bci/openjdk-devel:17.0.20.1-21.98 Container Release : 21.98 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:bci-openjdk-17-15.7.17-20.84 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:55:45 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:55:45 +0100 (CET) Subject: SUSE-CU-2026:14212-1: Security update of bci/openjdk Message-ID: <20261113105545.96F71FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14212-1 Container Tags : bci/openjdk:17 , bci/openjdk:17-sles15 , bci/openjdk:17.0.20.1 , bci/openjdk:17.0.20.1-20.84 Container Release : 20.84 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:57:40 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:57:40 +0100 (CET) Subject: SUSE-CU-2026:14214-1: Security update of bci/openjdk-devel Message-ID: <20261113105740.BBA6BFF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14214-1 Container Tags : bci/openjdk-devel:21 , bci/openjdk-devel:21-sles15 , bci/openjdk-devel:21.0.12.1 , bci/openjdk-devel:21.0.12.1-25.98 Container Release : 25.98 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:bci-openjdk-21-15.7.21-24.83 updated From sle-container-updates at lists.suse.com Fri Nov 13 10:59:35 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 11:59:35 +0100 (CET) Subject: SUSE-CU-2026:14216-1: Security update of bci/openjdk Message-ID: <20261113105935.87463FF4C@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14216-1 Container Tags : bci/openjdk:21 , bci/openjdk:21-sles15 , bci/openjdk:21.0.12.1 , bci/openjdk:21.0.12.1-24.83 Container Release : 24.83 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:00:59 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:00:59 +0100 (CET) Subject: SUSE-CU-2026:14218-1: Security update of bci/openjdk-devel Message-ID: <20261113110059.8AF16FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14218-1 Container Tags : bci/openjdk-devel:25 , bci/openjdk-devel:25-sles15 , bci/openjdk-devel:25.0.4.1 , bci/openjdk-devel:25.0.4.1-9.99 , bci/openjdk-devel:latest Container Release : 9.99 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:bci-openjdk-25-15.7.25-9.83 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:02:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:02:18 +0100 (CET) Subject: SUSE-CU-2026:14220-1: Security update of bci/openjdk Message-ID: <20261113110218.6FE95FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/openjdk ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14220-1 Container Tags : bci/openjdk:25 , bci/openjdk:25-sles15 , bci/openjdk:25.0.4.1 , bci/openjdk:25.0.4.1-9.83 , bci/openjdk:latest Container Release : 9.83 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/openjdk was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:16:47 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:16:47 +0100 (CET) Subject: SUSE-CU-2026:14232-1: Security update of bci/python Message-ID: <20261113111647.85D5BFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14232-1 Container Tags : bci/python:3 , bci/python:3.11 , bci/python:3.11.17 , bci/python:3.11.17-85.80 Container Release : 85.80 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:18:30 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:18:30 +0100 (CET) Subject: SUSE-CU-2026:14234-1: Security update of bci/python Message-ID: <20261113111830.BB0EEFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14234-1 Container Tags : bci/python:3 , bci/python:3.13 , bci/python:3.13-sles15 , bci/python:3.13.16 , bci/python:3.13.16-88.76 , bci/python:latest Container Release : 88.76 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:20:16 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:20:16 +0100 (CET) Subject: SUSE-CU-2026:14236-1: Security update of bci/python Message-ID: <20261113112016.22C42FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/python ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14236-1 Container Tags : bci/python:3 , bci/python:3.6 , bci/python:3.6.15 , bci/python:3.6.15-84.75 Container Release : 84.75 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/python was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:25:34 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:25:34 +0100 (CET) Subject: SUSE-CU-2026:14240-1: Security update of bci/ruby Message-ID: <20261113112534.B44BFFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/ruby ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14240-1 Container Tags : bci/ruby:2 , bci/ruby:2.5 , bci/ruby:2.5-28.28 , bci/ruby:2.5-sles15 Container Release : 28.28 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/ruby was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:27:18 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:27:18 +0100 (CET) Subject: SUSE-CU-2026:14242-1: Security update of bci/ruby Message-ID: <20261113112718.9E842FF54@maintenance.suse.de> SUSE Container Update Advisory: bci/ruby ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14242-1 Container Tags : bci/ruby:3 , bci/ruby:3.4 , bci/ruby:3.4-27.27 , bci/ruby:3.4-sles15 , bci/ruby:latest Container Release : 27.27 Severity : important Type : security References : 1268975 1281325 1287778 CVE-2026-111497 CVE-2026-34182 ----------------------------------------------------------------- The container bci/ruby was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:28:34 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:28:34 +0100 (CET) Subject: SUSE-CU-2026:14243-1: Security update of bci/rust Message-ID: <20261113112834.595CEFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/rust ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14243-1 Container Tags : bci/rust:1.98 , bci/rust:1.98-sles15 , bci/rust:1.98.1 , bci/rust:1.98.1-2.2.10 , bci/rust:oldstable Container Release : 2.10 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1268975 1277477 1277478 1277482 1278173 1281325 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287778 1287781 CVE-2026-107929 CVE-2026-111497 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-34182 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/rust was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - libcurl4-8.22.0-150700.7.33.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:30:07 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:30:07 +0100 (CET) Subject: SUSE-CU-2026:14244-1: Security update of bci/rust Message-ID: <20261113113007.C8735FF55@maintenance.suse.de> SUSE Container Update Advisory: bci/rust ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14244-1 Container Tags : bci/rust:1.99 , bci/rust:1.99-sles15 , bci/rust:1.99.0 , bci/rust:1.99.0-1.2.10 , bci/rust:latest , bci/rust:stable Container Release : 2.10 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1268975 1277477 1277478 1277482 1278173 1281325 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287778 1287781 CVE-2026-107929 CVE-2026-111497 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18924 CVE-2026-19931 CVE-2026-34182 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/rust was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - libcurl4-8.22.0-150700.7.33.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:35:56 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:35:56 +0100 (CET) Subject: SUSE-CU-2026:14248-1: Security update of bci/bci-sle15-kernel-module-devel Message-ID: <20261113113556.3E93EFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/bci-sle15-kernel-module-devel ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14248-1 Container Tags : bci/bci-sle15-kernel-module-devel:15.7 , bci/bci-sle15-kernel-module-devel:15.7-62.3 , bci/bci-sle15-kernel-module-devel:latest Container Release : 62.3 Severity : important Type : security References : 1268414 1268419 1268423 1268424 1268425 1268426 1268427 1268975 1274489 1274490 1277477 1277478 1277482 1278173 1280941 1281325 1285008 1285010 1285011 1285012 1285013 1285014 1285015 1285016 1285017 1285018 1285021 1285022 1285023 1285024 1285026 1285027 1285028 1285029 1285030 1285031 1287778 1287781 CVE-2026-107929 CVE-2026-111497 CVE-2026-11352 CVE-2026-11564 CVE-2026-11586 CVE-2026-11856 CVE-2026-12064 CVE-2026-18477 CVE-2026-18508 CVE-2026-18924 CVE-2026-19931 CVE-2026-34182 CVE-2026-80255 CVE-2026-82209 CVE-2026-86409 CVE-2026-86410 CVE-2026-86411 CVE-2026-86412 CVE-2026-86413 CVE-2026-86414 CVE-2026-87861 CVE-2026-87862 CVE-2026-87863 CVE-2026-87864 CVE-2026-8932 CVE-2026-92386 CVE-2026-92387 CVE-2026-92388 CVE-2026-92389 CVE-2026-92390 CVE-2026-92391 CVE-2026-92392 CVE-2026-94265 CVE-2026-94266 CVE-2026-9546 ----------------------------------------------------------------- The container bci/bci-sle15-kernel-module-devel was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:4945-1 Released: Thu Oct 29 17:30:42 2026 Summary: Security update for brotli Type: security Severity: important References: 1287778,CVE-2026-111497 This update for brotli fixes the following issue: - CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5068-1 Released: Tue Nov 3 09:13:11 2026 Summary: Security update for curl Type: security Severity: important References: 1268414,1268419,1268423,1268424,1268425,1268426,1268427,1277477,1277478,1277482,1278173,1285008,1285010,1285011,1285012,1285013,1285014,1285015,1285016,1285017,1285018,1285021,1285022,1285023,1285024,1285026,1285027,1285028,1285029,1285030,1285031,1287781,CVE-2026-107929,CVE-2026-11352,CVE-2026-11564,CVE-2026-11586,CVE-2026-11856,CVE-2026-12064,CVE-2026-18924,CVE-2026-19931,CVE-2026-80255,CVE-2026-82209,CVE-2026-86409,CVE-2026-86410,CVE-2026-86411,CVE-2026-86412,CVE-2026-86413,CVE-2026-86414,CVE-2026-87861,CVE-2026-87862,CVE-2026-87863,CVE-2026-87864,CVE-2026-8932,CVE-2026-92386,CVE-2026-92387,CVE-2026-92388,CVE-2026-92389,CVE-2026-92390,CVE-2026-92391,CVE-2026-92392,CVE-2026-94265,CVE-2026-94266,CVE-2026-9546 This update for curl fixes the following issues: - CVE-2026-8932: incomplete mTLS config matching in conn reuse (bsc#1268414). - CVE-2026-9546: sending old referer (bsc#1268419). - CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop (bsc#1268423). - CVE-2026-11564: Native CA trust persist (bsc#1268424). - CVE-2026-11586: WS Auto-PONG memory exhaustion (bsc#1268425). - CVE-2026-11856: cross-origin Digest auth state leak (bsc#1268426). - CVE-2026-12064: proto-default skips SSH verification (bsc#1268427). - CVE-2026-18924: HTTP/2 server push UAF (bsc#1277477). - CVE-2026-19931: Negotiate ambient user conn reuse (bsc#1277478). - CVE-2026-80255: secure cookie attribute bypass with tab (bsc#1277482). - CVE-2026-82209: domain-scoped PSL domain cookie (bsc#1278173). - CVE-2026-86409: stale SigV4 headers sent unintended (bsc#1285031). - CVE-2026-86410: redirect to SFTP or SCP bypasses host verification (bsc#1285030). - CVE-2026-86411: FTP connection reuse inherits client-certificate (bsc#1285029). - CVE-2026-86412: server-set cookie erases cookie jar (bsc#1285028). - CVE-2026-86413: Negotiate credentials sent to redirected origin (bsc#1285027). - CVE-2026-86414: leaking host credentials to HTTP proxy (bsc#1285026). - CVE-2026-87861: cross-origin reuse of a Negotiate connection (bsc#1285024). - CVE-2026-87862: HSTS cache import drops longer-lived child (bsc#1285023). - CVE-2026-87863: HSTS response erases persisted entries (bsc#1285022). - CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection (bsc#1285021). - CVE-2026-92386: server-set cookie aborts cookie jar load (bsc#1285018). - CVE-2026-92387: never-ending loop via server response omission (bsc#1285017). - CVE-2026-92388: FTP wildcard write callback mixup (bsc#1285016). - CVE-2026-92389: TFTP direction confusion (bsc#1285015). - CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints (bsc#1285014). - CVE-2026-92391: curl_mime_free stack overflow by recursion (bsc#1285013). - CVE-2026-92392: HTTP/2 upload Use-After-Free (bsc#1285012). - CVE-2026-94265: Authorization: Negotiate sent to foreign origin (bsc#1285011). - CVE-2026-94266: password leak in CURLINFO_EFFECTIVE_URL (bsc#1285010). - CVE-2026-107929: local interface connection reuse mixup (bsc#1285008). Changes for curl: - Updated curl to version 8.22.0. (jsc#PED-16984) ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5149-1 Released: Mon Nov 9 18:43:07 2026 Summary: Recommended update for openssl-3 Type: recommended Severity: moderate References: 1281325,CVE-2026-34182 This update for openssl-3 fixes the following issues: - Build with enable-sslkeylog to support the SSLKEYLOGFILE environment variable usage. (jsc#PED-17079) - Allow to bypass the strict tag initialization and length enforcement added in the fix for CVE-2026-34182 when the env variable OPENSSL_ALLOW_CMS_UNAUTHENTICATED_AEAD is defined and set to a non-zero value. (bsc#1281325) ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libbrotlicommon1-1.0.7-150200.3.8.1 updated - libbrotlidec1-1.0.7-150200.3.8.1 updated - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - libcurl4-8.22.0-150700.7.33.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - tar-1.34-150000.3.45.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated From sle-container-updates at lists.suse.com Fri Nov 13 11:39:32 2026 From: sle-container-updates at lists.suse.com (sle-container-updates at lists.suse.com) Date: Fri, 13 Nov 2026 12:39:32 +0100 (CET) Subject: SUSE-CU-2026:14251-1: Security update of bci/spack Message-ID: <20261113113932.7AB7DFF54@maintenance.suse.de> SUSE Container Update Advisory: bci/spack ----------------------------------------------------------------- Container Advisory ID : SUSE-CU-2026:14251-1 Container Tags : bci/spack:0.23 , bci/spack:0.23.1 , bci/spack:0.23.1-25.88 , bci/spack:latest Container Release : 25.88 Severity : moderate Type : security References : 1268975 1274489 1274490 1280941 CVE-2026-18477 CVE-2026-18508 ----------------------------------------------------------------- The container bci/spack was updated. The following patches have been included in this update: ----------------------------------------------------------------- Advisory ID: SUSE-SU-2026:5160-1 Released: Tue Nov 10 10:40:47 2026 Summary: Security update for tar Type: security Severity: moderate References: 1274489,1274490,1280941,CVE-2026-18477,CVE-2026-18508 This update for tar fixes the following issues: - CVE-2026-18477: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape (bsc#1274489). - CVE-2026-18508: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite (bsc#1274490). ----------------------------------------------------------------- Advisory ID: SUSE-RU-2026:5187-1 Released: Tue Nov 10 20:28:23 2026 Summary: Recommended update for libxmlb, snowball, bash Type: recommended Severity: moderate References: 1268975 This update for libxmlb, snowball, bash fixes the following issues: - Upgrade libxmlb, snowball, bash in preparation for fwupd upgrade. The following package changes have been done: - libreadline7-7.0-150400.27.13.3 updated - bash-4.4-150400.27.13.3 updated - bash-sh-4.4-150400.27.13.3 updated - libopenssl3-3.5.0-150700.5.56.1 updated - libopenssl-3-fips-provider-3.5.0-150700.5.56.1 updated - openssl-3-3.5.0-150700.5.56.1 updated - tar-1.34-150000.3.45.1 updated - container:registry.suse.com-bci-bci-base-15.7-dc390c80df991196a1dfc3337ec2d31e77a5ad5ee5a932d1efc636a005a5d4c5-0 updated